last executing test programs: 6m19.168818263s ago: executing program 1 (id=1091): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x64ab, 0x10000, 0x1, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)=0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5c4, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x1, 0xfbf, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x9}}}, &(0x7f00000002c0)) 6m19.053656826s ago: executing program 1 (id=1093): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000003c0), 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000013c0)={@private=0xe1010203, @empty, 0x1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000001400)="340000001a00010001000000000000000220000000000000000100000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) 6m18.887577879s ago: executing program 1 (id=1095): userfaultfd(0x80001) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='0 ', 0x2}, {&(0x7f0000000340)='4 ', 0x2}, {&(0x7f0000000380)='0 3', 0x3}], 0x3) 6m18.684758046s ago: executing program 1 (id=1098): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000001380)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001480)='\x00', 0x89901) move_mount(r0, &(0x7f00000014c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x262) 6m18.41951801s ago: executing program 1 (id=1102): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000640)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24004000}], 0x1, 0x20004870) 6m16.164604148s ago: executing program 1 (id=1110): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) 6m15.44734115s ago: executing program 32 (id=1110): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) 5m24.540420808s ago: executing program 5 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x0, 0x0) read(r1, &(0x7f0000000800)=""/32, 0x20) 4m37.944265395s ago: executing program 5 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x0, 0x0) read(r1, &(0x7f0000000800)=""/32, 0x20) 3m39.786878999s ago: executing program 5 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x0, 0x0) read(r1, &(0x7f0000000800)=""/32, 0x20) 1m44.331379633s ago: executing program 3 (id=1930): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000fc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x9, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1m43.848457307s ago: executing program 3 (id=1931): openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000500)='LLLLLLLLLLLLLL', 0xe}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x33, 0x1083, 0x20000a2e, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000040)=0x3) 1m40.115945547s ago: executing program 3 (id=1940): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) fsopen(&(0x7f0000000480)='pstore\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000"], &(0x7f0000000600)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r4}, 0xc) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 1m38.759986126s ago: executing program 3 (id=1941): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0xc814}, 0x4000010) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671d", 0xc9}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1m36.327345946s ago: executing program 3 (id=1947): prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000008c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000940), 0x0, 0x0) read$msr(r3, &(0x7f0000000980)=""/102392, 0x18ff8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000580)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) 1m34.900107539s ago: executing program 3 (id=1948): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(&(0x7f0000000900)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000980)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000ac0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000b00)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m19.273435638s ago: executing program 33 (id=1948): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(&(0x7f0000000900)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000980)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000ac0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000b00)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23.082223117s ago: executing program 4 (id=2018): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='+cpuset\n\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cgrp2/p0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cgrp2/p1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgrp2/p0/cpuset.cpus\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='0\n\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000480)='root\n', 0x5) 19.101284489s ago: executing program 4 (id=2023): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000009bc0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000022bc0)=0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000800)=[{0x0, 0x0, 0x0}], 0x1, 0x80001) 17.816015966s ago: executing program 4 (id=2024): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@gettaction={0x2c, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) 11.506613085s ago: executing program 0 (id=2028): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000b40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000bc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000c00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019c00)=0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000019e00)={0x800080, 0x7959, 0xffffffff, 0x5, 0x4032f6, 0x558}) io_setup(0x3fd, &(0x7f0000019e80)=0x0) io_submit(r4, 0x1, &(0x7f0000019f00)=[&(0x7f0000019f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000000000}]) openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10.248929846s ago: executing program 0 (id=2029): socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000380)={0x2, &(0x7f00000000c0)=[{0x20, '\x00', @data=0x37ad, 0xfff}]}) 9.252507123s ago: executing program 0 (id=2032): r0 = syz_open_dev$mtd(&(0x7f0000001480), 0x1c000000000, 0x54ac03) ioctl$int_in(r0, 0x5452, &(0x7f00000014c0)=0x1ff) openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000015c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001600)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000001680), 0x2, 0x141102) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000001700)="94", 0xf000}, {0x0}], 0x2) rename(&(0x7f0000001740)='./file0/file0\x00', 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000001800)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[], 0x50) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000018c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001900)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001940)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x4, @loopback, 0x3}, r3, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000019c0)={0x6, 0x118, 0xfa00, {{0x80000000, 0x4, "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", 0x1, 0x28, 0x17, 0x3, 0x7, 0xb, 0x0, 0x1}, r3}}, 0x120) 8.154626766s ago: executing program 0 (id=2034): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x2e, &(0x7f0000000100)=ANY=[], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x3, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000180)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000040)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x300, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000200)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/udp6\x00') r7 = socket(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) preadv(r6, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/36, 0x24}], 0x1, 0x10000, 0xfffffefc) r8 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x5) writev(r8, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, &(0x7f00000005c0)) sched_getscheduler(r0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r6, 0x0, 0x0, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffb, 0x400, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c96, 0x200, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21a7, 0x8200, 0x6, 0x368}}], 0x1, &(0x7f0000000a40)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r9, '\x00', {0x2, 0x6fb, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)}, {0x0}, {&(0x7f0000000cc0)="345be9bc0ca08ff83b49f8f8cb8edb281f08eae37d3fda2646a5e98a9717dfa4c602fcbdd7ccc0132130093f8fae14f7391e05254387734676dd061e9786b41898adc3a698a6a7f7f485b4b6a330209561942c5d24b277d275712d7a", 0x5c}, {&(0x7f0000000dc0)="214bc39b157d689fe22c6a000a72ef1c0d2b51f7a7c8bfcc3deabc46a118b8fc5093a2c290", 0x25}], 0x5, &(0x7f0000000e40)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x80000) 6.620252191s ago: executing program 2 (id=2035): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000680)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/set_event\x00', 0x121302, 0x0) 5.563002506s ago: executing program 0 (id=2036): mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x202001, 0x0) mkdir(&(0x7f0000000bc0)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x0, 0x0) read(r0, &(0x7f0000000c80), 0xfa0) syz_clone3(&(0x7f0000000cc0)={0x4284000, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000d40), 0x0, {r0}}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000dc0)='./config\x00', &(0x7f0000000e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x87) write(r1, &(0x7f0000000f00)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='myproc\x00', 0x0, 0x4) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001080)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001140)='dummy_udc.0\n', 0xc) 5.374787738s ago: executing program 4 (id=2037): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x4800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003540)={0x2020}, 0x2020) splice(r0, 0x0, r1, 0x0, 0x10, 0x7) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) set_mempolicy(0x4005, &(0x7f00000002c0)=0x2e8d, 0x6) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0xd) r3 = open(&(0x7f0000000380)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201002) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000580)=""/220, 0xdc) creat(&(0x7f00000000c0)='./bus\x00', 0xd4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.370205246s ago: executing program 2 (id=2038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000140)="b8", 0x1, 0x800, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0), &(0x7f0000001240)=0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfc) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x4000040) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000012c0)='./sys\x00', &(0x7f0000001300)='sysfs\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001340)={'dummy0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) write(r2, &(0x7f00000013c0)="0a00000000000060d0", 0x9) 4.076117868s ago: executing program 2 (id=2039): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x2000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x90], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd2(0x80, 0x801) eventfd2(0x8000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2702, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) eventfd2(0xe5c, 0x80000) r6 = eventfd2(0x7e, 0x80800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000001c0)={0x2f, 0x8000000, 0x1, r6, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.089963707s ago: executing program 2 (id=2040): prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000009c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x12, 0xc, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x8, 0x0, 0x0, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) socket(0x2, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000480), 0x4) write(r4, &(0x7f00000004c0), 0x0) 1.784642978s ago: executing program 4 (id=2041): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.680015296s ago: executing program 2 (id=2042): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 588.306005ms ago: executing program 4 (id=2043): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = eventfd(0x9) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x9, r1, 0x0, 0x0, 0x34}, &(0x7f0000000340)={0x0, 0x0, 0x8000000, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffefc, 0x1c, 0x0, 0x1, r1}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 502.335935ms ago: executing program 2 (id=2044): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r1, &(0x7f0000000740)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, &(0x7f00000000c0)={0x1d97bcb276896aea, 0x1, 0x8000, 0x0, 0x1, 0x7fff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x1}, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000000080)) 0s ago: executing program 0 (id=2045): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) ptrace$peekuser(0x3, r0, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, 0x0) sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) mount$bpf(0x0, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000740)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000780)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="1100"], 0xa) kernel console output (not intermixed with test programs): : 00007f2f665e6038 R14: 00007f2f665e5fa0 R15: 00007ffe2848a3a8 [ 402.771802][T10611] [ 402.786806][T10611] Mem-Info: [ 402.786826][T10611] active_anon:197 inactive_anon:6115 isolated_anon:0 [ 402.786826][T10611] active_file:9534 inactive_file:54065 isolated_file:0 [ 402.786826][T10611] unevictable:0 dirty:331 writeback:0 [ 402.786826][T10611] slab_reclaimable:12823 slab_unreclaimable:111767 [ 402.786826][T10611] mapped:29620 shmem:533 pagetables:1357 [ 402.786826][T10611] sec_pagetables:0 bounce:0 [ 402.786826][T10611] kernel_misc_reclaimable:0 [ 402.786826][T10611] free:1278165 free_pcp:5368 free_cma:0 [ 402.786888][T10611] Node 0 active_anon:788kB inactive_anon:24460kB active_file:37936kB inactive_file:216260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118480kB dirty:1320kB writeback:0kB shmem:2132kB kernel_stack:13896kB pagetables:5264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 402.786944][T10611] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 402.786993][T10611] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.787053][T10611] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 402.787094][T10611] Node 0 DMA32 free:1172272kB boost:0kB min:3896kB low:6404kB high:8912kB reserved_highatomic:0kB free_highatomic:0kB active_anon:788kB inactive_anon:24460kB active_file:37936kB inactive_file:216260kB unevictable:0kB writepending:1320kB zspages:0kB present:3129332kB managed:2537752kB mlocked:0kB bounce:0kB free_pcp:21468kB local_pcp:10812kB free_cma:0kB [ 402.787156][T10611] lowmem_reserve[]: 0 0 1 1 1 [ 402.787190][T10611] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1460kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 402.787246][T10611] lowmem_reserve[]: 0 0 0 0 0 [ 402.787285][T10611] Node 1 Normal free:3925028kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.787345][T10611] lowmem_reserve[]: 0 0 0 0 0 [ 402.787379][T10611] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 402.787498][T10611] Node 0 DMA32: 66*4kB (ME) 471*8kB (UM) 361*16kB (UM) 105*32kB (UM) 210*64kB (UME) 102*128kB (UM) 32*256kB (UME) 14*512kB (ME) 5*1024kB (M) 5*2048kB (UM) 269*4096kB (UM) = 1172208kB [ 402.788711][T10611] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 402.788838][T10611] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 8*16kB (UM) 14*32kB (UM) 5*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (M) 956*4096kB (M) = 3925028kB [ 402.789003][T10611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.789021][T10611] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 402.789037][T10611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.789054][T10611] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 402.789071][T10611] 64128 total pagecache