last executing test programs: 8m11.778886333s ago: executing program 3 (id=2748): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000500)={r1, r1, 0x7, 0x0, 0x0, 0xe, 0x4, 0x2c80, 0x3, 0x7, 0x2, 0x2, 'syz1\x00'}) shutdown(r1, 0x1) 8m10.913579997s ago: executing program 3 (id=2752): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracefs_dir\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89101) r1 = openat(r0, &(0x7f0000000240)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x15) 8m10.843360563s ago: executing program 3 (id=2753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4000, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast1}, {0xa000, 0x8864, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "5fb6e085bb465b5c9fb166c61d4936f0d2531bce480c7609", "e8ccc0953acb5e802faa46d4ef956eb62fe4ef53d890789f96d22add81edc9bf"}}}}}}}, 0x6e) 8m10.812143029s ago: executing program 3 (id=2754): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000240)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="020195ff002d3922ff65b4355e953d23d254f0ffa5000000", 0x18}, {&(0x7f0000000340)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 8m10.781785187s ago: executing program 3 (id=2755): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x101002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000540)=r1, 0x12) 8m10.721346727s ago: executing program 3 (id=2756): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/vm/compact_memory\x00', 0x201, 0x0) write(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7m55.608731034s ago: executing program 32 (id=2756): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/vm/compact_memory\x00', 0x201, 0x0) write(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5m49.723581074s ago: executing program 0 (id=4151): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:_est/_vent1 ./file0:0x0 _rg2=(', 0x20) 5m49.592551387s ago: executing program 0 (id=4154): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 5m49.482891101s ago: executing program 0 (id=4157): r0 = memfd_create(&(0x7f0000000400)='\xff\x00l\x1e\xa00x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x7b5}, &(0x7f0000000040)=0x8) 5m48.977984702s ago: executing program 0 (id=4166): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5m48.446752561s ago: executing program 33 (id=4166): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4m31.979611987s ago: executing program 2 (id=5010): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000003c0)="8269b66f2471b18a9dadb59528c570873123dec798a2a26e42ebfc89", 0x1c, 0x0, 0x0, 0x0) 4m31.866591672s ago: executing program 2 (id=5014): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m29.491979007s ago: executing program 2 (id=5043): execve(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x9c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x7d, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @void, @val={0x5, 0x6, {0x7, 0xf3, 0xff, "b5ffc6"}}, @val={0x25, 0x3, {0x1, 0x70, 0x72}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0xda, 0x9d, 0x80}}, @val={0x2d, 0x1a, {0x20, 0x1, 0x2, 0x0, {0x0, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x9, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x1, 0x5, 0x9}}, @val={0x76, 0x6, {0x7, 0xc, 0x2, 0x1}}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4m29.401378292s ago: executing program 2 (id=5045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x9, 0x0, 0x5, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r1, 0x1}, 0x8) 4m29.242732043s ago: executing program 2 (id=5046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000280)={r1, 0x800c, 0x1}, 0x8) 4m29.177464827s ago: executing program 2 (id=5047): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc_mnt\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) 4m13.975613497s ago: executing program 34 (id=5047): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc_mnt\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) 1m24.357625694s ago: executing program 1 (id=7099): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x2}, 0x6) 1m24.245803016s ago: executing program 1 (id=7101): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_to_bridge\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000004c0)="01005e00001652540012345608004600002c000100000102830bc0a80101e00000169404000022002aee0000000101000001ef010101c0a80164", 0x3a, 0x0, &(0x7f0000000500)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'bridge_slave_0\x00'}) 1m24.087243176s ago: executing program 1 (id=7103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0xd, 0x7, 0x10, 0x3, 0x40, 0x4, 0x36, 0x9, 0x9, 0x1, 0x6, 0x4, 0x6, 0x2, 0x81, 0x1}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x8, 0x48}) 1m21.928338788s ago: executing program 1 (id=7107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x103496, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x23fd080, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) 1m21.778861544s ago: executing program 1 (id=7110): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 1m21.37434329s ago: executing program 1 (id=7117): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) 1m20.866577848s ago: executing program 35 (id=7117): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) 57.619057187s ago: executing program 7 (id=7339): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) 57.493746085s ago: executing program 7 (id=7340): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffffff00000000000000000900000000000000000a000000000000000000000080400000000000000000080000000000000000000100000000000044000500fc020000000000000000000000000000000004d36c00000002000000ff0100000000000000000000000000010735000001"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc00000021000100fffffffffefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000100050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ac1414aa0000000000000000000000006c01"], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 57.361532567s ago: executing program 7 (id=7349): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa8240, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r1, 0x0, &(0x7f000001f000/0x3000)=nil, 0x3000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) 57.274089369s ago: executing program 7 (id=7342): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80004, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x200008, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfdffffff, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x6, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0xfffffffa, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x14, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x4, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x41000006, 0x100, 0x10b9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x4, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x400060a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0xa, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x4, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 57.17425877s ago: executing program 7 (id=7344): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 55.24962175s ago: executing program 7 (id=7354): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000380)={&(0x7f00000003c0)="9a", 0x1}) 53.884855858s ago: executing program 4 (id=7370): mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmod']) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 53.758107406s ago: executing program 4 (id=7372): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r1 = socket$nl_rdma(0x10, 0x3, 0x14) close_range(r0, r1, 0x2) r2 = fsopen(&(0x7f0000000c80)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000cc0)='[-.]{\xec\xc7\x00', 0x0, r1) 53.527524728s ago: executing program 4 (id=7382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb4dac462410a8f85, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000240)="1100f8ae", 0x4}, {&(0x7f0000000280)="00020057", 0x4}], 0x3) 53.33478128s ago: executing program 4 (id=7376): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x80000020, 0x402) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000180)}, 0x400000}) 52.934728633s ago: executing program 5 (id=7383): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e"], 0x16) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x8}}}, 0x4) 52.797861409s ago: executing program 6 (id=7384): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e32, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) close(0x3) 52.579564779s ago: executing program 6 (id=7385): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000b80)=0x8, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000007c0)="17", 0x59a, 0x10008095, 0x0, 0x0) 52.468999171s ago: executing program 4 (id=7386): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000003c0)='6', 0x1) socket$can_j1939(0x1d, 0x2, 0x7) 52.440023559s ago: executing program 6 (id=7387): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000280)={0x28, 0x2, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000002c0)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000300)={0x10, 0x1, r3}) 52.040133429s ago: executing program 4 (id=7388): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 52.039929426s ago: executing program 5 (id=7389): r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, 0x0, r2, 0x5}) 52.038170965s ago: executing program 6 (id=7390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/175, 0xaf) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000440)={0x2, 'vlan1\x00', {0x100007f}, 0xe}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 51.882382788s ago: executing program 5 (id=7391): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, 0x0) 51.698155976s ago: executing program 5 (id=7392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001780)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={0x14, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x400c044) 51.601483772s ago: executing program 5 (id=7393): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 51.549357837s ago: executing program 6 (id=7394): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x80000020, 0x402) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000180)}, 0x400000}) 50.958020751s ago: executing program 5 (id=7395): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000b80)=0x8, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000007c0)="17", 0x59a, 0x10008095, 0x0, 0x0) 50.95786149s ago: executing program 6 (id=7396): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0x10002}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000080)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="d5", 0x1}], 0x1}}], 0x1, 0x20002845) 0s ago: executing program 36 (id=7354): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000380)={&(0x7f00000003c0)="9a", 0x1}) kernel console output (not intermixed with test programs): 19535] new_inode+0x1f/0x170 [ 538.377114][T19535] hugetlbfs_get_inode+0x73/0x680 [ 538.377131][T19535] hugetlb_file_setup+0x28f/0x630 [ 538.377146][T19535] newseg+0x467/0xc70 [ 538.377167][T19535] ? __pfx_newseg+0x10/0x10 [ 538.377188][T19535] ipcget+0x1c6/0xd10 [ 538.377210][T19535] ? __fget_files+0x3a2/0x420 [ 538.377223][T19535] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.377242][T19535] ? __pfx_ipcget+0x10/0x10 [ 538.377259][T19535] ? __se_sys_futex+0x3a8/0x450 [ 538.377279][T19535] __x64_sys_shmget+0x140/0x190 [ 538.377296][T19535] ? __pfx___x64_sys_shmget+0x10/0x10 [ 538.377318][T19535] do_syscall_64+0x16a/0x530 [ 538.377333][T19535] ? trace_irq_disable+0x3b/0x140 [ 538.377347][T19535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.377358][T19535] ? clear_bhb_loop+0x70/0xc0 [ 538.377372][T19535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.377382][T19535] RIP: 0033:0x7f23feba8f19 [ 538.377393][T19535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.377403][T19535] RSP: 002b:00007f23ffaf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 538.377423][T19535] RAX: ffffffffffffffda RBX: 00007f23fee25fa0 RCX: 00007f23feba8f19 [ 538.377431][T19535] RDX: 0000000054003f00 RSI: 0000000000002000 RDI: 0000000000000000 [ 538.377438][T19535] RBP: 00007f23fec37f6d R08: 0000000000000000 R09: 0000000000000000 [ 538.377445][T19535] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000000 [ 538.377453][T19535] R13: 00007f23fee26038 R14: 00007f23fee25fa0 R15: 00007ffea13cde18 [ 538.377470][T19535] [ 539.106937][T19551] rxe_eth0 speed is unknown, defaulting to 1000 [ 539.668015][T19553] rxe_eth0 speed is unknown, defaulting to 1000 [ 539.676839][T19551] syzkaller0 speed is unknown, defaulting to 1000 [ 540.390774][T19553] syzkaller0 speed is unknown, defaulting to 1000 [ 540.821229][T19595] FAULT_INJECTION: forcing a failure. [ 540.821229][T19595] name failslab, interval 1, probability 0, space 0, times 0 [ 540.821254][T19595] CPU: 0 UID: 0 PID: 19595 Comm: syz.6.5846 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.821271][T19595] Tainted: [L]=SOFTLOCKUP [ 540.821275][T19595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 540.821282][T19595] Call Trace: [ 540.821287][T19595] [ 540.821293][T19595] dump_stack_lvl+0xe8/0x150 [ 540.821316][T19595] should_fail_ex+0x3eb/0x540 [ 540.821332][T19595] should_failslab+0xa8/0x100 [ 540.821351][T19595] ? __proc_create+0x55d/0xad0 [ 540.821439][T19595] kmem_cache_alloc_noprof+0x9c/0x600 [ 540.821456][T19595] ? __proc_create+0x55d/0xad0 [ 540.821473][T19595] __proc_create+0x55d/0xad0 [ 540.821489][T19595] ? __pfx___proc_create+0x10/0x10 [ 540.821506][T19595] ? rcu_is_watching+0x16/0xb0 [ 540.821524][T19595] proc_create_reg+0x8b/0x110 [ 540.821539][T19595] proc_create_net_data+0x98/0x1d0 [ 540.821552][T19595] ? __kmalloc_noprof+0x1a6/0x710 [ 540.821564][T19595] ? fib_default_rule_add+0x4c/0x380 [ 540.821643][T19595] ? __pfx_proc_create_net_data+0x10/0x10 [ 540.821659][T19595] ? fib_default_rule_add+0x1fc/0x380 [ 540.821679][T19595] ip6_route_net_init_late+0x5b/0xe0 [ 540.821726][T19595] ops_init+0x35d/0x5d0 [ 540.821768][T19595] setup_net+0x118/0x350 [ 540.821781][T19595] ? __pfx_setup_net+0x10/0x10 [ 540.821792][T19595] ? down_read_killable+0x1b6/0x3b0 [ 540.821812][T19595] ? __ns_common_init+0x384/0x590 [ 540.821831][T19595] copy_net_ns+0x536/0x770 [ 540.821844][T19595] create_new_namespaces+0x3f0/0x6b0 [ 540.821861][T19595] ? security_capable+0x7e/0x2c0 [ 540.821882][T19595] unshare_nsproxy_namespaces+0x144/0x190 [ 540.821899][T19595] ksys_unshare+0x532/0x890 [ 540.821917][T19595] ? __pfx_ksys_unshare+0x10/0x10 [ 540.821934][T19595] ? rcu_is_watching+0x16/0xb0 [ 540.821961][T19595] __x64_sys_unshare+0x38/0x50 [ 540.821976][T19595] do_syscall_64+0x16a/0x530 [ 540.821992][T19595] ? trace_irq_disable+0x3b/0x140 [ 540.822007][T19595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.822019][T19595] ? clear_bhb_loop+0x70/0xc0 [ 540.822033][T19595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.822044][T19595] RIP: 0033:0x7fde579a8f19 [ 540.822056][T19595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.822065][T19595] RSP: 002b:00007fde587c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 540.822078][T19595] RAX: ffffffffffffffda RBX: 00007fde57c25fa0 RCX: 00007fde579a8f19 [ 540.822086][T19595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 540.822093][T19595] RBP: 00007fde57a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 540.822100][T19595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.822108][T19595] R13: 00007fde57c26038 R14: 00007fde57c25fa0 R15: 00007ffd30f13e38 [ 540.822126][T19595] [ 541.678212][T19601] rxe_eth0 speed is unknown, defaulting to 1000 [ 542.220046][ T5850] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 542.373814][ T5850] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 542.374860][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.464552][ T5850] usb 7-1: config 0 descriptor?? [ 542.476411][ T32] audit: type=1800 audit(1794338591.899:1740): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250175 res=0 errno=-22 [ 542.515764][ T32] audit: type=1800 audit(1794338591.939:1741): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=250204 res=0 errno=-22 [ 542.557234][ T32] audit: type=1800 audit(1794338591.979:1742): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=250182 res=0 errno=-22 [ 542.557264][ T32] audit: type=1800 audit(1794338591.979:1743): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=250183 res=0 errno=-22 [ 542.610421][T18707] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 542.628361][ T32] audit: type=1800 audit(1794338592.059:1744): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=250184 res=0 errno=-22 [ 542.673183][ T32] audit: type=1800 audit(1794338592.099:1745): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250458 res=0 errno=-22 [ 542.727119][ T5850] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 542.772177][T19622] jffs2: notice: (19622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 542.921958][T19601] syzkaller0 