last executing test programs: 12m6.814534009s ago: executing program 32 (id=915): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0xff}, 0x18, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x814) 9m35.142203332s ago: executing program 33 (id=2167): r0 = socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x153a, 0x0, 0x2, 0x17a}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500feffff00feffffff07000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x4040010) 8m41.862997982s ago: executing program 34 (id=2530): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd 0-0k.ui!=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"!=\"/bin\"\n', 0x4c) 8m16.878754226s ago: executing program 0 (id=2677): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x48000) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000003c0)={0x80, 0x2, {0x1, 0x3, 0x8b2c, 0x0, 0x2c3}}) tkill(r0, 0x7) 8m16.394393239s ago: executing program 0 (id=2680): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) read$FUSE(r0, &(0x7f000000b680)={0x2020}, 0x2020) 8m15.998617491s ago: executing program 0 (id=2684): bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100400085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="ddc937981007901a80379c3e0200", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m15.466891623s ago: executing program 0 (id=2690): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 8m14.977674839s ago: executing program 0 (id=2697): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 8m13.39148247s ago: executing program 0 (id=2708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0xc880) 8m12.898446909s ago: executing program 35 (id=2708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0xc880) 7m24.471219655s ago: executing program 5 (id=2979): rseq(&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 7m23.917527924s ago: executing program 5 (id=2982): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f00000002c0)=[{0x3f}], 0xdeadbeef, 0x8, 0x1}) 7m23.601889328s ago: executing program 5 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x2, 0x1}]}]}, 0x40}}, 0x0) 7m22.710956435s ago: executing program 5 (id=2993): syz_clone(0x2004011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 7m22.16977592s ago: executing program 5 (id=2997): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 7m20.391207811s ago: executing program 5 (id=3006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 7m19.687069359s ago: executing program 36 (id=3006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 6m40.283244405s ago: executing program 1 (id=3213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f00020000000000f307000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x40800) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6m40.059489593s ago: executing program 1 (id=3217): r0 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x6000) fadvise64(0xffffffffffffffff, 0x401000402, 0xffffffff, 0x4) set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 6m39.472944909s ago: executing program 1 (id=3222): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 6m39.406709411s ago: executing program 1 (id=3223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 6m39.138046914s ago: executing program 1 (id=3225): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 6m37.829921261s ago: executing program 1 (id=3235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="e40000000000"], 0x110}, 0x8000) 6m37.204423772s ago: executing program 37 (id=3235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="e40000000000"], 0x110}, 0x8000) 5m53.298403478s ago: executing program 9 (id=3504): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2002, 0x50000000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040041}, 0x200008c0) 5m52.737903916s ago: executing program 9 (id=3507): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 5m52.460840153s ago: executing program 9 (id=3509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005880)={{{@in6=@mcast2, @in=@loopback, 0x0, 0xd8c, 0x0, 0x0, 0xa}, {0x40000000000, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x10}, {0x3, 0x0, 0x0, 0x6}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@mcast1, 0x3504, 0x0, 0x1, 0x3}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 5m52.08529681s ago: executing program 9 (id=3512): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 5m51.632447054s ago: executing program 9 (id=3514): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000006980)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x55a, @private1, 0x7}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}], 0x1, 0xc010) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0xfdff, @private2, 0xffffffff}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000240)="9e5f77", 0x3}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8081, @dev={0xfe, 0x80, '\x00', 0xc3}, 0x3}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 5m48.776969174s ago: executing program 9 (id=3535): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7f, 0x6, "2ab4ff9ba7420c1113bf4e00ebff0000001000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x6, 