pages [ 402.789085][T10611] 0 pages in swap cache [ 402.789092][T10611] Free swap = 124996kB [ 402.789100][T10611] Total swap = 124996kB [ 402.789109][T10611] 2097051 pages RAM [ 402.789116][T10611] 0 pages HighMem/MovableOnly [ 402.789123][T10611] 430632 pages reserved [ 402.789130][T10611] 0 pages cma reserved [ 403.013041][ T3181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.188827][ T1451] bridge_slave_0: left allmulticast mode [ 403.188863][ T1451] bridge_slave_0: left promiscuous mode [ 403.189093][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.638344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.643165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.644374][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.618714][ T1518] wlan1: Trigger new scan to find an IBSS to join [ 404.723325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.724509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.918093][ T1244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.630251][ T14] wlan1: Creating new IBSS network, BSSID 6e:29:9d:85:08:4f [ 405.630281][ T14] wlan1: Failed to join IBSS, beacons forbidden [ 405.797754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.906468][T10664] Bluetooth: MGMT ver 1.23 [ 405.906506][T10664] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 406.068516][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.128186][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.173588][ T1451] bond0 (unregistering): Released all slaves [ 406.229985][T10612] syzkaller1: entered allmulticast mode [ 406.232528][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 407.694608][T10700] net_ratelimit: 6 callbacks suppressed [ 407.694651][T10700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.990359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.996015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.170767][ T3181] wlan1: Trigger new scan to find an IBSS to join [ 408.696165][T10453] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.696337][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.696495][T10453] bridge_slave_0: entered allmulticast mode [ 408.753449][T10453] bridge_slave_0: entered promiscuous mode [ 408.771886][ T1391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.804962][T10453] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.805174][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.805319][T10453] bridge_slave_1: entered allmulticast mode [ 408.854212][T10453] bridge_slave_1: entered promiscuous mode [ 408.997759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.998646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.118441][T10453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.157068][T10453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.185946][ T2987] wlan1: Creating new IBSS network, BSSID 62:52:9a:25:44:72 [ 409.185989][ T2987] wlan1: Failed to join IBSS, beacons forbidden [ 409.605127][T10453] team0: Port device team_slave_0 added [ 409.635492][T10453] team0: Port device team_slave_1 added [ 409.883592][ T5871] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 409.988458][ T5871] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 410.037864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.038707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.096560][T10453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.096576][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.096596][T10453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.109994][T10453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.110010][T10453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.110037][T10453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.791575][T10453] hsr_slave_0: entered promiscuous mode [ 410.822703][T10453] hsr_slave_1: entered promiscuous mode [ 410.826239][T10453] debugfs: 'hsr0' already exists in 'hsr' [ 410.826261][T10453] Cannot create hsr debugfs directory [ 410.937886][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 411.080786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.081197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.201785][ T37] audit: type=1326 audit(1794101101.246:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10760 comm="syz.4.1581" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f6635fb19 code=0x0 [ 412.023721][ T1451] hsr_slave_0: left promiscuous mode [ 412.501548][ T3181] wlan1: Trigger new scan to find an IBSS to join [ 412.766246][ T1451] hsr_slave_1: left promiscuous mode [ 412.767429][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.767454][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.859320][ T1451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.859349][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.182650][ T1451] veth1_macvtap: left promiscuous mode [ 413.182762][ T1451] veth0_macvtap: left promiscuous mode [ 413.183027][ T1451] veth1_vlan: left promiscuous mode [ 413.219035][ T1451] veth0_vlan: left promiscuous mode [ 413.407304][ T1391] wlan1: Creating new IBSS network, BSSID f6:ce:f3:e8:d8:50 [ 413.407333][ T1391] wlan1: Failed to join IBSS, beacons forbidden [ 413.557975][ C1] net_ratelimit: 6 callbacks suppressed [ 413.557994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.558365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.625681][T10832] overlayfs: upper fs does not support file handles, falling back to index=off. [ 414.269627][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1598'. [ 414.446846][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1599'. [ 414.521751][ T1391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.532178][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.597936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.598857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.768635][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 414.833498][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 415.319756][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 415.637991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.638914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.986756][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.988400][ T2987] wlan1: Trigger new scan to find an IBSS to join [ 416.677809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.404061][ T2987] wlan1: Creating new IBSS network, BSSID b2:bb:c4:47:a7:43 [ 417.404090][ T2987] wlan1: Failed to join IBSS, beacons forbidden [ 418.243729][ T73] IPVS: starting estimator thread 0... [ 418.341266][T10897] IPVS: using max 9 ests per chain, 21600 per kthread [ 418.757774][ C1] net_ratelimit: 15 callbacks suppressed [ 418.757798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.758273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.166054][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.847012][ C1] IPVS: sh: TCP 127.0.0.1:5376 - no destination available [ 419.848398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.848965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.892299][ T2987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.903878][T10920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.958007][ T3181] wlan1: Trigger new scan to find an IBSS to join [ 420.111795][T10924] overlayfs: upper fs does not support file handles, falling back to index=off. [ 420.161610][T10906] bond2: entered allmulticast mode [ 420.324712][T10909] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 420.357534][T10909] bond1: (slave macvlan2): making interface the new active one [ 420.363284][T10909] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 420.367491][T10920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 420.608234][ T5751] bond_slave_0: entered promiscuous mode [ 420.608282][ T5751] bond_slave_1: entered promiscuous mode [ 420.773954][T10937] syz_tun: entered allmulticast mode [ 420.847138][T10937] pimreg: entered allmulticast mode [ 421.153902][T10935] syz_tun: left allmulticast mode [ 421.155280][T10935] pimreg: left allmulticast mode [ 423.600001][ T49] wlan1: Creating new IBSS network, BSSID 1e:68:80:16:e9:5c [ 423.600033][ T49] wlan1: Failed to join IBSS, beacons forbidden [ 424.391148][T10974] FAULT_INJECTION: forcing a failure. [ 424.391148][T10974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.391187][T10974] CPU: 0 UID: 0 PID: 10974 Comm: syz.0.1630 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 424.391217][T10974] Tainted: [L]=SOFTLOCKUP [ 424.391224][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 424.391237][T10974] Call Trace: [ 424.391246][T10974] [ 424.391254][T10974] dump_stack_lvl+0xe8/0x150 [ 424.391292][T10974] should_fail_ex+0x447/0x5e0 [ 424.391324][T10974] copy_fpstate_to_sigframe+0xb18/0xe30 [ 424.391360][T10974] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 424.391387][T10974] ? lock_acquire+0x115/0x350 [ 424.391425][T10974] ? do_raw_spin_lock+0x12b/0x2f0 [ 424.391453][T10974] ? fpu__alloc_mathframe+0xac/0x130 [ 424.391476][T10974] get_sigframe+0x603/0x830 [ 424.391546][T10974] ? __pfx_get_sigframe+0x10/0x10 [ 424.391564][T10974] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 424.391587][T10974] ? reacquire_held_locks+0x117/0x1a0 [ 424.391607][T10974] ? rt_spin_lock+0x1e2/0x400 [ 424.391633][T10974] x64_setup_rt_frame+0x164/0xc50 [ 424.391652][T10974] ? rt_spin_unlock+0x159/0x200 [ 424.391676][T10974] ? rt_spin_unlock+0x165/0x200 [ 424.391696][T10974] ? get_signal+0x1224/0x1430 [ 424.391752][T10974] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 424.391784][T10974] arch_do_signal_or_restart+0x45b/0x860 [ 424.391809][T10974] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 424.391839][T10974] ? ksys_read+0x248/0x270 [ 424.391866][T10974] exit_to_user_mode_loop+0x10e/0x770 [ 424.391896][T10974] ? rcu_is_watching+0x16/0xb0 [ 424.391921][T10974] do_syscall_64+0x328/0x520 [ 424.391944][T10974] ? trace_irq_disable+0x3b/0x140 [ 424.391963][T10974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.391982][T10974] ? clear_bhb_loop+0x70/0xc0 [ 424.392002][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.392021][T10974] RIP: 0033:0x7fe81da8fb17 [ 424.392039][T10974] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 424.392055][T10974] RSP: 002b:00007fe81bcde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.392076][T10974] RAX: 0000000000000000 RBX: 00007fe81dd15fa0 RCX: 00007fe81da8fb19 [ 424.392090][T10974] RDX: 0000000000000fe3 RSI: 0000200000000440 RDI: 0000000000000004 [ 424.392102][T10974] RBP: 00007fe81db27b70 R08: 0000000000000000 R09: 0000000000000000 [ 424.392114][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.392126][T10974] R13: 00007fe81dd16038 R14: 00007fe81dd15fa0 R15: 00007ffe8203d7c8 [ 424.392157][T10974] [ 424.400495][ T5756] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 425.638463][ T5756] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 425.639758][ T5756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.639812][ T5756] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 425.639838][ T5756] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 425.639878][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.922485][T10982] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 425.958668][ T73] wlan1: Trigger new scan to find an IBSS to join [ 426.115685][ T5756] cxacru 3-1:1.0: receive of cm 0x90 failed (-71) [ 426.176373][ T5756] usb 3-1: USB disconnect, device number 19 [ 426.185246][T11003] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 427.478253][ T1518] wlan1: Creating new IBSS network, BSSID c2:e9:17:94:89:34 [ 427.478282][ T1518] wlan1: Failed to join IBSS, beacons forbidden [ 428.093829][T11028] FAULT_INJECTION: forcing a failure. [ 428.093829][T11028] name failslab, interval 1, probability 0, space 0, times 0 [ 428.093865][T11028] CPU: 1 UID: 0 PID: 11028 Comm: syz.0.1638 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 428.093892][T11028] Tainted: [L]=SOFTLOCKUP [ 428.093899][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 428.093911][T11028] Call Trace: [ 428.093919][T11028] [ 428.093929][T11028] dump_stack_lvl+0xe8/0x150 [ 428.093967][T11028] should_fail_ex+0x447/0x5e0 [ 428.093999][T11028] should_failslab+0xa8/0x100 [ 428.094026][T11028] __kmalloc_cache_noprof+0x9c/0x670 [ 428.094049][T11028] ? copy_time_ns+0x1c2/0x640 [ 428.094067][T11028] ? copy_time_ns+0x1c2/0x640 [ 428.094093][T11028] copy_time_ns+0x1c2/0x640 [ 428.094116][T11028] create_new_namespaces+0x48d/0x6b0 [ 428.094158][T11028] unshare_nsproxy_namespaces+0x144/0x190 [ 428.094189][T11028] ksys_unshare+0x532/0x890 [ 428.094221][T11028] ? __pfx_ksys_unshare+0x10/0x10 [ 428.094250][T11028] ? rcu_is_watching+0x16/0xb0 [ 428.094284][T11028] __x64_sys_unshare+0x38/0x50 [ 428.094303][T11028] do_syscall_64+0x166/0x520 [ 428.094326][T11028] ? trace_irq_disable+0x3b/0x140 [ 428.094345][T11028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.094374][T11028] ? clear_bhb_loop+0x70/0xc0 [ 428.094402][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.094422][T11028] RIP: 0033:0x7fe81da8fb19 [ 428.094440][T11028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.094457][T11028] RSP: 002b:00007fe81bcde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 428.094479][T11028] RAX: ffffffffffffffda RBX: 00007fe81dd15fa0 RCX: 00007fe81da8fb19 [ 428.094495][T11028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000480 [ 428.094507][T11028] RBP: 00007fe81db27b70 R08: 0000000000000000 R09: 0000000000000000 [ 428.094518][T11028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.094530][T11028] R13: 00007fe81dd16038 R14: 00007fe81dd15fa0 R15: 00007ffe8203d7c8 [ 428.094561][T11028] [ 429.038564][ T5881] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 429.688171][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 429.779869][ T5881] usb 1-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 429.781555][ T5881] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 429.781591][ T5881] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 429.781641][ T5881] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 429.781668][ T5881] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.781693][ T5881] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.781717][ T5881] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.781743][ T5881] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 429.781770][ T5881] usb 1-1: config 168 interface 0 has no altsetting 0 [ 429.785493][ T5881] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 429.785530][ T5881] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 429.785576][ T5881] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 429.785603][ T5881] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.785627][ T5881] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.785652][ T5881] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.785677][ T5881] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 429.785704][ T5881] usb 1-1: config 168 interface 0 has no altsetting 0 [ 429.787219][ T5881] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 429.787252][ T5881] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 429.787296][ T5881] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 429.787321][ T5881] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.787346][ T5881] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.787370][ T5881] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.787395][ T5881] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 429.787422][ T5881] usb 1-1: config 168 interface 0 has no altsetting 0 [ 429.957963][ T73] wlan1: Trigger new scan to find an IBSS to join [ 430.111563][ T5881] usb 1-1: string descriptor 0 read error: -22 [ 430.111715][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.160666][ T5881] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 430.589326][ T73] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.591705][ T1391] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.591746][ T1391] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.591781][ T1391] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.636331][ T5751] usb 1-1: USB disconnect, device number 16 [ 431.320729][T10453] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 431.370470][ T1451] wlan1: Creating new IBSS network, BSSID 76:9d:e3:89:79:db [ 431.370498][ T1451] wlan1: Failed to join IBSS, beacons forbidden [ 431.420285][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.427334][T10453] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 431.530882][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.536346][T10453] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 431.595605][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.604390][T10453] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 431.654955][T10453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.246234][T11112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 432.300353][T10453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.495805][T10453] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.529226][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.529361][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.722713][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.722852][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.984511][ T2987] wlan1: Trigger new scan to find an IBSS to join [ 434.761699][ T5881] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 435.229428][ T5881] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 435.291997][ T5881] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 435.485691][ T5881] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 435.619482][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.619511][ T5881] usb 3-1: Product: syz [ 435.619525][ T5881] usb 3-1: Manufacturer: syz [ 435.619539][ T5881] usb 3-1: SerialNumber: syz [ 435.685046][ T2987] wlan1: Creating new IBSS network, BSSID 86:70:01:21:25:08 [ 435.685067][ T2987] wlan1: Failed to join IBSS, beacons forbidden [ 435.737814][ T5881] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 435.807997][ T5881] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 435.870627][ T5881] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 436.274880][T11152] FAULT_INJECTION: forcing a failure. [ 436.274880][T11152] name failslab, interval 1, probability 0, space 0, times 0 [ 436.274917][T11152] CPU: 1 UID: 0 PID: 11152 Comm: syz.4.1663 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 436.274948][T11152] Tainted: [L]=SOFTLOCKUP [ 436.274955][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 436.274967][T11152] Call Trace: [ 436.274976][T11152] [ 436.274985][T11152] dump_stack_lvl+0xe8/0x150 [ 436.275024][T11152] should_fail_ex+0x447/0x5e0 [ 436.275058][T11152] should_failslab+0xa8/0x100 [ 436.275083][T11152] __kmalloc_cache_noprof+0x9c/0x670 [ 436.275107][T11152] ? batadv_tvlv_handler_register+0x10d/0x4b0 [ 436.275237][T11152] ? batadv_tvlv_handler_register+0x10d/0x4b0 [ 436.275269][T11152] batadv_tvlv_handler_register+0x10d/0x4b0 [ 436.275294][T11152] ? batadv_tvlv_handler_register+0x46/0x4b0 [ 436.275318][T11152] ? __pfx_batadv_dat_tvlv_ogm_handler_v1+0x10/0x10 [ 436.275404][T11152] batadv_dat_init+0x1ca/0x270 [ 436.275436][T11152] batadv_mesh_init+0x480/0x6d0 [ 436.275464][T11152] batadv_meshif_init_late+0x981/0xde0 [ 436.275499][T11152] ? __pfx_batadv_meshif_init_late+0x10/0x10 [ 436.275523][T11152] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 436.275545][T11152] ? register_netdevice+0x59f/0x2290 [ 436.275602][T11152] ? register_netdevice+0x59f/0x2290 [ 436.275632][T11152] register_netdevice+0x6c5/0x2290 [ 436.275659][T11152] ? __kvmalloc_node_noprof+0x5cf/0x880 [ 436.275686][T11152] ? alloc_netdev_mqs+0xd70/0x1260 [ 436.275716][T11152] ? __pfx_register_netdevice+0x10/0x10 [ 436.275739][T11152] ? validate_linkmsg+0x809/0xa50 [ 436.275834][T11152] ? rtnl_create_link+0xa04/0xd70 [ 436.275861][T11152] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 436.275888][T11152] rtnl_newlink_create+0x305/0x7b0 [ 436.275915][T11152] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 436.275949][T11152] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 436.275977][T11152] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 436.276006][T11152] rtnl_newlink+0x167a/0x1c30 [ 436.276045][T11152] ? __pfx_rtnl_newlink+0x10/0x10 [ 436.276070][T11152] ? __pfx___set_cpus_allowed_ptr_locked+0x10/0x10 [ 436.276115][T11152] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 436.276170][T11152] ? ___migrate_enable+0x19c/0x1f0 [ 436.276191][T11152] ? kmem_cache_free+0x187/0x6d0 [ 436.276214][T11152] ? __pfx____migrate_enable+0x10/0x10 [ 436.276243][T11152] ? __lock_acquire+0x747/0x2de0 [ 436.276277][T11152] ? __pfx_hook_capable+0x10/0x10 [ 436.276303][T11152] ? lockdep_hardirqs_on+0x7b/0x110 [ 436.276327][T11152] ? __pfx_hook_capable+0x10/0x10 [ 436.276349][T11152] ? __dev_queue_xmit+0x2a0/0x3a70 [ 436.276371][T11152] ? __dev_queue_xmit+0x1f26/0x3a70 [ 436.276420][T11152] ? __pfx_rtnl_newlink+0x10/0x10 [ 436.276437][T11152] rtnetlink_rcv_msg+0x802/0xc00 [ 436.276461][T11152] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 436.276480][T11152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 436.276503][T11152] ? __copy_skb_header+0xa3/0x4a0 [ 436.276538][T11152] netlink_rcv_skb+0x226/0x4a0 [ 436.276647][T11152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 436.276669][T11152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.276720][T11152] netlink_unicast+0x90c/0xac0 [ 436.276768][T11152] netlink_sendmsg+0x7f0/0xb20 [ 436.276804][T11152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.276837][T11152] ? __lock_acquire+0x747/0x2de0 [ 436.276871][T11152] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 436.276905][T11152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.276934][T11152] sock_sendmsg_nosec+0x14e/0x190 [ 436.276963][T11152] ____sys_sendmsg+0x565/0x870 [ 436.276996][T11152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.277030][T11152] ? import_iovec+0x73/0xa0 [ 436.277097][T11152] ___sys_sendmsg+0x2a5/0x360 [ 436.277115][T11152] ? __lock_acquire+0x747/0x2de0 [ 436.277148][T11152] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.277173][T11152] ? futex_wait+0x2a2/0x390 [ 436.277239][T11152] ? __fget_files+0x3a8/0x420 [ 436.277264][T11152] ? __fget_files+0x2a/0x420 [ 436.277301][T11152] __x64_sys_sendmsg+0x1b7/0x290 [ 436.277325][T11152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.277374][T11152] do_syscall_64+0x166/0x520 [ 436.277398][T11152] ? trace_irq_disable+0x3b/0x140 [ 436.277417][T11152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.277438][T11152] ? clear_bhb_loop+0x70/0xc0 [ 436.277464][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.277483][T11152] RIP: 0033:0x7f2f6635fb19 [ 436.277503][T11152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.277520][T11152] RSP: 002b:00007f2f645ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.277542][T11152] RAX: ffffffffffffffda RBX: 00007f2f665e5fa0 RCX: 00007f2f6635fb19 [ 436.277555][T11152] RDX: 0000000020000840 RSI: 0000200000004c40 RDI: 0000000000000006 [ 436.277567][T11152] RBP: 00007f2f663f7b70 R08: 0000000000000000 R09: 0000000000000000 [ 436.277578][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.277589][T11152] R13: 00007f2f665e6038 R14: 00007f2f665e5fa0 R15: 00007ffe2848a3a8 [ 436.277624][T11152] [ 436.938937][T11152] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 437.958627][ T3193] wlan1: Trigger new scan to find an IBSS to join [ 438.190741][T11190] netlink: 'syz.4.1670': attribute type 4 has an invalid length. [ 438.253613][T11192] netlink: 'syz.4.1670': attribute type 4 has an invalid length. [ 438.278121][T11143] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 438.306184][ T5751] usb 3-1: USB disconnect, device number 20 [ 438.382184][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 438.401609][ T5751] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 438.434585][T10453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.446924][ T5751] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 438.450356][ T5751] ti_usb_3410_5052 3-1:2.0: device disconnected [ 438.859432][ T1027] wlan1: Creating new IBSS network, BSSID b6:73:eb:33:6a:9e [ 438.859454][ T1027] wlan1: Failed to join IBSS, beacons forbidden [ 438.965580][T11201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 440.141761][T10453] veth0_vlan: entered promiscuous mode [ 440.160429][T10453] veth1_vlan: entered promiscuous mode [ 440.245835][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.245904][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.395520][T10453] veth0_macvtap: entered promiscuous mode [ 440.591911][T10453] veth1_macvtap: entered promiscuous mode [ 440.631897][T10453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.696624][T10453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.818424][ T2987] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.818464][ T2987] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.818491][ T2987] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.818516][ T2987] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.905244][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 441.000699][ T1518] wlan1: Trigger new scan to find an IBSS to join [ 441.979670][ T1391] wlan1: Creating new IBSS network, BSSID 5a:1d:d2:ad:e7:1e [ 441.979699][ T1391] wlan1: Failed to join IBSS, beacons forbidden [ 443.958418][ T1027] wlan1: Creating new IBSS network, BSSID 42:86:42:ce:dd:29 [ 443.958461][ T1027] wlan1: Failed to join IBSS, beacons forbidden [ 444.007405][ T5756] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 444.027165][ T5756] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 445.255617][T11292] FAULT_INJECTION: forcing a failure. [ 445.255617][T11292] name failslab, interval 1, probability 0, space 0, times 0 [ 445.255652][T11292] CPU: 0 UID: 0 PID: 11292 Comm: syz.2.1694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.255680][T11292] Tainted: [L]=SOFTLOCKUP [ 445.255688][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 445.255701][T11292] Call Trace: [ 445.255708][T11292] [ 445.255717][T11292] dump_stack_lvl+0xe8/0x150 [ 445.255758][T11292] should_fail_ex+0x447/0x5e0 [ 445.255791][T11292] should_failslab+0xa8/0x100 [ 445.255828][T11292] __kmalloc_noprof+0xf6/0x790 [ 445.255850][T11292] ? kobject_get_path+0xc5/0x2f0 [ 445.255964][T11292] ? kobject_get_path+0xc5/0x2f0 [ 445.256001][T11292] kobject_get_path+0xc5/0x2f0 [ 445.256036][T11292] kobject_uevent_env+0x2a1/0x9e0 [ 445.256065][T11292] device_add+0x544/0xb80 [ 445.256180][T11292] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 445.256245][T11292] wakeup_source_register+0x17f/0x390 [ 445.256270][T11292] ep_insert+0x112e/0x1990 [ 445.256307][T11292] ? __pfx_ep_insert+0x10/0x10 [ 445.256340][T11292] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.256366][T11292] ? mutex_lock_nested+0x14d/0x1d0 [ 445.256398][T11292] ? do_epoll_ctl_file+0x3ff/0xf00 [ 445.256422][T11292] do_epoll_ctl_file+0x8d5/0xf00 [ 445.256452][T11292] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 445.256477][T11292] ? __fget_files+0x3a8/0x420 [ 445.256507][T11292] ? __fget_files+0x2a/0x420 [ 445.256539][T11292] ? fdget+0x1b2/0x250 [ 445.256569][T11292] __se_sys_epoll_ctl+0x162/0x230 [ 445.256597][T11292] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 445.256630][T11292] do_syscall_64+0x166/0x520 [ 445.256653][T11292] ? trace_irq_disable+0x3b/0x140 [ 445.256678][T11292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.256700][T11292] ? clear_bhb_loop+0x70/0xc0 [ 445.256726][T11292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.256746][T11292] RIP: 0033:0x7f18a62cfb19 [ 445.256766][T11292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.256784][T11292] RSP: 002b:00007f18a451e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 445.256807][T11292] RAX: ffffffffffffffda RBX: 00007f18a6555fa0 RCX: 00007f18a62cfb19 [ 445.256832][T11292] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007 [ 445.256844][T11292] RBP: 00007f18a6367b70 R08: 0000000000000000 R09: 0000000000000000 [ 445.256857][T11292] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 445.256871][T11292] R13: 00007f18a6556038 R14: 00007f18a6555fa0 R15: 00007ffe2007a4c8 [ 445.256903][T11292] [ 445.493308][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 445.566955][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 445.576116][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 445.579931][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 445.580641][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 445.956772][ T37] audit: type=1326 audit(1794101136.006:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.2.1697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a62cfb19 code=0x7fc00000 [ 445.958305][ T73] wlan1: Trigger new scan to find an IBSS to join [ 446.038104][ T1391] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.095028][ T37] audit: type=1326 audit(1794101136.126:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.2.1697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f18a62cfb19 code=0x7fc00000 [ 446.096324][ T37] audit: type=1326 audit(1794101136.146:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.2.1697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f18a62c9897 code=0x7fc00000 [ 446.096485][ T37] audit: type=1326 audit(1794101136.146:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.2.1697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f18a6270e99 code=0x7fc00000 [ 446.096608][ T37] audit: type=1326 audit(1794101136.146:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.2.1697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f18a6270f5d code=0x7fc00000 [ 446.096850][ T37] audit: type=1326 audit(1794101136.146:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11301 comm="syz.2.1697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f18a62cfb19 code=0x7fc00000 [ 446.770856][ T1391] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.832708][ T14] wlan1: Creating new IBSS network, BSSID 16:8b:1f:59:2b:55 [ 446.832737][ T14] wlan1: Failed to join IBSS, beacons forbidden [ 446.960842][T11293] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.531419][ T1391] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.800474][ T5631] Bluetooth: hci0: command tx timeout [ 447.841048][ T5756] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 447.976322][ T1391] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.999398][ T5756] usb 4-1: New USB device found: idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 448.000565][ T5756] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 448.000590][ T5756] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 448.000609][ T5756] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 448.000646][ T5756] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 11669, setting to 1024 [ 448.000661][ T5756] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 1024 [ 448.000673][ T5756] usb 4-1: config 0 interface 0 has no altsetting 0 [ 448.053328][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.053355][ T5756] usb 4-1: Product: syz [ 448.053369][ T5756] usb 4-1: Manufacturer: syz [ 448.053382][ T5756] usb 4-1: SerialNumber: syz [ 448.156355][ T5756] usb 4-1: config 0 descriptor?? [ 448.163940][T11340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 448.180242][ T5756] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 448.185837][ T5756] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 448.211695][ T5756] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 448.211749][ T5756] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 448.246392][ T5756] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 