speed is unknown, defaulting to 1000 [ 542.973581][ T32] audit: type=1800 audit(1794338592.399:1746): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251814 res=0 errno=-22 [ 543.030511][ T5850] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 543.030528][ T5850] [drm] Initialized udl on minor 1 [ 543.058301][ T32] audit: type=1800 audit(1794338592.489:1747): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251870 res=0 errno=-22 [ 543.604076][T19634] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5858'. [ 543.604095][T19634] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5858'. [ 543.741337][T19636] xt_hashlimit: max too large, truncated to 1048576 [ 547.266594][T19691] ªªªªª»: renamed from vlan0 (while UP) [ 547.572598][T19698] jffs2: notice: (19698) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 548.085520][T19712] FAULT_INJECTION: forcing a failure. [ 548.085520][T19712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.085543][T19712] CPU: 0 UID: 0 PID: 19712 Comm: syz.4.5891 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.085559][T19712] Tainted: [L]=SOFTLOCKUP [ 548.085563][T19712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 548.085571][T19712] Call Trace: [ 548.085576][T19712] [ 548.085580][T19712] dump_stack_lvl+0xe8/0x150 [ 548.085603][T19712] should_fail_ex+0x3eb/0x540 [ 548.085619][T19712] prepare_alloc_pages+0x21e/0x5f0 [ 548.085639][T19712] __alloc_frozen_pages_noprof+0x189/0x450 [ 548.085658][T19712] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.085679][T19712] ? policy_nodemask+0x31b/0x980 [ 548.085700][T19712] alloc_pages_mpol+0x21e/0x390 [ 548.085720][T19712] alloc_pages_noprof+0xb1/0x2b0 [ 548.085738][T19712] get_zeroed_page_noprof+0x1a/0x90 [ 548.085754][T19712] mon_bin_open+0x236/0x530 [ 548.085770][T19712] chrdev_open+0x4d9/0x600 [ 548.085782][T19712] ? __pfx_chrdev_open+0x10/0x10 [ 548.085792][T19712] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 548.085809][T19712] ? devcgroup_check_permission+0x31/0x8f0 [ 548.085826][T19712] ? __pfx_chrdev_open+0x10/0x10 [ 548.085836][T19712] do_dentry_open+0x80e/0x1360 [ 548.085859][T19712] vfs_open_consume+0x4a/0x350 [ 548.085870][T19712] ? path_openat+0x16e1/0x20f0 [ 548.085887][T19712] path_openat+0x16fc/0x20f0 [ 548.085912][T19712] do_file_open+0x23e/0x4a0 [ 548.085930][T19712] ? __pfx_do_file_open+0x10/0x10 [ 548.085957][T19712] ? _raw_spin_unlock+0x28/0x50 [ 548.085970][T19712] ? alloc_fd+0x6af/0x760 [ 548.085989][T19712] do_sys_openat2+0x115/0x200 [ 548.086002][T19712] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.086017][T19712] ? do_user_addr_fault+0xd3f/0x1480 [ 548.086033][T19712] __x64_sys_openat+0x138/0x170 [ 548.086048][T19712] do_syscall_64+0x16a/0x530 [ 548.086063][T19712] ? trace_irq_disable+0x3b/0x140 [ 548.086077][T19712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.086089][T19712] ? clear_bhb_loop+0x70/0xc0 [ 548.086102][T19712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.086113][T19712] RIP: 0033:0x7fea8336974e [ 548.086124][T19712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 548.086133][T19712] RSP: 002b:00007fea842fab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.086145][T19712] RAX: ffffffffffffffda RBX: 00007fea842fb6c0 RCX: 00007fea8336974e [ 548.086153][T19712] RDX: 0000000000000000 RSI: 00007fea842fac00 RDI: ffffffffffffff9c [ 548.086161][T19712] RBP: 00007fea842fac00 R08: 0000000000000000 R09: 0000000000000000 [ 548.086168][T19712] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 548.086175][T19712] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 548.086192][T19712] [ 548.117966][ T5850] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 548.118272][ T5850] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 548.263964][ T11] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 548.275884][ T11] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 548.276004][ T11] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 548.421447][ T5850] usb 7-1: USB disconnect, device number 8 [ 550.429233][T19778] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 550.583369][T19782] syzkaller1: entered promiscuous mode [ 550.583385][T19782] syzkaller1: entered allmulticast mode [ 550.813545][T19786] FAULT_INJECTION: forcing a failure. [ 550.813545][T19786] name failslab, interval 1, probability 0, space 0, times 0 [ 550.813574][T19786] CPU: 0 UID: 0 PID: 19786 Comm: syz.6.5926 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.813590][T19786] Tainted: [L]=SOFTLOCKUP [ 550.813595][T19786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 550.813603][T19786] Call Trace: [ 550.813608][T19786] [ 550.813613][T19786] dump_stack_lvl+0xe8/0x150 [ 550.813638][T19786] should_fail_ex+0x3eb/0x540 [ 550.813653][T19786] should_failslab+0xa8/0x100 [ 550.813672][T19786] ? prepare_creds+0x30/0x820 [ 550.813686][T19786] kmem_cache_alloc_noprof+0x9c/0x600 [ 550.813700][T19786] ? prepare_creds+0x30/0x820 [ 550.813734][T19786] prepare_creds+0x30/0x820 [ 550.813749][T19786] cap_task_prctl+0x379/0xa40 [ 550.813767][T19786] security_task_prctl+0xf6/0x190 [ 550.813788][T19786] __se_sys_prctl+0xbf/0x1900 [ 550.813803][T19786] ? __pfx___se_sys_prctl+0x10/0x10 [ 550.813817][T19786] ? __x64_sys_prctl+0x20/0xc0 [ 550.813829][T19786] do_syscall_64+0x16a/0x530 [ 550.813844][T19786] ? trace_irq_disable+0x3b/0x140 [ 550.813859][T19786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.813870][T19786] ? clear_bhb_loop+0x70/0xc0 [ 550.813883][T19786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.813894][T19786] RIP: 0033:0x7fde579a8f19 [ 550.813905][T19786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.813914][T19786] RSP: 002b:00007fde587c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 550.813926][T19786] RAX: ffffffffffffffda RBX: 00007fde57c25fa0 RCX: 00007fde579a8f19 [ 550.813935][T19786] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 550.813941][T19786] RBP: 00007fde57a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 550.813948][T19786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.813954][T19786] R13: 00007fde57c26038 R14: 00007fde57c25fa0 R15: 00007ffd30f13e38 [ 550.813977][T19786] [ 551.483778][T19802] sctp: [Deprecated]: syz.1.5942 (pid 19802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.483778][T19802] Use struct sctp_sack_info instead [ 552.038991][ T5850] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 552.189699][ T5850] usb 7-1: Using ep0 maxpacket: 32 [ 552.192035][ T5850] usb 7-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 552.209349][ T5850] usb 7-1: config 0 has no interfaces? [ 552.209373][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.235517][ T32] audit: type=1800 audit(1794338601.659:1748): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252785 res=0 errno=-22 [ 552.235649][ T5850] usb 7-1: config 0 descriptor?? [ 552.270771][ T32] audit: type=1800 audit(1794338601.699:1749): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=252814 res=0 errno=-22 [ 552.297836][ T32] audit: type=1800 audit(1794338601.729:1750): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=252792 res=0 errno=-22 [ 552.297867][ T32] audit: type=1800 audit(1794338601.729:1751): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=252793 res=0 errno=-22 [ 552.350040][ T32] audit: type=1800 audit(1794338601.779:1752): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=252794 res=0 errno=-22 [ 552.501377][T19817] jffs2: notice: (19817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 552.608158][ T11] usb 7-1: USB disconnect, device number 9 [ 552.745359][T19824] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5951'. [ 552.976129][T19832] syzkaller1: entered promiscuous mode [ 552.976145][T19832] syzkaller1: entered allmulticast mode [ 553.463508][ T32] audit: type=1800 audit(1794338602.889:1753): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253014 res=0 errno=-22 [ 553.511043][ T11] libceph: connect (1)[c::]:6789 error -101 [ 553.547380][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 553.565554][T19850] ceph: No mds server is up or the cluster is laggy [ 553.740229][T19862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.743795][ T32] audit: type=1800 audit(1794338603.169:1754): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253036 res=0 errno=-22 [ 553.745502][T19861] FAULT_INJECTION: forcing a failure. [ 553.745502][T19861] name failslab, interval 1, probability 0, space 0, times 0 [ 553.745521][T19861] CPU: 0 UID: 0 PID: 19861 Comm: syz.1.5966 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.745537][T19861] Tainted: [L]=SOFTLOCKUP [ 553.745541][T19861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 553.745549][T19861] Call Trace: [ 553.745554][T19861] [ 553.745560][T19861] dump_stack_lvl+0xe8/0x150 [ 553.745582][T19861] should_fail_ex+0x3eb/0x540 [ 553.745598][T19861] should_failslab+0xa8/0x100 [ 553.745617][T19861] __kvmalloc_node_noprof+0x171/0x820 [ 553.745635][T19861] ? __se_sys_setgroups+0xf2/0x4d0 [ 553.745646][T19861] ? __se_sys_setgroups+0xf2/0x4d0 [ 553.745661][T19861] __se_sys_setgroups+0xf2/0x4d0 [ 553.745678][T19861] do_syscall_64+0x16a/0x530 [ 553.745694][T19861] ? trace_irq_disable+0x3b/0x140 [ 553.745708][T19861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.745720][T19861] ? clear_bhb_loop+0x70/0xc0 [ 553.745735][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.745747][T19861] RIP: 0033:0x7f23feba8f19 [ 553.745766][T19861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.745776][T19861] RSP: 002b:00007f23ffaf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 553.745789][T19861] RAX: ffffffffffffffda RBX: 00007f23fee25fa0 RCX: 00007f23feba8f19 [ 553.745798][T19861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.745804][T19861] RBP: 00007f23fec37f6d R08: 0000000000000000 R09: 0000000000000000 [ 553.745811][T19861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.745818][T19861] R13: 00007f23fee26038 R14: 00007f23fee25fa0 R15: 00007ffea13cde18 [ 553.745835][T19861] [ 555.118333][T19896] syzkaller1: entered promiscuous mode [ 555.118349][T19896] syzkaller1: entered allmulticast mode [ 555.237632][ T32] audit: type=1800 audit(1794338604.659:1755): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253132 res=0 errno=-22 [ 555.465518][T19905] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 555.723738][T19917] FAULT_INJECTION: forcing a failure. [ 555.723738][T19917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 555.723761][T19917] CPU: 0 UID: 0 PID: 19917 Comm: syz.6.5977 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.723776][T19917] Tainted: [L]=SOFTLOCKUP [ 555.723780][T19917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 555.723787][T19917] Call Trace: [ 555.723792][T19917] [ 555.723798][T19917] dump_stack_lvl+0xe8/0x150 [ 555.723821][T19917] should_fail_ex+0x3eb/0x540 [ 555.723837][T19917] prepare_alloc_pages+0x21e/0x5f0 [ 555.723856][T19917] __alloc_frozen_pages_noprof+0x189/0x450 [ 555.723870][T19917] ? lock_acquire+0x115/0x350 [ 555.723887][T19917] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 555.723906][T19917] ? policy_nodemask+0x31b/0x980 [ 555.723923][T19917] ? is_bpf_text_address+0x292/0x2b0 [ 555.723940][T19917] ? is_bpf_text_address+0x26/0x2b0 [ 555.723958][T19917] alloc_pages_mpol+0x21e/0x390 [ 555.723978][T19917] alloc_pages_noprof+0xb1/0x2b0 [ 555.723996][T19917] pte_alloc_one+0x22/0x2a0 [ 555.724015][T19917] __pte_alloc+0x25/0x1a0 [ 555.724027][T19917] ? __lock_acquire+0x747/0x2de0 [ 555.724041][T19917] walk_pgd_range+0xfd5/0x1dc0 [ 555.724068][T19917] ? __pfx_guard_install_set_pte+0x10/0x10 [ 555.724084][T19917] ? __pfx_guard_install_set_pte+0x10/0x10 [ 555.724100][T19917] ? __pfx_guard_install_set_pte+0x10/0x10 [ 555.724117][T19917] ? __pfx_guard_install_set_pte+0x10/0x10 [ 555.724135][T19917] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 555.724152][T19917] ? __pfx_walk_pgd_range+0x10/0x10 [ 555.724167][T19917] ? is_bpf_text_address+0x292/0x2b0 [ 555.724183][T19917] ? is_bpf_text_address+0x26/0x2b0 [ 555.724203][T19917] __walk_page_range+0x16d/0x720 [ 555.724220][T19917] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 555.724233][T19917] ? arch_stack_walk+0xfb/0x150 [ 555.724254][T19917] walk_page_range_vma_unsafe+0x309/0x410 [ 555.724274][T19917] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 555.724292][T19917] ? __lock_acquire+0x747/0x2de0 [ 555.724310][T19917] madvise_vma_behavior+0x3fd6/0x4c30 [ 555.724330][T19917] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 555.724345][T19917] ? __lock_acquire+0x747/0x2de0 [ 555.724365][T19917] ? do_raw_spin_lock+0x12b/0x2f0 [ 555.724386][T19917] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 555.724402][T19917] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 555.724417][T19917] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 555.724434][T19917] ? __pfx_guard_install_set_pte+0x10/0x10 [ 555.724450][T19917] ? __lock_acquire+0x747/0x2de0 [ 555.724471][T19917] ? finish_task_switch+0x40e/0xc60 [ 555.724488][T19917] ? __lock_acquire+0x747/0x2de0 [ 555.724519][T19917] ? reacquire_held_locks+0x117/0x1a0 [ 555.724534][T19917] ? lock_vma_under_rcu+0x1d1/0x500 [ 555.724557][T19917] ? lock_vma_under_rcu+0x116/0x500 [ 555.724576][T19917] ? lock_vma_under_rcu+0x116/0x500 [ 555.724593][T19917] ? lock_vma_under_rcu+0x45a/0x500 [ 555.724610][T19917] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 555.724627][T19917] ? futex_unqueue+0x22/0x240 [ 555.724650][T19917] ? vma_assert_stabilised+0x87/0x1f0 [ 555.724666][T19917] madvise_walk_vmas+0x97c/0xb70 [ 555.724688][T19917] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 555.724706][T19917] ? blk_start_plug+0x6e/0x1b0 [ 555.724725][T19917] madvise_do_behavior+0x385/0x540 [ 555.724744][T19917] ? __pfx_madvise_do_behavior+0x10/0x10 [ 555.724769][T19917] do_madvise+0x327/0x3a0 [ 555.724784][T19917] ? __pfx_do_madvise+0x10/0x10 [ 555.724805][T19917] ? __se_sys_futex+0x3a8/0x450 [ 555.724826][T19917] ? rcu_is_watching+0x16/0xb0 [ 555.724846][T19917] __x64_sys_madvise+0xa6/0xc0 [ 555.724861][T19917] do_syscall_64+0x16a/0x530 [ 555.724877][T19917] ? trace_irq_disable+0x3b/0x140 [ 555.724891][T19917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.724902][T19917] ? clear_bhb_loop+0x70/0xc0 [ 555.724916][T19917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.724927][T19917] RIP: 0033:0x7fde579a8f19 [ 555.724939][T19917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.724948][T19917] RSP: 002b:00007fde587c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 555.724960][T19917] RAX: ffffffffffffffda RBX: 00007fde57c25fa0 RCX: 00007fde579a8f19 [ 555.724969][T19917] RDX: 0000000000000066 RSI: 000000000080fd00 RDI: 000020000042f000 [ 555.724976][T19917] RBP: 00007fde57a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 555.724983][T19917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.724990][T19917] R13: 00007fde57c26038 R14: 00007fde57c25fa0 R15: 00007ffd30f13e38 [ 555.725008][T19917] [ 556.427050][ T5740] hid_parser_main: 22 callbacks suppressed [ 556.427067][ T5740] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 556.467121][ T32] audit: type=1800 audit(1794338605.889:1756): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253225 res=0 errno=-22 [ 556.559663][ T5740] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 556.562339][ T32] audit: type=1800 audit(1794338605.989:1757): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253245 res=0 errno=-22 [ 556.804226][T19939] tmpfs: Using encoding : utf8-12.1.0 [ 556.816481][T19938] netlink: 'syz.1.5990': attribute type 1 has an invalid length. [ 556.861086][T19931] fido_id[19931]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 557.725080][T19975] batadv_slave_1: entered promiscuous mode [ 557.726101][T19974] batadv_slave_1: left promiscuous mode [ 557.769620][T19977] loop2: detected capacity change from 0 to 8 [ 557.773673][T19977] Dev loop2: unable to read RDB block 8 [ 557.773702][T19977] loop2: unable to read partition table [ 557.773816][T19977] loop2: partition table beyond EOD, truncated [ 557.773853][T19977] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5) [ 558.143754][ T32] audit: type=1800 audit(1794338607.569:1758): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253266 res=0 errno=-22 [ 559.317904][T20049] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6039'. [ 559.317923][T20049] netlink: 35 bytes leftover after parsing attributes in process `syz.6.6039'. [ 559.317932][T20049] netlink: 'syz.6.6039': attribute type 6 has an invalid length. [ 559.317939][T20049] netlink: 'syz.6.6039': attribute type 4 has an invalid length. [ 562.004022][ T32] audit: type=1800 audit(1794338611.429:1759): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6082" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=-22 [ 562.794140][ T32] audit: type=1800 audit(1794338612.219:1760): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6095" name="del_device" dev="sysfs" ino=24639 res=0 errno=-13 [ 562.796937][T20177] Format for