0x1, 0x2001, 0xaa, 0x15, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x6f) 5m47.675839083s ago: executing program 38 (id=3535): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7f, 0x6, "2ab4ff9ba7420c1113bf4e00ebff0000001000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x6, 0x1, 0x2001, 0xaa, 0x15, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x6f) 4m48.66528189s ago: executing program 3 (id=3872): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x3, 0xffffffff}], 'M6U'}, @datasec={0x10, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x61, 0x5f]}}, &(0x7f0000001b00)=""/3, 0x47, 0x3, 0x1, 0x5}, 0x28) 4m48.206420791s ago: executing program 3 (id=3874): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)={0x20, 0xf, 0x1, 'H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 4m45.03410076s ago: executing program 3 (id=3895): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc6c2ee60220dc2ef}], 0x1, 0x4044800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4m44.863843274s ago: executing program 3 (id=3897): syz_usb_connect(0x0, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402d1eb70000010102000109022c0001010080320904000003ff00000007058103080000000705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/wwan0/qmi/raw_ip\x00', 0x0, 0x0) read(r0, &(0x7f0000000400), 0x10) 4m42.369163113s ago: executing program 3 (id=3927): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000000300)="278c961fdf1b2c07dd557415bc3d176919464a10dcee717ff488", 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 4m42.078885134s ago: executing program 3 (id=3931): mmap$IORING_OFF_SQ_RING(0x0, 0x10000, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, &(0x7f0000000200)={0x0, 0xffff3532, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x15) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/54, 0x36}, {0x0}, {&(0x7f0000000140)=""/52, 0x34}], 0xa) 4m38.840598285s ago: executing program 4 (id=3946): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1"], 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 4m36.965946163s ago: executing program 4 (id=3957): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 4m36.262686908s ago: executing program 4 (id=3960): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @loopback}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @empty}}, 0x1e) 4m36.033729647s ago: executing program 4 (id=3962): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffc}, 0x1c) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/119, 0x77}, {0x0}], 0x2}}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a0148b56db84db8c4b6161b152363eba42854960aead78f03c795aa53866f67df14c0704a20562994ba492a92603b2bd842ebaf48f738dec9441", 0x3a}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4m34.940961155s ago: executing program 4 (id=3965): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x1, 0x80000ff}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 4m34.548671435s ago: executing program 4 (id=3966): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="05003300000000000000060088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 4m26.642175483s ago: executing program 39 (id=3931): mmap$IORING_OFF_SQ_RING(0x0, 0x10000, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, &(0x7f0000000200)={0x0, 0xffff3532, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x15) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/54, 0x36}, {0x0}, {&(0x7f0000000140)=""/52, 0x34}], 0xa) 4m19.256847981s ago: executing program 40 (id=3966): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="05003300000000000000060088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 3m24.958960247s ago: executing program 8 (id=4241): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{0x0}, {&(0x7f0000000340)="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", 0x13a}], 0x2, &(0x7f0000000600)=ANY=[], 0x28}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="399ab932fca8", 0x6}], 0x1}}], 0x2, 0x4008c04) 3m24.364595276s ago: executing program 8 (id=4244): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 3m24.230357951s ago: executing program 8 (id=4245): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000001280)=0x40) 3m23.339016204s ago: executing program 8 (id=4249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 3m22.417248512s ago: executing program 8 (id=4255): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1539a, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000500)=[{0x1ceb, 0x5, 0x2000e, 0x6}, {0x3, 0x4, 0x3, 0x5}, {0x3, 0x3, 0x5, 0x5}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x80, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 3m21.540662629s ago: executing program 8 (id=4258): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x40000000) 3m6.344156445s ago: executing program 41 (id=4258): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x40000000) 2m34.124648467s ago: executing program 2 (id=4424): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) 2m32.698218415s ago: executing program 2 (id=4429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x4b, 