last executing test programs: 1m50.114650612s ago: executing program 4 (id=111): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/20, 0x13}, 0x3}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m49.967621915s ago: executing program 4 (id=112): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) write$P9_RREADDIR(r0, 0x0, 0x0) request_key(&(0x7f0000002ec0)='user\x00', &(0x7f0000002f80)={'syz', 0x2}, 0x0, 0x0) 1m49.637733223s ago: executing program 4 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 1m46.362098844s ago: executing program 4 (id=120): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x2, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x1, 0x67, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) syz_ublk_setup_queues(r1, r6, &(0x7f0000000380)={0x0, 0xef64, 0x0, 0x1, 0x34b, 0x0, r2}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ea6, 0x8, 0x1, 0x15c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8bc3, 0x40, 0x1, 0x3d8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c24, 0x0, 0x0, 0x39d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x674d, 0x80, 0x3, 0x1e7}}], 0x4, &(0x7f00000019c0)={0x2e, 0x8, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x2e5, 0x0, 0x0}}, 0x0) 1m44.937832893s ago: executing program 4 (id=131): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x48, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f0000001300090468fe0700200000000000ff3f080000004801001000000000", 0x20}], 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff010000"], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) 1m36.443933294s ago: executing program 4 (id=150): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x18, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x40, 0x19, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) msgget$private(0x0, 0x240) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 9.450924323s ago: executing program 3 (id=355): syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[], 0x0) 7.565706818s ago: executing program 3 (id=359): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x48, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0), 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff010000"], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) 6.416848516s ago: executing program 3 (id=360): write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="54000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="01010200000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r3], 0x54}, 0x1, 0xba01}, 0x810) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) 6.364377178s ago: executing program 0 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, 0x0, 0x0, 0x6, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x0, 0x10}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x20800, 0x840) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2573], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r7, r6}) close(r8) 5.797664074s ago: executing program 1 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5.192504043s ago: executing program 0 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb86dd600000000008324020010db800000000000000000000000120010db80000000000000000000000020102030405060708"], 0x0) 4.97087849s ago: executing program 3 (id=364): add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0x7501, &(0x7f00000008c0)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000000200), &(0x7f0000000600), &(0x7f0000000300)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000500)={0x0, 0x6953, 0x3a, 0x0, 0x36d, 0x0, r0}, &(0x7f0000004240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f9a, 0x800, 0x0, 0x3b6, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x10000, 0x2, 0x27c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x1, 0x388, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x121e, 0x0, 0x2000002, 0x44}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x4500, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x82, 0xb66, 0x0, 0x0}}, 0x0) 4.75233523s ago: executing program 2 (id=365): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 4.638444433s ago: executing program 1 (id=366): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 4.608957816s ago: executing program 0 (id=367): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x401) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4.493526025s ago: executing program 3 (id=368): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) 4.405916519s ago: executing program 2 (id=369): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 4.079390765s ago: executing program 1 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 4.005929525s ago: executing program 2 (id=371): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x48, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff010000"], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) 2.876033162s ago: executing program 2 (id=372): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r4, r5, 0x0) 2.744732906s ago: executing program 1 (id=373): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.640910098s ago: executing program 0 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, 0x0, 0x0, 0x6, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x0, 0x10}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x20800, 0x840) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r7, r6}) close(r8) 2.450340349s ago: executing program 2 (id=375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.505719262s ago: executing program 0 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, 0x0, 0x0, 0x6, 0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0x0, 0x10}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x20800, 0x840) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) close(r7) 951.083827ms ago: executing program 2 (id=377): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 378.614829ms ago: executing program 0 (id=378): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f0000000280)='./file0\x00', 0x82) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) lseek(r2, 0x3, 0x0) 367.749521ms ago: executing program 1 (id=379): socket(0x10, 0x80002, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000013c0)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 33.926795ms ago: executing program 3 (id=380): socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0000520006000500010000000800", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x0) 0s ago: executing program 1 (id=381): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0x6, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0xfffffffc, 0x7, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1579b804, 0x7, 0x1, 0x2]}) ioctl$COMEDI_SUBDINFO(r1, 0x80486402, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x44000) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0x100, "bbacf81d625c2386944646203438d46576b9bcb69488f72a8b437eaa02ce07bd", 0x1, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 76.686929][ T5610] cgroup: Unknown subsys name 'net' [ 76.929045][ T5610] cgroup: Unknown subsys name 'cpuset' [ 76.983132][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.649541][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.566085][ T4940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.586057][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.608245][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.611745][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.612988][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.613766][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.615250][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.616013][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.617467][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.618007][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.640234][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.675368][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.701314][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.719213][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.722956][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.729192][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.743428][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.826673][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.846276][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.854517][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.855843][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.893383][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.904829][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.918381][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.920472][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.664296][ T4940] Bluetooth: hci0: command tx timeout [ 84.743289][ T4940] Bluetooth: hci1: command tx timeout [ 84.904130][ T4940] Bluetooth: hci2: command tx timeout [ 84.904254][ T4940] Bluetooth: hci3: command tx timeout [ 84.982651][ T5628] Bluetooth: hci4: command tx timeout [ 85.236394][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.237074][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.237201][ T5621] bridge_slave_0: entered allmulticast mode [ 85.239307][ T5621] bridge_slave_0: entered promiscuous mode [ 85.305740][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.305816][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.305919][ T5621] bridge_slave_1: entered allmulticast mode [ 85.308884][ T5621] bridge_slave_1: entered promiscuous mode [ 85.320723][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.321052][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.321202][ T5622] bridge_slave_0: entered allmulticast mode [ 85.324255][ T5622] bridge_slave_0: entered promiscuous mode [ 85.394858][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.394950][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.395226][ T5622] bridge_slave_1: entered allmulticast mode [ 85.397584][ T5622] bridge_slave_1: entered promiscuous mode [ 85.438677][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.438807][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.438948][ T5626] bridge_slave_0: entered allmulticast mode [ 85.441679][ T5626] bridge_slave_0: entered promiscuous mode [ 85.496769][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.496863][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.496956][ T5624] bridge_slave_0: entered allmulticast mode [ 85.498399][ T5624] bridge_slave_0: entered promiscuous mode [ 85.501846][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.501957][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.502110][ T5626] bridge_slave_1: entered allmulticast mode [ 85.506350][ T5626] bridge_slave_1: entered promiscuous mode [ 85.512467][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.550824][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.550953][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.551109][ T5624] bridge_slave_1: entered allmulticast mode [ 85.554457][ T5624] bridge_slave_1: entered promiscuous mode [ 85.580247][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.580464][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.580574][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.580717][ T5623] bridge_slave_0: entered allmulticast mode [ 85.585209][ T5623] bridge_slave_0: entered promiscuous mode [ 85.592047][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.737648][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.737726][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.737843][ T5623] bridge_slave_1: entered allmulticast mode [ 85.739259][ T5623] bridge_slave_1: entered promiscuous mode [ 85.745583][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.785780][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.836361][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.838656][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.840376][ T5621] team0: Port device team_slave_0 added [ 85.884847][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.899238][ T5621] team0: Port device team_slave_1 added [ 85.909170][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.915372][ T5622] team0: Port device team_slave_0 added [ 85.961893][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.964871][ T5622] team0: Port device team_slave_1 added [ 85.986290][ T5626] team0: Port device team_slave_0 added [ 86.031296][ T5624] team0: Port device team_slave_0 added [ 86.041028][ T5626] team0: Port device team_slave_1 added [ 86.049500][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.049516][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.049541][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.126679][ T5624] team0: Port device team_slave_1 added [ 86.141042][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.141059][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.141073][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.146512][ T5623] team0: Port device team_slave_0 added [ 86.148837][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.148855][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.148879][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.215598][ T5623] team0: Port device team_slave_1 added [ 86.217938][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.217954][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.217979][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.287935][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.287951][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.287965][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.324834][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.324851][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.324875][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.327044][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.327059][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.327081][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.351931][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.351948][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.351972][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.415749][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.415765][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.415789][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.468901][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.468918][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.468944][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.507340][ T5621] hsr_slave_0: entered promiscuous mode [ 86.508797][ T5621] hsr_slave_1: entered promiscuous mode [ 86.589632][ T5622] hsr_slave_0: entered promiscuous mode [ 86.590372][ T5622] hsr_slave_1: entered promiscuous mode [ 86.590995][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 86.591085][ T5622] Cannot create hsr debugfs directory [ 86.659707][ T5626] hsr_slave_0: entered promiscuous mode [ 86.660987][ T5626] hsr_slave_1: entered promiscuous mode [ 86.661543][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 86.661566][ T5626] Cannot create hsr debugfs directory [ 86.689856][ T5624] hsr_slave_0: entered promiscuous mode [ 86.690621][ T5624] hsr_slave_1: entered promiscuous mode [ 86.691111][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 86.691130][ T5624] Cannot create hsr debugfs