deleting device is "id" (uint). [ 563.071579][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.804897][T20206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6116'. [ 564.234842][T20225] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6115'. [ 564.316486][ T32] audit: type=1800 audit(1794338613.739:1761): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=253378 res=0 errno=-22 [ 564.790860][T20248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6128'. [ 566.881870][T20308] jffs2: notice: (20308) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 567.252765][T20319] jffs2: notice: (20319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 567.785827][T20338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6164'. [ 568.267680][T20353] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.894135][T20353] syzkaller0 speed is unknown, defaulting to 1000 [ 569.392823][T20380] netlink: 703 bytes leftover after parsing attributes in process `syz.6.6183'. [ 569.575556][ T32] audit: type=1800 audit(1794338619.009:1762): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257356 res=0 errno=-22 [ 569.765163][ T32] audit: type=1800 audit(1794338619.199:1763): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257376 res=0 errno=-22 [ 569.831437][ T11] hid-generic 0005:0008:0007.0027: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 570.115692][T20398] fido_id[20398]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 570.268782][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 571.641043][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6218'. [ 571.951131][T20474] device-mapper: raid: Choosing default region size of 4MiB [ 572.102889][T20482] syzkaller1: entered promiscuous mode [ 572.102904][T20482] syzkaller1: entered allmulticast mode [ 572.134524][T20474] mdX: WARNING: ram3 appears to be on the same physical disk as ram3. [ 572.134540][T20474] True protection against single-disk failure might be compromised. [ 572.164135][T20474] md/raid:mdX: device ram3 operational as raid disk 0 [ 572.164151][T20474] md/raid:mdX: device ram3 operational as raid disk 1 [ 572.164159][T20474] md/raid:mdX: device ram2 operational as raid disk 2 [ 572.266266][T20474] md/raid:mdX: raid level 5 active with 3 out of 3 devices, algorithm 3 [ 572.291836][T20474] device-mapper: raid: raid456 discard support disabled due to discard_zeroes_data uncertainty. [ 572.291849][T20474] device-mapper: raid: Set dm-raid.devices_handle_discard_safely=Y to override. [ 572.325281][ T32] audit: type=1800 audit(1794338621.749:1764): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257591 res=0 errno=-22 [ 572.360752][ T32] audit: type=1800 audit(1794338621.779:1765): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257500 res=0 errno=-22 [ 572.430565][ T32] audit: type=1800 audit(1794338621.859:1766): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257621 res=0 errno=-22 [ 572.433218][ T5850] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 572.436962][ T5850] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 572.483924][ T32] audit: type=1800 audit(1794338621.909:1767): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257641 res=0 errno=-22 [ 572.623762][ T32] audit: type=1800 audit(1794338622.049:1768): pid=20493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=257623 res=0 errno=-22 [ 573.043102][T20501] rxe_eth0 speed is unknown, defaulting to 1000 [ 573.634540][T20501] syzkaller0 speed is unknown, defaulting to 1000 [ 574.591769][T18708] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 575.068371][ T32] audit: type=1800 audit(1794338624.489:1769): pid=20558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6259" name="g6_is_space" dev="sysfs" ino=62736 res=0 errno=-22 [ 575.097624][T20558] cougar: G6 mapped to space [ 575.162707][T20560] jffs2: notice: (20560) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 575.526305][T20577] FAULT_INJECTION: forcing a failure. [ 575.526305][T20577] name failslab, interval 1, probability 0, space 0, times 0 [ 575.526328][T20577] CPU: 0 UID: 0 PID: 20577 Comm: syz.4.6268 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.526345][T20577] Tainted: [L]=SOFTLOCKUP [ 575.526349][T20577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 575.526356][T20577] Call Trace: [ 575.526360][T20577] [ 575.526369][T20577] dump_stack_lvl+0xe8/0x150 [ 575.526394][T20577] should_fail_ex+0x3eb/0x540 [ 575.526411][T20577] should_failslab+0xa8/0x100 [ 575.526430][T20577] ? alloc_empty_file+0x5b/0x1d0 [ 575.526444][T20577] kmem_cache_alloc_noprof+0x9c/0x600 [ 575.526459][T20577] ? alloc_empty_file+0x5b/0x1d0 [ 575.526474][T20577] alloc_empty_file+0x5b/0x1d0 [ 575.526486][T20577] alloc_file_pseudo+0x110/0x1e0 [ 575.526499][T20577] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 575.526513][T20577] ? _raw_spin_unlock+0x28/0x50 [ 575.526533][T20577] anon_inode_getfile_fmode+0xb0/0x1c0 [ 575.526548][T20577] __se_sys_fanotify_init+0x6b2/0x870 [ 575.526566][T20577] do_syscall_64+0x16a/0x530 [ 575.526582][T20577] ? trace_irq_disable+0x3b/0x140 [ 575.526606][T20577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.526618][T20577] ? clear_bhb_loop+0x70/0xc0 [ 575.526631][T20577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.526643][T20577] RIP: 0033:0x7fea833a8f19 [ 575.526654][T20577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.526664][T20577] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 575.526677][T20577] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 575.526685][T20577] RDX: 0000000000000000 RSI: 0000000000101000 RDI: 0000000000000000 [ 575.526692][T20577] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 575.526699][T20577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.526706][T20577] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 575.526723][T20577] [ 575.927198][T20586] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6269'. [ 576.065842][T20589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6280'. [ 576.226389][T20597] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6275'. [ 576.928986][T20621] syzkaller1: entered promiscuous mode [ 576.929002][T20621] syzkaller1: entered allmulticast mode [ 578.776170][T20690] rxe_eth0 speed is unknown, defaulting to 1000 [ 579.003304][ T32] audit: type=1800 audit(1794338628.429:1770): pid=20700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6323" name="reclaim" dev="sysfs" ino=1147 res=0 errno=-13 [ 579.284997][T20690] syzkaller0 speed is unknown, defaulting to 1000 [ 579.532126][T20715] xt_hashlimit: max too large, truncated to 1048576 [ 579.622810][T20714] rxe_eth0 speed is unknown, defaulting to 1000 [ 579.727799][ T32] audit: type=1800 audit(1794338629.149:1771): pid=20719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6332" name="strict_limit" dev="sysfs" ino=13301 res=0 errno=-22 [ 579.871462][T20721] overlayfs: failed to clone lowerpath [ 580.291989][T20716] rxe_eth0 speed is unknown, defaulting to 1000 [ 580.876883][T20714] syzkaller0 speed is unknown, defaulting to 1000 [ 580.926531][T20716] syzkaller0 speed is unknown, defaulting to 1000 [ 581.276704][T20758] FAULT_INJECTION: forcing a failure. [ 581.276704][T20758] name failslab, interval 1, probability 0, space 0, times 0 [ 581.276740][T20758] CPU: 0 UID: 0 PID: 20758 Comm: syz.4.6349 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.276756][T20758] Tainted: [L]=SOFTLOCKUP [ 581.276760][T20758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 581.276768][T20758] Call Trace: [ 581.276773][T20758] [ 581.276778][T20758] dump_stack_lvl+0xe8/0x150 [ 581.276801][T20758] should_fail_ex+0x3eb/0x540 [ 581.276817][T20758] should_failslab+0xa8/0x100 [ 581.276835][T20758] ? vm_area_alloc+0x24/0x140 [ 581.276847][T20758] kmem_cache_alloc_noprof+0x9c/0x600 [ 581.276862][T20758] ? vma_merge_new_range+0x556/0x810 [ 581.276876][T20758] ? vm_area_alloc+0x24/0x140 [ 581.276890][T20758] vm_area_alloc+0x24/0x140 [ 581.276902][T20758] mmap_region+0x18e8/0x2820 [ 581.276930][T20758] ? __pfx_mmap_region+0x10/0x10 [ 581.276947][T20758] ? do_raw_spin_lock+0x12b/0x2f0 [ 581.276969][T20758] ? rcu_is_watching+0x16/0xb0 [ 581.276985][T20758] ? trace_hrtimer_start+0x82/0x200 [ 581.276999][T20758] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 581.277024][T20758] ? finish_task_switch+0x40e/0xc60 [ 581.277078][T20758] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 581.277112][T20758] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 581.277129][T20758] ? cap_mmap_addr+0xaa/0xf0 [ 581.277148][T20758] ? bpf_lsm_mmap_addr+0x9/0x50 [ 581.277168][T20758] ? security_mmap_addr+0x71/0x240 [ 581.277187][T20758] do_mmap+0xe0a/0x1300 [ 581.277211][T20758] ? __pfx_do_mmap+0x10/0x10 [ 581.277234][T20758] ? vm_mmap_pgoff+0x1ed/0x520 [ 581.277246][T20758] ? down_write_killable+0x179/0x230 [ 581.277260][T20758] ? __pfx_down_write_killable+0x10/0x10 [ 581.277277][T20758] ? apparmor_mmap_file+0x1cc/0x390 [ 581.277290][T20758] ? security_mmap_file+0x4df/0xa20 [ 581.277307][T20758] vm_mmap_pgoff+0x27a/0x520 [ 581.277323][T20758] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 581.277337][T20758] ? rcu_is_watching+0x16/0xb0 [ 581.277354][T20758] ? ksys_mmap_pgoff+0xf3/0x760 [ 581.277371][T20758] ? __x64_sys_mmap+0x7f/0x140 [ 581.277384][T20758] do_syscall_64+0x16a/0x530 [ 581.277400][T20758] ? trace_irq_disable+0x3b/0x140 [ 581.277414][T20758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.277425][T20758] ? clear_bhb_loop+0x70/0xc0 [ 581.277438][T20758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.277449][T20758] RIP: 0033:0x7fea833a8f19 [ 581.277460][T20758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.277470][T20758] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 581.277482][T20758] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 581.277490][T20758] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 581.277500][T20758] RBP: 00007fea83437f6d R08: ffffffffffffffff R09: 0000000000000000 [ 581.277507][T20758] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 581.277514][T20758] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 581.277531][T20758] [ 581.799627][ T32] audit: type=1800 audit(1794338631.229:1772): pid=20762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6351" name="napi_defer_hard_irqs" dev="sysfs" ino=216077 res=0 errno=-22 [ 581.921316][T20751] rxe_eth0 speed is unknown, defaulting to 1000 [ 582.406258][T20751] syzkaller0 speed is unknown, defaulting to 1000 [ 584.332127][T20832] overlayfs: failed to clone upperpath [ 586.630959][T20902] tipc: Started in network mode [ 586.630980][T20902] tipc: Node identity 01000001, cluster identity 4711 [ 586.633985][T20902] tipc: Enabling of bearer rejected, failed to enable media [ 586.897665][T20906] rxe_eth0 speed is unknown, defaulting to 1000 [ 587.462330][T20906] syzkaller0 speed is unknown, defaulting to 1000 [ 588.333501][ T5649] Bluetooth: hci0: unexpected event for opcode 0x20a3 [ 588.360405][T20953] FAULT_INJECTION: forcing a failure. [ 588.360405][T20953] name failslab, interval 1, probability 0, space 0, times 0 [ 588.360428][T20953] CPU: 0 UID: 0 PID: 20953 Comm: syz.1.6431 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.360443][T20953] Tainted: [L]=SOFTLOCKUP [ 588.360447][T20953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 588.360454][T20953] Call Trace: [ 588.360459][T20953] [ 588.360465][T20953] dump_stack_lvl+0xe8/0x150 [ 588.360487][T20953] should_fail_ex+0x3eb/0x540 [ 588.360507][T20953] should_failslab+0xa8/0x100 [ 588.360527][T20953] __kmalloc_noprof+0xf9/0x710 [ 588.360542][T20953] ? do_handle_open+0x4ec/0xb10 [ 588.360620][T20953] ? do_handle_open+0x4ec/0xb10 [ 588.360638][T20953] do_handle_open+0x4ec/0xb10 [ 588.360654][T20953] ? __pfx_do_handle_open+0x10/0x10 [ 588.360671][T20953] ? rcu_is_watching+0x16/0xb0 [ 588.360694][T20953] do_syscall_64+0x16a/0x530 [ 588.360710][T20953] ? trace_irq_disable+0x3b/0x140 [ 588.360724][T20953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.360735][T20953] ? clear_bhb_loop+0x70/0xc0 [ 588.360748][T20953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.360759][T20953] RIP: 0033:0x7f23feba8f19 [ 588.360771][T20953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.360780][T20953] RSP: 002b:00007f23ffaf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 588.360792][T20953] RAX: ffffffffffffffda RBX: 00007f23fee25fa0 RCX: 00007f23feba8f19 [ 588.360800][T20953] RDX: 0000000000040000 RSI: 0000200000000300 RDI: 0000000000000003 [ 588.360808][T20953] RBP: 00007f23fec37f6d R08: 0000000000000000 R09: 0000000000000000 [ 588.360815][T20953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.360822][T20953] R13: 00007f23fee26038 R14: 00007f23fee25fa0 R15: 00007ffea13cde18 [ 588.360839][T20953] [ 589.091380][T20969] tipc: Started in network mode [ 589.091402][T20969] tipc: Node identity 01000001, cluster identity 4711 [ 589.112884][T20969] tipc: New replicast peer: 127.0.0.1 [ 589.114960][T20969] tipc: Enabled bearer , priority 10 [ 590.228690][ T5850] tipc: Node number set to 16777217 [ 592.484674][T21030] FAULT_INJECTION: forcing a failure. [ 592.484674][T21030] name failslab, interval 1, probability 0, space 0, times 0 [ 592.484700][T21030] CPU: 0 UID: 0 PID: 21030 Comm: syz.1.6462 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.484718][T21030] Tainted: [L]=SOFTLOCKUP [ 592.484723][T21030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 592.484733][T21030] Call Trace: [ 592.484738][T21030] [ 592.484743][T21030] dump_stack_lvl+0xe8/0x150 [ 592.484766][T21030] should_fail_ex+0x3eb/0x540 [ 592.484785][T21030] should_failslab+0xa8/0x100 [ 592.484808][T21030] __kmalloc_cache_noprof+0x9e/0x600 [ 592.484825][T21030] ? fat_init_fs_context+0x59/0x4c0 [ 592.484922][T21030] ? fat_init_fs_context+0x59/0x4c0 [ 592.484952][T21030] fat_init_fs_context+0x59/0x4c0 [ 592.484971][T21030] vfat_init_fs_context+0x1b/0x70 [ 592.484984][T21030] alloc_fs_context+0x99e/0xd00 [ 592.485007][T21030] __se_sys_fsopen+0x118/0x370 [ 592.485019][T21030] do_syscall_64+0x16a/0x530 [ 592.485037][T21030] ? trace_irq_disable+0x3b/0x140 [ 592.485053][T21030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.485064][T21030] ? clear_bhb_loop+0x70/0xc0 [ 592.485078][T21030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.485089][T21030] RIP: 0033:0x7f23feba8f19 [ 592.485101][T21030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.485110][T21030] RSP: 002b:00007f23ffaf2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 592.485122][T21030] RAX: ffffffffffffffda RBX: 00007f23fee25fa0 RCX: 00007f23feba8f19 [ 592.485131][T21030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 592.485137][T21030] RBP: 00007f23fec37f6d R08: 0000000000000000 R09: 0000000000000000 [ 592.485144][T21030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.485151][T21030] R13: 00007f23fee26038 R14: 00007f23fee25fa0 R15: 00007ffea13cde18 [ 592.485168][T21030] [ 593.030909][T21039] use of bytesused == 0 is deprecated and will be removed in the future, [ 593.030920][T21039] use the actual size instead. [ 593.672546][T21063] overlayfs: failed to clone upperpath [ 593.920133][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6483'. [ 594.767417][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6498'. [ 595.957503][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 595.970034][ T32] audit: type=1800 audit(1794338645.379:1773): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=280748 res=0 errno=-22 [ 595.992887][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 596.004098][ T32] audit: type=1800 audit(1794338645.429:1774): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=280759 res=0 errno=-22 [ 596.030062][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 596.049875][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 596.050265][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 596.099116][ T32] audit: type=1800 audit(1794338645.529:1775): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=280778 res=0 errno=-22 [ 596.106407][ T32] audit: type=1800 audit(1794338645.529:1776): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=280789 res=0 errno=-22 [ 596.244920][T21144] FAULT_INJECTION: forcing a failure. [ 596.244920][T21144] name failslab, interval 1, probability 0, space 0, times 0 [ 596.244943][T21144] CPU: 0 UID: 0 PID: 21144 Comm: syz.4.6511 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.244959][T21144] Tainted: [L]=SOFTLOCKUP [ 596.244963][T21144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 596.244971][T21144] Call Trace: [ 596.244976][T21144] [ 596.244982][T21144] dump_stack_lvl+0xe8/0x150 [ 596.245004][T21144] should_fail_ex+0x3eb/0x540 [ 596.245020][T21144] should_failslab+0xa8/0x100 [ 596.245039][T21144] __kmalloc_cache_noprof+0x9e/0x600 [ 596.245055][T21144] ? newque+0x88/0x480 [ 596.245065][T21144] ? newque+0x88/0x480 [ 596.245078][T21144] newque+0x88/0x480 [ 596.245090][T21144] ipcget+0x1c6/0xd10 [ 596.245108][T21144] ? __pfx_do_futex+0x10/0x10 [ 596.245129][T21144] ? __pfx_ipcget+0x10/0x10 [ 