448.255613][ T5756] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 448.255701][ T5756] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 448.284376][ T5756] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 448.352834][ T5756] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 448.352930][ T5756] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 448.386192][ T5756] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 448.433984][ T5756] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 448.434044][ T5756] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 448.473377][ T5756] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 448.500266][ T5756] usb 4-1: USB disconnect, device number 13 [ 448.560836][ T5756] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 449.442532][ T1518] wlan1: Trigger new scan to find an IBSS to join [ 449.501711][ T5756] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 449.897528][ T5631] Bluetooth: hci0: command tx timeout [ 450.263800][ T5756] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 450.654523][ T5756] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 450.655550][ T5756] keyspan 4-1:0.0: device disconnected [ 450.801706][ T3181] wlan1: Creating new IBSS network, BSSID 6e:76:b7:46:85:bb [ 450.801735][ T3181] wlan1: Failed to join IBSS, beacons forbidden [ 451.381208][ T5631] block nbd0: Receive control failed (result -107) [ 451.966347][ T5631] Bluetooth: hci0: command tx timeout [ 452.314139][T11366] nbd0: detected capacity change from 0 to 18 [ 452.416682][ T32] block nbd0: Dead connection, failed to find a fallback [ 452.416762][ T32] block nbd0: shutting down sockets [ 452.416974][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.426327][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.473384][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.473420][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.473545][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.473569][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.473934][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.473961][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.474084][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.474107][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.474299][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.474323][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.474453][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.474473][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.474592][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.474616][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.474674][T11005] ldm_validate_partition_table(): Disk read failed. [ 452.474768][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.474791][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.474907][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.474931][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 452.475183][T11005] Dev nbd0: unable to read RDB block 0 [ 452.475469][T11005] nbd0: unable to read partition table [ 452.475670][T11005] nbd0: partition table beyond EOD, truncated [ 452.713630][T11379] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 452.864699][T11005] ldm_validate_partition_table(): Disk read failed. [ 452.865326][T11005] Dev nbd0: unable to read RDB block 0 [ 452.865634][T11005] nbd0: unable to read partition table [ 452.865814][T11005] nbd0: partition table beyond EOD, truncated [ 452.874470][T11370] nbd0: detected capacity change from 18 to 8589934592 [ 452.926764][ T3181] wlan1: Trigger new scan to find an IBSS to join [ 453.892322][ T3181] wlan1: Creating new IBSS network, BSSID 4a:ca:85:ca:eb:88 [ 453.892352][ T3181] wlan1: Failed to join IBSS, beacons forbidden [ 454.037688][ T5631] Bluetooth: hci0: command tx timeout [ 454.438283][ T1391] bridge_slave_1: left allmulticast mode [ 454.438317][ T1391] bridge_slave_1: left promiscuous mode [ 454.439320][ T1391] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.549542][ T1391] bridge_slave_0: left allmulticast mode [ 455.549580][ T1391] bridge_slave_0: left promiscuous mode [ 455.552923][ T1391] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.960663][ T1027] wlan1: Trigger new scan to find an IBSS to join [ 457.249595][ T1451] wlan1: Creating new IBSS network, BSSID 56:a7:6e:df:bf:19 [ 457.249625][ T1451] wlan1: Failed to join IBSS, beacons forbidden [ 457.467767][T11463] netlink: 'syz.3.1730': attribute type 2 has an invalid length. [ 457.838854][ T1391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.940264][ T1391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.976824][ T1391] bond0 (unregistering): Released all slaves [ 458.093774][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1732'. [ 459.783030][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 459.950390][T11492] tipc: Started in network mode [ 459.950423][T11492] tipc: Node identity 5a2e592829b8, cluster identity 4711 [ 459.963263][ T73] wlan1: Trigger new scan to find an IBSS to join [ 459.970233][T11492] tipc: Enabled bearer , priority 0 [ 459.974550][T11486] syzkaller0: entered promiscuous mode [ 459.974573][T11486] syzkaller0: entered allmulticast mode [ 460.211443][T11482] tipc: Resetting bearer [ 460.257685][ T5756] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 460.369723][T11482] tipc: Disabling bearer [ 460.759839][ T5756] usb 3-1: unable to get BOS descriptor or descriptor too short [ 460.759898][ T5756] usb 3-1: New USB device found: idVendor=04fa, idProduct=4201, bcdDevice=0.40 [ 460.760926][ T5756] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 460.760959][ T5756] usb 3-1: can't read configurations, error -71 [ 460.809037][ T1518] wlan1: Creating new IBSS network, BSSID 46:b8:d8:ff:63:01 [ 460.809064][ T1518] wlan1: Failed to join IBSS, beacons forbidden [ 460.934570][T11513] FAULT_INJECTION: forcing a failure. [ 460.934570][T11513] name failslab, interval 1, probability 0, space 0, times 0 [ 460.934594][T11513] CPU: 0 UID: 0 PID: 11513 Comm: syz.3.1741 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 460.934609][T11513] Tainted: [L]=SOFTLOCKUP [ 460.934614][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 460.934621][T11513] Call Trace: [ 460.934625][T11513] [ 460.934631][T11513] dump_stack_lvl+0xe8/0x150 [ 460.934655][T11513] should_fail_ex+0x447/0x5e0 [ 460.934674][T11513] should_failslab+0xa8/0x100 [ 460.934688][T11513] __kmalloc_cache_noprof+0x9c/0x670 [ 460.934700][T11513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 460.934721][T11513] ? usbdev_open+0xa7/0x790 [ 460.934845][T11513] ? usbdev_open+0xa7/0x790 [ 460.934861][T11513] usbdev_open+0xa7/0x790 [ 460.934877][T11513] ? __pfx_usbdev_open+0x10/0x10 [ 460.934889][T11513] ? rt_spin_unlock+0x159/0x200 [ 460.934902][T11513] ? rt_spin_unlock+0x165/0x200 [ 460.934914][T11513] chrdev_open+0x4dc/0x600 [ 460.934928][T11513] ? __pfx_chrdev_open+0x10/0x10 [ 460.934940][T11513] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 460.934956][T11513] ? __pfx_chrdev_open+0x10/0x10 [ 460.934968][T11513] do_dentry_open+0x841/0x1410 [ 460.934988][T11513] vfs_open_consume+0x4a/0x360 [ 460.935000][T11513] ? path_openat+0x16e6/0x2100 [ 460.935020][T11513] path_openat+0x1701/0x2100 [ 460.935041][T11513] do_file_open+0x23e/0x4a0 [ 460.935052][T11513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 460.935068][T11513] ? __pfx_do_file_open+0x10/0x10 [ 460.935092][T11513] ? alloc_fd+0x6b2/0x760 [ 460.935113][T11513] do_sys_openat2+0x115/0x200 [ 460.935129][T11513] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.935146][T11513] ? do_user_addr_fault+0xd3f/0x1480 [ 460.935163][T11513] __x64_sys_openat+0x138/0x170 [ 460.935179][T11513] do_syscall_64+0x166/0x520 [ 460.935192][T11513] ? trace_irq_disable+0x3b/0x140 [ 460.935203][T11513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.935214][T11513] ? clear_bhb_loop+0x70/0xc0 [ 460.935226][T11513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.935237][T11513] RIP: 0033:0x7fab0034034e [ 460.935249][T11513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 460.935259][T11513] RSP: 002b:00007faafe5d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 460.935272][T11513] RAX: ffffffffffffffda RBX: 00007faafe5d66c0 RCX: 00007fab0034034e [ 460.935280][T11513] RDX: 0000000000120101 RSI: 00007faafe5d5c00 RDI: ffffffffffffff9c [ 460.935288][T11513] RBP: 00007faafe5d5c00 R08: 0000000000000000 R09: 0000000000000000 [ 460.935295][T11513] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 460.935307][T11513] R13: 00007fab00606038 R14: 00007fab00605fa0 R15: 00007ffe2d4c7078 [ 460.935325][T11513] [ 462.766753][T11293] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.769353][T11293] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.769528][T11293] bridge_slave_0: entered allmulticast mode [ 462.782213][T11532] FAULT_INJECTION: forcing a failure. [ 462.782213][T11532] name failslab, interval 1, probability 0, space 0, times 0 [ 462.782247][T11532] CPU: 0 UID: 0 PID: 11532 Comm: syz.0.1746 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.782275][T11532] Tainted: [L]=SOFTLOCKUP [ 462.782282][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 462.782294][T11532] Call Trace: [ 462.782302][T11532] [ 462.782311][T11532] dump_stack_lvl+0xe8/0x150 [ 462.782347][T11532] should_fail_ex+0x447/0x5e0 [ 462.782380][T11532] should_failslab+0xa8/0x100 [ 462.782408][T11532] __kmalloc_cache_noprof+0x9c/0x670 [ 462.782431][T11532] ? reuseport_alloc+0x13d/0x520 [ 462.782454][T11532] ? reuseport_alloc+0x13d/0x520 [ 462.782483][T11532] ? reuseport_alloc+0x25/0x520 [ 462.782502][T11532] reuseport_alloc+0x13d/0x520 [ 462.782522][T11532] ? reuseport_alloc+0x25/0x520 [ 462.782547][T11532] inet_hash+0x743/0xd20 [ 462.782677][T11532] inet_csk_listen_start+0x27a/0x380 [ 462.782711][T11532] __inet_listen_sk+0x1f1/0x300 [ 462.782776][T11532] inet_listen+0xa5/0x110 [ 462.782806][T11532] __x64_sys_listen+0x1cd/0x240 [ 462.782870][T11532] do_syscall_64+0x166/0x520 [ 462.782895][T11532] ? trace_irq_disable+0x3b/0x140 [ 462.782917][T11532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.782939][T11532] ? clear_bhb_loop+0x70/0xc0 [ 462.782964][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.782984][T11532] RIP: 0033:0x7fe81da8fb19 [ 462.783005][T11532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.783022][T11532] RSP: 002b:00007fe81bcde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 462.783046][T11532] RAX: ffffffffffffffda RBX: 00007fe81dd15fa0 RCX: 00007fe81da8fb19 [ 462.783062][T11532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 462.783074][T11532] RBP: 00007fe81db27b70 R08: 0000000000000000 R09: 0000000000000000 [ 462.783088][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.783101][T11532] R13: 00007fe81dd16038 R14: 00007fe81dd15fa0 R15: 00007ffe8203d7c8 [ 462.783140][T11532] [ 462.904090][T11293] bridge_slave_0: entered promiscuous mode [ 462.917689][T11293] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.918907][T11293] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.919071][T11293] bridge_slave_1: entered allmulticast mode [ 462.936256][T11293] bridge_slave_1: entered promiscuous mode [ 463.007796][ T1518] wlan1: Trigger new scan to find an IBSS to join [ 463.449084][T11293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.473764][T11293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.006533][ T1451] wlan1: Creating new IBSS network, BSSID b6:8b:15:1a:d6:9a [ 464.006563][ T1451] wlan1: Failed to join IBSS, beacons forbidden [ 464.462394][ T1391] hsr_slave_0: left promiscuous mode [ 464.638840][ T1391] hsr_slave_1: left promiscuous mode [ 464.639807][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.639823][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.700648][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.700667][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.240794][ T1391] veth1_macvtap: left promiscuous mode [ 465.240911][ T1391] veth0_macvtap: left promiscuous mode [ 465.241154][ T1391] veth1_vlan: left promiscuous mode [ 465.241330][ T1391] veth0_vlan: left promiscuous mode [ 466.214295][ T3181] wlan1: Trigger new scan to find an IBSS to join [ 467.090163][ T3193] wlan1: Creating new IBSS network, BSSID 02:46:c0:d9:9b:bf [ 467.090192][ T3193] wlan1: Failed to join IBSS, beacons forbidden [ 470.005426][ T1313] wlan1: Trigger new scan to find an IBSS to join [ 470.778719][ T5871] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 470.795246][ T5871] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 470.931370][ T2987] wlan1: Creating new IBSS network, BSSID 66:49:02:4a:75:41 [ 470.931399][ T2987] wlan1: Failed to join IBSS, beacons forbidden [ 471.251874][ T1391] team0 (unregistering): Port device team_slave_1 removed [ 471.396439][ T1391] team0 (unregistering): Port device team_slave_0 removed [ 472.085284][T11293] team0: Port device team_slave_0 added [ 472.114596][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 472.543239][T11632] syzkaller0: entered promiscuous mode [ 472.543268][T11632] syzkaller0: entered allmulticast mode [ 472.560774][T11293] team0: Port device team_slave_1 added [ 473.216073][ T49] wlan1: Trigger new scan to find an IBSS to join [ 473.396844][ T37] audit: type=1326 audit(1794101163.446:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.428096][ T37] audit: type=1326 audit(1794101163.446:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.430181][ T37] audit: type=1326 audit(1794101163.486:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.430225][ T37] audit: type=1326 audit(1794101163.486:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.432879][ T37] audit: type=1326 audit(1794101163.486:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.432922][ T37] audit: type=1326 audit(1794101163.486:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.432961][ T37] audit: type=1326 audit(1794101163.486:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.433000][ T37] audit: type=1326 audit(1794101163.486:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.433051][ T37] audit: type=1326 audit(1794101163.486:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.433509][ T37] audit: type=1326 audit(1794101163.486:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.1773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2f6635fb19 code=0x7ffc0000 [ 473.733401][T11658] 0x000000000000-0x000000020000 : "" [ 473.917107][T11658] ftl_cs: FTL header not found. [ 473.955432][T11658] FAULT_INJECTION: forcing a failure. [ 473.955432][T11658] name failslab, interval 1, probability 0, space 0, times 0 [ 473.955468][T11658] CPU: 1 UID: 0 PID: 11658 Comm: syz.3.1777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 473.955496][T11658] Tainted: [L]=SOFTLOCKUP [ 473.955504][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 473.955517][T11658] Call Trace: [ 473.955526][T11658] [ 473.955535][T11658] dump_stack_lvl+0xe8/0x150 [ 473.955574][T11658] should_fail_ex+0x447/0x5e0 [ 473.955607][T11658] should_failslab+0xa8/0x100 [ 473.955632][T11658] ? __kernfs_new_node+0xe7/0xa70 [ 473.955658][T11658] kmem_cache_alloc_noprof+0x99/0x680 [ 473.955687][T11658] ? __kernfs_new_node+0xe7/0xa70 [ 473.955719][T11658] __kernfs_new_node+0xe7/0xa70 [ 473.955747][T11658] ? lock_acquire+0x115/0x350 [ 473.955779][T11658] ? __pfx___kernfs_new_node+0x10/0x10 [ 473.955813][T11658] ? kernfs_root+0x1c/0x230 [ 473.955845][T11658] ? kernfs_root+0x1c/0x230 [ 473.955868][T11658] ? kernfs_root+0x1c/0x230 [ 473.955889][T11658] ? kernfs_root+0x1c/0x230 [ 473.955916][T11658] kernfs_new_node+0xeb/0x140 [ 473.955944][T11658] kernfs_create_link+0xe3/0x240 [ 473.955977][T11658] sysfs_do_create_link_sd+0x83/0x110 [ 473.956032][T11658] device_create_sys_dev_entry+0x122/0x190 [ 473.956056][T11658] ? __pfx_device_create_sys_dev_entry+0x10/0x10 [ 473.956082][T11658] ? device_add+0x4eb/0xb80 [ 