directory [ 86.744870][ T5628] Bluetooth: hci0: command tx timeout [ 86.748995][ T43] cfg80211: failed to load regulatory.db [ 86.822728][ T5628] Bluetooth: hci1: command tx timeout [ 86.982742][ T5628] Bluetooth: hci3: command tx timeout [ 86.982777][ T5628] Bluetooth: hci2: command tx timeout [ 87.062686][ T4940] Bluetooth: hci4: command tx timeout [ 87.265376][ T5623] hsr_slave_0: entered promiscuous mode [ 87.266196][ T5623] hsr_slave_1: entered promiscuous mode [ 87.266696][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 87.266716][ T5623] Cannot create hsr debugfs directory [ 87.954425][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.995264][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.000241][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.020793][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.041440][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.056825][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.058303][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.097013][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.227636][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.275171][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.278469][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.299115][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.301168][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.347895][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.379335][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.408600][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.547814][ T5626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.581285][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.590856][ T5626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.629356][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.637066][ T5626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.659489][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.688588][ T5626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.722272][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.823661][ T4940] Bluetooth: hci0: command tx timeout [ 88.892708][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.902856][ T4940] Bluetooth: hci1: command tx timeout [ 88.950188][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.969937][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.988883][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.008208][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.045894][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.064339][ T4940] Bluetooth: hci2: command tx timeout [ 89.064369][ T4940] Bluetooth: hci3: command tx timeout [ 89.084299][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.107127][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.130239][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.145028][ T5628] Bluetooth: hci4: command tx timeout [ 89.278010][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.306782][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.326620][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.365372][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.372167][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.395975][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.399543][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.401925][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.456246][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.507605][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.507828][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.554541][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.558775][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.558915][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.656800][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.692131][ T3036] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.692254][ T3036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.719551][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.766649][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.766847][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.838355][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.937706][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.937917][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.965296][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.032424][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.036391][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.169342][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.180634][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.237837][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.238047][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.330968][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.336359][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.414336][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.461046][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.465399][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.545420][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.545590][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.890971][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.902798][ T5628] Bluetooth: hci0: command tx timeout [ 90.984962][ T5628] Bluetooth: hci1: command tx timeout [ 91.142714][ T5628] Bluetooth: hci3: command tx timeout [ 91.142748][ T5628] Bluetooth: hci2: command tx timeout [ 91.224064][ T4940] Bluetooth: hci4: command tx timeout [ 91.424614][ T5621] veth0_vlan: entered promiscuous mode [ 91.478181][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.528765][ T5621] veth1_vlan: entered promiscuous mode [ 91.785527][ T5621] veth0_macvtap: entered promiscuous mode [ 91.854559][ T5621] veth1_macvtap: entered promiscuous mode [ 91.873809][ T5622] veth0_vlan: entered promiscuous mode [ 91.936604][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.945490][ T5622] veth1_vlan: entered promiscuous mode [ 91.961411][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.989340][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.025097][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.313834][ T5622] veth0_macvtap: entered promiscuous mode [ 92.437029][ T5622] veth1_macvtap: entered promiscuous mode [ 92.563995][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.666130][ T5624] veth0_vlan: entered promiscuous mode [ 92.720505][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.752374][ T5624] veth1_vlan: entered promiscuous mode [ 92.777183][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.812452][ T3036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.812754][ T3036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.015802][ T5626] veth0_vlan: entered promiscuous mode [ 93.020473][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.020494][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.238465][ T5623] veth0_vlan: entered promiscuous mode [ 93.253334][ T5624] veth0_macvtap: entered promiscuous mode [ 93.316956][ T5626] veth1_vlan: entered promiscuous mode [ 93.359318][ T5624] veth1_macvtap: entered promiscuous mode [ 93.439465][ T5623] veth1_vlan: entered promiscuous mode [ 93.503991][ T656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.504012][ T656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.580011][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.616176][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.670582][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.670604][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.718682][ T5626] veth0_macvtap: entered promiscuous mode [ 93.815195][ T5626] veth1_macvtap: entered promiscuous mode [ 93.818064][ T5623] veth0_macvtap: entered promiscuous mode [ 93.847628][ T5621] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.908318][ T5623] veth1_macvtap: entered promiscuous mode [ 94.156833][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.316987][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.321502][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.510688][ T5814] nbd3: detected capacity change from 0 to 63 [ 94.558722][ T5815] block nbd3: NBD_DISCONNECT [ 94.559386][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.587081][ T5815] block nbd3: Disconnected due to user request. [ 94.590188][ T5815] block nbd3: shutting down sockets [ 94.610016][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.610036][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.639082][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.640040][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 94.640633][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.640700][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 94.640748][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.640814][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 94.640860][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.640917][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 94.730862][ T58] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.730886][ T58] Buffer I/O error on dev nbd3, logical block 0, async page read [ 94.736149][ T58] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.736183][ T58] Buffer I/O error on dev nbd3, logical block 1, async page read [ 94.736412][ T58] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.736435][ T58] Buffer I/O error on dev nbd3, logical block 2, async page read [ 94.736549][ T58] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.736570][ T58] Buffer I/O error on dev nbd3, logical block 3, async page read [ 94.736686][ T58] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.736708][ T58] Buffer I/O error on dev nbd3, logical block 0, async page read [ 94.737894][ T58] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 94.737920][ T58] Buffer I/O error on dev nbd3, logical block 1, async page read [ 94.753696][ T5625] ldm_validate_partition_table(): Disk read failed. [ 94.760034][ T5625] Dev nbd3: unable to read RDB block 0 [ 94.794400][ T5625] nbd3: unable to read partition table [ 94.876645][ T5625] ldm_validate_partition_table(): Disk read failed. [ 94.877897][ T5625] Dev nbd3: unable to read RDB block 0 [ 94.896273][ T5625] nbd3: unable to read partition table [ 95.106012][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 95.106111][ T5819] netlink: 'syz.3.7': attribute type 30 has an invalid length. [ 95.106126][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 95.192205][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 95.192241][ T5819] netlink: 'syz.3.7': attribute type 30 has an invalid length. [ 95.192255][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 95.252219][ T5819] Zero length message leads to an empty skb [ 95.297360][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.297381][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.016500][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.016522][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.250001][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.250024][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.444345][ T5837] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.534050][ T656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.534074][ T656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.600426][ T2989] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.354753][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.354776][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.363428][ T656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.397521][ T2963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.398469][ T2989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.398847][ T2989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.399056][ T2989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.457394][ T5841] nbd2: detected capacity change from 0 to 63 [ 97.486783][ T2990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.486858][ T2990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.486889][ T2990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.486918][ T2990] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.486946][ T2990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.486995][ T2990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.487024][ T2990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.487053][ T2990] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.487081][ T2990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.487111][ T2990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.487141][ T2990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.487165][ T2990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.487247][ T5843] block nbd2: NBD_DISCONNECT [ 97.487358][ T5843] block nbd2: Disconnected due to user request. [ 97.487374][ T5843] block nbd2: shutting down sockets [ 97.622135][ T5625] ldm_validate_partition_table(): Disk read failed. [ 97.641138][ T5625] Dev nbd2: unable to read RDB block 0 [ 97.657517][ T5625] nbd2: unable to read partition table [ 97.725808][ T2989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.741646][ T5625] ldm_validate_partition_table(): Disk read failed. [ 97.742348][ T5625] Dev nbd2: unable to read RDB block 0 [ 97.748405][ T5625] nbd2: unable to read partition table [ 97.776403][ T2989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.923627][ T5846] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.157580][ T5896] FAULT_INJECTION: forcing a failure. [ 101.157580][ T5896] name failslab, interval 1, probability 0, space 0, times 1 [ 101.157635][ T5896] CPU: 1 UID: 0 PID: 5896 Comm: syz.3.28 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.157664][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.157683][ T5896] Call Trace: [ 101.157691][ T5896] [ 101.157700][ T5896] dump_stack_lvl+0xe8/0x150 [ 101.157747][ T5896] should_fail_ex+0x46b/0x600 [ 101.157782][ T5896] should_failslab+0xa8/0x100 [ 101.157805][ T5896] __kmalloc_cache_noprof+0xa1/0x680 [ 101.157837][ T5896] ? vhost_iotlb_alloc+0x54/0x180 [ 101.157865][ T5896] ? vhost_iotlb_alloc+0x54/0x180 [ 101.157898][ T5896] vhost_iotlb_alloc+0x54/0x180 [ 101.157929][ T5896] vhost_dev_ioctl+0xda1/0x11f0 [ 101.157965][ T5896] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 101.157993][ T5896] ? mutex_lock_nested+0x168/0x1d0 [ 101.158021][ T5896] ? smack_file_ioctl+0x265/0x370 [ 101.158055][ T5896] vhost_vsock_dev_ioctl+0x231/0xee0 [ 101.158087][ T5896] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 101.158116][ T5896] ? __fget_files+0x2a/0x420 [ 101.158138][ T5896] ? __fget_files+0x3a8/0x420 [ 101.158159][ T5896] ? __fget_files+0x2a/0x420 [ 101.158185][ T5896] ? bpf_lsm_file_ioctl+0x9/0x20 [ 101.158209][ T5896] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 101.158233][ T5896] __se_sys_ioctl+0xff/0x170 [ 101.158262][ T5896] do_syscall_64+0x166/0x520 [ 101.158289][ T5896] ? trace_irq_disable+0x3b/0x140 [ 101.158314][ T5896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.158334][ T5896] ? clear_bhb_loop+0x70/0xc0 [ 101.158356][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.158373][ T5896] RIP: 0033:0x7ff00616e199 [ 101.158397][ T5896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.158413][ T5896] RSP: 002b:00007ff0043a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.158438][ T5896] RAX: ffffffffffffffda RBX: 00007ff0063f6090 RCX: 00007ff00616e199 [ 101.158453][ T5896] RDX: 0000200000000ac0 RSI: 000000004008af03 RDI: 0000000000000003 [ 101.158466][ T5896] RBP: 00007ff0062050b8 R08: 0000000000000000 R09: 0000000000000000 [ 101.158477][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.158489][ T5896] R13: 00007ff0063f6128 R14: 00007ff0063f6090 R15: 00007ffc0a012488 [ 101.158524][ T5896] [ 101.270100][ T5899] loop2: detected capacity change from 0 to 7 [ 101.306386][ T5899] Dev loop2: unable to read RDB block 7 [ 101.306430][ T5899] loop2: unable to read partition table [ 101.306640][ T5899] loop2: partition table beyond EOD, truncated [ 101.306673][ T5899] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.195200][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803c372000: rx timeout, send abort [ 102.594595][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 102.697206][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803c372000: abort rx timeout. Force session deactivation [ 104.038916][ T5939] ======================================================= [ 104.038916][ T5939] WARNING: The mand mount option has been deprecated and [ 104.038916][ T5939] and is ignored by this kernel. Remove the mand [ 104.038916][ T5939] option from the mount to silence this warning. [ 104.038916][ T5939] ======================================================= [ 104.292976][ T2959] IPVS: starting estimator thread 0... [ 104.404513][ T5948] IPVS: using max 11 ests per chain, 26400 per kthread [ 104.487100][ T5951] netlink: 52 bytes leftover after parsing attributes in process `syz.3.44'. [ 107.003834][ T5978] netlink: 'syz.0.49': attribute type 25 has an invalid length. [ 107.003859][ T5978] netlink: 'syz.0.49': attribute type 27 has an invalid length. [ 107.003871][ T5978] netlink: 'syz.0.49': attribute type 28 has an invalid length. [ 107.003884][ T5978] netlink: 'syz.0.49': attribute type 29 has an invalid length. [ 107.003896][ T5978] netlink: 'syz.0.49': attribute type 30 has an invalid length. [ 107.005021][ T5967] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.49'. [ 108.449349][ T5754] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.998798][ T2988] rpcbind: server 127.0.0.1 not responding, timed out [ 109.149921][ T5996] nbd4: detected capacity change from 0 to 63 [ 109.191143][ T6001] block nbd4: NBD_DISCONNECT [ 109.191259][ T6001] block nbd4: Disconnected due to user request. [ 109.191275][ T6001] block nbd4: shutting down sockets [ 109.205555][ T105] blk_print_req_error: 150 callbacks suppressed [ 109.205572][ T105] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.205596][ T105] buffer_io_error: 286 callbacks suppressed [ 109.205605][ T105] Buffer I/O error on dev nbd4, logical block 0, async page read [ 109.205744][ T105] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.205766][ T105] Buffer I/O error on dev nbd4, logical block 1, async page read [ 109.205875][ T105] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.205896][ T105] Buffer I/O error on dev nbd4, logical block 2, async page read [ 109.205994][ T105] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.206016][ T105] Buffer I/O error on dev nbd4, logical block 3, async page read [ 109.206125][ T105] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.206145][ T105] Buffer I/O error on dev nbd4, logical block 0, async page read [ 109.206238][ T105] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.206259][ T105] Buffer I/O error on dev nbd4, logical block 1, async page read [ 109.206352][ T105] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.206373][ T105] Buffer I/O error on dev nbd4, logical block 2, async page read [ 109.206475][ T105] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.206496][ T105] Buffer I/O error on dev nbd4, logical block 3, async page read [ 109.206610][ T105] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.206632][ T105] Buffer I/O error on dev nbd4, logical block 0, async page read [ 109.206725][ T105] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 109.206747][ T105] Buffer I/O error on dev nbd4, logical block 1, async page read [ 109.217169][ T5625] ldm_validate_partition_table(): Disk read failed. [ 109.217797][ T5625] Dev nbd4: unable to read RDB block 0 [ 109.218583][ T5625] nbd4: unable to read partition table [ 109.407658][ T5625] ldm_validate_partition_table(): Disk read failed. [ 109.411404][ T5625] Dev nbd4: unable to read RDB block 0 [ 109.432285][ T5625] nbd4: unable to read partition table [ 111.247406][ T6016] netlink: 14078 bytes leftover after parsing attributes in process `syz.4.60'. [ 111.292177][ T6016] netlink: 14078 bytes leftover after parsing attributes in process `syz.4.60'. [ 111.357403][ T6022] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.63'. [ 111.366033][ T6022] netlink: 'syz.0.63': attribute type 25 has an invalid length. [ 111.366052][ T6022] netlink: 'syz.0.63': attribute type 27 has an invalid length. [ 111.366065][ T6022] netlink: 'syz.0.63': attribute type 28 has an invalid length. [ 111.366077][ T6022] netlink: 'syz.0.63': attribute type 29 has an invalid length. [ 111.366088][ T6022] netlink: 'syz.0.63': attribute type 30 has an invalid length. [ 111.790645][ T6016] input: syz1 as /devices/virtual/input/input5 [ 112.176006][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 112.659799][ T6040] block nbd3: Cannot add socket to a running device [ 112.765641][ T4940] block nbd3: Receive control failed (result -32) [ 112.843768][ T3147] rpcbind: server 127.0.0.1 not responding, timed out [ 113.157965][ T6036] block nbd3: shutting down sockets [ 115.111272][ T6068] netlink: 11870 bytes leftover after parsing attributes in process `syz.2.76'. [ 115.112149][ T6068] netlink: 'syz.2.76': attribute type 25 has an invalid length. [ 115.112166][ T6068] netlink: 'syz.2.76': attribute type 27 has an invalid length. [ 115.112178][ T6068] netlink: 'syz.2.76': attribute type 28 has an invalid length. [ 115.112188][ T6068] netlink: 'syz.2.76': attribute type 29 has an invalid length. [ 115.112199][ T6068] netlink: 'syz.2.76': attribute type 30 has an invalid length. [ 115.192588][ T5735] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.449991][ T5735] usb 2-1: New USB device found, idVendor=1199, idProduct=6856, bcdDevice= 8.c1 [ 115.486807][ T5735] usb 2-1: config 3 has an invalid interface number: 5 but max is 0 [ 115.486834][ T5735] usb 2-1: config 3 has no interface number 0 [ 115.486876][ T5735] usb 2-1: config 3 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 115.486896][ T5735] usb 2-1: config 3 interface 5 altsetting 3 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 115.486921][ T5735] usb 2-1: config 3 interface 5 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 115.486946][ T5735] usb 2-1: config 3 interface 5 altsetting 3 endpoint 0x9 has invalid maxpacket 1544, setting to 64 [ 115.486972][ T5735] usb 2-1: config 3 interface 5 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 115.486998][ T5735] usb 2-1: config 3 interface 5 has no altsetting 0 [ 115.556765][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.556792][ T5735] usb 2-1: Product: syz [ 115.556806][ T5735] usb 2-1: Manufacturer: syz [ 115.556819][ T5735] usb 2-1: SerialNumber: syz [ 115.630425][ T2987] rpcbind: server 127.0.0.1 not responding, timed out [ 115.683288][ T5961] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.799526][ T6075] FAULT_INJECTION: forcing a failure. [ 115.799526][ T6075] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.799566][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz.4.79 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.799591][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.799603][ T6075] Call Trace: [ 115.799612][ T6075] [ 115.799622][ T6075] dump_stack_lvl+0xe8/0x150 [ 115.799655][ T6075] should_fail_ex+0x46b/0x600 [ 115.799688][ T6075] _copy_from_user+0x2d/0xb0 [ 115.799722][ T6075] do_tcp_getsockopt+0x22c/0x2b50 [ 115.799754][ T6075] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 115.799776][ T6075] ? sock_recv_errqueue+0x580/0x5e0 [ 115.799807][ T6075] ? cmp_ex_search+0x1e/0x80 [ 115.799836][ T6075] ? bsearch+0x91/0xc0 [ 115.799855][ T6075] ? __pfx_cmp_ex_search+0x10/0x10 [ 115.799881][ T6075] ? rep_movs_alternative+0xf/0xa0 [ 115.799910][ T6075] ? search_extable+0x8f/0xd0 [ 115.799935][ T6075] ? __pfx_search_extable+0x10/0x10 [ 115.799959][ T6075] ? rep_movs_alternative+0xf/0xa0 [ 115.799993][ T6075] ? futex_unqueue+0x22/0x240 [ 115.800021][ T6075] ? rep_movs_alternative+0xf/0xa0 [ 115.800059][ T6075] ? fixup_exception+0x11f8/0x2140 [ 115.800088][ T6075] ? __pfx_fixup_exception+0x10/0x10 [ 115.800112][ T6075] ? up_read+0x34/0x180 [ 115.800132][ T6075] ? lock_mm_and_find_vma+0x117/0x340 [ 115.800164][ T6075] ? do_user_addr_fault+0xef2/0x1340 [ 115.800182][ T6075] ? try_to_wake_up+0x84b/0x1430 [ 115.800206][ T6075] ? irqentry_exit+0x218/0x920 [ 115.800225][ T6075] ? lockdep_hardirqs_on+0x7b/0x110 [ 115.800246][ T6075] ? irqentry_exit+0x218/0x920 [ 115.800265][ T6075] ? trace_irq_disable+0x3b/0x140 [ 115.800305][ T6075] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 115.800337][ T6075] tcp_getsockopt+0x83/0x130 [ 115.800359][ T6075] ? sock_recv_errqueue+0x580/0x5e0 [ 115.800387][ T6075] ? sock_recv_errqueue+0x580/0x5e0 [ 115.800416][ T6075] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 115.800448][ T6075] do_sock_getsockopt+0x51d/0x7e0 [ 115.800477][ T6075] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 115.800514][ T6075] ? __fget_files+0x3a8/0x420 [ 115.800537][ T6075] ? __fget_files+0x2a/0x420 [ 115.800564][ T6075] __x64_sys_getsockopt+0x1aa/0x250 [ 115.800596][ T6075] do_syscall_64+0x166/0x520 [ 115.800617][ T6075] ? trace_irq_disable+0x3b/0x140 [ 115.800639][ T6075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.800659][ T6075] ? clear_bhb_loop+0x70/0xc0 [ 115.800684][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.800703][ T6075] RIP: 0033:0x7fb1048de199 [ 115.800723][ T6075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.800740][ T6075] RSP: 002b:00007fb102b36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 115.800762][ T6075] RAX: ffffffffffffffda RBX: 00007fb104b65fa0 RCX: 00007fb1048de199 [ 115.800775][ T6075] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 115.800787][ T6075] RBP: 00007fb1049750b8 R08: 0000000000000000 R09: 0000000000000000 [ 115.800799][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.800810][ T6075] R13: 00007fb104b66038 R14: 00007fb104b65fa0 R15: 00007ffe8f5d6738 [ 115.800840][ T6075] [ 115.875027][ T5961] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 115.967534][ T5961] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.967595][ T5961] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 115.967620][ T5961] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 115.967643][ T5961] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 115.967685][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.338783][ T6072] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.338886][ T6072] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.415237][ T5961] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 116.482590][ T5961] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 116.483268][ T5961] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 116.528093][ T5961] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 116.549149][ T5961] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 116.549338][ T5961] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 116.569364][ T5961] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 116.752900][ T6077] printk: console [ttyS0] disabled syzkaller syzkaller login: [ 120.476325][ T6078] printk: console [ttyS0] enabled [ 121.285155][ T999] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 121.444837][ T999] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 121.466524][ T999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.466553][ T999] usb 4-1: Product: syz [ 121.466567][ T999] usb 4-1: Manufacturer: syz [ 121.466581][ T999] usb 4-1: SerialNumber: syz [ 121.534617][ T999] usb 4-1: config 0 descriptor?? [ 122.015543][ T999] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 003 [ 122.402690][ T5754] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.552658][ T5754] usb 1-1: Using ep0 maxpacket: 32 [ 122.553841][ T5754] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 122.555555][ T5754] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 122.555579][ T5754] usb 1-1: config 0 has no interface number 0 [ 122.555679][ T5754] usb 1-1: config 0 interface 12 has no altsetting 0 [ 122.565037][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.565064][ T5754] usb 1-1: Product: syz [ 122.565077][ T5754] usb 1-1: Manufacturer: syz [ 122.565090][ T5754] usb 1-1: SerialNumber: syz [ 122.656910][ T6173] FAULT_INJECTION: forcing a failure. [ 122.656910][ T6173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.656954][ T6173] CPU: 0 UID: 0 PID: 6173 Comm: syz.4.109 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.656977][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.656989][ T6173] Call Trace: [ 122.656997][ T6173] [ 122.657007][ T6173] dump_stack_lvl+0xe8/0x150 [ 122.657042][ T6173] should_fail_ex+0x46b/0x600 [ 122.657077][ T6173] _copy_to_user+0x31/0xb0 [ 122.657098][ T6173] msr_read+0x164/0x240 [ 122.657129][ T6173] ? __pfx_msr_read+0x10/0x10 [ 122.657154][ T6173] ? security_file_permission+0x75/0x260 [ 122.657185][ T6173] ? rw_verify_area+0x250/0x4d0 [ 122.657212][ T6173] ? __pfx_msr_read+0x10/0x10 [ 122.657255][ T6173] vfs_read+0x219/0xa90 [ 122.657302][ T6173] ? __pfx_vfs_read+0x10/0x10 [ 122.657329][ T6173] ? __fget_files+0x2a/0x420 [ 122.657355][ T6173] ? __fget_files+0x2a/0x420 [ 122.657376][ T6173] ? __fget_files+0x3a8/0x420 [ 122.657397][ T6173] ? __fget_files+0x2a/0x420 [ 122.657426][ T6173] ksys_read+0x156/0x270 [ 122.657452][ T6173] ? __pfx_ksys_read+0x10/0x10 [ 122.657486][ T6173] do_syscall_64+0x166/0x520 [ 122.657509][ T6173] ? trace_irq_disable+0x3b/0x140 [ 122.657537][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.657557][ T6173] ? clear_bhb_loop+0x70/0xc0 [ 122.657583][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.657603][ T6173] RIP: 0033:0x7fb1048de199 [ 122.657622][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.657639][ T6173] RSP: 002b:00007fb102b36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.657661][ T6173] RAX: ffffffffffffffda RBX: 00007fb104b65fa0 RCX: 00007fb1048de199 [ 122.657677][ T6173] RDX: 0000000000018ff8 RSI: 0000200000032680 RDI: 0000000000000004 [ 122.657690][ T6173] RBP: 00007fb1049750b8 R08: 0000000000000000 R09: 0000000000000000 [ 122.657703][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.657715][ T6173] R13: 00007fb104b66038 R14: 00007fb104b65fa0 R15: 00007ffe8f5d6738 [ 122.657747][ T6173] [ 122.837982][ T5754] usb 1-1: config 0 descriptor?? [ 123.085678][ T1880] usb 4-1: USB disconnect, device number 3 [ 123.276612][ T6180] FAULT_INJECTION: forcing a failure. [ 123.276612][ T6180] name fail_futex, interval 1, probability 0, space 0, times 1 [ 123.276644][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.4.112 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 123.276664][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.276674][ T6180] Call Trace: [ 123.276681][ T6180] [ 123.276689][ T6180] dump_stack_lvl+0xe8/0x150 [ 