596.245145][T21144] ? __se_sys_futex+0x3a8/0x450 [ 596.245165][T21144] __x64_sys_msgget+0x11a/0x160 [ 596.245176][T21144] ? __pfx___x64_sys_msgget+0x10/0x10 [ 596.245193][T21144] do_syscall_64+0x16a/0x530 [ 596.245209][T21144] ? trace_irq_disable+0x3b/0x140 [ 596.245223][T21144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.245234][T21144] ? clear_bhb_loop+0x70/0xc0 [ 596.245248][T21144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.245259][T21144] RIP: 0033:0x7fea833a8f19 [ 596.245270][T21144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.245280][T21144] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 596.245292][T21144] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 596.245301][T21144] RDX: 0000000000000000 RSI: 00000000000001c0 RDI: 0000000000000000 [ 596.245307][T21144] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 596.245314][T21144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.245321][T21144] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 596.245338][T21144] [ 596.608974][T21150] fuse: Bad value for 'fd' [ 597.320533][T21136] rxe_eth0 speed is unknown, defaulting to 1000 [ 597.730298][T21136] syzkaller0 speed is unknown, defaulting to 1000 [ 598.108795][ T5645] Bluetooth: hci1: command tx timeout [ 598.166155][T21136] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.166260][T21136] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.166334][T21136] bridge_slave_0: entered allmulticast mode [ 598.193011][T21136] bridge_slave_0: entered promiscuous mode [ 598.204703][T21136] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.205452][T21136] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.205540][T21136] bridge_slave_1: entered allmulticast mode [ 598.207590][T21136] bridge_slave_1: entered promiscuous mode [ 598.291422][T21136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.318235][T21136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.429979][T21136] team0: Port device team_slave_0 added [ 598.446427][T21136] team0: Port device team_slave_1 added [ 598.551281][T21136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.551294][T21136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.551307][T21136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.554995][T21136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.555005][T21136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.555019][T21136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.785026][T21136] hsr_slave_0: entered promiscuous mode [ 598.795543][T21136] hsr_slave_1: entered promiscuous mode [ 598.798035][T21136] debugfs: 'hsr0' already exists in 'hsr' [ 598.798047][T21136] Cannot create hsr debugfs directory [ 599.092575][ T32] audit: type=1800 audit(1794338648.519:1777): pid=12134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=289070 res=0 errno=-22 [ 599.136056][ T32] audit: type=1800 audit(1794338648.559:1778): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=289081 res=0 errno=-22 [ 599.175630][T18710] Bluetooth: hci5: Frame reassembly failed (-84) [ 599.366540][ T32] audit: type=1800 audit(1794338648.789:1779): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24639 res=0 errno=-13 [ 599.368168][ T32] audit: type=1800 audit(1794338648.789:1780): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24638 res=0 errno=-13 [ 599.415253][ T32] audit: type=1800 audit(1794338648.849:1781): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=289704 res=0 errno=-22 [ 599.948320][T21136] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 599.977965][T21136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.987764][T21136] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 600.006689][T21136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.008289][T21136] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 600.035383][T21136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.036559][T21136] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 600.062856][T21136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 600.190185][ T5649] Bluetooth: hci1: command tx timeout [ 600.210525][T21136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.241463][T21136] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.260885][T18710] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.260947][T18710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.288005][T18710] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.288064][T18710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.229041][ T5645] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 601.406202][T21136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.556422][T21136] veth0_vlan: entered promiscuous mode [ 601.599602][T21136] veth1_vlan: entered promiscuous mode [ 601.701056][T21136] veth0_macvtap: entered promiscuous mode [ 601.738125][T21136] veth1_macvtap: entered promiscuous mode [ 601.796640][T21136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.823984][T21136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.006080][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.006173][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.006224][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.006290][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.020053][ T32] audit: type=1800 audit(1794338651.439:1782): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290064 res=0 errno=-22 [ 602.225928][T18708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.225961][T18708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.245098][ T32] audit: type=1800 audit(1794338651.649:1783): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290190 res=0 errno=-22 [ 602.269389][ T5649] Bluetooth: hci1: command tx timeout [ 602.381854][T20108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.381868][T20108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.457484][ T32] audit: type=1800 audit(1794338651.879:1784): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="dev" dev="sysfs" ino=289447 res=0 errno=-22 [ 602.484969][ T32] audit: type=1800 audit(1794338651.919:1785): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="dev" dev="sysfs" ino=288981 res=0 errno=-22 [ 602.701202][T21301] FAULT_INJECTION: forcing a failure. [ 602.701202][T21301] name failslab, interval 1, probability 0, space 0, times 0 [ 602.701223][T21301] CPU: 0 UID: 0 PID: 21301 Comm: syz.4.6564 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.701239][T21301] Tainted: [L]=SOFTLOCKUP [ 602.701244][T21301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 602.701251][T21301] Call Trace: [ 602.701256][T21301] [ 602.701261][T21301] dump_stack_lvl+0xe8/0x150 [ 602.701284][T21301] should_fail_ex+0x3eb/0x540 [ 602.701299][T21301] should_failslab+0xa8/0x100 [ 602.701318][T21301] __kmalloc_cache_noprof+0x9e/0x600 [ 602.701333][T21301] ? snd_mixer_oss_open+0xdb/0x230 [ 602.701427][T21301] ? snd_mixer_oss_open+0xdb/0x230 [ 602.701442][T21301] ? snd_card_file_add_data+0x22c/0x260 [ 602.701484][T21301] snd_mixer_oss_open+0xdb/0x230 [ 602.701501][T21301] chrdev_open+0x4d9/0x600 [ 602.701514][T21301] ? __pfx_chrdev_open+0x10/0x10 [ 602.701524][T21301] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 602.701542][T21301] ? devcgroup_check_permission+0x31/0x8f0 [ 602.701559][T21301] ? __pfx_chrdev_open+0x10/0x10 [ 602.701569][T21301] do_dentry_open+0x80e/0x1360 [ 602.701586][T21301] vfs_open_consume+0x4a/0x350 [ 602.701596][T21301] ? path_openat+0x16e1/0x20f0 [ 602.701614][T21301] path_openat+0x16fc/0x20f0 [ 602.701639][T21301] do_file_open+0x23e/0x4a0 [ 602.701658][T21301] ? __pfx_do_file_open+0x10/0x10 [ 602.701684][T21301] ? _raw_spin_unlock+0x28/0x50 [ 602.701698][T21301] ? alloc_fd+0x6af/0x760 [ 602.701729][T21301] do_sys_openat2+0x115/0x200 [ 602.701741][T21301] ? __se_sys_futex+0x3a8/0x450 [ 602.701759][T21301] ? __pfx_do_sys_openat2+0x10/0x10 [ 602.701775][T21301] ? rcu_is_watching+0x16/0xb0 [ 602.701794][T21301] __x64_sys_openat+0x138/0x170 [ 602.701814][T21301] do_syscall_64+0x16a/0x530 [ 602.701829][T21301] ? trace_irq_disable+0x3b/0x140 [ 602.701844][T21301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.701856][T21301] ? clear_bhb_loop+0x70/0xc0 [ 602.701870][T21301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.701882][T21301] RIP: 0033:0x7fea833a8f19 [ 602.701893][T21301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.701902][T21301] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 602.701915][T21301] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 602.701923][T21301] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 602.701931][T21301] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 602.701938][T21301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.701944][T21301] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 602.701964][T21301] [ 603.634285][T21324] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 604.350601][ T5649] Bluetooth: hci1: command tx timeout [ 604.395514][T21353] overlayfs: failed to clone lowerpath [ 604.441997][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807effe800: rx timeout, send abort [ 604.444547][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807effe800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 604.625434][T21358] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 604.636570][ T3315] IPVS: starting estimator thread 0... [ 604.720552][T21364] IPVS: using max 55 ests per chain, 132000 per kthread [ 604.763425][T21368] FAULT_INJECTION: forcing a failure. [ 604.763425][T21368] name failslab, interval 1, probability 0, space 0, times 0 [ 604.763447][T21368] CPU: 0 UID: 0 PID: 21368 Comm: syz.1.6591 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.763463][T21368] Tainted: [L]=SOFTLOCKUP [ 604.763467][T21368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 604.763475][T21368] Call Trace: [ 604.763479][T21368] [ 604.763485][T21368] dump_stack_lvl+0xe8/0x150 [ 604.763507][T21368] should_fail_ex+0x3eb/0x540 [ 604.763524][T21368] should_failslab+0xa8/0x100 [ 604.763543][T21368] __kmalloc_cache_noprof+0x9e/0x600 [ 604.763559][T21368] ? snd_mixer_oss_open+0xdb/0x230 [ 604.763582][T21368] ? snd_mixer_oss_open+0xdb/0x230 [ 604.763597][T21368] ? snd_card_file_add_data+0x22c/0x260 [ 604.763612][T21368] snd_mixer_oss_open+0xdb/0x230 [ 604.763628][T21368] chrdev_open+0x4d9/0x600 [ 604.763641][T21368] ? __pfx_chrdev_open+0x10/0x10 [ 604.763651][T21368] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 604.763668][T21368] ? devcgroup_check_permission+0x31/0x8f0 [ 604.763685][T21368] ? __pfx_chrdev_open+0x10/0x10 [ 604.763701][T21368] do_dentry_open+0x80e/0x1360 [ 604.763718][T21368] vfs_open_consume+0x4a/0x350 [ 604.763729][T21368] ? path_openat+0x16e1/0x20f0 [ 604.763747][T21368] path_openat+0x16fc/0x20f0 [ 604.763772][T21368] do_file_open+0x23e/0x4a0 [ 604.763791][T21368] ? __pfx_do_file_open+0x10/0x10 [ 604.763818][T21368] ? _raw_spin_unlock+0x28/0x50 [ 604.763832][T21368] ? alloc_fd+0x6af/0x760 [ 604.763850][T21368] do_sys_openat2+0x115/0x200 [ 604.763862][T21368] ? __se_sys_futex+0x3a8/0x450 [ 604.763879][T21368] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.763895][T21368] ? rcu_is_watching+0x16/0xb0 [ 604.763914][T21368] __x64_sys_openat+0x138/0x170 [ 604.763929][T21368] do_syscall_64+0x16a/0x530 [ 604.763944][T21368] ? trace_irq_disable+0x3b/0x140 [ 604.763958][T21368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.763969][T21368] ? clear_bhb_loop+0x70/0xc0 [ 604.763983][T21368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.763993][T21368] RIP: 0033:0x7f1ebc1a8f19 [ 604.764004][T21368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.764014][T21368] RSP: 002b:00007f1eba3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 604.764027][T21368] RAX: ffffffffffffffda RBX: 00007f1ebc425fa0 RCX: 00007f1ebc1a8f19 [ 604.764035][T21368] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 604.764042][T21368] RBP: 00007f1ebc237f6d R08: 0000000000000000 R09: 0000000000000000 [ 604.764049][T21368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.764055][T21368] R13: 00007f1ebc426038 R14: 00007f1ebc425fa0 R15: 00007ffec76381e8 [ 604.764072][T21368] [ 605.656656][T21386] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 605.674567][T18710] IPVS: starting estimator thread 0... [ 605.759905][T21392] IPVS: using max 55 ests per chain, 132000 per kthread [ 606.004312][T21406] FAULT_INJECTION: forcing a failure. [ 606.004312][T21406] name failslab, interval 1, probability 0, space 0, times 0 [ 606.004334][T21406] CPU: 0 UID: 0 PID: 21406 Comm: syz.1.6607 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.004350][T21406] Tainted: [L]=SOFTLOCKUP [ 606.004354][T21406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 606.004361][T21406] Call Trace: [ 606.004365][T21406] [ 606.004371][T21406] dump_stack_lvl+0xe8/0x150 [ 606.004394][T21406] should_fail_ex+0x3eb/0x540 [ 606.004409][T21406] should_failslab+0xa8/0x100 [ 606.004428][T21406] __kmalloc_cache_noprof+0x9e/0x600 [ 606.004444][T21406] ? newque+0x88/0x480 [ 606.004454][T21406] ? newque+0x88/0x480 [ 606.004468][T21406] newque+0x88/0x480 [ 606.004482][T21406] ipcget+0x1c6/0xd10 [ 606.004501][T21406] ? __pfx_do_futex+0x10/0x10 [ 606.004521][T21406] ? __pfx_ipcget+0x10/0x10 [ 606.004537][T21406] ? __se_sys_futex+0x3a8/0x450 [ 606.004557][T21406] __x64_sys_msgget+0x11a/0x160 [ 606.004568][T21406] ? __pfx___x64_sys_msgget+0x10/0x10 [ 606.004585][T21406] do_syscall_64+0x16a/0x530 [ 606.004602][T21406] ? trace_irq_disable+0x3b/0x140 [ 606.004616][T21406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.004628][T21406] ? clear_bhb_loop+0x70/0xc0 [ 606.004642][T21406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.004653][T21406] RIP: 0033:0x7f1ebc1a8f19 [ 606.004672][T21406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.004681][T21406] RSP: 002b:00007f1eba3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 606.004694][T21406] RAX: ffffffffffffffda RBX: 00007f1ebc425fa0 RCX: 00007f1ebc1a8f19 [ 606.004703][T21406] RDX: 0000000000000000 RSI: 00000000000001c0 RDI: 0000000000000000 [ 606.004709][T21406] RBP: 00007f1ebc237f6d R08: 0000000000000000 R09: 0000000000000000 [ 606.004716][T21406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.004723][T21406] R13: 00007f1ebc426038 R14: 00007f1ebc425fa0 R15: 00007ffec76381e8 [ 606.004741][T21406] [ 606.590113][T18710] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 606.740409][ T32] audit: type=1800 audit(1794338656.169:1786): pid=21424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6615" name="threaded" dev="sysfs" ino=23211 res=0 errno=-22 [ 607.174922][T21440] syz.4.6622 (21440): drop_caches: 0 [ 607.576752][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6629'. [ 607.732365][T21458] overlayfs: failed to clone upperpath [ 608.286657][T21482] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 28 [ 608.632189][ T32] audit: type=1800 audit(1794338658.059:1787): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290778 res=0 errno=-22 [ 609.137277][ T32] audit: type=1800 audit(1794338658.559:1788): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6657" name="xps_cpus" dev="sysfs" ino=285826 res=0 errno=-22 [ 609.426176][ T32] audit: type=1800 audit(1794338658.849:1789): pid=21522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6660" name="shmem_enabled" dev="sysfs" ino=1883 res=0 errno=-22 [ 609.575904][T21525] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6661'. [ 611.011358][T21539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.223745][T21545] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6668'. [ 611.223766][T21545] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6668'. [ 611.310760][ T32] audit: type=1800 audit(1794338660.739:1790): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=45963 res=0 errno=-22 [ 611.905160][ T32] audit: type=1800 audit(1794338661.329:1791): pid=21434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=46292 res=0 errno=-22 [ 612.862349][T21585] jffs2: notice: (21585) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 613.599146][T21611] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6695'. [ 613.852895][T21620] netlink: 703 bytes leftover after parsing attributes in process `syz.5.6700'. [ 614.496620][T21639] binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 614.609018][T21643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6706'. [ 614.863886][T21649] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6721'. [ 614.912606][ T32] audit: type=1800 audit(1794338664.339:1792): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290813 res=0 errno=-22 [ 615.095109][T21653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6712'. [ 616.867320][T21722] jffs2: notice: (21722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 618.030688][T21770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.054454][ T32] audit: type=1800 audit(1794338667.479:1793): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290868 res=0 errno=-22 [ 