0xe, [0x81, 0x9, 0x3, 0x0, 0x10000, 0x6, 0x800, 0x4, 0x5, 0x2, 0x5, 0x7, 0x2, 0xfff, 0x81, 0x33, 0x9, 0xffffff7f, 0x3c4, 0x2, 0x1000, 0x80000000, 0x8, 0x5, 0x7, 0x3, 0x7, 0x99ee, 0x5, 0xffffffff, 0x7f, 0x9, 0xff, 0x12dd829d, 0x0, 0x7, 0x8c5c, 0x4, 0xe, 0x4, 0x4, 0xfffff231, 0x7fffffff, 0x9, 0x7fffffff, 0x3, 0xffffffff, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x7, 0xffff8001, 0xb, 0x5, 0x1, 0xfffffffe, 0x6, 0x401, 0x8, 0x86, 0x24000, 0x75a, 0x4, 0x6, 0x0, 0x0, 0x0, 0xc25f, 0xfffffff8, 0x81, 0xd, 0x5, 0x100, 0x7, 0x0, 0x5, 0x4d, 0xfffffc01, 0x9, 0xc7, 0x7f, 0x1, 0x1, 0x3, 0x3, 0x4, 0xd7f, 0x6, 0x8001, 0x7fffffff, 0x1, 0x3, 0xffffff81, 0xe2, 0x80, 0x5a, 0x5, 0x9, 0x200, 0x7, 0x5, 0x4, 0x7, 0x1, 0x6, 0x10001, 0x8, 0x1, 0xc, 0x80000000, 0x1, 0xf, 0x0, 0x3f1, 0x1, 0x3, 0x101, 0x9, 0x8a, 0x3, 0x7, 0x5, 0x96, 0x7fb, 0x3, 0x3]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 2m31.881149356s ago: executing program 2 (id=4431): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x1, 0x4000000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 2m31.400463769s ago: executing program 2 (id=4435): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x1, @my=0x1}, 0x10) 2m30.815480968s ago: executing program 2 (id=4438): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a1480401020311090212"], 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 2m27.316757131s ago: executing program 2 (id=4444): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='+cpu'], 0x5) 2m12.177543463s ago: executing program 42 (id=4444): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='+cpu'], 0x5) 2m3.647239442s ago: executing program 6 (id=4520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ethtool(0x0, r0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'syztnl0\x00', 0x0}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004"], 0x54}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) 2m3.154415384s ago: executing program 6 (id=4521): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x00', &(0x7f0000000180)="696d414a86", 0x5) 2m2.377542782s ago: executing program 6 (id=4523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000040)) 2m2.052898432s ago: executing program 6 (id=4525): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) 2m1.785309524s ago: executing program 6 (id=4527): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='N', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y', 0x1) 1m58.342262978s ago: executing program 6 (id=4529): syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000011020f580000000000000100", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 1m57.667714203s ago: executing program 43 (id=4529): syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000011020f580000000000000100", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 1.147954167s ago: executing program 7 (id=4730): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x0, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 788.510906ms ago: executing program 7 (id=4731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, 0x0, 0x40010) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bc25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 567.811441ms ago: executing program 7 (id=4732): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003980)={0xa, 0x0, [{0x4, 0xfffffffffffffd8e, &(0x7f0000000ac0)=""/173}, {0x100000, 0xd1, &(0x7f0000000d40)=""/209}, {0xb000, 0x3f, &(0x7f0000000e40)=""/63}, {0x200000, 0x21, &(0x7f0000000e80)=""/33}, {0xffdf9000, 0xa4, &(0x7f0000000ec0)=""/164}, {0x4000, 0xa3, &(0x7f0000000f80)=""/163}, {0x0, 0x1000, &(0x7f0000001800)=""/4096}, {0x10000, 0xb5, &(0x7f0000002800)=""/181}, {0x2, 0xfffffffffffffcb8, &(0x7f00000028c0)=""/131}, {0x6000, 0x1000, &(0x7f0000002980)=""/4096}]}) 374.911193ms ago: executing program 7 (id=4733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) 195.61641ms ago: executing program 7 (id=4734): socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 7 (id=4735): syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x379}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f00000002c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb86, 0x800, 0x1, 0x3c8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x7f000000, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) kernel console output (not intermixed with test programs): ltsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.021543][T16462] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.021566][T16462] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 760.021593][T16462] usb 3-1: config 0 interface 0 has no altsetting 0 [ 760.021626][T16462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.621535][ T37] audit: type=1800 audit(1789770708.648:5579): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=261397 res=0 errno=0 [ 760.658433][ T37] audit: type=1800 audit(1789770708.688:5580): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=261454 res=0 errno=0 [ 760.658722][T16462] usb 3-1: config 0 descriptor?? [ 760.666605][ T37] audit: type=1800 audit(1789770708.688:5581): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=261411 