123.276722][ T6180] should_fail_ex+0x46b/0x600 [ 123.276757][ T6180] get_futex_key+0x1b4/0x1580 [ 123.276802][ T6180] ? __pfx_get_futex_key+0x10/0x10 [ 123.276828][ T6180] ? kasan_save_free_info+0x40/0x50 [ 123.276853][ T6180] ? __kasan_slab_free+0x5c/0x80 [ 123.276882][ T6180] ? kfree+0x1c5/0x6d0 [ 123.276904][ T6180] ? __se_sys_request_key+0x329/0x350 [ 123.276928][ T6180] ? do_syscall_64+0x166/0x520 [ 123.276948][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.276972][ T6180] futex_wake+0x119/0x600 [ 123.276997][ T6180] ? __pfx_futex_wake+0x10/0x10 [ 123.277034][ T6180] do_futex+0x458/0x4e0 [ 123.277058][ T6180] ? __pfx_do_futex+0x10/0x10 [ 123.277083][ T6180] __se_sys_futex+0x3a8/0x450 [ 123.277109][ T6180] ? __pfx___se_sys_futex+0x10/0x10 [ 123.277134][ T6180] ? __x64_sys_futex+0x21/0xf0 [ 123.277158][ T6180] do_syscall_64+0x166/0x520 [ 123.277180][ T6180] ? trace_irq_disable+0x3b/0x140 [ 123.277207][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.277228][ T6180] ? clear_bhb_loop+0x70/0xc0 [ 123.277254][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.277274][ T6180] RIP: 0033:0x7fb1048de199 [ 123.277293][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.277310][ T6180] RSP: 002b:00007fb102b360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.277333][ T6180] RAX: ffffffffffffffda RBX: 00007fb104b65fa8 RCX: 00007fb1048de199 [ 123.277349][ T6180] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb104b65fac [ 123.277362][ T6180] RBP: 00007fb104b65fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 123.277377][ T6180] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 123.277390][ T6180] R13: 00007fb104b66038 R14: 00007ffe8f5d6650 R15: 00007ffe8f5d6738 [ 123.277421][ T6180] [ 124.654088][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 124.662923][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 124.687319][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 125.146568][ T3147] rpcbind: server 127.0.0.1 not responding, timed out [ 126.522762][ T5754] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 126.522816][ T5754] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 126.522832][ T5754] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 126.522908][ T5754] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 126.541304][ T5754] usb 1-1: USB disconnect, device number 2 [ 126.854312][ T6197] FAULT_INJECTION: forcing a failure. [ 126.854312][ T6197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.854349][ T6197] CPU: 1 UID: 0 PID: 6197 Comm: syz.1.118 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.854373][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.854384][ T6197] Call Trace: [ 126.854392][ T6197] [ 126.854401][ T6197] dump_stack_lvl+0xe8/0x150 [ 126.854437][ T6197] should_fail_ex+0x46b/0x600 [ 126.854472][ T6197] _copy_to_user+0x31/0xb0 [ 126.854493][ T6197] generic_map_lookup_batch+0xb08/0xf20 [ 126.854534][ T6197] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 126.854560][ T6197] ? __fget_files+0x2a/0x420 [ 126.854589][ T6197] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 126.854616][ T6197] bpf_map_do_batch+0x288/0x640 [ 126.854637][ T6197] ? bpf_lsm_bpf+0x9/0x20 [ 126.854660][ T6197] ? security_bpf+0x7e/0x2d0 [ 126.854694][ T6197] __sys_bpf+0xa9f/0xd90 [ 126.854732][ T6197] ? __pfx___sys_bpf+0x10/0x10 [ 126.854765][ T6197] ? do_futex+0x3e7/0x4e0 [ 126.854811][ T6197] ? __pfx___se_sys_futex+0x10/0x10 [ 126.854830][ T6197] ? rcu_is_watching+0x16/0xb0 [ 126.854866][ T6197] __x64_sys_bpf+0xba/0xd0 [ 126.854895][ T6197] do_syscall_64+0x166/0x520 [ 126.854917][ T6197] ? trace_irq_disable+0x3b/0x140 [ 126.854944][ T6197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.854965][ T6197] ? clear_bhb_loop+0x70/0xc0 [ 126.854990][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.855017][ T6197] RIP: 0033:0x7fe9bd4be199 [ 126.855037][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.855054][ T6197] RSP: 002b:00007fe9bb716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.855076][ T6197] RAX: ffffffffffffffda RBX: 00007fe9bd745fa0 RCX: 00007fe9bd4be199 [ 126.855091][ T6197] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 126.855105][ T6197] RBP: 00007fe9bd5550b8 R08: 0000000000000000 R09: 0000000000000000 [ 126.855118][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.855131][ T6197] R13: 00007fe9bd746038 R14: 00007fe9bd745fa0 R15: 00007ffe4468a8b8 [ 126.855163][ T6197] [ 126.896189][ T6199] netlink: 11870 bytes leftover after parsing attributes in process `syz.2.119'. [ 126.897272][ T6199] netlink: 'syz.2.119': attribute type 25 has an invalid length. [ 126.897290][ T6199] netlink: 'syz.2.119': attribute type 27 has an invalid length. [ 126.897301][ T6199] netlink: 'syz.2.119': attribute type 28 has an invalid length. [ 126.897312][ T6199] netlink: 'syz.2.119': attribute type 29 has an invalid length. [ 126.897323][ T6199] netlink: 'syz.2.119': attribute type 30 has an invalid length. [ 127.247156][ T6204] input: syz0 as /devices/virtual/input/input6 [ 127.297536][ T6208] syz.1.122 uses obsolete (PF_INET,SOCK_PACKET) [ 127.491602][ T6205] cgroup: fork rejected by pids controller in /syz4 [ 128.310390][ T6237] loop5: detected capacity change from 0 to 7 [ 128.319563][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.322795][ T6237] loop5: p1 p3 p4 [ 128.322821][ T6237] loop5: partition table partially beyond EOD, truncated [ 128.323055][ T6237] loop5: p1 size 128 extends beyond EOD, truncated [ 129.299686][ T6237] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 129.383252][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.390772][ T9] usb 1-1: config 0 has no interfaces? [ 129.419881][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.419909][ T9] usb 1-1: Product: syz [ 129.419923][ T9] usb 1-1: Manufacturer: syz [ 129.419937][ T9] usb 1-1: SerialNumber: syz [ 129.471858][ T9] usb 1-1: config 0 descriptor?? [ 131.203427][ T1236] usb 1-1: USB disconnect, device number 3 [ 131.318203][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 131.460208][ T5641] udevd[5641]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 131.474698][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 133.003580][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.004485][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.005786][ T999] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 135.025009][ T999] usb 4-1: not running at top speed; connect to a high speed hub [ 135.025052][ T999] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 135.028905][ T999] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.028959][ T999] usb 4-1: config 1 interface 1 has no altsetting 0 [ 135.028993][ T999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.060842][ T6303] FAULT_INJECTION: forcing a failure. [ 135.060842][ T6303] name failslab, interval 1, probability 0, space 0, times 0 [ 135.060880][ T6303] CPU: 1 UID: 0 PID: 6303 Comm: syz.2.145 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 135.060907][ T6303] Tainted: [L]=SOFTLOCKUP [ 135.060914][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.060926][ T6303] Call Trace: [ 135.060934][ T6303] [ 135.060942][ T6303] dump_stack_lvl+0xe8/0x150 [ 135.060976][ T6303] should_fail_ex+0x46b/0x600 [ 135.061008][ T6303] should_failslab+0xa8/0x100 [ 135.061029][ T6303] __kmalloc_node_noprof+0xfd/0x7b0 [ 135.061059][ T6303] ? crypto_create_tfm_node+0x81/0x3c0 [ 135.061078][ T6303] ? crypto_create_tfm_node+0x81/0x3c0 [ 135.061105][ T6303] crypto_create_tfm_node+0x81/0x3c0 [ 135.061129][ T6303] crypto_spawn_tfm2+0x5c/0x90 [ 135.061156][ T6303] rsassa_pkcs1_init_tfm+0x42/0x90 [ 135.061186][ T6303] crypto_create_tfm_node+0x143/0x3c0 [ 135.061211][ T6303] crypto_alloc_tfm_node+0x169/0x3e0 [ 135.061240][ T6303] public_key_verify_signature+0x242/0x9e0 [ 135.061274][ T6303] ? __pfx_public_key_verify_signature+0x10/0x10 [ 135.061310][ T6303] ? asymmetric_key_generate_id+0x60/0x170 [ 135.061338][ T6303] ? asymmetric_key_id_same+0x67/0xe0 [ 135.061373][ T6303] x509_check_for_self_signed+0x326/0x430 [ 135.061401][ T6303] x509_cert_parse+0x622/0x7a0 [ 135.061426][ T6303] x509_key_preparse+0x64/0x6d0 [ 135.061449][ T6303] ? __pfx_smack_key_permission+0x10/0x10 [ 135.061471][ T6303] asymmetric_key_preparse+0xb9/0x1b0 [ 135.061504][ T6303] __key_create_or_update+0x3a9/0xa80 [ 135.061535][ T6303] ? __pfx___key_create_or_update+0x10/0x10 [ 135.061560][ T6303] ? lookup_user_key+0xb68/0x1150 [ 135.061604][ T6303] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 135.061644][ T6303] key_create_or_update+0x42/0x60 [ 135.061669][ T6303] __se_sys_add_key+0x349/0x420 [ 135.061697][ T6303] ? __pfx___se_sys_add_key+0x10/0x10 [ 135.061732][ T6303] ? __x64_sys_add_key+0x20/0xc0 [ 135.061759][ T6303] do_syscall_64+0x166/0x520 [ 135.061781][ T6303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.061800][ T6303] ? clear_bhb_loop+0x70/0xc0 [ 135.061830][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.061850][ T6303] RIP: 0033:0x7f09f766e199 [ 135.061868][ T6303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.061884][ T6303] RSP: 002b:00007f09f58c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 135.061904][ T6303] RAX: ffffffffffffffda RBX: 00007f09f78f5fa0 RCX: 00007f09f766e199 [ 135.061919][ T6303] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 135.061932][ T6303] RBP: 00007f09f77050b8 R08: ffffffffffffffff R09: 0000000000000000 [ 135.061945][ T6303] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 135.061957][ T6303] R13: 00007f09f78f6038 R14: 00007f09f78f5fa0 R15: 00007ffd0e8afb58 [ 135.061989][ T6303] [ 136.145136][ T6308] syz.0.146 (6308) used greatest stack depth: 18376 bytes left [ 136.674862][ T999] usb 4-1: can't set config #1, error -71 [ 136.689337][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.715335][ T999] usb 4-1: USB disconnect, device number 4 [ 137.677019][ T10] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice= 0.00 [ 137.693546][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 137.693573][ T10] usb 1-1: Product: syz [ 137.693588][ T10] usb 1-1: Manufacturer: syz [ 137.882649][ T10] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 138.102997][ T2959] rpcbind: server 127.0.0.1 not responding, timed out [ 138.249421][ T6327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.151'. [ 138.765899][ T69] IPVS: starting estimator thread 0... [ 138.882708][ T6332] IPVS: using max 8 ests per chain, 19200 per kthread [ 138.967280][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 138.969923][ T10] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 138.970021][ T10] usb 1-1: media controller created [ 139.094464][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.493953][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.505782][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.535378][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.537463][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.572960][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.915021][ T2984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.197090][ T10] usb 1-1: USB disconnect, device number 4 [ 142.006478][ T4940] Bluetooth: hci4: command tx timeout [ 142.302619][ T6327] netlink: 'syz.2.151': attribute type 3 has an invalid length. [ 142.302645][ T6327] netlink: 'syz.2.151': attribute type 2 has an invalid length. [ 143.980050][ T2962] rpcbind: server 127.0.0.1 not responding, timed out [ 144.056497][ T5628] Bluetooth: hci4: command tx timeout [ 144.108304][ T6353] block nbd0: shutting down sockets [ 145.475335][ T2984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.094782][ T4940] Bluetooth: hci4: command tx timeout [ 147.710520][ T3147] rpcbind: server 127.0.0.1 not responding, timed out [ 149.593856][ T4940] Bluetooth: hci4: command tx timeout [ 149.780757][ T36] audit: type=1807 audit(1791210501.426:2): action=appraise func=MODULE_CHECK res=1 [ 149.804242][ T36] audit: type=1807 audit(1791210501.426:3): action=appraise UNKNOWN=func= res=0 [ 149.826339][ T36] audit: type=1802 audit(1791210501.456:4): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.0.176" res=0 errno=0 [ 149.826685][ T6429] ima: policy update failed [ 149.826798][ T36] audit: type=1802 audit(1791210501.486:5): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.176" res=0 errno=0 [ 149.876420][ T6431] input: syz0 as /devices/virtual/input/input7 [ 151.074476][ T2984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.182650][ T999] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.773589][ T39] rpcbind: server 127.0.0.1 not responding, timed out [ 152.243221][ T999] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 152.244626][ T999] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 152.244658][ T999] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 152.247122][ T999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.247152][ T999] usb 1-1: Product: syz [ 152.247165][ T999] usb 1-1: Manufacturer: syz [ 152.247178][ T999] usb 1-1: SerialNumber: syz [ 152.263797][ T999] usb 1-1: config 0 descriptor?? [ 152.264801][ T6436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.265067][ T6436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.387040][ T6454] netlink: 44 bytes leftover after parsing attributes in process `syz.2.185'. [ 152.465766][ T6457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.185'. [ 152.504969][ T6436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.505078][ T6436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.553810][ T2984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.911115][ T999] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 152.931763][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.980116][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.062647][ T1880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.229091][ T1880] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 153.232183][ T1880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.257864][ T1880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.257892][ T1880] usb 2-1: Product: syz [ 153.257906][ T1880] usb 2-1: Manufacturer: syz [ 153.257920][ T1880] usb 2-1: SerialNumber: syz [ 153.498843][ T1880] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 153.499052][ T1880] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 153.535169][ T999] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 153.535221][ T1880] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 153.535289][ T1880] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 153.535347][ T1880] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 153.535424][ T1880] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 153.535506][ T1880] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 153.535588][ T1880] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 153.584941][ T999] usb 1-1: USB disconnect, device number 5 [ 153.693991][ T1880] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 154.761043][ T1880] usb 2-1: USB disconnect, device number 3 [ 154.850040][ T1880] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 154.874183][ T1880] keyspan 2-1:1.0: device disconnected [ 154.878516][ T6481] loop7: detected capacity change from 0 to 16384 [ 155.150779][ T6483] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.194'. [ 155.185368][ T6483] input: syz1 as /devices/virtual/input/input8 [ 155.198905][ T6481] loop7: detected capacity change from 