618.343211][T21785] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[15189] was attempted by ""[21785] [ 618.442590][T21791] FAULT_INJECTION: forcing a failure. [ 618.442590][T21791] name failslab, interval 1, probability 0, space 0, times 0 [ 618.442613][T21791] CPU: 0 UID: 0 PID: 21791 Comm: syz.4.6775 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.442630][T21791] Tainted: [L]=SOFTLOCKUP [ 618.442634][T21791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 618.442643][T21791] Call Trace: [ 618.442647][T21791] [ 618.442652][T21791] dump_stack_lvl+0xe8/0x150 [ 618.442675][T21791] should_fail_ex+0x3eb/0x540 [ 618.442691][T21791] should_failslab+0xa8/0x100 [ 618.442711][T21791] __kmalloc_cache_noprof+0x9e/0x600 [ 618.442728][T21791] ? debugfs_init_fs_context+0x51/0xf0 [ 618.442742][T21791] ? debugfs_init_fs_context+0x51/0xf0 [ 618.442758][T21791] debugfs_init_fs_context+0x51/0xf0 [ 618.442772][T21791] alloc_fs_context+0x99e/0xd00 [ 618.442793][T21791] __se_sys_fsopen+0x118/0x370 [ 618.442806][T21791] do_syscall_64+0x16a/0x530 [ 618.442821][T21791] ? trace_irq_disable+0x3b/0x140 [ 618.442836][T21791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.442847][T21791] ? clear_bhb_loop+0x70/0xc0 [ 618.442860][T21791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.442871][T21791] RIP: 0033:0x7fea833a8f19 [ 618.442882][T21791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.442891][T21791] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 618.442904][T21791] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 618.442912][T21791] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 618.442923][T21791] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 618.442934][T21791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.442942][T21791] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 618.442960][T21791] [ 618.901856][T21802] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6779'. [ 618.901876][T21802] netlink: 35 bytes leftover after parsing attributes in process `syz.5.6779'. [ 618.901884][T21802] netlink: 'syz.5.6779': attribute type 6 has an invalid length. [ 618.901891][T21802] netlink: 'syz.5.6779': attribute type 4 has an invalid length. [ 619.296403][T21821] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6798'. [ 619.580903][T21833] overlayfs: failed to clone lowerpath [ 619.652143][T21835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6805'. [ 620.124697][T21851] FAULT_INJECTION: forcing a failure. [ 620.124697][T21851] name failslab, interval 1, probability 0, space 0, times 0 [ 620.124719][T21851] CPU: 0 UID: 0 PID: 21851 Comm: syz.1.6813 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.124735][T21851] Tainted: [L]=SOFTLOCKUP [ 620.124740][T21851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 620.124747][T21851] Call Trace: [ 620.124753][T21851] [ 620.124758][T21851] dump_stack_lvl+0xe8/0x150 [ 620.124781][T21851] should_fail_ex+0x3eb/0x540 [ 620.124796][T21851] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 620.124811][T21851] should_failslab+0xa8/0x100 [ 620.124830][T21851] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 620.124843][T21851] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 620.124857][T21851] ? alloc_inode+0x6a/0x1b0 [ 620.124868][T21851] ? alloc_inode+0x6a/0x1b0 [ 620.124880][T21851] ? __pfx_simple_start_creating+0x10/0x10 [ 620.124978][T21851] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 620.124991][T21851] alloc_inode+0x6a/0x1b0 [ 620.125005][T21851] new_inode+0x1f/0x170 [ 620.125020][T21851] debugfs_create_symlink+0x9d/0x1c0 [ 620.125036][T21851] ref_tracker_dir_symlink+0x25f/0x440 [ 620.125054][T21851] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 620.125082][T21851] ? __lock_acquire+0x747/0x2de0 [ 620.125101][T21851] ? check_ns_type+0x1e5/0x770 [ 620.125115][T21851] net_ns_net_init+0xad/0x110 [ 620.125132][T21851] ops_init+0x35d/0x5d0 [ 620.125149][T21851] setup_net+0x118/0x350 [ 620.125161][T21851] ? __pfx_setup_net+0x10/0x10 [ 620.125172][T21851] ? down_read_killable+0x1b6/0x3b0 [ 620.125192][T21851] ? __ns_common_init+0x384/0x590 [ 620.125211][T21851] copy_net_ns+0x536/0x770 [ 620.125224][T21851] create_new_namespaces+0x3f0/0x6b0 [ 620.125242][T21851] ? security_capable+0x7e/0x2c0 [ 620.125262][T21851] unshare_nsproxy_namespaces+0x144/0x190 [ 620.125280][T21851] ksys_unshare+0x532/0x890 [ 620.125299][T21851] ? __pfx_ksys_unshare+0x10/0x10 [ 620.125316][T21851] ? rcu_is_watching+0x16/0xb0 [ 620.125338][T21851] __x64_sys_unshare+0x38/0x50 [ 620.125353][T21851] do_syscall_64+0x16a/0x530 [ 620.125368][T21851] ? trace_irq_disable+0x3b/0x140 [ 620.125389][T21851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.125401][T21851] ? clear_bhb_loop+0x70/0xc0 [ 620.125415][T21851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.125426][T21851] RIP: 0033:0x7f1ebc1a8f19 [ 620.125437][T21851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.125447][T21851] RSP: 002b:00007f1eba3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 620.125460][T21851] RAX: ffffffffffffffda RBX: 00007f1ebc425fa0 RCX: 00007f1ebc1a8f19 [ 620.125469][T21851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 620.125476][T21851] RBP: 00007f1ebc237f6d R08: 0000000000000000 R09: 0000000000000000 [ 620.125483][T21851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.125490][T21851] R13: 00007f1ebc426038 R14: 00007f1ebc425fa0 R15: 00007ffec76381e8 [ 620.125509][T21851] [ 620.128847][T21851] debugfs: out of free dentries, can not create symlink 'netns-128-4026533078-notrefcnt' [ 620.551766][T21851] rxe_eth0 speed is unknown, defaulting to 1000 [ 620.598267][T21857] fuse: Bad value for 'fd' [ 620.731829][T21860] fuse: fd is not a fuse device [ 620.752855][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6808'. [ 621.065312][T21851] syzkaller0 speed is unknown, defaulting to 1000 [ 621.934050][T21896] jffs2: notice: (21896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 622.688010][T21909] xt_hashlimit: max too large, truncated to 1048576 [ 622.955425][T21919] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6841'. [ 622.955445][T21919] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6841'. [ 624.434290][ T2055] blk_print_req_error: 123 callbacks suppressed [ 624.434306][ T2055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 624.434321][ T2055] buffer_io_error: 138 callbacks suppressed [ 624.434327][ T2055] Buffer I/O error on dev nbd1, logical block 0, async page read [ 624.436364][ T2055] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 624.436383][ T2055] Buffer I/O error on dev nbd1, logical block 1, async page read [ 624.436392][ T2055] Buffer I/O error on dev nbd1, logical block 2, async page read [ 624.436400][ T2055] Buffer I/O error on dev nbd1, logical block 3, async page read [ 624.447215][ T2055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 624.447236][ T2055] Buffer I/O error on dev nbd1, logical block 0, async page read [ 624.447246][ T2055] Buffer I/O error on dev nbd1, logical block 1, async page read [ 624.447254][ T2055] Buffer I/O error on dev nbd1, logical block 2, async page read [ 624.447261][ T2055] Buffer I/O error on dev nbd1, logical block 3, async page read [ 624.463239][ T2055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 624.463260][ T2055] Buffer I/O error on dev nbd1, logical block 0, async page read [ 624.463270][ T2055] Buffer I/O error on dev nbd1, logical block 1, async page read [ 624.463857][ T2055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 624.472818][ T2055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 624.482891][ T2055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 624.502068][ T2055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 624.516942][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.529331][ T2055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 624.529397][T21975] ldm_validate_partition_table(): Disk read failed. [ 624.529481][ T2055] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 624.594516][T21975] Dev nbd1: unable to read RDB block 0 [ 624.662945][T21975] nbd1: unable to read partition table [ 624.698359][T21975] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 624.712766][T21975] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 624.810886][T21978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6855'. [ 624.914604][T21982] ªªªªª»: renamed from vlan0 (while UP) [ 625.507422][T22004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6869'. [ 626.665346][ T32] audit: type=1800 audit(1794338676.089:1794): pid=21434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294855 res=0 errno=-22 [ 626.722900][T18710] Bluetooth: hci5: Frame reassembly failed (-84) [ 626.726547][ T32] audit: type=1800 audit(1794338676.149:1795): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294866 res=0 errno=-22 [ 627.015325][T22060] FAULT_INJECTION: forcing a failure. [ 627.015325][T22060] name failslab, interval 1, probability 0, space 0, times 0 [ 627.015348][T22060] CPU: 0 UID: 0 PID: 22060 Comm: syz.4.6890 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.015364][T22060] Tainted: [L]=SOFTLOCKUP [ 627.015369][T22060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 627.015376][T22060] Call Trace: [ 627.015381][T22060] [ 627.015386][T22060] dump_stack_lvl+0xe8/0x150 [ 627.015409][T22060] should_fail_ex+0x3eb/0x540 [ 627.015424][T22060] ? __alloc_skb+0x1db/0x7a0 [ 627.015507][T22060] should_failslab+0xa8/0x100 [ 627.015526][T22060] ? __alloc_skb+0x1db/0x7a0 [ 627.015544][T22060] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 627.015559][T22060] ? __alloc_skb+0x18d/0x7a0 [ 627.015570][T22060] ? __alloc_skb+0x1db/0x7a0 [ 627.015585][T22060] __alloc_skb+0x1db/0x7a0 [ 627.015599][T22060] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 627.015649][T22060] __addrconf_sysctl_register+0x439/0x4b0 [ 627.015667][T22060] ? rcu_is_watching+0x16/0xb0 [ 627.015688][T22060] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 627.015706][T22060] ? kmemdup_noprof+0x55/0x70 [ 627.015720][T22060] ? __asan_memcpy+0x40/0x70 [ 627.015736][T22060] addrconf_init_net+0x4ce/0x790 [ 627.015756][T22060] ops_init+0x35d/0x5d0 [ 627.015772][T22060] setup_net+0x118/0x350 [ 627.015785][T22060] ? __pfx_setup_net+0x10/0x10 [ 627.015796][T22060] ? down_read_killable+0x1b6/0x3b0 [ 627.015815][T22060] ? __ns_common_init+0x384/0x590 [ 627.015833][T22060] copy_net_ns+0x536/0x770 [ 627.015846][T22060] create_new_namespaces+0x3f0/0x6b0 [ 627.015863][T22060] ? security_capable+0x7e/0x2c0 [ 627.015884][T22060] unshare_nsproxy_namespaces+0x144/0x190 [ 627.015901][T22060] ksys_unshare+0x532/0x890 [ 627.015919][T22060] ? __pfx_ksys_unshare+0x10/0x10 [ 627.015935][T22060] ? rcu_is_watching+0x16/0xb0 [ 627.015956][T22060] __x64_sys_unshare+0x38/0x50 [ 627.015971][T22060] do_syscall_64+0x16a/0x530 [ 627.015986][T22060] ? trace_irq_disable+0x3b/0x140 [ 627.016000][T22060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.016012][T22060] ? clear_bhb_loop+0x70/0xc0 [ 627.016026][T22060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.016037][T22060] RIP: 0033:0x7fea833a8f19 [ 627.016048][T22060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.016057][T22060] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 627.016070][T22060] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 627.016078][T22060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 627.016085][T22060] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 627.016092][T22060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.016098][T22060] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 627.016115][T22060] [ 627.432915][T22060] rxe_eth0 speed is unknown, defaulting to 1000 [ 627.912764][T22060] syzkaller0 speed is unknown, defaulting to 1000 [ 628.576861][ T32] audit: type=1800 audit(1794338677.999:1796): pid=22092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6908" name="shmem_enabled" dev="sysfs" ino=1883 res=0 errno=-22 [ 628.750248][ T5645] Bluetooth: hci5: command 0xfc11 tx timeout [ 628.750347][ T5649] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 629.207752][T22110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6915'. [ 629.766749][ T32] audit: type=1800 audit(1794338679.189:1797): pid=22130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6924" name="g6_is_space" dev="sysfs" ino=62736 res=0 errno=-22 [ 629.768197][T22130] cougar: G6 mapped to space [ 630.994805][T22168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6940'. [ 632.093828][T22197] jffs2: notice: (22197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 634.005936][T22271] FAULT_INJECTION: forcing a failure. [ 634.005936][T22271] name failslab, interval 1, probability 0, space 0, times 0 [ 634.005957][T22271] CPU: 0 UID: 0 PID: 22271 Comm: syz.4.6981 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.005974][T22271] Tainted: [L]=SOFTLOCKUP [ 634.005978][T22271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 634.005986][T22271] Call Trace: [ 634.005990][T22271] [ 634.005995][T22271] dump_stack_lvl+0xe8/0x150 [ 634.006016][T22271] should_fail_ex+0x3eb/0x540 [ 634.006032][T22271] should_failslab+0xa8/0x100 [ 634.006050][T22271] ? proc_net_ns_init+0x4e/0x380 [ 634.006065][T22271] kmem_cache_alloc_noprof+0x9c/0x600 [ 634.006080][T22271] ? proc_net_ns_init+0x4e/0x380 [ 634.006097][T22271] proc_net_ns_init+0x4e/0x380 [ 634.006113][T22271] ops_init+0x35d/0x5d0 [ 634.006131][T22271] setup_net+0x118/0x350 [ 634.006142][T22271] ? __pfx_setup_net+0x10/0x10 [ 634.006154][T22271] ? down_read_killable+0x1b6/0x3b0 [ 634.006173][T22271] ? __ns_common_init+0x384/0x590 [ 634.006191][T22271] copy_net_ns+0x536/0x770 [ 634.006204][T22271] create_new_namespaces+0x3f0/0x6b0 [ 634.006221][T22271] ? security_capable+0x7e/0x2c0 [ 634.006241][T22271] unshare_nsproxy_namespaces+0x144/0x190 [ 634.006258][T22271] ksys_unshare+0x532/0x890 [ 634.006275][T22271] ? __pfx_ksys_unshare+0x10/0x10 [ 634.006295][T22271] ? rcu_is_watching+0x16/0xb0 [ 634.006316][T22271] __x64_sys_unshare+0x38/0x50 [ 634.006331][T22271] do_syscall_64+0x16a/0x530 [ 634.006346][T22271] ? trace_irq_disable+0x3b/0x140 [ 634.006360][T22271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.006372][T22271] ? clear_bhb_loop+0x70/0xc0 [ 634.006385][T22271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.006396][T22271] RIP: 0033:0x7fea833a8f19 [ 634.006407][T22271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.006416][T22271] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 634.006440][T22271] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 634.006449][T22271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 634.006456][T22271] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 634.006463][T22271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.006470][T22271] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 634.006488][T22271] [ 634.489805][T22280] netlink: 'syz.5.6985': attribute type 26 has an invalid length. [ 635.004294][T22299] rxe_eth0 speed is unknown, defaulting to 1000 [ 635.230922][T22299] syzkaller0 speed is unknown, defaulting to 1000 [ 635.882191][T22312] fuse: fd is not a fuse device [ 637.513360][T22361] netlink: 'syz.1.7019': attribute type 26 has an invalid length. [ 637.822425][ T32] audit: type=1800 audit(1794338687.249:1798): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302758 res=0 errno=-22 [ 638.592215][ T3315] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 639.441199][ T32] audit: type=1326 audit(1794338688.869:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22404 comm="syz.5.7039" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e81a8f19 code=0x7ffc0000 [ 639.442095][ T32] audit: type=1326 audit(1794338688.869:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22404 comm="syz.5.7039" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48e81a8f19 code=0x7ffc0000 [ 639.443096][ T32] audit: type=1326 audit(1794338688.869:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22404 comm="syz.5.7039" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f48e81a8f19 code=0x7ffc0000 [ 639.443218][ T32] audit: type=1326 audit(1794338688.869:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22404 comm="syz.5.7039" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f48e81a8f19 code=0x7ffc0000 [ 639.901577][T22423] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 640.166298][T22431] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.743558][T22454] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7061'. [ 640.743589][T22454] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7061'. [ 640.804095][T22456] FAULT_INJECTION: forcing a failure. [ 640.804095][T22456] name failslab, interval 1, probability 0, space 0, times 0 [ 640.804120][T22456] CPU: 0 UID: 0 PID: 22456 Comm: syz.1.7062 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.804136][T22456] Tainted: [L]=SOFTLOCKUP [ 640.804141][T22456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 640.804149][T22456] Call Trace: [ 640.804154][T22456] [ 