res=0 errno=0 [ 760.726955][ T37] audit: type=1800 audit(1789770708.758:5582): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=261413 res=0 errno=0 [ 761.160939][T16462] samsung 0003:0419:0600.001A: unknown main item tag 0x0 [ 761.160974][T16462] samsung 0003:0419:0600.001A: unknown main item tag 0x0 [ 761.160999][T16462] samsung 0003:0419:0600.001A: unknown main item tag 0x0 [ 761.161025][T16462] samsung 0003:0419:0600.001A: unknown main item tag 0x0 [ 761.161050][T16462] samsung 0003:0419:0600.001A: unknown main item tag 0x0 [ 761.161075][T16462] samsung 0003:0419:0600.001A: unknown main item tag 0x0 [ 761.161101][T16462] samsung 0003:0419:0600.001A: unknown main item tag 0x1 [ 761.161124][T16462] samsung 0003:0419:0600.001A: ignoring exceeding usage max [ 761.162335][T16462] samsung 0003:0419:0600.001A: unknown main item tag 0x0 [ 761.349854][T16462] samsung 0003:0419:0600.001A: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 761.500933][T16462] usb 3-1: USB disconnect, device number 19 [ 761.740529][T18729] fido_id[18729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 762.370337][T18740] fuse: Bad value for 'fd' [ 763.047392][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4372'. [ 763.047428][T18751] netlink: 'syz.6.4372': attribute type 19 has an invalid length. [ 763.047444][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4372'. [ 763.092599][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4370'. [ 763.417562][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4372'. [ 763.417598][T18751] netlink: 'syz.6.4372': attribute type 19 has an invalid length. [ 763.417612][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4372'. [ 764.149965][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 764.149984][ T37] audit: type=1800 audit(1789770712.178:5592): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 764.808067][ T35] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1009 jiffies old. [ 764.879956][ T37] audit: type=1800 audit(1789770712.908:5593): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 765.031601][T13008] hsr_slave_0: left promiscuous mode [ 765.071129][T13008] hsr_slave_1: left promiscuous mode [ 765.073037][T13008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.073064][T13008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.148611][T13008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.148639][T13008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.178999][ T37] audit: type=1800 audit(1789770713.208:5594): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 765.327579][T13008] veth1_macvtap: left promiscuous mode [ 765.327684][T13008] veth0_macvtap: left promiscuous mode [ 765.327931][T13008] veth1_vlan: left promiscuous mode [ 765.328119][T13008] veth0_vlan: left promiscuous mode [ 765.381788][T18786] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4378'. [ 765.381833][T18786] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4378'. [ 765.607596][ T37] audit: type=1800 audit(1789770713.638:5595): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 765.878249][ T37] audit: type=1800 audit(1789770713.908:5596): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 767.137503][ T37] audit: type=1800 audit(1789770715.158:5597): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 767.526983][T13008] team0 (unregistering): Port device team_slave_1 removed [ 767.598182][T13008] team0 (unregistering): Port device team_slave_0 removed [ 768.274530][ T37] audit: type=1800 audit(1789770716.298:5598): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 768.349257][ T37] audit: type=1800 audit(1789770716.378:5599): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 768.420982][T18376] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.421132][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.421298][T18376] bridge_slave_0: entered allmulticast mode [ 768.424000][T18376] bridge_slave_0: entered promiscuous mode [ 768.524040][T18376] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.524164][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.524356][T18376] bridge_slave_1: entered allmulticast mode [ 768.550037][T18376] bridge_slave_1: entered promiscuous mode [ 768.725872][ T37] audit: type=1800 audit(1789770716.688:5600): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 768.820716][ T67] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.820765][ T67] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.820801][ T67] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.820836][ T67] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.984253][T18376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.040563][T18376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.044372][ T37] audit: type=1800 audit(1789770717.068:5601): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 769.215898][ T13] IPVS: starting estimator thread 0... [ 769.306733][T18822] IPVS: using max 11 ests per chain, 26400 per kthread [ 769.352635][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 769.352654][ T37] audit: type=1800 audit(1789770717.378:5603): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 