16384 to 0 [ 155.223062][ C0] blk_print_req_error: 86 callbacks suppressed [ 155.223082][ C0] I/O error, dev loop7, sector 16368 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 155.246270][ C0] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 155.569947][ T6488] netlink: 14078 bytes leftover after parsing attributes in process `syz.2.195'. [ 155.572163][ T6488] netlink: 14078 bytes leftover after parsing attributes in process `syz.2.195'. [ 155.596683][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 155.742606][ T5954] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 156.277436][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 156.368332][ T6504] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.199'. [ 156.407820][ T6506] FAULT_INJECTION: forcing a failure. [ 156.407820][ T6506] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 156.407891][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.2.200 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 156.407920][ T6506] Tainted: [L]=SOFTLOCKUP [ 156.407928][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.407939][ T6506] Call Trace: [ 156.407948][ T6506] [ 156.407956][ T6506] dump_stack_lvl+0xe8/0x150 [ 156.407992][ T6506] should_fail_ex+0x46b/0x600 [ 156.408027][ T6506] prepare_alloc_pages+0x223/0x650 [ 156.408065][ T6506] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 156.408101][ T6506] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 156.408138][ T6506] ? __pfx_policy_nodemask+0x10/0x10 [ 156.408157][ T6506] ? filemap_get_entry+0x374/0x3f0 [ 156.408180][ T6506] ? reacquire_held_locks+0x117/0x1a0 [ 156.408224][ T6506] ? __pfx_filemap_get_entry+0x10/0x10 [ 156.408250][ T6506] alloc_pages_mpol+0xd4/0x280 [ 156.408282][ T6506] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 156.408306][ T6506] shmem_get_folio_gfp+0x6ee/0x1c40 [ 156.408357][ T6506] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 156.408394][ T6506] shmem_fault+0x170/0x380 [ 156.408428][ T6506] __do_fault+0x138/0x2a0 [ 156.408462][ T6506] do_pte_missing+0x1828/0x28f0 [ 156.408501][ T6506] ? handle_mm_fault+0xeb/0x28c0 [ 156.408531][ T6506] handle_mm_fault+0xf64/0x28c0 [ 156.408563][ T6506] ? handle_mm_fault+0xeb/0x28c0 [ 156.408596][ T6506] ? follow_page_pte+0x663/0xf20 [ 156.408624][ T6506] ? __pfx_handle_mm_fault+0x10/0x10 [ 156.408652][ T6506] ? follow_page_pte+0x74b/0xf20 [ 156.408687][ T6506] ? __pfx_follow_page_pte+0x10/0x10 [ 156.408722][ T6506] __get_user_pages+0x1676/0x2650 [ 156.408777][ T6506] populate_vma_page_range+0x2be/0x3c0 [ 156.408805][ T6506] ? __pfx_populate_vma_page_range+0x10/0x10 [ 156.408832][ T6506] ? userfaultfd_unmap_complete+0x292/0x310 [ 156.408857][ T6506] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 156.408888][ T6506] __mm_populate+0x25f/0x390 [ 156.408915][ T6506] ? __pfx___mm_populate+0x10/0x10 [ 156.408938][ T6506] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.408964][ T6506] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 156.409006][ T6506] ? up_write+0x5a/0x190 [ 156.409031][ T6506] vm_mmap_pgoff+0x356/0x4e0 [ 156.409059][ T6506] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 156.409083][ T6506] ? rcu_is_watching+0x16/0xb0 [ 156.409119][ T6506] ? __x64_sys_mmap+0x7f/0x140 [ 156.409144][ T6506] do_syscall_64+0x166/0x520 [ 156.409166][ T6506] ? trace_irq_disable+0x3b/0x140 [ 156.409192][ T6506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.409227][ T6506] ? clear_bhb_loop+0x70/0xc0 [ 156.409251][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.409272][ T6506] RIP: 0033:0x7f09f766e199 [ 156.409289][ T6506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.409306][ T6506] RSP: 002b:00007f09f58c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 156.409328][ T6506] RAX: ffffffffffffffda RBX: 00007f09f78f5fa0 RCX: 00007f09f766e199 [ 156.409343][ T6506] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 156.409357][ T6506] RBP: 00007f09f77050b8 R08: ffffffffffffffff R09: 000000009a5eb000 [ 156.409371][ T6506] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 156.409384][ T6506] R13: 00007f09f78f6038 R14: 00007f09f78f5fa0 R15: 00007ffd0e8afb58 [ 156.409417][ T6506] [ 156.825365][ T3147] rpcbind: server 127.0.0.1 not responding, timed out [ 158.437286][ T2959] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.441793][ T3147] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.443903][ T2990] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.445023][ T2990] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.549004][ T6526] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 158.634601][ T6525] FAULT_INJECTION: forcing a failure. [ 158.634601][ T6525] name failslab, interval 1, probability 0, space 0, times 0 [ 158.634627][ T6525] CPU: 1 UID: 0 PID: 6525 Comm: syz.3.205 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 158.634643][ T6525] Tainted: [L]=SOFTLOCKUP [ 158.634647][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.634653][ T6525] Call Trace: [ 158.634658][ T6525] [ 158.634663][ T6525] dump_stack_lvl+0xe8/0x150 [ 158.634684][ T6525] should_fail_ex+0x46b/0x600 [ 158.634702][ T6525] should_failslab+0xa8/0x100 [ 158.634715][ T6525] __kmalloc_noprof+0xfb/0x790 [ 158.634730][ T6525] ? udpv6_init_sock+0x1a9/0x3c0 [ 158.634743][ T6525] ? udpv6_init_sock+0x1a9/0x3c0 [ 158.634759][ T6525] udpv6_init_sock+0x1a9/0x3c0 [ 158.634773][ T6525] inet6_create+0xf0b/0x1280 [ 158.634785][ T6525] ? inet6_create+0x80/0x1280 [ 158.634803][ T6525] __sock_create+0x4b3/0x9d0 [ 158.634824][ T6525] __sys_socket+0xd6/0x1b0 [ 158.634841][ T6525] __x64_sys_socket+0x7a/0x90 [ 158.634858][ T6525] do_syscall_64+0x166/0x520 [ 158.634871][ T6525] ? trace_irq_disable+0x3b/0x140 [ 158.634884][ T6525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.634895][ T6525] ? clear_bhb_loop+0x70/0xc0 [ 158.634908][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.634919][ T6525] RIP: 0033:0x7ff00616e199 [ 158.634930][ T6525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.634939][ T6525] RSP: 002b:00007ff0043c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 158.634951][ T6525] RAX: ffffffffffffffda RBX: 00007ff0063f5fa0 RCX: 00007ff00616e199 [ 158.634958][ T6525] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 158.634964][ T6525] RBP: 00007ff0062050b8 R08: 0000000000000000 R09: 0000000000000000 [ 158.634970][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.634976][ T6525] R13: 00007ff0063f6038 R14: 00007ff0063f5fa0 R15: 00007ffc0a012488 [ 158.634992][ T6525] [ 158.918952][ T6526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.358760][ T2984] bridge_slave_1: left allmulticast mode [ 159.359024][ T2984] bridge_slave_1: left promiscuous mode [ 159.393238][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.492604][ T5954] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.641147][ T6541] netlink: 11870 bytes leftover after parsing attributes in process `syz.2.210'. [ 159.657416][ T6541] input: syz1 as /devices/virtual/input/input9 [ 159.683592][ T5954] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 159.693202][ T5954] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.693232][ T5954] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.693268][ T5954] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.693307][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.763874][ T6537] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.768441][ T2984] bridge_slave_0: left allmulticast mode [ 159.768480][ T2984] bridge_slave_0: left promiscuous mode [ 159.768728][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.402678][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 160.563525][ T10] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 160.566463][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.566495][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.568725][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.568749][ T10] usb 3-1: Product: syz [ 160.568763][ T10] usb 3-1: Manufacturer: syz [ 160.568777][ T10] usb 3-1: SerialNumber: syz [ 160.575125][ T10] usb 3-1: config 0 descriptor?? [ 160.627862][ T10] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 160.627905][ T10] uvcvideo 3-1:0.0: No valid video chain found. [ 160.813509][ T10] usb 3-1: USB disconnect, device number 3 [ 160.993180][ T2984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.073714][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.094359][ T2984] bond0 (unregistering): Released all slaves [ 161.223362][ T6531] bond1: (slave geneve2): making interface the new active one [ 161.345230][ T5954] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 161.366131][ T6531] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 161.398200][ T5954] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input10 [ 163.620471][ T5954] usb 2-1: USB disconnect, device number 4 [ 163.620557][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 164.642583][ T5735] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.204565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 165.311711][ T2962] IPVS: starting estimator thread 0... [ 165.396660][ T6591] IPVS: using max 8 ests per chain, 19200 per kthread [ 167.055390][ T5735] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 167.632507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.702517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.808547][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.995347][ T6595] device-mapper: dirty region log: unrecognised sync argument to dirty region log: s [ 167.999175][ T5735] usb 3-1: config 0 descriptor?? [ 167.999672][ T5735] usb 3-1: can't set config #0, error -71 [ 168.001294][ T6595] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL) [ 168.003413][ T6595] device-mapper: ioctl: error adding target to table [ 168.045582][ T5735] usb 3-1: USB disconnect, device number 4 [ 168.862694][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 168.926136][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.926342][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.926524][ T6335] bridge_slave_0: entered allmulticast mode [ 168.997299][ T6335] bridge_slave_0: entered promiscuous mode [ 169.106015][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 169.290329][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.290434][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.290605][ T6335] bridge_slave_1: entered allmulticast mode [ 169.296251][ T6335] bridge_slave_1: entered promiscuous mode [ 169.305107][ T2959] rpcbind: server 127.0.0.1 not responding, timed out [ 169.557671][ T6635] netlink: 11870 bytes leftover after parsing attributes in process `syz.2.231'. [ 169.589176][ T6635] input: syz1 as /devices/virtual/input/input11 [ 170.100168][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.163433][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.554360][ T6661] FAULT_INJECTION: forcing a failure. [ 170.554360][ T6661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.554400][ T6661] CPU: 0 UID: 0 PID: 6661 Comm: syz.3.236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 170.554429][ T6661] Tainted: [L]=SOFTLOCKUP [ 170.554436][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.554448][ T6661] Call Trace: [ 170.554456][ T6661] [ 170.554466][ T6661] dump_stack_lvl+0xe8/0x150 [ 170.554503][ T6661] should_fail_ex+0x46b/0x600 [ 170.554537][ T6661] _copy_to_user+0x31/0xb0 [ 170.554559][ T6661] btf_get_info_by_fd+0x1db/0x650 [ 170.554595][ T6661] ? __fget_files+0x2a/0x420 [ 170.554620][ T6661] ? __pfx_btf_get_info_by_fd+0x10/0x10 [ 170.554648][ T6661] ? __fget_files+0x2a/0x420 [ 170.554679][ T6661] bpf_obj_get_info_by_fd+0xa91/0x3560 [ 170.554704][ T6661] ? lock_acquire+0x115/0x350 [ 170.554732][ T6661] ? futex_unqueue+0x22/0x240 [ 170.554768][ T6661] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 170.554786][ T6661] ? futex_unqueue+0x22/0x240 [ 170.554819][ T6661] ? __lock_acquire+0x747/0x2de0 [ 170.554856][ T6661] ? __pfx___futex_wait+0x10/0x10 [ 170.554885][ T6661] ? __pfx_futex_wake_mark+0x10/0x10 [ 170.554912][ T6661] ? lock_acquire+0x115/0x350 [ 170.554954][ T6661] ? bpf_lsm_bpf+0x9/0x20 [ 170.554978][ T6661] ? security_bpf+0x7e/0x2d0 [ 170.555011][ T6661] __sys_bpf+0xa50/0xd90 [ 170.555074][ T6661] ? __pfx___sys_bpf+0x10/0x10 [ 170.555103][ T6661] ? __sys_sendto+0x240/0x5d0 [ 170.555135][ T6661] ? do_futex+0x3e7/0x4e0 [ 170.555185][ T6661] ? rcu_is_watching+0x16/0xb0 [ 170.555223][ T6661] __x64_sys_bpf+0xba/0xd0 [ 170.555254][ T6661] do_syscall_64+0x166/0x520 [ 170.555275][ T6661] ? trace_irq_disable+0x3b/0x140 [ 170.555301][ T6661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.555320][ T6661] ? clear_bhb_loop+0x70/0xc0 [ 170.555346][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.555366][ T6661] RIP: 0033:0x7ff00616e199 [ 170.555386][ T6661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.555404][ T6661] RSP: 002b:00007ff0043c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.555427][ T6661] RAX: ffffffffffffffda RBX: 00007ff0063f5fa0 RCX: 00007ff00616e199 [ 170.555442][ T6661] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 000000000000000f [ 170.555456][ T6661] RBP: 00007ff0062050b8 R08: 0000000000000000 R09: 0000000000000000 [ 170.555470][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.555482][ T6661] R13: 00007ff0063f6038 R14: 00007ff0063f5fa0 R15: 00007ffc0a012488 [ 170.555518][ T6661] [ 172.625178][ T2984] hsr_slave_0: left promiscuous mode [ 173.690052][ T2984] hsr_slave_1: left promiscuous mode [ 173.691373][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.726870][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.793565][ T2959] rpcbind: server 127.0.0.1 not responding, timed out [ 173.822096][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.822125][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.144369][ T6687] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.244'. [ 174.190058][ T6687] input: syz1 as /devices/virtual/input/input12 [ 174.263413][ T2984] veth1_macvtap: left promiscuous mode [ 174.272081][ T2984] veth0_macvtap: left promiscuous mode [ 174.293720][ T2984] veth1_vlan: left promiscuous mode [ 174.296747][ T2984] veth0_vlan: left promiscuous mode [ 175.409332][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 175.460314][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 175.763249][ T2984] team0 (unregistering): Port device team_slave_1 removed [ 175.808745][ T2984] team0 (unregistering): Port device team_slave_0 removed [ 175.989827][ T6335] team0: Port device team_slave_0 added [ 176.010639][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 176.664852][ T2988] IPVS: starting estimator thread 0... [ 176.753032][ T6714] IPVS: using max 8 ests per chain, 19200 per kthread [ 179.512072][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.519298][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.551305][ T2965] rpcbind: server 127.0.0.1 not responding, timed out [ 179.824824][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.829680][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.882604][ T5635] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.033256][ T5635] usb 3-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 180.034835][ T5635] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 180.034865][ T5635] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.034900][ T5635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.250157][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 