640.804160][T22456] dump_stack_lvl+0xe8/0x150 [ 640.804183][T22456] should_fail_ex+0x3eb/0x540 [ 640.804199][T22456] should_failslab+0xa8/0x100 [ 640.804218][T22456] __kmalloc_cache_noprof+0x9e/0x600 [ 640.804234][T22456] ? syslog_print+0x103/0x610 [ 640.804247][T22456] ? syslog_print+0x103/0x610 [ 640.804273][T22456] syslog_print+0x103/0x610 [ 640.804288][T22456] ? hook_capable+0x1c3/0x5e0 [ 640.804300][T22456] ? __pfx_syslog_print+0x10/0x10 [ 640.804315][T22456] ? futex_wait+0x2a2/0x390 [ 640.804328][T22456] ? __pfx_hook_capable+0x10/0x10 [ 640.804338][T22456] ? __pfx_futex_wait+0x10/0x10 [ 640.804356][T22456] ? apparmor_capable+0x126/0x170 [ 640.804370][T22456] ? bpf_lsm_capable+0x9/0x20 [ 640.804456][T22456] ? security_capable+0x7e/0x2c0 [ 640.804477][T22456] do_syslog+0x583/0x7d0 [ 640.804493][T22456] ? __pfx_do_syslog+0x10/0x10 [ 640.804510][T22456] ? __se_sys_futex+0x3a8/0x450 [ 640.804532][T22456] ? rcu_is_watching+0x16/0xb0 [ 640.804551][T22456] __x64_sys_syslog+0x7c/0x90 [ 640.804566][T22456] do_syscall_64+0x16a/0x530 [ 640.804582][T22456] ? trace_irq_disable+0x3b/0x140 [ 640.804596][T22456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.804607][T22456] ? clear_bhb_loop+0x70/0xc0 [ 640.804621][T22456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.804632][T22456] RIP: 0033:0x7f1ebc1a8f19 [ 640.804643][T22456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.804653][T22456] RSP: 002b:00007f1eba3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 640.804665][T22456] RAX: ffffffffffffffda RBX: 00007f1ebc425fa0 RCX: 00007f1ebc1a8f19 [ 640.804674][T22456] RDX: 0000000000000092 RSI: 00002000000002c0 RDI: 0000000000000002 [ 640.804681][T22456] RBP: 00007f1ebc237f6d R08: 0000000000000000 R09: 0000000000000000 [ 640.804689][T22456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.804696][T22456] R13: 00007f1ebc426038 R14: 00007f1ebc425fa0 R15: 00007ffec76381e8 [ 640.804712][T22456] [ 642.073417][T22491] FAULT_INJECTION: forcing a failure. [ 642.073417][T22491] name failslab, interval 1, probability 0, space 0, times 0 [ 642.073444][T22491] CPU: 0 UID: 0 PID: 22491 Comm: syz.4.7076 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.073460][T22491] Tainted: [L]=SOFTLOCKUP [ 642.073464][T22491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 642.073471][T22491] Call Trace: [ 642.073476][T22491] [ 642.073482][T22491] dump_stack_lvl+0xe8/0x150 [ 642.073504][T22491] should_fail_ex+0x3eb/0x540 [ 642.073519][T22491] should_failslab+0xa8/0x100 [ 642.073539][T22491] __kmalloc_cache_noprof+0x9e/0x600 [ 642.073553][T22491] ? __kasan_kmalloc+0x93/0xb0 [ 642.073574][T22491] ? isofs_init_fs_context+0x52/0x320 [ 642.073684][T22491] ? isofs_init_fs_context+0x52/0x320 [ 642.073703][T22491] isofs_init_fs_context+0x52/0x320 [ 642.073719][T22491] alloc_fs_context+0x99e/0xd00 [ 642.073742][T22491] __se_sys_fsopen+0x118/0x370 [ 642.073755][T22491] do_syscall_64+0x16a/0x530 [ 642.073771][T22491] ? trace_irq_disable+0x3b/0x140 [ 642.073785][T22491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.073796][T22491] ? clear_bhb_loop+0x70/0xc0 [ 642.073810][T22491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.073821][T22491] RIP: 0033:0x7fea833a8f19 [ 642.073833][T22491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.073842][T22491] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 642.073855][T22491] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 642.073863][T22491] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000400 [ 642.073870][T22491] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 642.073877][T22491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.073883][T22491] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 642.073900][T22491] [ 643.379580][T22526] FAULT_INJECTION: forcing a failure. [ 643.379580][T22526] name failslab, interval 1, probability 0, space 0, times 0 [ 643.379605][T22526] CPU: 0 UID: 0 PID: 22526 Comm: syz.1.7091 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.379621][T22526] Tainted: [L]=SOFTLOCKUP [ 643.379626][T22526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 643.379633][T22526] Call Trace: [ 643.379639][T22526] [ 643.379644][T22526] dump_stack_lvl+0xe8/0x150 [ 643.379667][T22526] should_fail_ex+0x3eb/0x540 [ 643.379682][T22526] should_failslab+0xa8/0x100 [ 643.379702][T22526] __kmalloc_cache_noprof+0x9e/0x600 [ 643.379717][T22526] ? bdi_split_work_to_wbs+0x532/0x940 [ 643.379796][T22526] ? bdi_split_work_to_wbs+0x532/0x940 [ 643.379811][T22526] bdi_split_work_to_wbs+0x532/0x940 [ 643.379823][T22526] ? bdi_split_work_to_wbs+0xff/0x940 [ 643.379839][T22526] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 643.379867][T22526] sync_inodes_sb+0x21d/0xbf0 [ 643.379878][T22526] ? super_lock+0xe0/0x3d0 [ 643.379897][T22526] ? __pfx_sync_inodes_sb+0x10/0x10 [ 643.379907][T22526] ? do_raw_spin_lock+0x12b/0x2f0 [ 643.379929][T22526] ? do_raw_spin_unlock+0xf5/0x200 [ 643.379948][T22526] __iterate_supers+0x282/0x420 [ 643.379963][T22526] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 643.379980][T22526] ? __pfx___iterate_supers+0x10/0x10 [ 643.380000][T22526] __ia32_sys_sync+0xa0/0x120 [ 643.380023][T22526] ? __pfx___ia32_sys_sync+0x10/0x10 [ 643.380042][T22526] ? do_syscall_64+0xc8/0x530 [ 643.380061][T22526] do_syscall_64+0x16a/0x530 [ 643.380076][T22526] ? trace_irq_disable+0x3b/0x140 [ 643.380090][T22526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.380102][T22526] ? clear_bhb_loop+0x70/0xc0 [ 643.380116][T22526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.380127][T22526] RIP: 0033:0x7f1ebc1a8f19 [ 643.380139][T22526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.380149][T22526] RSP: 002b:00007f1eba3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 643.380162][T22526] RAX: ffffffffffffffda RBX: 00007f1ebc425fa0 RCX: 00007f1ebc1a8f19 [ 643.380170][T22526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.380177][T22526] RBP: 00007f1ebc425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 643.380184][T22526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.380191][T22526] R13: 00007f1ebc426038 R14: 00007f1ebc425fa0 R15: 00007ffec76381e8 [ 643.380209][T22526] [ 644.609234][T22550] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.925331][T18709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.296986][T18709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.381997][ T32] audit: type=1800 audit(1794338697.799:1803): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302922 res=0 errno=-22 [ 648.387802][ T32] audit: type=1800 audit(1794338697.809:1804): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302933 res=0 errno=-22 [ 648.466693][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 648.484399][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 648.485653][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 648.514305][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 648.518104][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 648.586635][ T32] audit: type=1800 audit(1794338698.009:1805): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302952 res=0 errno=-22 [ 648.608778][ T32] audit: type=1800 audit(1794338698.009:1806): pid=22497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302963 res=0 errno=-22 [ 648.828156][T18709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.157530][T22616] Invalid ELF header magic: != ELF [ 649.210860][T22619] FAULT_INJECTION: forcing a failure. [ 649.210860][T22619] name failslab, interval 1, probability 0, space 0, times 0 [ 649.210884][T22619] CPU: 0 UID: 0 PID: 22619 Comm: syz.4.7133 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.210900][T22619] Tainted: [L]=SOFTLOCKUP [ 649.210904][T22619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 649.210912][T22619] Call Trace: [ 649.210917][T22619] [ 649.210922][T22619] dump_stack_lvl+0xe8/0x150 [ 649.210945][T22619] should_fail_ex+0x3eb/0x540 [ 649.210960][T22619] should_failslab+0xa8/0x100 [ 649.210980][T22619] __kmalloc_cache_noprof+0x9e/0x600 [ 649.210996][T22619] ? bdi_split_work_to_wbs+0x532/0x940 [ 649.211009][T22619] ? bdi_split_work_to_wbs+0x532/0x940 [ 649.211023][T22619] bdi_split_work_to_wbs+0x532/0x940 [ 649.211034][T22619] ? bdi_split_work_to_wbs+0xff/0x940 [ 649.211050][T22619] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 649.211075][T22619] sync_inodes_sb+0x21d/0xbf0 [ 649.211086][T22619] ? super_lock+0xe0/0x3d0 [ 649.211106][T22619] ? __pfx_sync_inodes_sb+0x10/0x10 [ 649.211116][T22619] ? do_raw_spin_lock+0x12b/0x2f0 [ 649.211138][T22619] ? do_raw_spin_unlock+0xf5/0x200 [ 649.211157][T22619] __iterate_supers+0x282/0x420 [ 649.211172][T22619] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 649.211189][T22619] ? __pfx___iterate_supers+0x10/0x10 [ 649.211211][T22619] __ia32_sys_sync+0xa0/0x120 [ 649.211227][T22619] ? __pfx___ia32_sys_sync+0x10/0x10 [ 649.211246][T22619] ? do_syscall_64+0xc8/0x530 [ 649.211263][T22619] do_syscall_64+0x16a/0x530 [ 649.211278][T22619] ? trace_irq_disable+0x3b/0x140 [ 649.211293][T22619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.211305][T22619] ? clear_bhb_loop+0x70/0xc0 [ 649.211321][T22619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.211332][T22619] RIP: 0033:0x7fea833a8f19 [ 649.211344][T22619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.211354][T22619] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 649.211366][T22619] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 649.211374][T22619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.211381][T22619] RBP: 00007fea83625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 649.211387][T22619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.211394][T22619] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 649.211412][T22619] [ 649.336098][T18709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.559817][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7134'. [ 650.114552][ T32] audit: type=1800 audit(1794338699.549:1807): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302975 res=0 errno=-22 [ 650.140459][ T32] audit: type=1800 audit(1794338699.549:1808): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=302980 res=0 errno=-22 [ 650.169399][ T32] audit: type=1800 audit(1794338699.599:1809): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=302984 res=0 errno=-22 [ 650.173795][ T32] audit: type=1800 audit(1794338699.599:1810): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=302983 res=0 errno=-22 [ 650.229795][ T32] audit: type=1800 audit(1794338699.659:1811): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=302986 res=0 errno=-22 [ 650.501324][ T32] audit: type=1804 audit(1794338699.929:1812): pid=22646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7144" name="file1" dev="tmpfs" ino=5115 res=1 errno=0 [ 650.593903][ T5649] Bluetooth: hci1: command tx timeout [ 650.789094][T22598] rxe_eth0 speed is unknown, defaulting to 1000 [ 650.838309][T18709] bridge_slave_1: left allmulticast mode [ 650.838328][T18709] bridge_slave_1: left promiscuous mode [ 650.838891][T18709] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.887230][T18709] bridge_slave_0: left allmulticast mode [ 650.887248][T18709] bridge_slave_0: left promiscuous mode [ 650.887439][T18709] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.520156][T22680] sd 0:0:1:0: PR command failed: 1026 [ 651.520208][T22680] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 651.520231][T22680] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 652.041279][T22695] Invalid ELF header magic: != ELF [ 652.066508][T18709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.093659][T18709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.120055][T18709] bond0 (unregistering): Released all slaves [ 652.170547][T22598] syzkaller0 speed is unknown, defaulting to 1000 [ 652.675335][ T5645] Bluetooth: hci1: command tx timeout [ 652.740214][T22716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7163'. [ 653.277019][ T5302] 8021q: adding VLAN 0 to HW filter on device eth5 [ 653.818356][T18709] hsr_slave_0: left promiscuous mode [ 653.825616][T18709] hsr_slave_1: left promiscuous mode [ 653.826191][T18709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.826203][T18709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.826716][T18709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.826727][T18709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.912664][T18709] veth1_macvtap: left promiscuous mode [ 653.912714][T18709] veth0_macvtap: left promiscuous mode [ 653.912840][T18709] veth1_vlan: left promiscuous mode [ 653.937926][T18709] veth0_vlan: left promiscuous mode [ 654.752638][ T5649] Bluetooth: hci1: command tx timeout [ 655.133146][T18709] team0 (unregistering): Port device team_slave_1 removed [ 655.203739][T18709] team0 (unregistering): Port device team_slave_0 removed [ 655.577371][ T32] kauditd_printk_skb: 24 callbacks suppressed [ 655.577384][ T32] audit: type=1800 audit(1794338704.999:1837): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308191 res=0 errno=-22 [ 655.611012][ T32] audit: type=1800 audit(1794338705.039:1838): pid=22656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=308195 res=0 errno=-22 [ 656.021423][T22598] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.021483][T22598] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.021588][T22598] bridge_slave_0: entered allmulticast mode [ 656.051993][T22598] bridge_slave_0: entered promiscuous mode [ 656.068344][T22598] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.071690][T22598] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.071805][T22598] bridge_slave_1: entered allmulticast mode [ 656.104343][T22598] bridge_slave_1: entered promiscuous mode [ 656.251507][T18709] IPVS: stop unused estimator thread 0... [ 656.321116][T22598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.361400][T22598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.529682][T22598] team0: Port device team_slave_0 added [ 656.556686][T22598] team0: Port device team_slave_1 added [ 656.698081][T22598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.698095][T22598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.698109][T22598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.756391][T22598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.756404][T22598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.756439][T22598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.829241][ T5649] Bluetooth: hci1: command tx timeout [ 657.030760][T22598] hsr_slave_0: entered promiscuous mode [ 657.031420][T22598] hsr_slave_1: entered promiscuous mode [ 657.047178][T22598] debugfs: 'hsr0' already exists in 'hsr' [ 657.047191][T22598] Cannot create hsr debugfs directory [ 657.250560][T22837] FAULT_INJECTION: forcing a failure. [ 657.250560][T22837] name failslab, interval 1, probability 0, space 0, times 0 [ 657.250582][T22837] CPU: 0 UID: 0 PID: 22837 Comm: syz.4.7200 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.250597][T22837] Tainted: [L]=SOFTLOCKUP [ 657.250602][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 657.250609][T22837] Call Trace: [ 657.250614][T22837] [ 657.250620][T22837] dump_stack_lvl+0xe8/0x150 [ 657.250642][T22837] should_fail_ex+0x3eb/0x540 [ 657.250676][T22837] should_failslab+0xa8/0x100 [ 657.250694][T22837] ? prepare_creds+0x30/0x820 [ 657.250707][T22837] kmem_cache_alloc_noprof+0x9c/0x600 [ 657.250719][T22837] ? __se_sys_futex+0x3a8/0x450 [ 657.250735][T22837] ? make_kgid+0x1d1/0x6a0 [ 657.250748][T22837] ? prepare_creds+0x30/0x820 [ 657.250764][T22837] prepare_creds+0x30/0x820 [ 657.250779][T22837] __sys_setgid+0x8e/0x370 [ 657.250794][T22837] do_syscall_64+0x16a/0x530 [ 657.250811][T22837] ? trace_irq_disable+0x3b/0x140 [ 657.250826][T22837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.250838][T22837] ? clear_bhb_loop+0x70/0xc0 [ 657.250852][T22837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.250863][T22837] RIP: 0033:0x7fea833a8f19 [ 657.250875][T22837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.250884][T22837] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000006a [ 657.250896][T22837] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 657.250904][T22837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 657.250911][T22837] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 657.250918][T22837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.250924][T22837] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 657.250941][T22837] [ 657.666580][ T32] audit: type=1800 audit(1794338707.089:1839): pid=22845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7203" name="multicast_router" dev="sysfs" ino=216811 res=0 errno=-22 [ 657.934945][ T32] audit: type=1800 audit(1794338707.359:1840): pid=22598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24639 res=0 errno=-13 [ 657.964170][ T32] audit: type=1800 audit(1794338707.399:1841): pid=22598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24638 res=0 errno=-13 [ 657.967603][ T32] audit: type=1800 audit(1794338707.399:1842): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312352 res=0 errno=-22 [ 658.397837][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7211'. [ 658.417479][T22870] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7211'. [ 658.417533][T22870] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 658.617354][ T5302] 8021q: adding VLAN 0 to HW filter on device eth6 [ 659.007096][T22598] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 659.037262][T22598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 659.051339][T22598] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 659.081497][T22598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.084071][T22598] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 659.135992][T22598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 659.151511][T22598] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 659.237541][T22598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.716805][T22598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.790737][T22598] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.824635][T18709] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.824700][T18709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.875574][T18710] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.875634][T18710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.615167][T22942] netlink: 'syz.4.7227': attribute type 10 has an invalid length. [ 660.964565][ T5302] 8021q: adding VLAN 0 to HW filter on device eth7 [ 661.252165][T22957] FAULT_INJECTION: forcing a failure. [ 661.252165][T22957] name failslab, interval 1, probability 0, space 0, times 0 [ 661.252187][T22957] CPU: 0 UID: 0 PID: 22957 Comm: syz.4.7232 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.252204][T22957] Tainted: [L]=SOFTLOCKUP [ 661.252208][T22957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 661.252215][T22957] Call Trace: [ 661.252220][T22957] [ 661.252225][T22957] dump_stack_lvl+0xe8/0x150 [ 661.252247][T22957] should_fail_ex+0x3eb/0x540 [ 661.252264][T22957] should_failslab+0xa8/0x100 [ 661.252284][T22957] __kmalloc_cache_noprof+0x9e/0x600 [ 661.252303][T22957] ? __pfx_sprintf+0x10/0x10 [ 661.252316][T22957] ? snd_timer_instance_new+0x51/0x260 [ 661.252409][T22957] ? snd_timer_instance_new+0x51/0x260 [ 661.252429][T22957] snd_timer_instance_new+0x51/0x260 [ 661.252447][T22957] snd_seq_timer_open+0x23e/0x620 [ 661.252494][T22957] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 661.252516][T22957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.252533][T22957] snd_seq_queue_alloc+0x3ba/0x740 [ 661.252556][T22957] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 661.252575][T22957] snd_seq_oss_open+0x657/0xf80 [ 661.252621][T22957] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 661.252655][T22957] ? rcu_is_watching+0x16/0xb0 [ 661.252672][T22957] ? trace_contention_end+0x3d/0x140 [ 661.252700][T22957] ? __pfx___mutex_lock+0x10/0x10 [ 661.252720][T22957] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 661.252730][T22957] ? __pfx_free_devinfo+0x10/0x10 [ 661.252745][T22957] ? do_raw_spin_unlock+0xf5/0x200 [ 661.252764][T22957] ? soundcore_open+0x2da/0x490 [ 661.252807][T22957] odev_open+0x67/0xa0 [ 661.252824][T22957] chrdev_open+0x4d9/0x600 [ 661.252837][T22957] ? __pfx_chrdev_open+0x10/0x10 [ 661.252847][T22957] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 661.252864][T22957] ? devcgroup_check_permission+0x31/0x8f0 [ 661.252887][T22957] ? __pfx_chrdev_open+0x10/0x10 [ 661.252897][T22957] do_dentry_open+0x80e/0x1360 [ 661.252916][T22957] vfs_open_consume+0x4a/0x350 [ 661.252927][T22957] ? path_openat+0x16e1/0x20f0 [ 661.252945][T22957] path_openat+0x16fc/0x20f0 [ 661.252971][T22957] do_file_open+0x23e/0x4a0 [ 661.252989][T22957] ? __pfx_do_file_open+0x10/0x10 [ 661.253018][T22957] ? _raw_spin_unlock+0x28/0x50 [ 661.253030][T22957] ? alloc_fd+0x6af/0x760 [ 661.253049][T22957] do_sys_openat2+0x115/0x200 [ 661.253061][T22957] ? __se_sys_futex+0x3a8/0x450 [ 661.253078][T22957] ? __pfx_do_sys_openat2+0x10/0x10 [ 661.253093][T22957] ? rcu_is_watching+0x16/0xb0 [ 661.253111][T22957] __x64_sys_openat+0x138/0x170 [ 661.253126][T22957] do_syscall_64+0x16a/0x530 [ 661.253142][T22957] ? trace_irq_disable+0x3b/0x140 [ 661.253157][T22957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.253168][T22957] ? clear_bhb_loop+0x70/0xc0 [ 661.253182][T22957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.253193][T22957] RIP: 0033:0x7fea833a8f19 [ 661.253205][T22957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.253214][T22957] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 661.253226][T22957] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 661.253234][T22957] RDX: 0000000000080d02 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 661.253242][T22957] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 661.253249][T22957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.253256][T22957] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 661.253274][T22957] [ 661.931094][T22967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7233'. [ 661.957047][T22967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7233'. [ 661.957084][T22967] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 662.467300][T22598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.334800][ T5302] 8021q: adding VLAN 0 to HW filter on device eth8 [ 663.360197][T22598] veth0_vlan: entered promiscuous mode [ 663.391540][T22598] veth1_vlan: entered promiscuous mode [ 663.517050][T22598] veth0_macvtap: entered promiscuous mode [ 663.537773][T22598] veth1_macvtap: entered promiscuous mode [ 663.604220][T22598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.631457][T22598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.799611][T18709] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.799642][T18709] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.799660][T18709] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.799677][T18709] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.897995][ T32] audit: type=1800 audit(1794338713.329:1843): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312797 res=0 errno=-22 [ 664.052930][T18709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.052945][T18709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.056503][ T32] audit: type=1800 audit(1794338713.479:1844): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312923 res=0 errno=-22 [ 664.201329][T18707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.201343][T18707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.275236][ T32] audit: type=1800 audit(1794338713.699:1845): pid=22598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="dev" dev="sysfs" ino=312095 res=0 errno=-22 [ 664.307170][ T32] audit: type=1800 audit(1794338713.729:1846): pid=22598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="dev" dev="sysfs" ino=311659 res=0 errno=-22 [ 664.575782][T23047] netlink: 100 bytes leftover after parsing attributes in process `syz.7.7120'. [ 665.341380][T23072] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7264'. [ 665.433634][ T32] audit: type=1800 audit(1794338714.859:1847): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313126 res=0 errno=-22 [ 665.612181][T23083] fuse: fd is not a fuse device [ 666.177743][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7276'. [ 666.878219][T23133] netlink: 766 bytes leftover after parsing attributes in process `syz.6.7286'. [ 667.288321][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7293'. [ 667.307925][T23148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7293'. [ 667.307949][T23148] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 667.421823][T23153] fuse: fd is not a fuse device [ 667.966949][T23169] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7302'. [ 668.705324][ T32] audit: type=1800 audit(1794338718.129:1848): pid=23196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7313" name="multicast_router" dev="sysfs" ino=309199 res=0 errno=-22 [ 668.977615][ T32] audit: type=1800 audit(1794338718.399:1849): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31613 res=0 errno=-22 [ 669.012540][ T32] audit: type=1800 audit(1794338718.439:1850): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31636 res=0 errno=-22 [ 669.209717][ T11] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 669.358873][ T11] usb 8-1: Using ep0 maxpacket: 16 [ 669.359784][ T11] usb 8-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 669.360941][ T11] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 669.360956][ T11] usb 8-1: config 0 has no interface number 0 [ 669.360987][ T11] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 669.361001][ T11] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 669.424567][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.424584][ T11] usb 8-1: Product: syz [ 669.424591][ T11] usb 8-1: Manufacturer: syz [ 669.424599][ T11] usb 8-1: SerialNumber: syz [ 669.457122][ T11] usb 8-1: config 0 descriptor?? [ 669.457714][T23206] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 669.457776][T23206] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 669.472675][ T32] audit: type=1800 audit(1794338718.909:1851): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313315 res=0 errno=-22 [ 669.516187][ T32] audit: type=1800 audit(1794338718.939:1852): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=313347 res=0 errno=-22 [ 669.543549][ T32] audit: type=1800 audit(1794338718.979:1853): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=313322 res=0 errno=-22 [ 669.546109][ T32] audit: type=1800 audit(1794338718.979:1854): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=313323 res=0 errno=-22 [ 669.725438][T23206] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 669.725542][T23206] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 670.536152][ T11] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 670.536174][ T11] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 670.549919][ T11] asix 8-1:0.34: probe with driver asix failed with error -71 [ 670.576369][ T32] audit: type=1800 audit(1794338720.009:1855): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=313344 res=0 errno=-22 [ 670.576400][ T32] audit: type=1800 audit(1794338720.009:1856): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=313345 res=0 errno=-22 [ 670.576420][ T32] audit: type=1800 audit(1794338720.009:1857): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=313324 res=0 errno=-22 [ 670.604850][ T11] usb 8-1: USB disconnect, device number 2 [ 670.606417][T20108] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 670.684625][ T32] audit: type=1800 audit(1794338720.109:1858): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=313346 res=0 errno=-22 [ 671.254634][T23257] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7340'. [ 671.870372][ T5790] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 672.018968][ T5790] usb 8-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 672.019791][ T5790] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.019808][ T5790] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.019828][ T5790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.025739][ T5790] usb 8-1: config 0 descriptor?? [ 672.686772][ T5790] usb 8-1: language id specifier not provided by device, defaulting to English [ 672.890783][ T5790] uclogic 0003:256C:006D.0029: failed retrieving Huion firmware version: -71 [ 672.890820][ T5790] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 672.890878][ T5790] uclogic 0003:256C:006D.0029: probe with driver uclogic failed with error -71 [ 672.962806][ T5790] usb 8-1: USB disconnect, device number 3 [ 673.058055][T23273] overlayfs: failed to clone upperpath [ 673.286257][T23284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7350'. [ 673.799118][ T11] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 673.952092][ T11] usb 8-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 673.954047][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.980501][ T11] usb 8-1: config 0 descriptor?? [ 673.992510][ T32] kauditd_printk_skb: 7 callbacks suppressed [ 673.992528][ T32] audit: type=1800 audit(1794338723.419:1866): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313581 res=0 errno=-22 [ 674.032668][ T32] audit: type=1800 audit(1794338723.459:1867): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=313610 res=0 errno=-22 [ 674.064848][ T32] audit: type=1800 audit(1794338723.489:1868): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=313588 res=0 errno=-22 [ 674.137508][ T32] audit: type=1800 audit(1794338723.559:1869): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=313589 res=0 errno=-22 [ 674.137546][ T32] audit: type=1800 audit(1794338723.559:1870): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=313590 res=0 errno=-22 [ 674.206632][ T32] audit: type=1800 audit(1794338723.629:1871): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313630 res=0 errno=-22 [ 674.238776][ T11] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 674.479636][ T32] audit: type=1800 audit(1794338723.909:1872): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313647 res=0 errno=-22 [ 674.515161][ T11] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 674.515178][ T11] [drm] Initialized udl on minor 1 [ 674.550173][ T32] audit: type=1800 audit(1794338723.979:1873): pid=22979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=313661 res=0 errno=-22 [ 674.600659][ T32] audit: type=1800 audit(1794338724.029:1874): pid=23320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7366" name="nullb0" dev="tmpfs" ino=5506 res=0 errno=-22 [ 674.632226][ T32] audit: type=1800 audit(1794338724.069:1875): pid=23320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7366" name="nullb0" dev="tmpfs" ino=5506 res=0 errno=-22 [ 675.946124][ T5645] Bluetooth: hci0: hardware error 0x08 [ 676.397422][T23369] FAULT_INJECTION: forcing a failure. [ 676.397422][T23369] name failslab, interval 1, probability 0, space 0, times 0 [ 676.397446][T23369] CPU: 0 UID: 0 PID: 23369 Comm: syz.4.7386 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.397476][T23369] Tainted: [L]=SOFTLOCKUP [ 676.397485][T23369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 676.397498][T23369] Call Trace: [ 676.397503][T23369] [ 676.397508][T23369] dump_stack_lvl+0xe8/0x150 [ 676.397531][T23369] should_fail_ex+0x3eb/0x540 [ 676.397549][T23369] should_failslab+0xa8/0x100 [ 676.397570][T23369] __kmalloc_noprof+0xf9/0x710 [ 676.397584][T23369] ? security_sk_alloc+0x52/0x360 [ 676.397598][T23369] ? security_sk_alloc+0x52/0x360 [ 676.397614][T23369] security_sk_alloc+0x52/0x360 [ 676.397628][T23369] sk_prot_alloc+0x101/0x210 [ 676.397641][T23369] ? sk_alloc+0x27/0x390 [ 676.397654][T23369] sk_alloc+0x3a/0x390 [ 676.397668][T23369] can_create+0x1ca/0x5d0 [ 676.397774][T23369] __sock_create+0x4b5/0xac0 [ 676.397798][T23369] __sys_socket+0xd6/0x1b0 [ 676.397817][T23369] __x64_sys_socket+0x7a/0x90 [ 676.397836][T23369] do_syscall_64+0x16a/0x530 [ 676.397852][T23369] ? trace_irq_disable+0x3b/0x140 [ 676.397867][T23369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.397878][T23369] ? clear_bhb_loop+0x70/0xc0 [ 676.397892][T23369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.397903][T23369] RIP: 0033:0x7fea833a8f19 [ 676.397914][T23369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.397923][T23369] RSP: 002b:00007fea842fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 676.397935][T23369] RAX: ffffffffffffffda RBX: 00007fea83625fa0 RCX: 00007fea833a8f19 [ 676.397944][T23369] RDX: 0000000000000007 RSI: 0000000000000002 RDI: 000000000000001d [ 676.397950][T23369] RBP: 00007fea83437f6d R08: 0000000000000000 R09: 0000000000000000 [ 676.397957][T23369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.397963][T23369] R13: 00007fea83626038 R14: 00007fea83625fa0 R15: 00007ffd09e04888 [ 676.397980][T23369] [ 678.070693][ T5645] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 681.866163][ T11] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 681.914081][ T11] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 683.069307][ C0] sched: DL replenish lagged too much [ 686.119899][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.249006][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 712.230967][T18707] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 755.740257][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.535607][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.411501][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.855564][ T5639] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 896.988277][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 896.995239][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6140/1:b..l.. P23409/1:b..l.. [ 897.006138][ C0] rcu: (detected by 0, t=10502 jiffies, g=243649, q=1647861 ncpus=1) [ 897.014304][ C0] task:udevd state:R