769.503425][ T37] audit: type=1800 audit(1789770717.528:5604): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 769.757733][ T37] audit: type=1800 audit(1789770717.788:5605): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 769.930178][T18376] team0: Port device team_slave_0 added [ 769.992478][T18376] team0: Port device team_slave_1 added [ 769.997504][ T37] audit: type=1800 audit(1789770718.018:5606): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 770.291875][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4396'. [ 770.335930][ T37] audit: type=1800 audit(1789770718.358:5607): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 770.711429][ T37] audit: type=1800 audit(1789770718.738:5608): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 770.761997][T18847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.234786][T18376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.234802][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.234824][T18376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.238015][T18850] netlink: 'syz.6.4397': attribute type 12 has an invalid length. [ 771.238036][T18850] netlink: 'syz.6.4397': attribute type 29 has an invalid length. [ 771.238050][T18850] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4397'. [ 771.238082][T18850] netlink: 'syz.6.4397': attribute type 1 has an invalid length. [ 771.238096][T18850] netlink: 'syz.6.4397': attribute type 2 has an invalid length. [ 771.238109][T18850] netlink: 'syz.6.4397': attribute type 3 has an invalid length. [ 771.238122][T18850] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4397'. [ 771.435307][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 771.484232][ T37] audit: type=1800 audit(1789770719.508:5609): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 771.565212][T18376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.565231][T18376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.565258][T18376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.962899][ T37] audit: type=1800 audit(1789770719.988:5610): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 772.041738][T18540] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.041874][T18540] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.042079][T18540] bridge_slave_0: entered allmulticast mode [ 772.070622][T18540] bridge_slave_0: entered promiscuous mode [ 772.227719][T18540] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.227846][T18540] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.228041][T18540] bridge_slave_1: entered allmulticast mode [ 772.243887][T18540] bridge_slave_1: entered promiscuous mode [ 772.449417][ T37] audit: type=1800 audit(1789770720.478:5611): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 772.579755][ T37] audit: type=1800 audit(1789770720.608:5612): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 773.676335][T16462] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 773.867998][T16462] usb 7-1: Using ep0 maxpacket: 8 [ 773.872757][T16462] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 773.886774][T16462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.886799][T16462] usb 7-1: Product: syz [ 773.886813][T16462] usb 7-1: Manufacturer: syz [ 773.886830][T16462] usb 7-1: SerialNumber: syz [ 773.902440][T16462] usb 7-1: config 0 descriptor?? [ 773.960794][T16462] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 775.147275][T13008] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.147314][T13008] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.181942][T16462] gspca_sonixj: reg_w1 err -71 [ 775.266386][T16462] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 775.269392][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 775.269407][ T37] audit: type=1800 audit(1789770723.298:5620): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=268195 res=0 errno=0 [ 775.270205][T16462] usb 7-1: USB disconnect, device number 5 [ 775.305215][ T37] audit: type=1800 audit(1789770723.328:5621): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=268196 res=0 errno=0 [ 775.341396][ T37] audit: type=1800 audit(1789770723.368:5622): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=268175 res=0 errno=0 [ 775.350960][ T37] audit: type=1800 audit(1789770723.378:5623): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=268197 res=0 errno=0 [ 775.545039][T18376] hsr_slave_0: entered promiscuous mode [ 775.549654][T18376] hsr_slave_1: entered promiscuous mode [ 775.552123][T18376] debugfs: 'hsr0' already exists in 'hsr' [ 775.552147][T18376] Cannot create hsr debugfs directory [ 775.680128][T18882] syz_tun: entered allmulticast mode [ 775.691775][T18884] syz_tun: left allmulticast mode [ 775.854708][ T37] audit: type=1800 audit(1789770723.878:5624): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 776.031156][T18897] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 776.045506][ T37] audit: type=1800 audit(1789770724.068:5625): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 776.080348][T18540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.216108][T18540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.673790][T18540] team0: Port device team_slave_0 added [ 776.872172][ T37] audit: type=1800 audit(1789770724.898:5626): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 777.462621][ T37] audit: type=1800 audit(1789770725.488:5627): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 777.619946][T13008] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.619983][T13008] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.809706][ T37] audit: type=1800 audit(1789770725.838:5628): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 778.366710][ T37] audit: type=1800 audit(1789770726.398:5629): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 778.413001][T18540] team0: Port device team_slave_1 added [ 779.390024][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 779.858356][T18948] FAULT_INJECTION: forcing a failure. [ 779.858356][T18948] name failslab, interval 1, probability 0, space 0, times 0 [ 779.858394][T18948] CPU: 0 UID: 0 PID: 18948 Comm: syz.6.4426 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 779.858421][T18948] Tainted: [L]=SOFTLOCKUP [ 779.858428][T18948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 779.858439][T18948] Call Trace: [ 779.858458][T18948] [ 779.858466][T18948] dump_stack_lvl+0xe8/0x150 [ 779.858501][T18948] should_fail_ex+0x46b/0x600 [ 779.858535][T18948] should_failslab+0xa8/0x100 [ 779.858571][T18948] __kmalloc_noprof+0xfb/0x790 [ 779.858598][T18948] ? prepare_creds+0x30/0x820 [ 779.858621][T18948] ? security_prepare_creds+0x52/0x360 [ 779.858648][T18948] ? security_prepare_creds+0x52/0x360 [ 779.858677][T18948] ? make_kuid+0x1e5/0x670 [ 779.858705][T18948] security_prepare_creds+0x52/0x360 [ 779.858736][T18948] prepare_creds+0x57d/0x820 [ 779.858764][T18948] __sys_setuid+0x96/0x580 [ 779.858798][T18948] do_syscall_64+0x166/0x520 [ 779.858829][T18948] ? trace_irq_disable+0x3b/0x140 [ 779.858855][T18948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.858877][T18948] ? clear_bhb_loop+0x70/0xc0 [ 779.858905][T18948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.858926][T18948] RIP: 0033:0x7f7222ebe159 [ 779.858947][T18948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.858965][T18948] RSP: 002b:00007f7221116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 779.858993][T18948] RAX: ffffffffffffffda RBX: 00007f7223145fa0 RCX: 00007f7222ebe159 [ 779.859010][T18948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 779.859025][T18948] RBP: 00007f7222f5506b R08: 0000000000000000 R09: 0000000000000000 [ 779.859040][T18948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.859055][T18948] R13: 00007f7223146038 R14: 00007f7223145fa0 R15: 00007ffde161daf8 [ 779.859091][T18948] [ 780.036587][ T5600] Bluetooth: hci2: command 0x0406 tx timeout [ 780.542935][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 780.542953][ T37] audit: type=1800 audit(1789770728.568:5635): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 780.554596][T13008] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.554631][T13008] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.797048][T18540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.797066][T18540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.797088][T18540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.898016][ T37] audit: type=1800 audit(1789770728.898:5636): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 781.016918][T18540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.016937][T18540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.016965][T18540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.514272][ T37] audit: type=1800 audit(1789770729.538:5637): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 781.590762][ T37] audit: type=1800 audit(1789770729.618:5638): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 781.883482][ T37] audit: type=1800 audit(1789770729.908:5639): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 781.955487][T18964] FAULT_INJECTION: forcing a failure. [ 781.955487][T18964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 781.955528][T18964] CPU: 1 UID: 0 PID: 18964 Comm: syz.7.4433 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 781.955558][T18964] Tainted: [L]=SOFTLOCKUP [ 781.955567][T18964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 781.955580][T18964] Call Trace: [ 781.955590][T18964] [ 781.955600][T18964] dump_stack_lvl+0xe8/0x150 [ 781.955635][T18964] should_fail_ex+0x46b/0x600 [ 781.955668][T18964] prepare_alloc_pages+0x223/0x650 [ 781.955703][T18964] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 781.955736][T18964] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 781.955769][T18964] ? __pfx_try_to_migrate+0x10/0x10 [ 781.955818][T18964] __alloc_pages_noprof+0x10/0x100 [ 781.955852][T18964] __folio_alloc_noprof+0x17/0x90 [ 781.955882][T18964] migrate_pages_batch+0x80c/0x43b0 [ 781.955925][T18964] ? __pfx_alloc_migration_target+0x10/0x10 [ 781.955948][T18964] ? queue_folios_pte_range+0xafd/0xc00 [ 781.955973][T18964] ? __pfx_migrate_pages_batch+0x10/0x10 [ 781.956011][T18964] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 