180.250715][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 180.454509][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -32 [ 180.454581][ T5635] input input13: Device does not respond to id packet M [ 180.661486][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 180.661542][ T5635] input input13: Device does not respond to id packet P [ 180.662912][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 180.662953][ T5635] input input13: Device does not respond to id packet B [ 180.667056][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 180.667102][ T5635] input input13: Device does not respond to id packet N [ 180.667549][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 180.667989][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 180.668417][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 180.668858][ T5635] iforce 3-1:1.0: usb_submit_urb failed: -71 [ 180.669230][ T5635] iforce 3-1:1.0: usb_submit_urb failed -90 [ 180.669568][ T5635] iforce 3-1:1.0: usb_submit_urb failed -90 [ 180.673897][ T5635] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13 [ 180.799288][ T5635] usb 3-1: USB disconnect, device number 6 [ 180.898332][ T6721] netlink: 14078 bytes leftover after parsing attributes in process `syz.0.254'. [ 180.898824][ T6721] netlink: 14078 bytes leftover after parsing attributes in process `syz.0.254'. [ 181.397922][ T6701] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 181.454316][ T6335] team0: Port device team_slave_1 added [ 181.539553][ T6705] FAULT_INJECTION: forcing a failure. [ 181.539553][ T6705] name failslab, interval 1, probability 0, space 0, times 0 [ 181.539594][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.1.249 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 181.539634][ T6705] Tainted: [L]=SOFTLOCKUP [ 181.539642][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.539657][ T6705] Call Trace: [ 181.539666][ T6705] [ 181.539675][ T6705] dump_stack_lvl+0xe8/0x150 [ 181.539711][ T6705] should_fail_ex+0x46b/0x600 [ 181.539747][ T6705] should_failslab+0xa8/0x100 [ 181.539770][ T6705] __kmalloc_cache_noprof+0xa1/0x680 [ 181.539801][ T6705] ? register_netdevice+0x5a7/0x1ed0 [ 181.539826][ T6705] ? register_netdevice+0x5a7/0x1ed0 [ 181.539858][ T6705] register_netdevice+0x5a7/0x1ed0 [ 181.539896][ T6705] ? lock_acquire+0x115/0x350 [ 181.539925][ T6705] ? __pfx_register_netdevice+0x10/0x10 [ 181.539956][ T6705] ? net_generic+0x1e/0x240 [ 181.539984][ T6705] ? net_generic+0x1e/0x240 [ 181.540016][ T6705] ip6_tnl_create2+0x79/0x400 [ 181.540049][ T6705] ip6_tnl_locate+0x737/0x840 [ 181.540090][ T6705] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 181.540121][ T6705] ? ip6_tnl_siocdevprivate+0x601/0xad0 [ 181.540155][ T6705] ip6_tnl_siocdevprivate+0x631/0xad0 [ 181.540190][ T6705] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 181.540216][ T6705] ? rt_mutex_slowlock+0x424/0x780 [ 181.540252][ T6705] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 181.540303][ T6705] ? full_name_hash+0x92/0xe0 [ 181.540335][ T6705] dev_ifsioc+0xb56/0x1360 [ 181.540364][ T6705] dev_ioctl+0x84c/0x1150 [ 181.540389][ T6705] sock_ioctl+0x756/0x7f0 [ 181.540421][ T6705] ? __pfx_sock_ioctl+0x10/0x10 [ 181.540451][ T6705] ? __fget_files+0x3a8/0x420 [ 181.540473][ T6705] ? __fget_files+0x2a/0x420 [ 181.540500][ T6705] ? bpf_lsm_file_ioctl+0x9/0x20 [ 181.540531][ T6705] ? __pfx_sock_ioctl+0x10/0x10 [ 181.540559][ T6705] __se_sys_ioctl+0xff/0x170 [ 181.540591][ T6705] do_syscall_64+0x166/0x520 [ 181.540613][ T6705] ? trace_irq_disable+0x3b/0x140 [ 181.540640][ T6705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.540661][ T6705] ? clear_bhb_loop+0x70/0xc0 [ 181.540686][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.540706][ T6705] RIP: 0033:0x7fe9bd4be199 [ 181.540725][ T6705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.540742][ T6705] RSP: 002b:00007fe9bb716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.540765][ T6705] RAX: ffffffffffffffda RBX: 00007fe9bd745fa0 RCX: 00007fe9bd4be199 [ 181.540780][ T6705] RDX: 0000200000000400 RSI: 00000000000089f1 RDI: 0000000000000004 [ 181.540793][ T6705] RBP: 00007fe9bd5550b8 R08: 0000000000000000 R09: 0000000000000000 [ 181.540806][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.540818][ T6705] R13: 00007fe9bd746038 R14: 00007fe9bd745fa0 R15: 00007ffe4468a8b8 [ 181.540851][ T6705] [ 181.710807][ T6729] loop4: detected capacity change from 0 to 7 [ 181.775114][ T6729] Dev loop4: unable to read RDB block 7 [ 181.775159][ T6729] loop4: unable to read partition table [ 181.775358][ T6729] loop4: partition table beyond EOD, truncated [ 181.779945][ T6729] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.098563][ T6732] netlink: 14078 bytes leftover after parsing attributes in process `syz.2.256'. [ 182.115531][ T6732] netlink: 14078 bytes leftover after parsing attributes in process `syz.2.256'. [ 182.119426][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.119442][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.119465][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.125676][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.125690][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.125713][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.135045][ T2965] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.135097][ T2965] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.340455][ T6732] input: syz1 as /devices/virtual/input/input14 [ 182.702593][ T999] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 182.758348][ T6335] hsr_slave_0: entered promiscuous mode [ 182.769114][ T6335] hsr_slave_1: entered promiscuous mode [ 182.771569][ T6335] debugfs: 'hsr0' already exists in 'hsr' [ 182.771593][ T6335] Cannot create hsr debugfs directory [ 183.771380][ T6748] FAULT_INJECTION: forcing a failure. [ 183.771380][ T6748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.771413][ T6748] CPU: 1 UID: 0 PID: 6748 Comm: syz.1.262 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 183.771436][ T6748] Tainted: [L]=SOFTLOCKUP [ 183.771441][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.771452][ T6748] Call Trace: [ 183.771458][ T6748] [ 183.771466][ T6748] dump_stack_lvl+0xe8/0x150 [ 183.771495][ T6748] should_fail_ex+0x46b/0x600 [ 183.771526][ T6748] _copy_from_user+0x2d/0xb0 [ 183.771556][ T6748] dma_heap_ioctl+0x1bf/0x6d0 [ 183.771584][ T6748] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 183.771619][ T6748] ? bpf_lsm_file_ioctl+0x9/0x20 [ 183.771640][ T6748] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 183.771662][ T6748] __se_sys_ioctl+0xff/0x170 [ 183.771690][ T6748] do_syscall_64+0x166/0x520 [ 183.771710][ T6748] ? trace_irq_disable+0x3b/0x140 [ 183.771734][ T6748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.771758][ T6748] ? clear_bhb_loop+0x70/0xc0 [ 183.771779][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.771798][ T6748] RIP: 0033:0x7fe9bd4be199 [ 183.771817][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.771833][ T6748] RSP: 002b:00007fe9bb716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.771854][ T6748] RAX: ffffffffffffffda RBX: 00007fe9bd745fa0 RCX: 00007fe9bd4be199 [ 183.771868][ T6748] RDX: 0000200000000040 RSI: 00000000c0184800 RDI: 0000000000000003 [ 183.771879][ T6748] RBP: 00007fe9bd5550b8 R08: 0000000000000000 R09: 0000000000000000 [ 183.771889][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.771900][ T6748] R13: 00007fe9bd746038 R14: 00007fe9bd745fa0 R15: 00007ffe4468a8b8 [ 183.771926][ T6748] [ 186.283309][ T3036] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.283360][ T3036] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.791691][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 187.608802][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 188.336941][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 191.387531][ T6866] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.278'. [ 192.061721][ T6866] input: syz1 as /devices/virtual/input/input15 [ 193.412564][ T5734] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 194.466287][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.466367][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.675249][ T6900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.284'. [ 195.096554][ T6903] netlink: 548 bytes leftover after parsing attributes in process `syz.0.284'. [ 197.522623][ T5754] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 198.556252][ T2990] rpcbind: server 127.0.0.1 not responding, timed out [ 198.635550][ T5754] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 198.637236][ T5754] usb 3-1: config 1 has an invalid descriptor of length 28, skipping remainder of the config [ 198.637287][ T5754] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10497, setting to 1024 [ 198.637313][ T5754] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 198.637337][ T5754] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.697983][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.698010][ T5754] usb 3-1: Product: syz [ 198.698025][ T5754] usb 3-1: Manufacturer: syz [ 198.698039][ T5754] usb 3-1: SerialNumber: syz [ 198.754299][ T6923] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.781075][ T5754] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 198.781101][ T5754] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 198.781140][ T5754] usbserial_generic 3-1:1.0: generic converter detected [ 198.828907][ T5754] usb 3-1: generic converter now attached to ttyUSB0 [ 199.158707][ T5754] usb 3-1: USB disconnect, device number 8 [ 199.380170][ T5754] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 199.394869][ T5754] usbserial_generic 3-1:1.0: device disconnected [ 200.337544][ T3062] rpcbind: server 127.0.0.1 not responding, timed out [ 200.400693][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.456287][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.461881][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.482133][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.488588][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.872237][ T6987] device-mapper: ioctl: name not supplied when creating device [ 200.928573][ T36] audit: type=1326 audit(1791210552.576:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 200.928607][ T36] audit: type=1326 audit(1791210552.576:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 201.007577][ T36] audit: type=1326 audit(1791210552.656:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 201.007626][ T36] audit: type=1326 audit(1791210552.656:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 201.007664][ T36] audit: type=1326 audit(1791210552.656:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 201.095050][ T36] audit: type=1326 audit(1791210552.746:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 201.095091][ T36] audit: type=1326 audit(1791210552.746:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 201.095122][ T36] audit: type=1326 audit(1791210552.746:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 201.187957][ T36] audit: type=1326 audit(1791210552.836:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 201.188008][ T36] audit: type=1326 audit(1791210552.836:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6991 comm="syz.2.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f766e199 code=0x7ffc0000 [ 201.821255][ T7007] overlayfs: overlapping lowerdir path [ 201.876412][ T7008] overlayfs: overlapping lowerdir path [ 202.229295][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 203.079673][ T4940] Bluetooth: hci5: command tx timeout [ 203.284164][ T3036] rpcbind: server 127.0.0.1 not responding, timed out [ 204.672774][ T5754] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 204.726121][ T7043] FAULT_INJECTION: forcing a failure. [ 204.726121][ T7043] name failslab, interval 1, probability 0, space 0, times 0 [ 204.726161][ T7043] CPU: 1 UID: 0 PID: 7043 Comm: syz.3.311 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 204.726192][ T7043] Tainted: [L]=SOFTLOCKUP [ 204.726208][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.726220][ T7043] Call Trace: [ 204.726228][ T7043] [ 204.726238][ T7043] dump_stack_lvl+0xe8/0x150 [ 204.726276][ T7043] should_fail_ex+0x46b/0x600 [ 204.726311][ T7043] should_failslab+0xa8/0x100 [ 204.726336][ T7043] __kmalloc_cache_noprof+0xa1/0x680 [ 204.726367][ T7043] ? sctp_add_bind_addr+0x8c/0x370 [ 204.726391][ T7043] ? sctp_add_bind_addr+0x8c/0x370 [ 204.726424][ T7043] sctp_add_bind_addr+0x8c/0x370 [ 204.726454][ T7043] sctp_copy_local_addr_list+0x31a/0x4e0 [ 204.726483][ T7043] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 204.726510][ T7043] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 204.726542][ T7043] ? sctp_v4_is_any+0x35/0x60 [ 204.726569][ T7043] ? sctp_copy_one_addr+0x93/0x360 [ 204.726598][ T7043] sctp_bind_addr_copy+0x189/0x3c0 [ 204.726631][ T7043] sctp_connect_new_asoc+0x2ff/0x6b0 [ 204.726665][ T7043] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 204.726702][ T7043] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 204.726737][ T7043] __sctp_connect+0x5cb/0xdc0 [ 204.726780][ T7043] ? __pfx___sctp_connect+0x10/0x10 [ 204.726810][ T7043] ? security_sctp_bind_connect+0x7e/0x2c0 [ 204.726842][ T7043] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 204.726870][ T7043] sctp_getsockopt_connectx3+0x227/0x360 [ 204.726899][ T7043] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 204.726933][ T7043] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 204.726961][ T7043] ? lockdep_hardirqs_on+0x7b/0x110 [ 204.726989][ T7043] sctp_getsockopt+0x984/0xb90 [ 204.727023][ T7043] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 204.727055][ T7043] do_sock_getsockopt+0x51d/0x7e0 [ 204.727086][ T7043] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 204.727126][ T7043] ? __fget_files+0x3a8/0x420 [ 204.727150][ T7043] ? __fget_files+0x2a/0x420 [ 204.727181][ T7043] __x64_sys_getsockopt+0x1aa/0x250 [ 204.727221][ T7043] do_syscall_64+0x166/0x520 [ 204.727243][ T7043] ? trace_irq_disable+0x3b/0x140 [ 204.727269][ T7043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.727290][ T7043] ? clear_bhb_loop+0x70/0xc0 [ 204.727315][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.727336][ T7043] RIP: 0033:0x7ff00616e199 [ 204.727355][ T7043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.727372][ T7043] RSP: 002b:00007ff0043c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 204.727395][ T7043] RAX: ffffffffffffffda RBX: 00007ff0063f5fa0 RCX: 00007ff00616e199 [ 204.727410][ T7043] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 204.727423][ T7043] RBP: 00007ff0062050b8 R08: 00002000000007c0 R09: 0000000000000000 [ 204.727436][ T7043] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.727449][ T7043] R13: 00007ff0063f6038 R14: 00007ff0063f5fa0 R15: 00007ffc0a012488 [ 204.727483][ T7043] [ 204.872531][ T5754] usb 3-1: Using ep0 maxpacket: 16 [ 204.873333][ T5754] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 205.502032][ T5754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 205.582583][ T7041] Bluetooth: hci5: command tx timeout [ 205.683109][ T39] rpcbind: server 127.0.0.1 not responding, timed out [ 205.702841][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.702867][ T5754] usb 3-1: Product: syz [ 205.702881][ T5754] usb 3-1: Manufacturer: syz [ 205.702895][ T5754] usb 3-1: SerialNumber: syz [ 205.830173][ T5754] usb 3-1: config 0 descriptor?? [ 205.880780][ T5754] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 205.880820][ T5754] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 206.058246][ T7054] bridge_slave_1: left allmulticast mode [ 206.100576][ T7054] bridge_slave_1: left promiscuous mode [ 206.145340][ T7054] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.600260][ T7041] Bluetooth: hci3: command 0x0406 tx timeout [ 206.600383][ T7041] Bluetooth: hci0: command 0x0406 tx timeout [ 206.662860][ T7041] Bluetooth: hci2: command 0x0406 tx timeout [ 206.697046][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 206.787988][ T3036] rpcbind: server 127.0.0.1 not responding, timed out [ 207.601752][ T7054] bridge_slave_0: left allmulticast mode [ 207.601829][ T7054] bridge_slave_0: left promiscuous mode [ 207.622735][ T5631] Bluetooth: hci5: command tx timeout [ 207.808480][ T7054] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.591912][ T5754] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 208.873757][ T5754] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 208.873791][ T5754] em28xx 3-1:0.0: board has no eeprom [ 209.106839][ T7082] device-mapper: ioctl: name not supplied when creating device [ 209.107930][ T5754] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 209.107968][ T5754] em28xx 3-1:0.0: dvb set to bulk mode. [ 209.135412][ T6004] em28xx 3-1:0.0: Binding DVB extension [ 210.132879][ T4940] Bluetooth: hci5: command tx timeout [ 211.777844][ T5754] usb 3-1: USB disconnect, device number 9 [ 211.853998][ T5754] em28xx 3-1:0.0: Disconnecting em28xx [ 212.052820][ T6004] em28xx 3-1:0.0: Registering input extension [ 212.053348][ T5754] em28xx 3-1:0.0: Closing input extension [ 214.216002][ T7118] netlink: 192 bytes leftover after parsing attributes in process `syz.2.322'. [ 214.423072][ T5754] em28xx: Freeing device [ 214.975435][ T6851] udevd[6851]: setting owner of /dev/bus/usb/003/009 to uid=0, gid=0 failed: No such file or directory [ 215.471771][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 215.471790][ T36] audit: type=1807 audit(1791210567.116:26): action=appraise func=FIRMWARE_CHECK res=1 [ 215.536893][ T36] audit: type=1804 audit(1791210567.186:27): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=measuring_policy cause=store_entry comm="syz.1.325" name="ima_policy_written" res=0 errno=-17 [ 215.537340][ T36] audit: type=1807 audit(1791210567.186:28): action=appraise func=MODULE_CHECK res=1 [ 215.544170][ T36] audit: type=1807 audit(1791210567.196:29): action=appraise func=POLICY_CHECK res=1 [ 215.545007][ T7134] ima: policy update completed [ 215.545150][ T36] audit: type=1802 audit(1791210567.196:30): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.1.325" res=1 errno=0 [ 216.742470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.008904][ T7161] FAULT_INJECTION: forcing a failure. [ 218.008904][ T7161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.008946][ T7161] CPU: 1 UID: 0 PID: 7161 Comm: syz.1.331 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 218.008976][ T7161] Tainted: [L]=SOFTLOCKUP [ 218.008984][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.008996][ T7161] Call Trace: [ 218.009004][ T7161] [ 218.009014][ T7161] dump_stack_lvl+0xe8/0x150 [ 218.009050][ T7161] should_fail_ex+0x46b/0x600 [ 218.009083][ T7161] _copy_from_user+0x2d/0xb0 [ 218.009115][ T7161] __x64_sys_timer_create+0x118/0x1c0 [ 218.009139][ T7161] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 218.009178][ T7161] do_syscall_64+0x166/0x520 [ 218.009200][ T7161] ? trace_irq_disable+0x3b/0x140 [ 218.009228][ T7161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.009249][ T7161] ? clear_bhb_loop+0x70/0xc0 [ 218.009273][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.009294][ T7161] RIP: 0033:0x7fe9bd4be199 [ 218.009313][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.009330][ T7161] RSP: 002b:00007fe9bb716028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 218.009353][ T7161] RAX: ffffffffffffffda RBX: 00007fe9bd745fa0 RCX: 00007fe9bd4be199 [ 218.009375][ T7161] RDX: 0000000000000000 RSI: 0000200000533fa0 RDI: 0000000000000000 [ 218.009389][ T7161] RBP: 00007fe9bd5550b8 R08: 0000000000000000 R09: 0000000000000000 [ 218.009403][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.009415][ T7161] R13: 00007fe9bd746038 R14: 00007fe9bd745fa0 R15: 00007ffe4468a8b8 [ 218.009447][ T7161] [ 218.290250][ T3147] bridge_slave_1: left allmulticast mode [ 218.290277][ T3147] bridge_slave_1: left promiscuous mode [ 218.290431][ T3147] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.739771][ T3147] bridge_slave_0: left allmulticast mode [ 218.739807][ T3147] bridge_slave_0: left promiscuous mode [ 218.757256][ T3147] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.761842][ T7179] FAULT_INJECTION: forcing a failure. [ 218.761842][ T7179] name failslab, interval 1, probability 0, space 0, times 0 [ 218.761881][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.3.336 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 218.761910][ T7179] Tainted: [L]=SOFTLOCKUP [ 218.761918][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.761930][ T7179] Call Trace: [ 218.761938][ T7179] [ 218.761948][ T7179] dump_stack_lvl+0xe8/0x150 [ 218.761985][ T7179] should_fail_ex+0x46b/0x600 [ 218.762020][ T7179] should_failslab+0xa8/0x100 [ 218.762044][ T7179] __kmalloc_noprof+0xfb/0x790 [ 218.762072][ T7179] ? __vb2_queue_alloc+0x2a0/0x1660 [ 218.762096][ T7179] ? __vb2_queue_alloc+0x2a0/0x1660 [ 218.762131][ T7179] __vb2_queue_alloc+0x2a0/0x1660 [ 218.762184][ T7179] vb2_core_reqbufs+0xc3f/0x1470 [ 218.762226][ T7179] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 218.762253][ T7179] ? vb2_verify_memory_type+0x1fc/0x570 [ 218.762284][ T7179] ? vb2_reqbufs+0x399/0x630 [ 218.762319][ T7179] v4l2_m2m_ioctl_reqbufs+0x110/0x200 [ 218.762354][ T7179] __video_do_ioctl+0x8b2/0xc70 [ 218.762401][ T7179] ? __pfx___video_do_ioctl+0x10/0x10 [ 218.762444][ T7179] video_usercopy+0x860/0x1430 [ 218.762477][ T7179] ? __pfx___video_do_ioctl+0x10/0x10 [ 218.762507][ T7179] ? __pfx_video_usercopy+0x10/0x10 [ 218.762532][ T7179] ? smack_file_ioctl+0x2c4/0x370 [ 218.762571][ T7179] ? __fget_files+0x2a/0x420 [ 218.762592][ T7179] ? __fget_files+0x3a8/0x420 [ 218.762616][ T7179] v4l2_ioctl+0x190/0x1e0 [ 218.762643][ T7179] ? __pfx_v4l2_ioctl+0x10/0x10 [ 218.762670][ T7179] __se_sys_ioctl+0xff/0x170 [ 218.762699][ T7179] do_syscall_64+0x166/0x520 [ 218.762721][ T7179] ? trace_irq_disable+0x3b/0x140 [ 218.762769][ T7179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.762789][ T7179] ? clear_bhb_loop+0x70/0xc0 [ 218.762815][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.762835][ T7179] RIP: 0033:0x7ff00616e199 [ 218.762855][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.762872][ T7179] RSP: 002b:00007ff0043c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.762893][ T7179] RAX: ffffffffffffffda RBX: 00007ff0063f5fa0 RCX: 00007ff00616e199 [ 218.762908][ T7179] RDX: 0000200000000180 RSI: 00000000c0145608 RDI: 0000000000000004 [ 218.762922][ T7179] RBP: 00007ff0062050b8 R08: 0000000000000000 R09: 0000000000000000 [ 218.762936][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.762949][ T7179] R13: 00007ff0063f6038 R14: 00007ff0063f5fa0 R15: 00007ffc0a012488 [ 218.762984][ T7179] [ 219.034223][ T7183] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.337'. [ 219.055952][ T7183] netlink: 'syz.0.337': attribute type 25 has an invalid length. [ 219.055974][ T7183] netlink: 'syz.0.337': attribute type 27 has an invalid length. [ 219.055987][ T7183] netlink: 'syz.0.337': attribute type 28 has an invalid length. [ 219.056000][ T7183] netlink: 'syz.0.337': attribute type 29 has an invalid length. [ 219.056012][ T7183] netlink: 'syz.0.337': attribute type 30 has an invalid length. [ 219.501538][ T7193] jffs2: notice: (7193) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 219.732552][ T1880] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 219.884663][ T1880] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 219.886435][ T1880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.930197][ T1880] usb 4-1: config 0 descriptor?? [ 219.947735][ T7211] netlink: 'syz.2.343': attribute type 10 has an invalid length. [ 220.007028][ T1880] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 220.007566][ T3147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.159934][ T3147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.326209][ T31] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 220.327840][ T3147] bond0 (unregistering): Released all slaves [ 220.505042][ T39] rpcbind: server 127.0.0.1 not responding, timed out [ 220.531852][ T7211] veth0_macvtap: entered allmulticast mode [ 220.544329][ T31] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 220.551536][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 32770, setting to 64 [ 220.582039][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.582075][ T31] usb 3-1: Product: syz [ 220.582089][ T31] usb 3-1: Manufacturer: syz [ 220.582102][ T31] usb 3-1: SerialNumber: syz [ 220.672583][ T5735] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 220.680221][ T31] usb 3-1: config 0 descriptor?? [ 220.734845][ T31] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0206 [ 220.842627][ T5735] usb 2-1: Using ep0 maxpacket: 16 [ 220.843484][ T5735] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.844757][ T5735] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.844805][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.844832][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.844853][ T5735] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 220.844875][ T5735] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.846001][ T5735] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.846023][ T5735] usb 2-1: Manufacturer: syz [ 220.951382][ T5735] usb 2-1: config 0 descriptor?? [ 221.197889][ T1880] gspca_stv06xx: I2C: Read error writing address: -71 [ 221.281027][ T1880] usb 4-1: USB disconnect, device number 6 [ 221.296306][ T3147] hsr_slave_0: left promiscuous mode [ 221.332665][ T3147] hsr_slave_1: left promiscuous mode [ 221.335243][ T3147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.355120][ T5735] rc_core: IR keymap rc-hauppauge not found [ 221.355134][ T5735] Registered IR keymap rc-empty [ 221.386246][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.400767][ T3147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.403951][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.436069][ T5735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 221.439306][ T5735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 221.471283][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.482888][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.505226][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.522650][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.543372][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.562739][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.582696][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.602861][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.622628][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.644091][ T5735] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.788987][ T5735] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 221.789016][ T5735] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 221.815551][ T5735] usb 2-1: USB disconnect, device number 5 [ 223.033430][ T5635] usb 3-1: USB disconnect, device number 10 [ 223.397431][ T7268] FAULT_INJECTION: forcing a failure. [ 223.397431][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 223.397472][ T7268] CPU: 1 UID: 0 PID: 7268 Comm: syz.3.352 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 223.397500][ T7268] Tainted: [L]=SOFTLOCKUP [ 223.397507][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 223.397519][ T7268] Call Trace: [ 223.397527][ T7268] [ 223.397536][ T7268] dump_stack_lvl+0xe8/0x150 [ 223.397572][ T7268] should_fail_ex+0x46b/0x600 [ 223.397608][ T7268] should_failslab+0xa8/0x100 [ 223.397635][ T7268] __kmalloc_cache_noprof+0xa1/0x680 [ 223.397665][ T7268] ? up_read+0x34/0x180 [ 223.397686][ T7268] ? afs_lookup_cell+0x487/0x1ce0 [ 223.397705][ T7268] ? afs_lookup_cell+0x487/0x1ce0 [ 223.397732][ T7268] afs_lookup_cell+0x487/0x1ce0 [ 223.397765][ T7268] ? __pfx_afs_lookup_cell+0x10/0x10 [ 223.397788][ T7268] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 223.397817][ T7268] ? rwbase_write_lock+0x550/0x720 [ 223.397848][ T7268] afs_cell_init+0x17a/0x340 [ 223.397872][ T7268] afs_proc_rootcell_write+0x175/0x200 [ 223.397905][ T7268] proc_simple_write+0x10b/0x140 [ 223.397930][ T7268] ? __pfx_proc_simple_write+0x10/0x10 [ 223.397947][ T7268] proc_reg_write+0x1f6/0x2f0 [ 223.397977][ T7268] ? __pfx_proc_reg_write+0x10/0x10 [ 223.397998][ T7268] vfs_write+0x29f/0xbb0 [ 223.398025][ T7268] ? __pfx_vfs_write+0x10/0x10 [ 223.398047][ T7268] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 223.398069][ T7268] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 223.398088][ T7268] ? mutex_lock_nested+0x152/0x1d0 [ 223.398113][ T7268] ? fdget_pos+0x252/0x320 [ 223.398141][ T7268] ksys_write+0x156/0x270 [ 223.398167][ T7268] ? __pfx_ksys_write+0x10/0x10 [ 223.398203][ T7268] do_syscall_64+0x166/0x520 [ 223.398224][ T7268] ? trace_irq_disable+0x3b/0x140 [ 223.398253][ T7268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.398278][ T7268] ? clear_bhb_loop+0x70/0xc0 [ 223.398310][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.398331][ T7268] RIP: 0033:0x7ff00616e199 [ 223.398350][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.398368][ T7268] RSP: 002b:00007ff0043c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.398391][ T7268] RAX: ffffffffffffffda RBX: 00007ff0063f5fa0 RCX: 00007ff00616e199 [ 223.398408][ T7268] RDX: 0000000000000002 RSI: 0000200000000070 RDI: 0000000000000004 [ 223.398422][ T7268] RBP: 00007ff0062050b8 R08: 0000000000000000 R09: 0000000000000000 [ 223.398436][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.398449][ T7268] R13: 00007ff0063f6038 R14: 00007ff0063f5fa0 R15: 00007ffc0a012488 [ 223.398481][ T7268] [ 223.592655][ T5735] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 223.817373][ T5735] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 223.819151][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.854011][ T5735] usb 2-1: config 0 descriptor?? [ 224.087737][ T5735] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 224.134585][ T3147] team0 (unregistering): Port device team_slave_1 removed [ 224.172595][ T1880] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 224.193430][ T3147] team0 (unregistering): Port device team_slave_0 removed [ 224.333394][ T1880] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 224.337787][ T1880] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 224.337825][ T1880] usb 4-1: Product: syz [ 224.337838][ T1880] usb 4-1: SerialNumber: syz [ 224.409884][ T1880] usb 4-1: config 0 descriptor?? [ 224.628703][ T1880] hso 4-1:0.0: Failed to find INT IN ep [ 224.709139][ T5735] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 224.709160][ T5735] [drm] Initialized udl on minor 1 [ 224.810905][ T5735] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 