running task stack:25768 pid:23409 tgid:23409 ppid:5007 task_flags:0x400040 flags:0x00080001 [ 897.027764][ C0] Call Trace: [ 897.031030][ C0] [ 897.033948][ C0] __schedule+0x18a6/0x5c10 [ 897.038444][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 897.043726][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 897.049871][ C0] ? __pfx___schedule+0x10/0x10 [ 897.054726][ C0] ? fill_pool+0x163/0x610 [ 897.059146][ C0] preempt_schedule_irq+0x4b/0x90 [ 897.064279][ C0] irqentry_exit+0x14f/0x9b0 [ 897.068950][ C0] ? trace_irq_disable+0x3b/0x140 [ 897.073963][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 897.079949][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 897.085224][ C0] Code: e8 5f 0d 8b 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 48 ff 05 4f 1b 5e 13 e8 aa 7f 6f 0a 89 c3 83 f8 08 73 [ 897.104810][ C0] RSP: 0018:ffffc90004946cf0 EFLAGS: 00000202 [ 897.110858][ C0] RAX: 0000000000000001 RBX: ffffc90004946db8 RCX: ffff88802aeeddc0 [ 897.118839][ C0] RDX: ffffffff928a4001 RSI: 0000000000000000 RDI: ffffc90004946db0 [ 897.126790][ C0] RBP: 1ffffffff2514801 R08: ffffc900049471f0 R09: 0000000000000000 [ 897.134744][ C0] R10: ffffc90004946df8 R11: fffff52000928dc1 R12: ffffc90004940000 [ 897.142707][ C0] R13: ffffffff8178b9df R14: ffffc90004946da8 R15: ffffc900049471f0 [ 897.150946][ C0] ? unwind_next_frame+0x8f/0x2550 [ 897.156087][ C0] unwind_next_frame+0x1b66/0x2550 [ 897.161216][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 897.166839][ C0] ? unwind_next_frame+0x8f/0x2550 [ 897.171966][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 897.178118][ C0] arch_stack_walk+0x11b/0x150 [ 897.182900][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 897.187934][ C0] stack_trace_save+0xa9/0x100 [ 897.192688][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 897.198048][ C0] save_stack+0x122/0x230 [ 897.202367][ C0] ? __pfx_save_stack+0x10/0x10 [ 897.207203][ C0] ? __free_frozen_pages+0xd1a/0xe10 [ 897.212491][ C0] ? __slab_free+0x269/0x2c0 [ 897.217062][ C0] ? qlist_free_all+0x99/0x100 [ 897.221806][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 897.227424][ C0] ? page_ext_put+0x97/0xc0 [ 897.231989][ C0] __reset_page_owner+0x73/0x2a0 [ 897.236914][ C0] __free_frozen_pages+0xd1a/0xe10 [ 897.242014][ C0] __slab_free+0x269/0x2c0 [ 897.246418][ C0] qlist_free_all+0x99/0x100 [ 897.250992][ C0] kasan_quarantine_reduce+0x148/0x160 [ 897.256431][ C0] __kasan_slab_alloc+0x22/0x80 [ 897.261267][ C0] __kmalloc_noprof+0x302/0x710 [ 897.266096][ C0] ? ima_alloc_init_template+0x185/0x700 [ 897.271786][ C0] ? __kmalloc_noprof+0x1a6/0x710 [ 897.276787][ C0] ? ima_write_template_field_data+0x47/0x490 [ 897.282893][ C0] ? ima_write_template_field_data+0x47/0x490 [ 897.288943][ C0] ima_write_template_field_data+0x47/0x490 [ 897.294818][ C0] ? ima_eventdigest_init_common+0x2b1/0x400 [ 897.300780][ C0] ima_eventdigest_init_common+0x2cc/0x400 [ 897.306570][ C0] ? ima_eventdigest_init_common+0x121/0x400 [ 897.312529][ C0] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 897.318847][ C0] ? __kmalloc_noprof+0x387/0x710 [ 897.323852][ C0] ? __kmalloc_noprof+0x1a6/0x710 [ 897.328854][ C0] ? ima_alloc_init_template+0x185/0x700 [ 897.334470][ C0] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 897.340431][ C0] ima_alloc_init_template+0x323/0x700 [ 897.345875][ C0] ima_store_measurement+0x1d4/0x690 [ 897.351147][ C0] ? __pfx_ima_store_measurement+0x10/0x10 [ 897.356934][ C0] ? ima_d_path+0x16b/0x230 [ 897.361421][ C0] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 897.366879][ C0] process_measurement+0x15ac/0x1c10 [ 897.372158][ C0] ? __pfx_process_measurement+0x10/0x10 [ 897.377786][ C0] ? tomoyo_check_open_permission+0x38e/0x470 [ 897.383869][ C0] ? apparmor_file_open+0x523/0x6c0 [ 897.389127][ C0] ima_file_check+0xdc/0x130 [ 897.393719][ C0] ? do_dentry_open+0xcf9/0x1360 [ 897.398643][ C0] ? __pfx_ima_file_check+0x10/0x10 [ 897.403830][ C0] security_file_post_open+0xb3/0x260 [ 897.409207][ C0] path_openat+0x1748/0x20f0 [ 897.413798][ C0] do_file_open+0x23e/0x4a0 [ 897.418285][ C0] ? __pfx_do_file_open+0x10/0x10 [ 897.423294][ C0] ? __pfx_kfree_link+0x10/0x10 [ 897.428140][ C0] ? _raw_spin_unlock+0x28/0x50 [ 897.432981][ C0] ? alloc_fd+0x6af/0x760 [ 897.437295][ C0] do_sys_openat2+0x115/0x200 [ 897.441954][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 897.447137][ C0] ? do_user_addr_fault+0xd3f/0x1480 [ 897.452404][ C0] __x64_sys_openat+0x138/0x170 [ 897.457238][ C0] do_syscall_64+0x16a/0x530 [ 897.461825][ C0] ? trace_irq_disable+0x3b/0x140 [ 897.466847][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.472907][ C0] ? clear_bhb_loop+0x70/0xc0 [ 897.477569][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.483615][ C0] RIP: 0033:0x7fe9d3aa7407 [ 897.488026][ C0] RSP: 002b:00007ffcc3a06270 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 897.496418][ C0] RAX: ffffffffffffffda RBX: 00007fe9d424f880 RCX: 00007fe9d3aa7407 [ 897.504385][ C0] RDX: 0000000000080241 RSI: 000055e18381b0cb RDI: ffffffffffffff9c [ 897.512343][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 897.520295][ C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055e18381bdfc [ 897.528252][ C0] R13: 000055e18381bdfc R14: 0000000000000001 R15: 0000000000000004 [ 897.536226][ C0] [ 897.539236][ C0] task:kworker/u8:60 state:R running task stack:21536 pid:6140 tgid:6140 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 897.552777][ C0] Workqueue: krds_cp_wq#14/0 rds_connect_worker [ 897.559083][ C0] Call Trace: [ 897.562342][ C0] [ 897.565255][ C0] __schedule+0x18a6/0x5c10 [ 897.569738][ C0] ? __kasan_slab_free+0x70/0x90 [ 897.574655][ C0] ? kmem_cache_free+0x184/0x660 [ 897.579570][ C0] ? __dev_queue_xmit+0x14d1/0x3920 [ 897.584826][ C0] ? ip6_output+0x337/0x540 [ 897.589322][ C0] ? ret_from_fork+0x514/0xb70 [ 897.594155][ C0] ? __lock_acquire+0x747/0x2de0 [ 897.599091][ C0] ? __pfx___schedule+0x10/0x10 [ 897.603920][ C0] ? __lock_acquire+0x747/0x2de0 [ 897.608843][ C0] preempt_schedule_irq+0x4b/0x90 [ 897.613853][ C0] irqentry_exit+0x14f/0x9b0 [ 897.618425][ C0] ? trace_irq_disable+0x3b/0x140 [ 897.623449][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 897.629447][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 897.634752][ C0] Code: ff ff ff e8 80 b6 78 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 22 70 67 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7f cd 7b 0a cc 48 8d 3d c7 d6 3f [ 897.654359][ C0] RSP: 0018:ffffc90009fe71a0 EFLAGS: 00000296 [ 897.660421][ C0] RAX: 63a7b6c94070b400 RBX: 0000000000000000 RCX: 0000000000000046 [ 897.668376][ C0] RDX: 0000000008067746 RSI: ffffffff8ec8194d RDI: ffffffff8cb00480 [ 897.676344][ C0] RBP: ffff888032dc5dc0 R08: ffffffff8178b9df R09: 0000000000000000 [ 897.684307][ C0] R10: ffffc90009fe72d8 R11: ffffffff81b3f9c0 R12: ffffffff9035aa20 [ 897.692272][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 897.700274][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 897.706418][ C0] ? unwind_next_frame+0x8f/0x2550 [ 897.711518][ C0] ? __sock_create+0x4b5/0xac0 [ 897.716272][ C0] ? unwind_next_frame+0x8f/0x2550 [ 897.721380][ C0] unwind_next_frame+0xac/0x2550 [ 897.726318][ C0] ? unwind_next_frame+0x8f/0x2550 [ 897.731429][ C0] ? inet_create+0x7a9/0xff0 [ 897.736096][ C0] ? unwind_next_frame+0x8f/0x2550 [ 897.741200][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 897.747350][ C0] arch_stack_walk+0x11b/0x150 [ 897.752126][ C0] ? __sock_create+0x4b5/0xac0 [ 897.756886][ C0] stack_trace_save+0xa9/0x100 [ 897.761638][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 897.766996][ C0] save_stack+0x122/0x230 [ 897.771325][ C0] ? __pfx_save_stack+0x10/0x10 [ 897.776161][ C0] ? __free_frozen_pages+0xd1a/0xe10 [ 897.781425][ C0] ? __slab_free+0x269/0x2c0 [ 897.786012][ C0] ? qlist_free_all+0x99/0x100 [ 897.790782][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 897.796392][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 897.801141][ C0] ? __kmalloc_noprof+0x366/0x710 [ 897.806146][ C0] ? security_sk_alloc+0x52/0x360 [ 897.811151][ C0] ? sk_prot_alloc+0x101/0x210 [ 897.815895][ C0] ? sk_alloc+0x3a/0x390 [ 897.820113][ C0] ? inet_create+0x7a9/0xff0 [ 897.824695][ C0] ? __sock_create+0x4b5/0xac0 [ 897.829447][ C0] ? page_ext_put+0x97/0xc0 [ 897.833939][ C0] __reset_page_owner+0x73/0x2a0 [ 897.838861][ C0] __free_frozen_pages+0xd1a/0xe10 [ 897.843956][ C0] __slab_free+0x269/0x2c0 [ 897.848354][ C0] ? qlist_free_all+0x8e/0x100 [ 897.853129][ C0] qlist_free_all+0x99/0x100 [ 897.857706][ C0] kasan_quarantine_reduce+0x148/0x160 [ 897.863152][ C0] __kasan_kmalloc+0x22/0xb0 [ 897.867727][ C0] __kmalloc_noprof+0x366/0x710 [ 897.872556][ C0] ? sk_prot_alloc+0x57/0x210 [ 897.877211][ C0] ? __kmalloc_noprof+0x1a6/0x710 [ 897.882213][ C0] ? security_sk_alloc+0x52/0x360 [ 897.887235][ C0] ? security_sk_alloc+0x52/0x360 [ 897.892257][ C0] security_sk_alloc+0x52/0x360 [ 897.897101][ C0] sk_prot_alloc+0x101/0x210 [ 897.901676][ C0] sk_alloc+0x3a/0x390 [ 897.905729][ C0] inet_create+0x7a9/0xff0 [ 897.910152][ C0] ? inet_create+0x9d/0xff0 [ 897.914638][ C0] __sock_create+0x4b5/0xac0 [ 897.919218][ C0] rds_tcp_conn_path_connect+0x2d8/0x920 [ 897.924927][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 897.931065][ C0] ? lock_acquire+0x115/0x350 [ 897.935726][ C0] rds_connect_worker+0x1d8/0x290 [ 897.940733][ C0] ? process_scheduled_works+0x97a/0x1630 [ 897.946453][ C0] process_scheduled_works+0xc3d/0x1630 [ 897.951997][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 897.957974][ C0] ? assign_work+0x3cf/0x5d0 [ 897.962574][ C0] worker_thread+0xa47/0xfb0 [ 897.967179][ C0] kthread+0x38b/0x480 [ 897.971241][ C0] ? __pfx_worker_thread+0x10/0x10 [ 897.976340][ C0] ? __pfx_kthread+0x10/0x10 [ 897.980916][ C0] ret_from_fork+0x514/0xb70 [ 897.985494][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 897.990590][ C0] ? __switch_to+0xc78/0x1410 [ 897.995251][ C0] ? __pfx_kthread+0x10/0x10 [ 897.999821][ C0] ret_from_fork_asm+0x1a/0x30 [ 898.004580][ C0] [ 898.007586][ C0] rcu: rcu_preempt kthread starved for 2970 jiffies! g243649 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 898.018603][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 898.028552][ C0] rcu: RCU grace-period kthread stack dump: [ 898.034435][ C0] task:rcu_preempt state:R running task stack:27400 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 898.048002][ C0] Call Trace: [ 898.051275][ C0] [ 898.054203][ C0] __schedule+0x18a6/0x5c10 [ 898.058712][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 898.063816][ C0] ? __pfx___schedule+0x10/0x10 [ 898.068646][ C0] ? lock_acquire+0x115/0x350 [ 898.073309][ C0] ? schedule+0x90/0x2b0 [ 898.077539][ C0] schedule+0x164/0x2b0 [ 898.081693][ C0] schedule_timeout+0x152/0x2c0 [ 898.086533][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 898.091907][ C0] ? __pfx_process_timeout+0x10/0x10 [ 898.097176][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 898.102963][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 898.108491][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 898.114025][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 898.118859][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 898.124993][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 898.130259][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 898.135456][ C0] rcu_gp_kthread+0x9c/0x340 [ 898.140029][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 898.145206][ C0] ? __kthread_parkme+0x71/0x1f0 [ 898.150138][ C0] ? __kthread_parkme+0x199/0x1f0 [ 898.155147][ C0] kthread+0x38b/0x480 [ 898.159198][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 898.164373][ C0] ? __pfx_kthread+0x10/0x10 [ 898.168941][ C0] ret_from_fork+0x514/0xb70 [ 898.173523][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 898.178614][ C0] ? __switch_to+0xc78/0x1410 [ 898.183377][ C0] ? __pfx_kthread+0x10/0x10 [ 898.187988][ C0] ret_from_fork_asm+0x1a/0x30 [ 898.192770][ C0] [ 898.195782][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 898.202102][ C0] CPU: 0 UID: 0 PID: 3231 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 898.213370][ C0] Tainted: [L]=SOFTLOCKUP [ 898.217684][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 898.227720][ C0] Workqueue: bat_events batadv_tt_purge [ 898.233376][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 898.239794][ C0] Code: f7 e8 cd 23 85 f5 f7 c3 00 02 00 00 74 05 e8 d0 cc b1 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 0e 76 f5 65 48 8b 05 6c ed eb 08 48 85 c0 74 18 5b 41 5e c3 [ 898.259379][ C0] RSP: 0018:ffffc90000007220 EFLAGS: 00000206 [ 898.265451][ C0] RAX: 0000000000000002 RBX: 0000000000000286 RCX: 8000000000000102 [ 898.273402][ C0] RDX: 0000000000000002 RSI: ffffffff8e9ef404 RDI: 0000000000000001 [ 898.281357][ C0] RBP: ffff888182086320 R08: ffffffff91e10cbf R09: 1ffffffff23c2197 [ 898.289307][ C0] R10: dffffc0000000000 R11: fffffbfff23c2198 R12: ffffffff8c4e6010 [ 898.297274][ C0] R13: ffff888182086310 R14: ffffffff9c348218 R15: 1ffff11030410c64 [ 898.305223][ C0] FS: 0000000000000000(0000) GS:ffff888123162000(0000) knlGS:0000000000000000 [ 898.314132][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.320697][ C0] CR2: 000055b438e037b0 CR3: 0000000010148000 CR4: 00000000003526f0 [ 898.328652][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 898.336618][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 898.344575][ C0] Call Trace: [ 898.347838][ C0] [ 898.350664][ C0] debug_object_activate+0x2ec/0x420 [ 898.355955][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 898.361306][ C0] rcu_do_enqueue+0x2a/0x870 [ 898.365880][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 898.371145][ C0] call_rcu+0x20e/0x300 [ 898.375307][ C0] ? __pfx_call_rcu+0x10/0x10 [ 898.379983][ C0] ? dst_release+0x126/0x1b0 [ 898.384563][ C0] skb_release_head_state+0x71/0x370 [ 898.389847][ C0] __kfree_skb+0x24/0x210 [ 898.394178][ C0] nft_synproxy_eval_v4+0x36a/0x4e0 [ 898.399469][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 898.405178][ C0] ? nf_ip_checksum+0x13c/0x510 [ 898.410111][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 898.415316][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 898.420588][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 898.426295][ C0] ? ieee80211_rx_handlers+0xcf76/0xcfe0 [ 898.432016][ C0] nft_do_chain+0x48d/0x1b10 [ 898.436622][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 898.442413][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 898.447420][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 898.452681][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 898.457873][ C0] nft_do_chain_ipv4+0x195/0x290 [ 898.462875][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 898.467726][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 898.473189][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 898.478465][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 898.483913][ C0] nf_hook_slow+0xc5/0x220 [ 898.488338][ C0] NF_HOOK+0x21f/0x3c0 [ 898.492482][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 898.498459][ C0] ? NF_HOOK+0x9e/0x3c0 [ 898.502616][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 898.507210][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 898.513208][ C0] ? ip_local_deliver+0x113/0x190 [ 898.518221][ C0] NF_HOOK+0x336/0x3c0 [ 898.522283][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 898.527382][ C0] ? NF_HOOK+0x9e/0x3c0 [ 898.531530][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 898.536118][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 898.541219][ C0] ? ip_rcv_core+0x88d/0xd50 [ 898.545804][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 898.550325][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 898.554841][ C0] process_backlog+0xa6b/0x18b0 [ 898.559698][ C0] ? process_backlog+0x3de/0x18b0 [ 898.564728][ C0] __napi_poll+0xaa/0x330 [ 898.569064][ C0] net_rx_action+0x61d/0xf50 [ 898.573655][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 898.578766][ C0] handle_softirqs+0x265/0x8d0 [ 898.583517][ C0] ? batadv_tt_purge+0x4ee/0xa40 [ 898.588454][ C0] do_softirq+0x77/0xd0 [ 898.592607][ C0] [ 898.595520][ C0] [ 898.598439][ C0] __local_bh_enable_ip+0x100/0x140 [ 898.603617][ C0] batadv_tt_purge+0x4ee/0xa40 [ 898.608397][ C0] ? process_scheduled_works+0x97a/0x1630 [ 898.614113][ C0] process_scheduled_works+0xc3d/0x1630 [ 898.619686][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 898.625659][ C0] ? assign_work+0x3af/0x5d0 [ 898.630264][ C0] rescuer_thread+0x84a/0x12a0 [ 898.635020][ C0] ? rescuer_thread+0xb8/0x12a0 [ 898.639873][ C0] kthread+0x38b/0x480 [ 898.643928][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 898.649196][ C0] ? __pfx_kthread+0x10/0x10 [ 898.653772][ C0] ret_from_fork+0x514/0xb70 [ 898.658367][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 898.663456][ C0] ? __switch_to+0xc78/0x1410 [ 898.668119][ C0] ? __pfx_kthread+0x10/0x10 [ 898.672692][ C0] ret_from_fork_asm+0x1a/0x30 [ 898.677450][ C0]