781.956046][T18964] ? walk_pgd_range+0x1b1f/0x1c30 [ 781.956094][T18964] migrate_pages+0x1b96/0x2900 [ 781.956130][T18964] ? __pfx_alloc_migration_target+0x10/0x10 [ 781.956155][T18964] ? __walk_page_range+0x6cc/0x730 [ 781.956180][T18964] ? __pfx_migrate_pages+0x10/0x10 [ 781.956204][T18964] ? queue_pages_test_walk+0x3dc/0x410 [ 781.956232][T18964] ? walk_page_range_mm_unsafe+0x595/0x680 [ 781.956280][T18964] ? do_migrate_pages+0x61a/0x8b0 [ 781.956316][T18964] do_migrate_pages+0x656/0x8b0 [ 781.956356][T18964] ? __pfx_do_migrate_pages+0x10/0x10 [ 781.956383][T18964] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 781.956421][T18964] ? rcu_is_watching+0x16/0xb0 [ 781.956458][T18964] ? security_capable+0xb9/0x2c0 [ 781.956494][T18964] __se_sys_migrate_pages+0xaa2/0xc90 [ 781.956525][T18964] ? __se_sys_futex+0x3a8/0x450 [ 781.956549][T18964] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 781.956581][T18964] ? rcu_is_watching+0x16/0xb0 [ 781.956622][T18964] do_syscall_64+0x166/0x520 [ 781.956651][T18964] ? trace_irq_disable+0x3b/0x140 [ 781.956677][T18964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.956698][T18964] ? clear_bhb_loop+0x70/0xc0 [ 781.956723][T18964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.956743][T18964] RIP: 0033:0x7fe27719e159 [ 781.956763][T18964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.956780][T18964] RSP: 002b:00007fe2753f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 781.956804][T18964] RAX: ffffffffffffffda RBX: 00007fe277425fa0 RCX: 00007fe27719e159 [ 781.956819][T18964] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 781.956833][T18964] RBP: 00007fe27723506b R08: 0000000000000000 R09: 0000000000000000 [ 781.956847][T18964] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 781.956861][T18964] R13: 00007fe277426038 R14: 00007fe277425fa0 R15: 00007ffc010895d8 [ 781.956894][T18964] [ 782.006759][ T37] audit: type=1800 audit(1789770730.038:5640): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 782.242792][ T37] audit: type=1800 audit(1789770730.268:5641): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 782.418522][T18973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4436'. [ 782.418562][T18973] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4436'. [ 782.461201][T13008] macsec1 (unregistering): left allmulticast mode [ 782.461436][T13008] macsec1 (unregistering): left promiscuous mode [ 782.546472][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 782.569871][ T37] audit: type=1800 audit(1789770730.598:5642): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 782.697143][T13008] bridge0: port 3(macsec1) entered disabled state [ 782.697757][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 782.700195][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 782.701449][ T10] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.701480][ T10] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.703444][ T10] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 782.703469][ T10] usb 7-1: Product: syz [ 782.703483][ T10] usb 7-1: Manufacturer: syz [ 782.763258][ T37] audit: type=1800 audit(1789770730.788:5643): pid=17449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=270838 res=0 errno=0 [ 782.776925][ T37] audit: type=1800 audit(1789770730.808:5644): pid=17449 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=270869 res=0 errno=0 [ 782.814628][ T10] hub 7-1:4.0: USB hub found [ 782.978350][ T5594] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 783.035755][ T10] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 783.117395][ T10] usb 7-1: USB disconnect, device number 6 [ 783.156471][ T5594] usb 3-1: Using ep0 maxpacket: 16 [ 783.157474][ T5594] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 783.157527][ T5594] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 783.159646][ T5594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.159670][ T5594] usb 3-1: config 0 has no interfaces? [ 783.170698][ T5594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.170723][ T5594] usb 3-1: config 0 has no interfaces? [ 783.186403][ T5594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.186429][ T5594] usb 3-1: config 0 has no interfaces? [ 783.209651][ T5594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.209677][ T5594] usb 3-1: config 0 has no interfaces? [ 783.236778][ T5594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.236804][ T5594] usb 3-1: config 0 has no interfaces? [ 783.266989][ T5594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.267014][ T5594] usb 3-1: config 0 has no interfaces? [ 783.292090][ T5594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.292138][ T5594] usb 3-1: config 0 has no interfaces? [ 783.295520][ T5594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.295543][ T5594] usb 3-1: config 0 has no interfaces? [ 783.347091][T18975] netlink: 'syz.2.4438': attribute type 32 has an invalid length. [ 783.347112][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4438'. [ 783.603729][T13008] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 