473.956103][T11658] ? device_create_file+0xf4/0x1b0 [ 473.956127][T11658] device_add+0x71e/0xb80 [ 473.956152][T11658] __add_disk+0x517/0xdb0 [ 473.956195][T11658] add_disk_fwnode+0x100/0x3a0 [ 473.956231][T11658] add_mtd_blktrans_dev+0xe81/0x14c0 [ 473.956341][T11658] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 473.956394][T11658] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 473.956417][T11658] ? mtdblock_add_mtd+0x57/0x240 [ 473.956451][T11658] mtdblock_add_mtd+0x18a/0x240 [ 473.956480][T11658] blktrans_notify_add+0x9f/0xf0 [ 473.956506][T11658] add_mtd_device+0x117f/0x17b0 [ 473.956572][T11658] ? __pfx_add_mtd_device+0x10/0x10 [ 473.956606][T11658] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 473.956631][T11658] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 473.956668][T11658] mtd_add_partition+0x388/0x590 [ 473.956697][T11658] ? __pfx_mtd_add_partition+0x10/0x10 [ 473.956740][T11658] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 473.956768][T11658] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 473.956827][T11658] mtdchar_ioctl+0x14fd/0x1bc0 [ 473.956855][T11658] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 473.956894][T11658] ? kasan_quarantine_put+0xbb/0x1f0 [ 473.956925][T11658] ? tomoyo_path_number_perm+0x219/0x5f0 [ 473.956956][T11658] ? tomoyo_path_number_perm+0x219/0x5f0 [ 473.956988][T11658] ? __lock_acquire+0x747/0x2de0 [ 473.957038][T11658] ? do_futex+0x3e7/0x4e0 [ 473.957092][T11658] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 473.957119][T11658] ? mutex_lock_nested+0x14d/0x1d0 [ 473.957148][T11658] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 473.957176][T11658] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 473.957200][T11658] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 473.957224][T11658] __se_sys_ioctl+0xff/0x170 [ 473.957250][T11658] do_syscall_64+0x166/0x520 [ 473.957273][T11658] ? trace_irq_disable+0x3b/0x140 [ 473.957294][T11658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.957315][T11658] ? clear_bhb_loop+0x70/0xc0 [ 473.957340][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.957360][T11658] RIP: 0033:0x7fab0037fb19 [ 473.957380][T11658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.957400][T11658] RSP: 002b:00007faafe5d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.957423][T11658] RAX: ffffffffffffffda RBX: 00007fab00605fa0 RCX: 00007fab0037fb19 [ 473.957438][T11658] RDX: 00002000000006c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 473.957452][T11658] RBP: 00007fab00417b70 R08: 0000000000000000 R09: 0000000000000000 [ 473.957465][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.957478][T11658] R13: 00007fab00606038 R14: 00007fab00605fa0 R15: 00007ffe2d4c7078 [ 473.957515][T11658] [ 474.188225][T11293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.188243][T11293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.188271][T11293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.215168][T11293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.215184][T11293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.215212][T11293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.307352][ T2987] wlan1: Creating new IBSS network, BSSID 9a:6a:d5:3b:e9:ba [ 474.307382][ T2987] wlan1: Failed to join IBSS, beacons forbidden [ 475.020023][T11293] hsr_slave_0: entered promiscuous mode [ 475.021203][T11293] hsr_slave_1: entered promiscuous mode [ 475.022034][T11293] debugfs: 'hsr0' already exists in 'hsr' [ 475.022052][T11293] Cannot create hsr debugfs directory [ 477.096423][ T1451] wlan1: Trigger new scan to find an IBSS to join [ 479.447401][ T14] wlan1: Creating new IBSS network, BSSID ea:8d:0d:2a:37:ed [ 479.447422][ T14] wlan1: Failed to join IBSS, beacons forbidden [ 479.655441][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 479.740099][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 479.740115][ T37] audit: type=1326 audit(1794101169.796:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 479.740238][ T37] audit: type=1326 audit(1794101169.796:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 479.740772][ T37] audit: type=1326 audit(1794101169.796:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 479.740928][ T37] audit: type=1326 audit(1794101169.796:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 479.741122][ T37] audit: type=1326 audit(1794101169.796:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 479.742036][ T37] audit: type=1326 audit(1794101169.796:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 479.742082][ T37] audit: type=1326 audit(1794101169.796:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 479.743514][ T37] audit: type=1326 audit(1794101169.796:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 479.744170][ T37] audit: type=1326 audit(1794101169.796:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 479.744283][ T37] audit: type=1326 audit(1794101169.796:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11735 comm="syz.3.1792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0037fb19 code=0x7ffc0000 [ 480.150982][ T5751] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 480.300973][ T5751] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 480.302531][ T5751] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.329827][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 480.329848][ T5751] usb 4-1: Product: syz [ 480.329862][ T5751] usb 4-1: Manufacturer: syz [ 480.329877][ T5751] usb 4-1: SerialNumber: syz [ 480.678866][ T5751] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 482.047195][ T1451] wlan1: Trigger new scan to find an IBSS to join [ 483.638346][ T1451] net_ratelimit: 67 callbacks suppressed [ 483.759262][T11783] FAULT_INJECTION: forcing a failure. [ 483.759262][T11783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.759294][T11783] CPU: 1 UID: 0 PID: 11783 Comm: syz.0.1800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 483.759321][T11783] Tainted: [L]=SOFTLOCKUP [ 483.759328][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 483.759340][T11783] Call Trace: [ 483.759349][T11783] [ 483.759359][T11783] dump_stack_lvl+0xe8/0x150 [ 483.759397][T11783] should_fail_ex+0x447/0x5e0 [ 483.759430][T11783] _copy_from_user+0x2d/0xb0 [ 483.759459][T11783] tcp_v4_parse_md5_keys+0x138/0x650 [ 483.759580][T11783] ? __pfx_tcp_v4_parse_md5_keys+0x10/0x10 [ 483.759607][T11783] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 483.759656][T11783] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 483.759683][T11783] ? lockdep_hardirqs_on+0x7b/0x110 [ 483.759713][T11783] do_tcp_setsockopt+0x1250/0x1f80 [ 483.759746][T11783] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 483.759781][T11783] ? __fget_files+0x2a/0x420 [ 483.759812][T11783] ? sock_common_setsockopt+0x36/0xc0 [ 483.759847][T11783] ? tcp_setsockopt+0x3d/0xe0 [ 483.759871][T11783] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 483.759900][T11783] do_sock_setsockopt+0x17c/0x1b0 [ 483.759926][T11783] __x64_sys_setsockopt+0x143/0x1b0 [ 483.759954][T11783] do_syscall_64+0x166/0x520 [ 483.759978][T11783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.759999][T11783] ? clear_bhb_loop+0x70/0xc0 [ 483.760025][T11783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.760044][T11783] RIP: 0033:0x7fe81da8fb19 [ 483.760064][T11783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.760081][T11783] RSP: 002b:00007fe81bcde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 483.760103][T11783] RAX: ffffffffffffffda RBX: 00007fe81dd15fa0 RCX: 00007fe81da8fb19 [ 483.760118][T11783] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000005 [ 483.760131][T11783] RBP: 00007fe81db27b70 R08: 00000000000000d8 R09: 0000000000000000 [ 483.760145][T11783] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 483.760159][T11783] R13: 00007fe81dd16038 R14: 00007fe81dd15fa0 R15: 00007ffe8203d7c8 [ 483.760192][T11783] [ 484.049931][ T1391] wlan1: Creating new IBSS network, BSSID 22:e7:02:3e:03:d9 [ 484.049945][ T1391] wlan1: Failed to join IBSS, beacons forbidden [ 484.253717][T11787] netlink: 'syz.0.1801': attribute type 4 has an invalid length. [ 484.304533][T11786] netlink: 'syz.0.1801': attribute type 4 has an invalid length. [ 485.960132][ T14] wlan1: Creating new IBSS network, BSSID 62:1f:c5:7e:15:72 [ 485.960160][ T14] wlan1: Failed to join IBSS, beacons forbidden [ 486.601511][T11815] tipc: Enabled bearer , priority 0 [ 486.603372][T11813] syzkaller0: entered promiscuous mode [ 486.603396][T11813] syzkaller0: entered allmulticast mode [ 486.668087][T11798] tipc: Resetting bearer [ 486.722057][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 487.039127][T11798] tipc: Disabling bearer [ 487.959077][ T49] wlan1: Trigger new scan to find an IBSS to join [ 488.690114][ T49] net_ratelimit: 57 callbacks suppressed [ 489.034838][ T49] wlan1: Creating new IBSS network, BSSID 16:90:45:43:99:c8 [ 489.034860][ T49] wlan1: Failed to join IBSS, beacons forbidden [ 489.045011][ T5751] usb 4-1: USB disconnect, device number 14 [ 489.066168][ T5751] usblp0: removed [ 490.668789][T11853] FAULT_INJECTION: forcing a failure. [ 490.668789][T11853] name failslab, interval 1, probability 0, space 0, times 0 [ 490.668828][T11853] CPU: 0 UID: 0 PID: 11853 Comm: syz.2.1811 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.668858][T11853] Tainted: [L]=SOFTLOCKUP [ 490.668865][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 490.668877][T11853] Call Trace: [ 490.668886][T11853] [ 490.668895][T11853] dump_stack_lvl+0xe8/0x150 [ 490.668934][T11853] should_fail_ex+0x447/0x5e0 [ 490.668966][T11853] should_failslab+0xa8/0x100 [ 490.668992][T11853] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 490.669016][T11853] ? alloc_vfsmnt+0x193/0x510 [ 490.669037][T11853] ? alloc_vfsmnt+0x193/0x510 [ 490.669066][T11853] kstrdup+0x42/0x100 [ 490.669090][T11853] alloc_vfsmnt+0x193/0x510 [ 490.669116][T11853] clone_mnt+0x4c/0xad0 [ 490.669137][T11853] ? is_subdir+0x291/0x2b0 [ 490.669165][T11853] ? is_subdir+0x2b/0x2b0 [ 490.669191][T11853] clone_private_mount+0x3a6/0x680 [ 490.669223][T11853] ovl_fill_super+0x2256/0x46a0 [ 490.669335][T11853] ? __pfx_ovl_fill_super+0x10/0x10 [ 490.669380][T11853] ? __pfx_set_anon_super_fc+0x10/0x10 [ 490.669402][T11853] ? __pfx_sget_fc+0x10/0x10 [ 490.669430][T11853] ? vfs_parse_monolithic_sep+0x322/0x360 [ 490.669452][T11853] ? __pfx_ovl_next_opt+0x10/0x10 [ 490.669481][T11853] ? rcu_is_watching+0x16/0xb0 [ 490.669505][T11853] ? cap_capable+0x123/0x460 [ 490.669531][T11853] ? __pfx_ovl_fill_super+0x10/0x10 [ 490.669557][T11853] get_tree_nodev+0xbe/0x150 [ 490.669579][T11853] vfs_get_tree+0x92/0x2a0 [ 490.669608][T11853] do_new_mount+0x325/0xb00 [ 490.669634][T11853] ? cap_capable+0x123/0x460 [ 490.669665][T11853] ? __pfx_do_new_mount+0x10/0x10 [ 490.669694][T11853] ? ns_capable+0x84/0xe0 [ 490.669722][T11853] ? path_mount+0x647/0x1050 [ 490.669752][T11853] ? user_path_at+0xd4/0x160 [ 490.669782][T11853] __se_sys_mount+0x31d/0x420 [ 490.669813][T11853] ? __pfx___se_sys_mount+0x10/0x10 [ 490.669847][T11853] ? __x64_sys_mount+0x20/0xc0 [ 490.669875][T11853] do_syscall_64+0x166/0x520 [ 490.669900][T11853] ? trace_irq_disable+0x3b/0x140 [ 490.669920][T11853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.669940][T11853] ? clear_bhb_loop+0x70/0xc0 [ 490.669965][T11853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.669985][T11853] RIP: 0033:0x7f18a62cfb19 [ 490.670005][T11853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.670022][T11853] RSP: 002b:00007f18a451e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 490.670047][T11853] RAX: ffffffffffffffda RBX: 00007f18a6555fa0 RCX: 00007f18a62cfb19 [ 490.670062][T11853] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000000000 [ 490.670076][T11853] RBP: 00007f18a6367b70 R08: 00002000000005c0 R09: 0000000000000000 [ 490.670089][T11853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.670101][T11853] R13: 00007f18a6556038 R14: 00007f18a6555fa0 R15: 00007ffe2007a4c8 [ 490.670137][T11853] [ 490.918127][T11853] overlayfs: failed to clone lowerpath [ 490.980429][ T3193] wlan1: Creating new IBSS network, BSSID 76:4b:3d:6f:5c:3c [ 490.980449][ T3193] wlan1: Failed to join IBSS, beacons forbidden [ 492.917694][ T2987] wlan1: Trigger new scan to find an IBSS to join [ 493.227631][ T1244] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 493.378650][ T1244] usb 1-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40 [ 493.380620][ T1244] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 493.380676][ T1244] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 493.384531][ T1244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.384550][ T1244] usb 1-1: Product: syz [ 493.384563][ T1244] usb 1-1: Manufacturer: syz [ 493.384575][ T1244] usb 1-1: SerialNumber: syz [ 493.721377][ T49] net_ratelimit: 62 callbacks suppressed [ 493.775215][ T49] wlan1: Creating new IBSS network, BSSID 72:64:79:21:cf:9d [ 493.775270][ T49] wlan1: Failed to join IBSS, beacons forbidden [ 499.149582][ T1391] net_ratelimit: 2 callbacks suppressed [ 499.269350][ T3181] wlan1: Trigger new scan to find an IBSS to join [ 499.434572][ T1244] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 499.767092][T11925] FAULT_INJECTION: forcing a failure. [ 499.767092][T11925] name failslab, interval 1, probability 0, space 0, times 0 [ 499.767124][T11925] CPU: 1 UID: 0 PID: 11925 Comm: syz.0.1824 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 499.767152][T11925] Tainted: [L]=SOFTLOCKUP [ 499.767159][T11925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 499.767172][T11925] Call Trace: [ 499.767180][T11925] [ 499.767191][T11925] dump_stack_lvl+0xe8/0x150 [ 499.767230][T11925] should_fail_ex+0x447/0x5e0 [ 499.767260][T11925] should_failslab+0xa8/0x100 [ 499.767296][T11925] __kmalloc_cache_noprof+0x9c/0x670 [ 499.767317][T11925] ? create_filter_start+0xad/0x1e0 [ 499.767368][T11925] ? create_filter_start+0xad/0x1e0 [ 499.767400][T11925] create_filter_start+0xad/0x1e0 [ 499.767432][T11925] apply_subsystem_event_filter+0x16c/0x1780 [ 499.767480][T11925] subsystem_filter_write+0x99/0xf0 [ 499.767507][T11925] ? __pfx_subsystem_filter_write+0x10/0x10 [ 499.767530][T11925] vfs_write+0x29f/0xbb0 [ 499.767559][T11925] ? __pfx_vfs_write+0x10/0x10 [ 499.767582][T11925] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 499.767610][T11925] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 499.767632][T11925] ? mutex_lock_nested+0x14d/0x1d0 [ 499.767658][T11925] ? fdget_pos+0x11e/0x160 [ 499.767694][T11925] ksys_write+0x156/0x270 [ 499.767717][T11925] ? __pfx_ksys_write+0x10/0x10 [ 499.767759][T11925] do_syscall_64+0x166/0x520 [ 499.767782][T11925] ? trace_irq_disable+0x3b/0x140 [ 499.767802][T11925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.767821][T11925] ? clear_bhb_loop+0x70/0xc0 [ 499.767846][T11925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.767864][T11925] RIP: 0033:0x7fe81da8fb19 [ 499.767883][T11925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.767900][T11925] RSP: 002b:00007fe81bcde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.767921][T11925] RAX: ffffffffffffffda RBX: 00007fe81dd15fa0 RCX: 00007fe81da8fb19 [ 499.767935][T11925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 499.767946][T11925] RBP: 00007fe81db27b70 R08: 0000000000000000 R09: 0000000000000000 [ 499.767958][T11925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.767970][T11925] R13: 00007fe81dd16038 R14: 00007fe81dd15fa0 R15: 00007ffe8203d7c8 [ 499.768004][T11925] [ 500.034767][ T1244] usb 1-1: unit 4 not found! [ 500.305168][ T3193] wlan1: Creating new IBSS network, BSSID 96:9f:ad:73:86:56 [ 500.305189][ T3193] wlan1: Failed to join IBSS, beacons forbidden [ 500.426798][T11293] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 500.525929][T11293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.542201][T11293] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 