224.830766][ T5735] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 224.861720][ T1880] usb 4-1: USB disconnect, device number 7 [ 224.864396][ T5735] usb 2-1: USB disconnect, device number 6 [ 224.938344][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'. [ 225.218385][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.221055][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.221182][ T6970] bridge_slave_0: entered allmulticast mode [ 225.252114][ T6970] bridge_slave_0: entered promiscuous mode [ 225.305447][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.307162][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.307344][ T6970] bridge_slave_1: entered allmulticast mode [ 225.314111][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 225.336130][ T6970] bridge_slave_1: entered promiscuous mode [ 225.498141][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 225.501700][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.504617][ T31] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 225.504673][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.504700][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.504723][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.504745][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.504781][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.727501][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.738878][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.740583][ T31] usb 3-1: usb_control_msg returned -32 [ 226.740628][ T31] usbtmc 3-1:16.0: can't read capabilities [ 226.911986][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 226.950424][ T6970] team0: Port device team_slave_0 added [ 227.903424][ T7312] vlan2: entered promiscuous mode [ 227.903449][ T7312] bond0: entered promiscuous mode [ 227.903464][ T7312] bond_slave_0: entered promiscuous mode [ 227.903702][ T7312] bond_slave_1: entered promiscuous mode [ 228.058033][ T6970] team0: Port device team_slave_1 added [ 228.146081][ T31] usb 3-1: USB disconnect, device number 11 [ 228.252260][ T7324] netlink: 5 bytes leftover after parsing attributes in process `syz.0.363'. [ 228.252282][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 228.272562][ T7323] bridge0: port 1(syz_tun) entered blocking state [ 228.272810][ T7323] bridge0: port 1(syz_tun) entered disabled state [ 228.272988][ T7323] syz_tun: entered allmulticast mode [ 228.352077][ T7323] syz_tun: entered promiscuous mode [ 228.564247][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.564264][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.564289][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.570017][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.570033][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.570056][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.620167][ T7331] bridge0: port 3(vlan2) entered blocking state [ 228.620443][ T7331] bridge0: port 3(vlan2) entered disabled state [ 228.620623][ T7331] vlan2: entered allmulticast mode [ 228.620638][ T7331] geneve0: entered allmulticast mode [ 228.633706][ T7331] vlan2: entered promiscuous mode [ 228.633729][ T7331] geneve0: entered promiscuous mode [ 228.828192][ T6970] hsr_slave_0: entered promiscuous mode [ 228.829397][ T6970] hsr_slave_1: entered promiscuous mode [ 228.830344][ T6970] debugfs: 'hsr0' already exists in 'hsr' [ 228.830369][ T6970] Cannot create hsr debugfs directory [ 229.716513][ T7345] trusted_key: encrypted_key: key user:syz not found [ 230.311099][ T5735] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 230.464892][ T5735] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 230.607191][ T7361] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 230.731352][ T7365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.373'. [ 231.657518][ T7357] fido_id[7357]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.833570][ T7361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.837920][ T7361] bond1: (slave bond2): making interface the new active one [ 231.856262][ T7361] bond1: (slave bond2): Enslaving as an active interface with an up link [ 232.483696][ T7365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.198513][ T7388] netlink: 'syz.3.380': attribute type 5 has an invalid length. [ 233.315181][ T7391] ================================================================== [ 233.315200][ T7391] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 233.315234][ T7391] Read of size 1 at addr ffff888021367b80 by task syz.1.381/7391 [ 233.315250][ T7391] [ 233.315263][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.1.381 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 233.315289][ T7391] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.315296][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.315307][ T7391] Call Trace: [ 233.315315][ T7391] [ 233.315323][ T7391] dump_stack_lvl+0xe8/0x150 [ 233.315354][ T7391] print_address_description+0x55/0x1e0 [ 233.315381][ T7391] ? string+0x216/0x2d0 [ 233.315405][ T7391] print_report+0x58/0x70 [ 233.315429][ T7391] kasan_report+0x117/0x150 [ 233.315448][ T7391] ? string+0x216/0x2d0 [ 233.315477][ T7391] string+0x216/0x2d0 [ 233.315506][ T7391] vsnprintf+0x74a/0xef0 [ 233.315539][ T7391] vprintk_store+0x3d9/0xdc0 [ 233.315562][ T7391] ? __pfx_vprintk_store+0x10/0x10 [ 233.315595][ T7391] ? __pfx_hlock_conflict+0x10/0x10 [ 233.315628][ T7391] ? check_path+0x21/0x40 [ 233.315664][ T7391] vprintk_emit+0x192/0x560 [ 233.315685][ T7391] ? __pfx_vprintk_emit+0x10/0x10 [ 233.315708][ T7391] _printk+0xdd/0x130 [ 233.315733][ T7391] ? __pfx__printk+0x10/0x10 [ 233.315756][ T7391] ? rcu_is_watching+0x16/0xb0 [ 233.315790][ T7391] __setup_irq+0x12a1/0x20a0 [ 233.315825][ T7391] request_threaded_irq+0x2c1/0x3a0 [ 233.315850][ T7391] ? __pfx_pcl812_interrupt+0x10/0x10 [ 233.315875][ T7391] pcl812_attach+0x254/0x22b0 [ 233.315899][ T7391] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 233.315939][ T7391] comedi_device_attach+0x535/0x730 [ 233.315965][ T7391] comedi_unlocked_ioctl+0x8f4/0x1af0 [ 233.316004][ T7391] ? kasan_quarantine_put+0xbb/0x1f0 [ 233.316032][ T7391] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 233.316068][ T7391] ? do_vfs_ioctl+0x1184/0x1550 [ 233.316097][ T7391] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 233.316123][ T7391] ? __pfx_smack_log+0x10/0x10 [ 233.316152][ T7391] ? smk_tskacc+0x2fb/0x370 [ 233.316175][ T7391] ? smack_file_ioctl+0x265/0x370 [ 233.316202][ T7391] ? __pfx_smack_file_ioctl+0x10/0x10 [ 233.316232][ T7391] ? __fget_files+0x2a/0x420 [ 233.316253][ T7391] ? __fget_files+0x3a8/0x420 [ 233.316272][ T7391] ? __fget_files+0x2a/0x420 [ 233.316293][ T7391] ? bpf_lsm_file_ioctl+0x9/0x20 [ 233.316315][ T7391] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 233.316343][ T7391] __se_sys_ioctl+0xff/0x170 [ 233.316373][ T7391] do_syscall_64+0x166/0x520 [ 233.316395][ T7391] ? trace_irq_disable+0x3b/0x140 [ 233.316420][ T7391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.316440][ T7391] ? clear_bhb_loop+0x70/0xc0 [ 233.316462][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.316482][ T7391] RIP: 0033:0x7fe9bd4be199 [ 233.316501][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.316519][ T7391] RSP: 002b:00007fe9bb716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.316542][ T7391] RAX: ffffffffffffffda RBX: 00007fe9bd745fa0 RCX: 00007fe9bd4be199 [ 233.316558][ T7391] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000004 [ 233.316572][ T7391] RBP: 00007fe9bd5550b8 R08: 0000000000000000 R09: 0000000000000000 [ 233.316586][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.316598][ T7391] R13: 00007fe9bd746038 R14: 00007fe9bd745fa0 R15: 00007ffe4468a8b8 [ 233.316622][ T7391] [ 233.316629][ T7391] [ 233.316634][ T7391] Allocated by task 6581: [ 233.316644][ T7391] kasan_save_track+0x3e/0x80 [ 233.316671][ T7391] __kasan_kmalloc+0x93/0xb0 [ 233.316686][ T7391] __kmalloc_node_track_caller_noprof+0x56e/0x7b0 [ 233.316716][ T7391] kmemdup_noprof+0x2b/0x70 [ 233.316735][ T7391] smack_inode_init_security+0x459/0x600 [ 233.316756][ T7391] security_inode_init_security+0x208/0x3e0 [ 233.316777][ T7391] shmem_symlink+0xe0/0x4d0 [ 233.316793][ T7391] vfs_symlink+0x18b/0x330 [ 233.316807][ T7391] filename_symlinkat+0x1cd/0x420 [ 233.316821][ T7391] __se_sys_symlinkat+0x4e/0x2b0 [ 233.316837][ T7391] do_syscall_64+0x166/0x520 [ 233.316856][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.316874][ T7391] [ 233.316879][ T7391] Freed by task 6581: [ 233.316887][ T7391] kasan_save_track+0x3e/0x80 [ 233.316921][ T7391] kasan_save_free_info+0x40/0x50 [ 233.316942][ T7391] __kasan_slab_free+0x5c/0x80 [ 233.316970][ T7391] kfree+0x1c5/0x6d0 [ 233.316991][ T7391] security_inode_init_security+0x32d/0x3e0 [ 233.317013][ T7391] shmem_symlink+0xe0/0x4d0 [ 233.317029][ T7391] vfs_symlink+0x18b/0x330 [ 233.317044][ T7391] filename_symlinkat+0x1cd/0x420 [ 233.317060][ T7391] __se_sys_symlinkat+0x4e/0x2b0 [ 233.317077][ T7391] do_syscall_64+0x166/0x520 [ 233.317097][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.317115][ T7391] [ 233.317120][ T7391] The buggy address belongs to the object at ffff888021367b80 [ 233.317120][ T7391] which belongs to the cache kmalloc-8 of size 8 [ 233.317137][ T7391] The buggy address is located 0 bytes inside of [ 233.317137][ T7391] freed 8-byte region [ffff888021367b80, ffff888021367b88) [ 233.317158][ T7391] [ 233.317163][ T7391] The buggy address belongs to the physical page: [ 233.317187][ T7391] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021367b20 pfn:0x21367 [ 233.317208][ T7391] flags: 0x80000000000200(workingset|node=0|zone=1) [ 233.317229][ T7391] page_type: f5(slab) [ 233.317248][ T7391] raw: 0080000000000200 ffff88813ffbd500 ffffea0000b40490 ffffea000099df90 [ 233.317266][ T7391] raw: ffff888021367b20 0000000000800074 00000000f5000000 0000000000000000 [ 233.317276][ T7391] page dumped because: kasan: bad access detected [ 233.317290][ T7391] page_owner tracks the page as allocated [ 233.317297][ T7391] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10, tgid 10 (kworker/0:1), ts 4807172555 [ 233.317328][ T7391] post_alloc_hook+0x1f9/0x250 [ 233.317352][ T7391] get_page_from_freelist+0x2591/0x2600 [ 233.317381][ T7391] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 233.317409][ T7391] allocate_slab+0x7d/0x620 [ 233.317426][ T7391] refill_objects+0x2d8/0x350 [ 233.317445][ T7391] __pcs_replace_empty_main+0x339/0x690 [ 233.317463][ T7391] __kmalloc_noprof+0x54b/0x790 [ 233.317485][ T7391] acpi_ex_allocate_name_string+0x79/0x290 [ 233.317507][ T7391] acpi_ex_get_name_string+0x488/0xa90 [ 233.317527][ T7391] acpi_ds_create_operand+0x5c7/0xbe0 [ 233.317545][ T7391] acpi_ds_create_operands+0x3fc/0x770 [ 233.317564][ T7391] acpi_ds_eval_buffer_field_operands+0x85/0x340 [ 233.317582][ T7391] acpi_ds_exec_end_op+0xc8d/0x1b00 [ 233.317602][ T7391] acpi_ps_parse_loop+0xfa3/0x23f0 [ 233.317626][ T7391] acpi_ps_parse_aml+0x388/0x1020 [ 233.317651][ T7391] acpi_ps_execute_method+0x89d/0xa70 [ 233.317676][ T7391] page_owner free stack trace missing [ 233.317684][ T7391] [ 233.317689][ T7391] Memory state around the buggy address: [ 233.317700][ T7391] ffff888021367a80: 00 fc fc fc fa fc fc fc 06 fc fc fc fa fc fc fc [ 233.317715][ T7391] ffff888021367b00: 05 fc fc fc fa fc fc fc 05 fc fc fc 00 fc fc fc [ 233.317730][ T7391] >ffff888021367b80: fa fc fc fc fa fc fc fc 07 fc fc fc 07 fc fc fc [ 233.317740][ T7391] ^ [ 233.317750][ T7391] ffff888021367c00: 05 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc [ 233.317764][ T7391] ffff888021367c80: fa fc fc fc fa fc fc fc fa fc fc fc 07 fc fc fc [ 233.317775][ T7391] ================================================================== [ 233.317797][ T7391] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 234.050344][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.1.381 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 234.061647][ T7391] Tainted: [L]=SOFTLOCKUP [ 234.065959][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 234.076017][ T7391] Call Trace: [ 234.079299][ T7391] [ 234.082226][ T7391] vpanic+0x56d/0xa60 [ 234.086226][ T7391] ? __pfx_vpanic+0x10/0x10 [ 234.090772][ T7391] panic+0xc5/0xd0 [ 234.094492][ T7391] ? __pfx_panic+0x10/0x10 [ 234.098904][ T7391] ? string+0x216/0x2d0 [ 234.103065][ T7391] ? rcu_is_watching+0x16/0xb0 [ 234.107930][ T7391] ? string+0x216/0x2d0 [ 234.112101][ T7391] ? string+0x216/0x2d0 [ 234.116253][ T7391] check_panic_on_warn+0x89/0xb0 [ 234.121185][ T7391] ? string+0x216/0x2d0 [ 234.125353][ T7391] end_report+0x73/0x170 [ 234.129588][ T7391] ? string+0x216/0x2d0 [ 234.133741][ T7391] kasan_report+0x128/0x150 [ 234.138244][ T7391] ? string+0x216/0x2d0 [ 234.142402][ T7391] string+0x216/0x2d0 [ 234.146390][ T7391] vsnprintf+0x74a/0xef0 [ 234.150633][ T7391] vprintk_store+0x3d9/0xdc0 [ 234.155242][ T7391] ? __pfx_vprintk_store+0x10/0x10 [ 234.160350][ T7391] ? __pfx_hlock_conflict+0x10/0x10 [ 234.165556][ T7391] ? check_path+0x21/0x40 [ 234.169908][ T7391] vprintk_emit+0x192/0x560 [ 234.174414][ T7391] ? __pfx_vprintk_emit+0x10/0x10 [ 234.179431][ T7391] _printk+0xdd/0x130 [ 234.183410][ T7391] ? __pfx__printk+0x10/0x10 [ 234.187990][ T7391] ? rcu_is_watching+0x16/0xb0 [ 234.192753][ T7391] __setup_irq+0x12a1/0x20a0 [ 234.197346][ T7391] request_threaded_irq+0x2c1/0x3a0 [ 234.202540][ T7391] ? __pfx_pcl812_interrupt+0x10/0x10 [ 234.207906][ T7391] pcl812_attach+0x254/0x22b0 [ 234.212577][ T7391] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 234.218380][ T7391] comedi_device_attach+0x535/0x730 [ 234.223581][ T7391] comedi_unlocked_ioctl+0x8f4/0x1af0 [ 234.228961][ T7391] ? kasan_quarantine_put+0xbb/0x1f0 [ 234.234243][ T7391] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 234.240085][ T7391] ? do_vfs_ioctl+0x1184/0x1550 [ 234.244944][ T7391] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.249966][ T7391] ? __pfx_smack_log+0x10/0x10 [ 234.254723][ T7391] ? smk_tskacc+0x2fb/0x370 [ 234.259223][ T7391] ? smack_file_ioctl+0x265/0x370 [ 234.264242][ T7391] ? __pfx_smack_file_ioctl+0x10/0x10 [ 234.269630][ T7391] ? __fget_files+0x2a/0x420 [ 234.274211][ T7391] ? __fget_files+0x3a8/0x420 [ 234.278967][ T7391] ? __fget_files+0x2a/0x420 [ 234.283549][ T7391] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.288490][ T7391] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 234.294296][ T7391] __se_sys_ioctl+0xff/0x170 [ 234.298888][ T7391] do_syscall_64+0x166/0x520 [ 234.303473][ T7391] ? trace_irq_disable+0x3b/0x140 [ 234.308496][ T7391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.314556][ T7391] ? clear_bhb_loop+0x70/0xc0 [ 234.319235][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.325122][ T7391] RIP: 0033:0x7fe9bd4be199 [ 234.329530][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.349216][ T7391] RSP: 002b:00007fe9bb716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.357626][ T7391] RAX: ffffffffffffffda RBX: 00007fe9bd745fa0 RCX: 00007fe9bd4be199 [ 234.365592][ T7391] RDX: 0000200000000240 RSI: 0000000040946400 RDI: 0000000000000004 [ 234.373553][ T7391] RBP: 00007fe9bd5550b8 R08: 0000000000000000 R09: 0000000000000000 [ 234.381516][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.389485][ T7391] R13: 00007fe9bd746038 R14: 00007fe9bd745fa0 R15: 00007ffe4468a8b8 [ 234.397541][ T7391] [ 234.400931][ T7391] Kernel Offset: disabled [ 234.405244][ T7391] Rebooting in 86400 seconds..