500.707686][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 500.882731][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 500.889787][ T31] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 500.903791][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.903813][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.915042][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.915062][ T31] usb 3-1: Product: syz [ 500.915076][ T31] usb 3-1: Manufacturer: syz [ 500.915091][ T31] usb 3-1: SerialNumber: syz [ 500.951182][T11293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.963871][T11293] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 500.984521][ T1244] usb 1-1: USB disconnect, device number 17 [ 501.093219][ T31] usb 3-1: 0:2 : does not exist [ 501.225482][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 501.457097][T11293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.486487][T11293] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 501.594940][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.595017][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.635162][T11621] udevd[11621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.781763][T11293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.842358][ T31] usb 3-1: USB disconnect, device number 23 [ 502.226689][T11971] input: syz1 as /devices/virtual/input/input11 [ 503.776649][T11954] udevd[11954]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.034069][T11293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.709234][ T73] net_ratelimit: 65 callbacks suppressed [ 506.300518][T11293] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.961230][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 508.019976][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 508.042029][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 508.065247][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 508.066282][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 509.799783][ T59] net_ratelimit: 61 callbacks suppressed [ 510.277752][ T5631] Bluetooth: hci5: command tx timeout [ 512.496509][ T5631] Bluetooth: hci5: command tx timeout [ 514.631251][ T5631] Bluetooth: hci5: command tx timeout [ 514.839760][T12013] rxe_eth0 speed is unknown, defaulting to 1000 [ 516.453454][ T1391] net_ratelimit: 89 callbacks suppressed [ 516.677691][ T5631] Bluetooth: hci5: command tx timeout [ 517.590660][T12087] syzkaller0: entered promiscuous mode [ 517.590681][T12087] syzkaller0: entered allmulticast mode [ 518.493414][T12102] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12103] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12102] [ 519.336586][T12098] bridge1: entered promiscuous mode [ 521.477762][ T3181] net_ratelimit: 62 callbacks suppressed [ 525.999298][ T2260] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 526.148471][ T2260] usb 4-1: New USB device found: idVendor=08b7, idProduct=ec00, bcdDevice=0.00 [ 526.150414][ T2260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.150435][ T2260] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.171207][ T2260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 526.171226][ T2260] usb 4-1: SerialNumber: syz [ 526.692318][ T2260] usb 4-1: 0:2 : does not exist [ 527.158210][ T3181] net_ratelimit: 58 callbacks suppressed [ 527.180297][ T1451] bridge_slave_1: left allmulticast mode [ 527.180327][ T1451] bridge_slave_1: left promiscuous mode [ 527.180655][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.245261][ T2260] usb 4-1: USB disconnect, device number 15 [ 527.349672][ T1451] bridge_slave_0: left allmulticast mode [ 527.349701][ T1451] bridge_slave_0: left promiscuous mode [ 527.349962][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.528304][T12137] udevd[12137]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.567940][ T5756] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 530.728455][ T5756] usb 3-1: Using ep0 maxpacket: 32 [ 530.729433][ T5756] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 530.731115][ T5756] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 530.731138][ T5756] usb 3-1: config 0 has no interface number 0 [ 530.731185][ T5756] usb 3-1: config 0 interface 12 has no altsetting 0 [ 530.734586][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.734606][ T5756] usb 3-1: Product: syz [ 530.734620][ T5756] usb 3-1: Manufacturer: syz [ 530.734634][ T5756] usb 3-1: SerialNumber: syz [ 530.830689][ T5756] usb 3-1: config 0 descriptor?? [ 530.908531][ T1451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.029267][ T1451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.223420][ T1451] bond0 (unregistering): Released all slaves [ 531.431274][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 532.412047][ T1313] net_ratelimit: 66 callbacks suppressed [ 534.644528][ T5756] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 534.644653][ T5756] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 534.644703][ T5756] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 534.644794][ T5756] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 534.731616][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 534.731631][ T37] audit: type=1326 audit(1794101224.776:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12219 comm="syz.3.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab0037fb19 code=0x0 [ 535.727195][ T5756] usb 3-1: USB disconnect, device number 24 [ 536.628492][T12239] syzkaller0: entered promiscuous mode [ 536.628513][T12239] syzkaller0: entered allmulticast mode [ 537.626743][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 537.925819][T12013] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.925938][T12013] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.926134][T12013] bridge_slave_0: entered allmulticast mode [ 537.939633][T12013] bridge_slave_0: entered promiscuous mode [ 537.953164][T12013] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.953275][T12013] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.953481][T12013] bridge_slave_1: entered allmulticast mode [ 537.971480][ T3181] net_ratelimit: 57 callbacks suppressed [ 538.013773][T12013] bridge_slave_1: entered promiscuous mode [ 539.677689][ T1451] hsr_slave_0: left promiscuous mode [ 539.717939][ T1451] hsr_slave_1: left promiscuous mode [ 539.719590][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.006162][ T1451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.758030][ T5631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 541.536380][T12305] netlink: 'syz.0.1897': attribute type 12 has an invalid length. [ 541.536398][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 541.877789][ T5756] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 541.878742][ T1451] team0 (unregistering): Port device team_slave_1 removed [ 541.928409][ T1451] team0 (unregistering): Port device team_slave_0 removed [ 542.027850][ T5756] usb 3-1: Using ep0 maxpacket: 16 [ 542.029436][ T5756] usb 3-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 542.031946][ T5756] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 542.031968][ T5756] usb 3-1: config 0 has no interface number 0 [ 542.032027][ T5756] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 542.032054][ T5756] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 542.036331][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.036350][ T5756] usb 3-1: Product: syz [ 542.036373][ T5756] usb 3-1: Manufacturer: syz [ 542.036387][ T5756] usb 3-1: SerialNumber: syz [ 542.114684][ T5756] usb 3-1: config 0 descriptor?? [ 542.115528][T12308] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.115629][T12308] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.333307][T12308] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.333429][T12308] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.502811][T12013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.662430][T12013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.836168][T12013] team0: Port device team_slave_0 added [ 542.908804][T12013] team0: Port device team_slave_1 added [ 543.080902][ T1391] net_ratelimit: 59 callbacks suppressed [ 543.220038][T12013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.220049][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.220075][T12013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.285165][T12013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.285171][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.285186][T12013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.100124][T12013] hsr_slave_0: entered promiscuous mode [ 544.101497][T12013] hsr_slave_1: entered promiscuous mode [ 544.102628][T12013] debugfs: 'hsr0' already exists in 'hsr' [ 544.102643][T12013] Cannot create hsr debugfs directory [ 544.172949][ T5756] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 544.550867][T12335] mmap: syz.3.1904 (12335) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 545.459225][ T5756] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 545.459249][ T5756] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 546.397851][ T5756] asix 3-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 546.398282][ T5756] asix 3-1:0.251: probe with driver asix failed with error -5 [ 546.439225][ T5756] usb 3-1: USB disconnect, device number 25 [ 547.284286][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 548.530444][T12357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.730677][ T1391] net_ratelimit: 62 callbacks suppressed [ 555.296560][ T1189] net_ratelimit: 62 callbacks suppressed [ 556.106197][ T5871] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 557.277584][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 557.278453][ T5871] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 557.280211][ T5871] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 557.280234][ T5871] usb 3-1: config 0 has no interface number 0 [ 557.280277][ T5871] usb 3-1: config 0 interface 12 has no altsetting 0 [ 557.283608][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.283628][ T5871] usb 3-1: Product: syz [ 557.283641][ T5871] usb 3-1: Manufacturer: syz [ 557.283656][ T5871] usb 3-1: SerialNumber: syz [ 557.423012][ T5871] usb 3-1: config 0 descriptor?? [ 559.705883][ T5871] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 559.705932][ T5871] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 559.705948][ T5871] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 559.706038][ T5871] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 559.775084][ T5871] usb 3-1: USB disconnect, device number 26 [ 560.441550][ T1169] net_ratelimit: 94 callbacks suppressed [ 560.903147][T12013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 561.054405][T12013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.055698][T12013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 561.262612][T12013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.622411][T12013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 561.893170][T12013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.243625][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.243687][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.413993][T12517] FAULT_INJECTION: forcing a failure. [ 563.413993][T12517] name failslab, interval 1, probability 0, space 0, times 0 [ 563.414025][T12517] CPU: 0 UID: 0 PID: 12517 Comm: syz.4.1936 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.414053][T12517] Tainted: [L]=SOFTLOCKUP [ 563.414061][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 563.414073][T12517] Call Trace: [ 563.414082][T12517] [ 563.414092][T12517] dump_stack_lvl+0xe8/0x150 [ 563.414131][T12517] should_fail_ex+0x447/0x5e0 [ 563.414168][T12517] should_failslab+0xa8/0x100 [ 563.414194][T12517] ? mas_alloc_nodes+0x291/0x350 [ 563.414220][T12517] kmem_cache_alloc_noprof+0x99/0x680 [ 563.414252][T12517] ? mas_alloc_nodes+0x291/0x350 [ 563.414284][T12517] mas_alloc_nodes+0x291/0x350 [ 563.414313][T12517] mas_preallocate+0x42d/0x840 [ 563.414344][T12517] ? __pfx_mas_preallocate+0x10/0x10 [ 563.414381][T12517] ? __mas_set_range+0x11a/0x3a0 [ 563.414411][T12517] __split_vma+0x403/0x860 [ 563.414442][T12517] ? __pfx___split_vma+0x10/0x10 [ 563.414477][T12517] ? mas_find+0x6d9/0xcb0 [ 563.414506][T12517] vms_gather_munmap_vmas+0x4e3/0x1370 [ 563.414548][T12517] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 563.414579][T12517] ? lock_acquire+0x115/0x350 [ 563.414619][T12517] do_vmi_align_munmap+0x2c7/0x4d0 [ 563.414640][T12517] ? get_old_pud+0x2a0/0x3c0 [ 563.414680][T12517] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 563.414733][T12517] ? mas_walk+0x381/0x490 [ 563.414757][T12517] ? mas_find+0x645/0xcb0 [ 563.414784][T12517] do_vmi_munmap+0x252/0x2d0 [ 563.414813][T12517] move_vma+0x158f/0x1ce0 [ 563.414861][T12517] ? __pfx_move_vma+0x10/0x10 [ 563.414902][T12517] ? arch_get_unmapped_area_topdown+0x269/0xc50 [ 563.414932][T12517] ? mtree_load+0x12a/0x780 [ 563.414966][T12517] ? mtree_load+0x12a/0x780 [ 563.414994][T12517] ? __futex_wait+0x3c9/0x480 [ 563.415026][T12517] ? cap_mmap_addr+0xaa/0xf0 [ 563.415056][T12517] ? bpf_lsm_mmap_addr+0x9/0x50 [ 563.415077][T12517] ? security_mmap_addr+0x71/0x240 [ 563.415113][T12517] mremap_to+0x851/0x950 [ 563.415144][T12517] ? check_prep_vma+0x817/0xcc0 [ 563.415168][T12517] ? __pfx_mremap_to+0x10/0x10 [ 563.415201][T12517] ? __pfx_check_prep_vma+0x10/0x10 [ 563.415228][T12517] ? mas_find+0x645/0xcb0 [ 563.415257][T12517] __se_sys_mremap+0xbc9/0x1260 [ 563.415308][T12517] ? __pfx___se_sys_mremap+0x10/0x10 [ 563.415359][T12517] ? __x64_sys_mremap+0x20/0xc0 [ 563.415386][T12517] do_syscall_64+0x166/0x520 [ 563.415409][T12517] ? trace_irq_disable+0x3b/0x140 [ 563.415428][T12517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.415449][T12517] ? clear_bhb_loop+0x70/0xc0 [ 563.415474][T12517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.415493][T12517] RIP: 0033:0x7f2f6635fb19 [ 563.415513][T12517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.415530][T12517] RSP: 002b:00007f2f645ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 563.415553][T12517] RAX: ffffffffffffffda RBX: 00007f2f665e5fa0 RCX: 00007f2f6635fb19 [ 563.415569][T12517] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ff1000 [ 563.415583][T12517] RBP: 00007f2f663f7b70 R08: 0000200000ff6000 R09: 0000000000000000 [ 563.415596][T12517] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 563.415608][T12517] R13: 00007f2f665e6038 R14: 00007f2f665e5fa0 R15: 00007ffe2848a3a8 [ 563.415639][T12517] [ 564.415560][T12013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 565.208618][T12540] Invalid ELF header magic: != ELF [ 565.448233][T12013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 565.524754][T12544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1941'. [ 565.564180][ T73] net_ratelimit: 64 callbacks suppressed [ 566.078531][T12544] ip6gre1: entered promiscuous mode [ 566.078549][T12544] ip6gre1: entered allmulticast mode [ 567.482297][T12567] tipc: Enabled bearer , priority 0 [ 567.482883][T12567] syzkaller0: entered promiscuous mode [ 567.482901][T12567] syzkaller0: entered allmulticast mode [ 567.572227][T12567] tipc: Resetting bearer [ 567.610874][T12564] tipc: Resetting bearer [ 567.858661][T12564] tipc: Disabling bearer [ 571.321193][ T1391] net_ratelimit: 54 callbacks suppressed [ 573.504530][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.671215][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.673804][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.694412][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.706645][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 575.957607][ T5631] Bluetooth: hci0: command tx timeout [ 576.771139][ C1] net_ratelimit: 64 callbacks suppressed [ 578.037658][ T5631] Bluetooth: hci0: command tx timeout [ 580.117692][ T5631] Bluetooth: hci0: command tx timeout [ 581.826727][ T49] net_ratelimit: 35 callbacks suppressed [ 582.197686][ T5631] Bluetooth: hci0: command tx timeout [ 582.993731][T12590] rxe_eth0 speed is unknown, defaulting to 1000 [ 586.688521][ T5881] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 587.450819][ T70] net_ratelimit: 85 callbacks suppressed [ 588.648771][ T5881] usb 1-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 588.764268][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 588.853099][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 588.868833][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 588.901169][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.901188][ T5881] usb 1-1: Product: syz [ 588.901203][ T5881] usb 1-1: Manufacturer: syz [ 588.901217][ T5881] usb 1-1: SerialNumber: syz [ 588.913765][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 588.923784][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.487297][ T5881] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 590.430078][T12719] ptp ptp0: new virtual clock ptp1 [ 590.435663][T12719] failed to create ptp aux_worker -4 [ 590.436187][T12719] ptp ptp0: delete virtual clock ptp1 [ 591.167875][ T5631] Bluetooth: hci5: command tx timeout [ 591.471461][ T5881] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 591.474476][ T5881] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 592.599185][ T59] net_ratelimit: 65 callbacks suppressed [ 593.602877][ T5881] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 593.993289][ T5631] Bluetooth: hci5: command tx timeout [ 594.324553][ T5881] usb 1-1: USB disconnect, device number 18 [ 594.696319][T12707] rxe_eth0 speed is unknown, defaulting to 1000 [ 595.003122][ T1518] bridge_slave_1: left allmulticast mode [ 595.003150][ T1518] bridge_slave_1: left promiscuous mode [ 595.003412][ T1518] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.309666][ T1518] bridge_slave_0: left allmulticast mode [ 595.309695][ T1518] bridge_slave_0: left promiscuous mode [ 595.309986][ T1518] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.241149][ T5631] Bluetooth: hci5: command tx timeout [ 598.286493][ C0] net_ratelimit: 73 callbacks suppressed [ 598.287979][ T5631] Bluetooth: hci5: command tx timeout [ 598.768581][ T1518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.428745][ T1518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.563226][ T1518] bond0 (unregistering): Released all slaves [ 601.224130][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 603.327583][ C0] net_ratelimit: 65 callbacks suppressed [ 606.244507][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 608.525682][ T2987] net_ratelimit: 51 callbacks suppressed [ 608.678251][T12590] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.678373][T12590] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.678573][T12590] bridge_slave_0: entered allmulticast mode [ 608.719148][T12590] bridge_slave_0: entered promiscuous mode [ 608.809674][T12590] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.809744][T12590] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.809893][T12590] bridge_slave_1: entered allmulticast mode [ 608.855090][T12590] bridge_slave_1: entered promiscuous mode [ 609.665105][T12861] FAULT_INJECTION: forcing a failure. [ 609.665105][T12861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 609.665142][T12861] CPU: 0 UID: 0 PID: 12861 Comm: syz.0.1986 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.665171][T12861] Tainted: [L]=SOFTLOCKUP [ 609.665180][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 609.665193][T12861] Call Trace: [ 609.665201][T12861] [ 609.665211][T12861] dump_stack_lvl+0xe8/0x150 [ 609.665249][T12861] should_fail_ex+0x447/0x5e0 [ 609.665282][T12861] prepare_alloc_pages+0x21e/0x650 [ 609.665314][T12861] __alloc_frozen_pages_noprof+0x1a1/0x440 [ 609.665342][T12861] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 609.665385][T12861] alloc_pages_mpol+0xd4/0x280 [ 609.665418][T12861] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 609.665447][T12861] vma_alloc_folio_noprof+0xe1/0x1e0 [ 609.665476][T12861] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 609.665507][T12861] ? vma_has_anon_rmap+0x95/0x270 [ 609.665536][T12861] do_pte_missing+0x7fb/0x2970 [ 609.665566][T12861] ? handle_mm_fault+0xe8/0x2130 [ 609.665596][T12861] handle_mm_fault+0xd42/0x2130 [ 609.665628][T12861] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 609.665652][T12861] ? handle_mm_fault+0xe8/0x2130 [ 609.665690][T12861] ? follow_page_pte+0x663/0xf20 [ 609.665716][T12861] ? __pfx_handle_mm_fault+0x10/0x10 [ 609.665747][T12861] ? follow_page_pte+0x74b/0xf20 [ 609.665783][T12861] ? __pfx_follow_page_pte+0x10/0x10 [ 609.665822][T12861] __get_user_pages+0x102f/0x1e80 [ 609.665879][T12861] __gup_longterm_locked+0x3e2/0x16f0 [ 609.665930][T12861] gup_fast_fallback+0x3a4/0x2740 [ 609.666001][T12861] ? trace_kmalloc+0x2a/0xf0 [ 609.666023][T12861] ? __pfx_gup_fast_fallback+0x10/0x10 [ 609.666047][T12861] ? __kvmalloc_node_noprof+0x5cf/0x880 [ 609.666071][T12861] ? is_valid_gup_args+0x11f/0x200 [ 609.666106][T12861] ? pin_user_pages_fast+0x4d/0xb0 [ 609.666133][T12861] io_pin_pages+0xc7/0x1a0 [ 609.666239][T12861] io_region_pin_pages+0x7d/0x190 [ 609.666270][T12861] io_create_region+0x361/0x460 [ 609.666302][T12861] io_allocate_scq_urings+0x1f3/0x7a0 [ 609.666351][T12861] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 609.666382][T12861] ? bpf_lsm_capable+0x9/0x20 [ 609.666406][T12861] ? security_capable+0x7e/0x2c0 [ 609.666436][T12861] io_uring_create+0x467/0x980 [ 609.666464][T12861] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 609.666495][T12861] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 609.666538][T12861] ? rcu_is_watching+0x16/0xb0 [ 609.666575][T12861] do_syscall_64+0x166/0x520 [ 609.666600][T12861] ? trace_irq_disable+0x3b/0x140 [ 609.666621][T12861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.666642][T12861] ? clear_bhb_loop+0x70/0xc0 [ 609.666667][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.666686][T12861] RIP: 0033:0x7fe81da8fb19 [ 609.666705][T12861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.666723][T12861] RSP: 002b:00007fe81bcde028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 609.666745][T12861] RAX: ffffffffffffffda RBX: 00007fe81dd15fa0 RCX: 00007fe81da8fb19 [ 609.666760][T12861] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001a40 [ 609.666774][T12861] RBP: 00007fe81db27b70 R08: 0000000000000000 R09: 0000000000000000 [ 609.666787][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.666800][T12861] R13: 00007fe81dd16038 R14: 00007fe81dd15fa0 R15: 00007ffe8203d7c8 [ 609.666835][T12861] [ 610.052187][ T1518] hsr_slave_0: left promiscuous mode [ 610.099624][ T1518] hsr_slave_1: left promiscuous mode [ 610.126414][ T1518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.169895][ T1518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.226188][T12865] file system registered [ 610.549377][T12867] FAULT_INJECTION: forcing a failure. [ 610.549377][T12867] name failslab, interval 1, probability 0, space 0, times 0 [ 610.549410][T12867] CPU: 0 UID: 0 PID: 12867 Comm: syz.4.1983 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.549438][T12867] Tainted: [L]=SOFTLOCKUP [ 610.549446][T12867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 610.549459][T12867] Call Trace: [ 610.549467][T12867] [ 610.549477][T12867] dump_stack_lvl+0xe8/0x150 [ 610.549515][T12867] should_fail_ex+0x447/0x5e0 [ 610.549548][T12867] should_failslab+0xa8/0x100 [ 610.549576][T12867] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 610.549599][T12867] ? __lock_acquire+0x747/0x2de0 [ 610.549625][T12867] ? __kernfs_new_node+0xac/0xa70 [ 610.549649][T12867] ? __kernfs_new_node+0xac/0xa70 [ 610.549680][T12867] kstrdup+0x42/0x100 [ 610.549704][T12867] __kernfs_new_node+0xac/0xa70 [ 610.549737][T12867] ? __pfx___kernfs_new_node+0x10/0x10 [ 610.549757][T12867] ? lock_acquire+0x115/0x350 [ 610.549785][T12867] ? kernfs_root+0x1c/0x230 [ 610.549814][T12867] ? kernfs_root+0x1c/0x230 [ 610.549836][T12867] ? kernfs_root+0x1c/0x230 [ 610.549855][T12867] ? kernfs_root+0x1c/0x230 [ 610.549882][T12867] kernfs_new_node+0xeb/0x140 [ 610.549911][T12867] kernfs_create_link+0xe3/0x240 [ 610.549947][T12867] sysfs_do_create_link_sd+0x83/0x110 [ 610.549973][T12867] device_add_class_symlinks+0x1d2/0x240 [ 610.550001][T12867] device_add+0x467/0xb80 [ 610.550025][T12867] tty_register_device_attr+0x428/0x9b0 [ 610.550111][T12867] ? __pfx_tty_register_device_attr+0x10/0x10 [ 610.550146][T12867] ? tty_port_init+0x140/0x1b0 [ 610.550226][T12867] ? gsm_dlci_alloc+0x341/0x650 [ 610.550286][T12867] gsm_activate_mux+0x110/0x2a0 [ 610.550312][T12867] gsmld_ioctl+0xcf5/0x1930 [ 610.550347][T12867] ? __pfx_gsmld_ioctl+0x10/0x10 [ 610.550384][T12867] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 610.550415][T12867] ? ldsem_down_read+0x12/0x40 [ 610.550444][T12867] ? __pfx_gsmld_ioctl+0x10/0x10 [ 610.550470][T12867] tty_ioctl+0x9c3/0xde0 [ 610.550497][T12867] ? __pfx_tty_ioctl+0x10/0x10 [ 610.550523][T12867] __se_sys_ioctl+0xff/0x170 [ 610.550550][T12867] do_syscall_64+0x166/0x520 [ 610.550572][T12867] ? trace_irq_disable+0x3b/0x140 [ 610.550594][T12867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.550614][T12867] ? clear_bhb_loop+0x70/0xc0 [ 610.550638][T12867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.550657][T12867] RIP: 0033:0x7f2f6635fb19 [ 610.550676][T12867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.550694][T12867] RSP: 002b:00007f2f645ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.550717][T12867] RAX: ffffffffffffffda RBX: 00007f2f665e5fa0 RCX: 00007f2f6635fb19 [ 610.550732][T12867] RDX: 0000200000000700 RSI: 0000000040204706 RDI: 0000000000000004 [ 610.550745][T12867] RBP: 00007f2f663f7b70 R08: 0000000000000000 R09: 0000000000000000 [ 610.550759][T12867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.550771][T12867] R13: 00007f2f665e6038 R14: 00007f2f665e5fa0 R15: 00007ffe2848a3a8 [ 610.550806][T12867] [ 611.341005][ T5617] ffs_data_put(): freeing [ 613.560043][ C0] net_ratelimit: 44 callbacks suppressed [ 613.829533][T12879] Bluetooth: MGMT ver 1.23 [ 613.829557][T12879] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 613.854064][ T1518] team0 (unregistering): Port device team_slave_1 removed [ 613.950352][ T1518] team0 (unregistering): Port device team_slave_0 removed [ 616.639260][T12590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.701272][T12590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.085593][T12590] team0: Port device team_slave_0 added [ 617.146788][T12902] syz.4.1996 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 617.146825][T12902] CPU: 1 UID: 0 PID: 12902 Comm: syz.4.1996 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.146852][T12902] Tainted: [L]=SOFTLOCKUP [ 617.146859][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 617.146872][T12902] Call Trace: [ 617.146881][T12902] [ 617.146891][T12902] dump_stack_lvl+0xe8/0x150 [ 617.146938][T12902] dump_header+0xd3/0x4b0 [ 617.146972][T12902] out_of_memory+0x1021/0x13b0 [ 617.147009][T12902] ? __pfx_out_of_memory+0x10/0x10 [ 617.147031][T12902] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 617.147058][T12902] ? _mutex_lock_killable+0x14d/0x1c0 [ 617.147087][T12902] ? try_charge_memcg+0xa9e/0x1760 [ 617.147116][T12902] try_charge_memcg+0xb75/0x1760 [ 617.147163][T12902] ? __pfx_try_charge_memcg+0x10/0x10 [ 617.147195][T12902] ? percpu_ref_tryget+0x15/0x180 [ 617.147233][T12902] ? __obj_cgroup_charge+0x36/0x2d0 [ 617.147260][T12902] __obj_cgroup_charge+0x20a/0x2d0 [ 617.147280][T12902] ? __obj_cgroup_charge+0x36/0x2d0 [ 617.147305][T12902] __memcg_slab_post_alloc_hook+0x7d3/0xe00 [ 617.147351][T12902] __kmalloc_cache_noprof+0x429/0x670 [ 617.147373][T12902] ? mem_cgroup_css_alloc+0x1ca/0x1f10 [ 617.147393][T12902] ? mem_cgroup_css_alloc+0x1ca/0x1f10 [ 617.147406][T12590] team0: Port device team_slave_1 added [ 617.147422][T12902] mem_cgroup_css_alloc+0x1ca/0x1f10 [ 617.147459][T12902] cgroup_apply_control_enable+0x5b8/0xd40 [ 617.147530][T12902] cgroup_mkdir+0x121a/0x1480 [ 617.147565][T12902] ? __pfx_cgroup_mkdir+0x10/0x10 [ 617.147588][T12902] kernfs_iop_mkdir+0x213/0x360 [ 617.147621][T12902] vfs_mkdir+0x417/0x670 [ 617.147652][T12902] filename_mkdirat+0x288/0x560 [ 617.147681][T12902] ? __pfx_filename_mkdirat+0x10/0x10 [ 617.147707][T12902] ? do_getname+0x151/0x250 [ 617.147737][T12902] __se_sys_mkdirat+0x35/0x150 [ 617.147763][T12902] do_syscall_64+0x166/0x520 [ 617.147785][T12902] ? trace_irq_disable+0x3b/0x140 [ 617.147804][T12902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.147823][T12902] ? clear_bhb_loop+0x70/0xc0 [ 617.147847][T12902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.147866][T12902] RIP: 0033:0x7f2f6635fb19 [ 617.147887][T12902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.147904][T12902] RSP: 002b:00007f2f645ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 617.147925][T12902] RAX: ffffffffffffffda RBX: 00007f2f665e5fa0 RCX: 00007f2f6635fb19 [ 617.147947][T12902] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 617.147962][T12902] RBP: 00007f2f663f7b70 R08: 0000000000000000 R09: 0000000000000000 [ 617.147975][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.147988][T12902] R13: 00007f2f665e6038 R14: 00007f2f665e5fa0 R15: 00007ffe2848a3a8 [ 617.148021][T12902] [ 618.677846][ T1497] net_ratelimit: 54 callbacks suppressed [ 618.812373][T12902] memory: usage 0kB, limit 0kB, failcnt 19 [ 618.812393][T12902] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 618.812407][T12902] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 618.812421][T12902] Memory cgroup stats for /syz4/test: [ 618.812648][T12902] cache 0 [ 618.812658][T12902] rss 0 [ 618.812665][T12902] shmem 0 [ 618.812672][T12902] mapped_file 0 [ 618.812680][T12902] dirty 0 [ 618.812687][T12902] writeback 0 [ 618.812694][T12902] workingset_refault_anon 0 [ 618.812703][T12902] workingset_refault_file 0 [ 618.812710][T12902] swap 0 [ 618.812717][T12902] swapcached 0 [ 618.812725][T12902] pgpgin 0 [ 618.812732][T12902] pgpgout 0 [ 618.812778][T12902] pgfault 0 [ 618.812786][T12902] pgmajfault 0 [ 618.812793][T12902] inactive_anon 0 [ 618.812801][T12902] active_anon 0 [ 618.812808][T12902] inactive_file 0 [ 618.812817][T12902] active_file 0 [ 618.812824][T12902] unevictable 0 [ 618.812832][T12902] hierarchical_memory_limit 0 [ 618.812840][T12902] hierarchical_memsw_limit 9223372036854771712 [ 618.812849][T12902] total_cache 0 [ 618.812857][T12902] total_rss 0 [ 618.812864][T12902] total_shmem 0 [ 618.812872][T12902] total_mapped_file 0 [ 618.812879][T12902] total_dirty 0 [ 618.812887][T12902] total_writeback 0 [ 618.812896][T12902] total_workingset_refault_anon 0 [ 618.812904][T12902] total_workingset_refault_file 0 [ 618.812912][T12902] total_swap 0 [ 618.812920][T12902] total_swapcached 0 [ 618.812928][T12902] total_pgpgin 0 [ 618.812936][T12902] total_pgpgout 0 [ 618.812943][T12902] total_pgfault 0 [ 618.812951][T12902] total_pgmajfault 0 [ 618.812958][T12902] total_inactive_anon 0 [ 618.812966][T12902] total_active_anon 0 [ 618.812974][T12902] total_inactive_file 0 [ 618.812981][T12902] total_active_file 0 [ 618.812989][T12902] total_unevictable 0 [ 618.812997][T12902] anon_cost 0 [ 618.813004][T12902] file_cost 0 [ 618.813012][T12902] Out of memory and no killable processes... [ 620.568108][T12590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.568119][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.568142][T12590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.789494][T12590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.789505][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.789532][T12590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.711986][T12590] hsr_slave_0: entered promiscuous mode [ 622.727225][T12590] hsr_slave_1: entered promiscuous mode [ 622.734352][T12590] debugfs: 'hsr0' already exists in 'hsr' [ 622.734368][T12590] Cannot create hsr debugfs directory [ 623.812540][ T73] net_ratelimit: 76 callbacks suppressed [ 624.510388][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.510450][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.847074][ T1518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.847109][ T1518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.642287][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 628.927875][ T1451] net_ratelimit: 55 callbacks suppressed [ 631.197986][ T1518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.198021][ T1518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.502068][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 631.541927][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 631.559885][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 631.583435][T12707] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.583743][T12707] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.584283][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 631.593216][T12707] bridge_slave_0: entered allmulticast mode [ 631.599542][T12707] bridge_slave_0: entered promiscuous mode [ 631.634400][T12707] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.634516][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.634729][T12707] bridge_slave_1: entered allmulticast mode [ 631.672560][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 631.799511][T12707] bridge_slave_1: entered promiscuous mode [ 633.797390][ T61] Bluetooth: hci3: command tx timeout [ 633.860300][ T1518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.860327][ T1518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.058347][ T1169] net_ratelimit: 56 callbacks suppressed [ 635.497176][ T1518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.497192][ T1518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.700349][T12707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.724141][T12707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.861974][T13001] FAULT_INJECTION: forcing a failure. [ 635.861974][T13001] name failslab, interval 1, probability 0, space 0, times 0 [ 635.862000][T13001] CPU: 1 UID: 0 PID: 13001 Comm: syz.4.2013 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 635.862025][T13001] Tainted: [L]=SOFTLOCKUP [ 635.862033][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 635.862045][T13001] Call Trace: [ 635.862054][T13001] [ 635.862063][T13001] dump_stack_lvl+0xe8/0x150 [ 635.862098][T13001] should_fail_ex+0x447/0x5e0 [ 635.862131][T13001] should_failslab+0xa8/0x100 [ 635.862156][T13001] ? ceph_msg_new2+0x3b/0x4d0 [ 635.862262][T13001] kmem_cache_alloc_noprof+0x99/0x680 [ 635.862294][T13001] ? ceph_msg_new2+0x3b/0x4d0 [ 635.862326][T13001] ceph_msg_new2+0x3b/0x4d0 [ 635.862357][T13001] ceph_monc_init+0x57d/0xae0 [ 635.862420][T13001] ceph_create_client+0x225/0x310 [ 635.862447][T13001] ceph_get_tree+0x1ca/0x1aa0 [ 635.862485][T13001] ? cap_capable+0x123/0x460 [ 635.862510][T13001] ? safesetid_security_capable+0xa9/0x1a0 [ 635.862543][T13001] vfs_get_tree+0x92/0x2a0 [ 635.862564][T13001] vfs_cmd_create+0xa2/0x200 [ 635.862592][T13001] __se_sys_fsconfig+0x6bf/0x810 [ 635.862621][T13001] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 635.862645][T13001] ? rcu_is_watching+0x16/0xb0 [ 635.862676][T13001] ? __x64_sys_fsconfig+0x20/0xc0 [ 635.862702][T13001] do_syscall_64+0x166/0x520 [ 635.862724][T13001] ? trace_irq_disable+0x3b/0x140 [ 635.862746][T13001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.862765][T13001] ? clear_bhb_loop+0x70/0xc0 [ 635.862793][T13001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.862811][T13001] RIP: 0033:0x7f2f6635fb19 [ 635.862830][T13001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.862846][T13001] RSP: 002b:00007f2f645ae028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 635.862868][T13001] RAX: ffffffffffffffda RBX: 00007f2f665e5fa0 RCX: 00007f2f6635fb19 [ 635.862883][T13001] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 635.862896][T13001] RBP: 00007f2f663f7b70 R08: 0000000000000000 R09: 0000000000000000 [ 635.862909][T13001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.862921][T13001] R13: 00007f2f665e6038 R14: 00007f2f665e5fa0 R15: 00007ffe2848a3a8 [ 635.862956][T13001] [ 635.877744][ T61] Bluetooth: hci3: command tx timeout [ 636.169373][T12707] team0: Port device team_slave_0 added [ 636.172901][T12707] team0: Port device team_slave_1 added [ 636.536057][T12707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.536069][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.536094][T12707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.536593][T12980] rxe_eth0 speed is unknown, defaulting to 1000 [ 636.550195][T12707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.550206][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.550232][T12707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.957951][ T61] Bluetooth: hci3: command tx timeout [ 638.349687][T12707] hsr_slave_0: entered promiscuous mode [ 638.362204][T12707] hsr_slave_1: entered promiscuous mode [ 638.366500][T12707] debugfs: 'hsr0' already exists in 'hsr' [ 638.366516][T12707] Cannot create hsr debugfs directory [ 639.092355][T13033] FAULT_INJECTION: forcing a failure. [ 639.092355][T13033] name fail_futex, interval 1, probability 0, space 0, times 0 [ 639.092412][T13033] CPU: 0 UID: 0 PID: 13033 Comm: syz.2.2008 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 639.092442][T13033] Tainted: [L]=SOFTLOCKUP [ 639.092450][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 639.092460][T13033] Call Trace: [ 639.092466][T13033] [ 639.092473][T13033] dump_stack_lvl+0xe8/0x150 [ 639.092495][T13033] should_fail_ex+0x447/0x5e0 [ 639.092513][T13033] get_futex_key+0x1ab/0x1410 [ 639.092528][T13033] ? do_raw_spin_lock+0x26c/0x2f0 [ 639.092546][T13033] ? __pfx_get_futex_key+0x10/0x10 [ 639.092563][T13033] futex_wake+0x119/0x600 [ 639.092581][T13033] ? __pfx_futex_wake+0x10/0x10 [ 639.092603][T13033] do_futex+0x458/0x4e0 [ 639.092619][T13033] ? __pfx_do_futex+0x10/0x10 [ 639.092637][T13033] __se_sys_futex+0x3a8/0x450 [ 639.092654][T13033] ? __pfx___se_sys_futex+0x10/0x10 [ 639.092672][T13033] ? __x64_sys_futex+0x21/0xf0 [ 639.092687][T13033] do_syscall_64+0x166/0x520 [ 639.092700][T13033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.092711][T13033] ? clear_bhb_loop+0x70/0xc0 [ 639.092725][T13033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.092736][T13033] RIP: 0033:0x7f18a62cfb19 [ 639.092747][T13033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.092756][T13033] RSP: 002b:00007f18a44fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 639.092769][T13033] RAX: ffffffffffffffda RBX: 00007f18a6556098 RCX: 00007f18a62cfb19 [ 639.092777][T13033] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18a655609c [ 639.092784][T13033] RBP: 00007f18a6556090 R08: 3fffffffffffffff R09: 0000000000000000 [ 639.092791][T13033] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 639.092797][T13033] R13: 00007f18a6556128 R14: 00007ffe2007a3e0 R15: 00007ffe2007a4c8 [ 639.092814][T13033] [ 639.822379][ T59] net_ratelimit: 90 callbacks suppressed [ 640.042338][ T61] Bluetooth: hci3: command tx timeout [ 642.435585][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 644.917890][ C1] net_ratelimit: 62 callbacks suppressed [ 646.626318][ T1518] bridge_slave_1: left allmulticast mode [ 646.626336][ T1518] bridge_slave_1: left promiscuous mode [ 646.626493][ T1518] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.983240][ T1518] bridge_slave_0: left allmulticast mode [ 646.983262][ T1518] bridge_slave_0: left promiscuous mode [ 646.983427][ T1518] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.076241][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 647.156434][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.196108][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 647.213730][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 647.216021][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 649.517205][ T5631] Bluetooth: hci0: command tx timeout [ 649.981045][ T70] net_ratelimit: 121 callbacks suppressed [ 652.058543][ T5631] Bluetooth: hci0: command tx timeout [ 654.137436][ T5631] Bluetooth: hci0: command tx timeout [ 655.163110][ C1] net_ratelimit: 43 callbacks suppressed [ 655.784809][ T1518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.076543][ T1518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.542627][ T5631] Bluetooth: hci0: command tx timeout [ 657.616026][ T1518] bond0 (unregistering): Released all slaves [ 657.682744][ T1518] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 657.738943][ T1518] bond1 (unregistering): Released all slaves [ 657.838807][ T1518] bond2 (unregistering): Released all slaves [ 659.375247][T13139] bonding: no command found in bonding_masters - use +ifname or -ifname [ 660.278060][ T73] net_ratelimit: 62 callbacks suppressed [ 662.813130][T13068] rxe_eth0 speed is unknown, defaulting to 1000 [ 662.876657][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 664.047774][ T5871] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 664.198438][ T5871] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 664.199288][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.199300][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 664.199363][ T5871] usb 1-1: Dual-Role OTG device on HNP port [ 664.199686][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.514665][ T1451] net_ratelimit: 71 callbacks suppressed [ 665.723249][ C0] ------------[ cut here ]------------ [ 665.723257][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 665.723271][ C0] WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480, CPU#0: ktimers/0/17 [ 665.745767][ C0] Modules linked in: [ 665.749676][ C0] CPU: 0 UID: 0 PID: 17 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 665.760809][ C0] Tainted: [L]=SOFTLOCKUP [ 665.765115][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 665.775179][ C0] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 665.780573][ C0] Code: 7a ab ed fa 49 83 3f 00 48 c7 c0 20 e9 42 8c 49 c7 c0 40 e9 42 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 6a 0b d8 8d 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 00 62 7a fa 65 8b [ 665.800193][ C0] RSP: 0018:ffffc90000167698 EFLAGS: 00010286 [ 665.806248][ C0] RAX: ffffffff8c42e920 RBX: ffff888027838120 RCX: ffffffff8c430860 [ 665.814226][ C0] RDX: 0000000000000081 RSI: ffffffff8dd80b6a RDI: ffffffff90e27ac0 [ 665.822219][ C0] RBP: dffffc0000000000 R08: ffffffff8c42e940 R09: 0000000000000100 [ 665.830221][ C0] R10: 0000000000000100 R11: 0000000000000003 R12: ffffffff8c430860 [ 665.838216][ C0] R13: 0000000000000081 R14: ffffffff90e27ac0 R15: ffff888027838138 [ 665.846172][ C0] FS: 0000000000000000(0000) GS:ffff88812470f000(0000) knlGS:0000000000000000 [ 665.855100][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 665.861705][ C0] CR2: 00007f18a40b9d58 CR3: 0000000038248000 CR4: 00000000003526f0 [ 665.869683][ C0] Call Trace: [ 665.872952][ C0] [ 665.875866][ C0] hidg_set_alt+0x12a/0xa50 [ 665.880455][ C0] ? rcu_is_watching+0x16/0xb0 [ 665.885213][ C0] set_config+0x749/0x1160 [ 665.889685][ C0] composite_setup+0x1de7/0x3480 [ 665.894616][ C0] configfs_composite_setup+0xbd/0x100 [ 665.900086][ C0] dummy_timer+0x2f60/0x4d50 [ 665.904734][ C0] ? __lock_acquire+0x747/0x2de0 [ 665.909699][ C0] ? __lock_acquire+0x747/0x2de0 [ 665.914639][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 665.920048][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 665.924978][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 665.930807][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 665.935734][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 665.940952][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 665.946058][ C0] handle_softirqs+0x1d4/0x6c0 [ 665.950836][ C0] run_ktimerd+0x6a/0x100 [ 665.955151][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 665.960093][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 665.965106][ C0] kthread+0x38b/0x470 [ 665.969173][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 665.974629][ C0] ? __pfx_kthread+0x10/0x10 [ 665.979221][ C0] ret_from_fork+0x514/0xb70 [ 665.983800][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 665.988908][ C0] ? __switch_to+0xc78/0x1410 [ 665.993571][ C0] ? __pfx_kthread+0x10/0x10 [ 665.998185][ C0] ret_from_fork_asm+0x1a/0x30 [ 666.002952][ C0] [ 666.005992][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 666.013275][ C0] CPU: 0 UID: 0 PID: 17 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 666.024368][ C0] Tainted: [L]=SOFTLOCKUP [ 666.028691][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 666.038730][ C0] Call Trace: [ 666.042001][ C0] [ 666.044922][ C0] vpanic+0x26f/0x710 [ 666.048900][ C0] panic+0xc5/0xd0 [ 666.052609][ C0] ? __pfx_panic+0x10/0x10 [ 666.057026][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 666.061950][ C0] __warn+0x315/0x4c0 [ 666.066019][ C0] ? usb_ep_enable+0x148/0x480 [ 666.070769][ C0] ? usb_ep_enable+0x148/0x480 [ 666.075519][ C0] __report_bug+0x276/0x570 [ 666.080076][ C0] ? usb_ep_enable+0x148/0x480 [ 666.084831][ C0] ? __pfx___report_bug+0x10/0x10 [ 666.089855][ C0] report_bug_entry+0x19b/0x290 [ 666.094697][ C0] ? usb_ep_enable+0x1bc/0x480 [ 666.099441][ C0] ? usb_ep_enable+0x1c1/0x480 [ 666.104205][ C0] handle_bug+0xce/0x200 [ 666.108437][ C0] exc_invalid_op+0x1a/0x50 [ 666.112946][ C0] asm_exc_invalid_op+0x1a/0x20 [ 666.117787][ C0] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 666.123166][ C0] Code: 7a ab ed fa 49 83 3f 00 48 c7 c0 20 e9 42 8c 49 c7 c0 40 e9 42 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 6a 0b d8 8d 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 00 62 7a fa 65 8b [ 666.142753][ C0] RSP: 0018:ffffc90000167698 EFLAGS: 00010286 [ 666.148810][ C0] RAX: ffffffff8c42e920 RBX: ffff888027838120 RCX: ffffffff8c430860 [ 666.156765][ C0] RDX: 0000000000000081 RSI: ffffffff8dd80b6a RDI: ffffffff90e27ac0 [ 666.164717][ C0] RBP: dffffc0000000000 R08: ffffffff8c42e940 R09: 0000000000000100 [ 666.172688][ C0] R10: 0000000000000100 R11: 0000000000000003 R12: ffffffff8c430860 [ 666.180642][ C0] R13: 0000000000000081 R14: ffffffff90e27ac0 R15: ffff888027838138 [ 666.188612][ C0] ? usb_ep_enable+0x12f/0x480 [ 666.193375][ C0] hidg_set_alt+0x12a/0xa50 [ 666.197876][ C0] ? rcu_is_watching+0x16/0xb0 [ 666.202633][ C0] set_config+0x749/0x1160 [ 666.207048][ C0] composite_setup+0x1de7/0x3480 [ 666.211998][ C0] configfs_composite_setup+0xbd/0x100 [ 666.217490][ C0] dummy_timer+0x2f60/0x4d50 [ 666.222089][ C0] ? __lock_acquire+0x747/0x2de0 [ 666.227031][ C0] ? __lock_acquire+0x747/0x2de0 [ 666.231964][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 666.237433][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 666.242388][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 666.248182][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 666.253107][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 666.258308][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 666.263410][ C0] handle_softirqs+0x1d4/0x6c0 [ 666.268168][ C0] run_ktimerd+0x6a/0x100 [ 666.272479][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 666.277404][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 666.282418][ C0] kthread+0x38b/0x470 [ 666.286475][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 666.291935][ C0] ? __pfx_kthread+0x10/0x10 [ 666.296532][ C0] ret_from_fork+0x514/0xb70 [ 666.301113][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 666.306206][ C0] ? __switch_to+0xc78/0x1410 [ 666.310872][ C0] ? __pfx_kthread+0x10/0x10 [ 666.315450][ C0] ret_from_fork_asm+0x1a/0x30 [ 666.320211][ C0] [ 666.323368][ C0] Kernel Offset: disabled [ 666.327677][ C0] Rebooting in 86400 seconds..