783.603768][T13008] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.656344][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 783.806458][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 783.807381][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 783.808696][ T10] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.808725][ T10] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.810624][ T10] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 783.810647][ T10] usb 7-1: Product: syz [ 783.810663][ T10] usb 7-1: Manufacturer: syz [ 783.878839][ T10] hub 7-1:4.0: USB hub found [ 784.082099][ T10] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 784.436731][ T10] usb 7-1: USB disconnect, device number 7 [ 784.471662][T18973] geneve2: entered promiscuous mode [ 784.471689][T18973] geneve2: entered allmulticast mode [ 784.729892][T18975] bond1: option coupled_control: invalid value (18) [ 784.965138][T18975] bond1 (unregistering): Released all slaves [ 785.946720][T12098] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.990696][ T5594] usb 3-1: string descriptor 0 read error: -71 [ 785.990851][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.036715][ T5594] r8152-cfgselector 3-1: Unknown version 0x0000 [ 786.036742][ T5594] r8152-cfgselector 3-1: config 0 descriptor?? [ 786.037143][ T5594] r8152-cfgselector 3-1: can't set config #0, error -71 [ 786.039616][ T5594] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 786.159978][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 786.159997][ T37] audit: type=1800 audit(1789770734.188:5660): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 786.170937][T18540] hsr_slave_0: entered promiscuous mode [ 786.172341][T18540] hsr_slave_1: entered promiscuous mode [ 786.177763][T18540] debugfs: 'hsr0' already exists in 'hsr' [ 786.177787][T18540] Cannot create hsr debugfs directory [ 786.320065][ T37] audit: type=1800 audit(1789770734.348:5661): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14955 res=0 errno=0 [ 786.599846][ T37] audit: type=1800 audit(1789770734.628:5662): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 788.548366][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 788.556330][ T37] audit: type=1800 audit(1789770736.578:5663): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 788.841557][ T37] audit: type=1800 audit(1789770736.868:5664): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 788.904793][T19032] netlink: 'syz.6.4452': attribute type 4 has an invalid length. [ 788.929581][T19030] FAULT_INJECTION: forcing a failure. [ 788.929581][T19030] name failslab, interval 1, probability 0, space 0, times 0 [ 788.929621][T19030] CPU: 0 UID: 0 PID: 19030 Comm: syz.7.4451 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 788.929651][T19030] Tainted: [L]=SOFTLOCKUP [ 788.929659][T19030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 788.929672][T19030] Call Trace: [ 788.929681][T19030] [ 788.929691][T19030] dump_stack_lvl+0xe8/0x150 [ 788.929727][T19030] should_fail_ex+0x46b/0x600 [ 788.929760][T19030] should_failslab+0xa8/0x100 [ 788.929804][T19030] ? skb_clone+0x212/0x3a0 [ 788.929828][T19030] kmem_cache_alloc_noprof+0x9e/0x690 [ 788.929855][T19030] ? skb_clone+0x212/0x3a0 [ 788.929884][T19030] skb_clone+0x212/0x3a0 [ 788.929912][T19030] pfkey_sendmsg+0x4d6/0x11d0 [ 788.930018][T19030] ? rcu_is_watching+0x16/0xb0 [ 788.930059][T19030] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 788.930081][T19030] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 788.930135][T19030] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 788.930175][T19030] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 788.930198][T19030] sock_sendmsg_nosec+0x13a/0x180 [ 788.930228][T19030] ____sys_sendmsg+0x565/0x870 [ 788.930260][T19030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 788.930290][T19030] ? import_iovec+0x73/0xa0 [ 788.930322][T19030] ___sys_sendmsg+0x2a5/0x360 [ 788.930343][T19030] ? __lock_acquire+0x747/0x2de0 [ 788.930374][T19030] ? __pfx____sys_sendmsg+0x10/0x10 [ 788.930400][T19030] ? futex_wait+0x2a2/0x390 [ 788.930455][T19030] ? __fget_files+0x2a/0x420 [ 788.930476][T19030] ? __fget_files+0x3a8/0x420 [ 788.930508][T19030] __x64_sys_sendmsg+0x1b7/0x290 [ 788.930534][T19030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 788.930578][T19030] do_syscall_64+0x166/0x520 [ 788.930608][T19030] ? trace_irq_disable+0x3b/0x140 [ 788.930632][T19030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.930652][T19030] ? clear_bhb_loop+0x70/0xc0 [ 788.930677][T19030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.930697][T19030] RIP: 0033:0x7fe27719e159 [ 788.930717][T19030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.930735][T19030] RSP: 002b:00007fe2753f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.930757][T19030] RAX: ffffffffffffffda RBX: 00007fe277425fa0 RCX: 00007fe27719e159 [ 788.930779][T19030] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 788.930792][T19030] RBP: 00007fe27723506b R08: 0000000000000000 R09: 0000000000000000 [ 788.930806][T19030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.930819][T19030] R13: 00007fe277426038 R14: 00007fe277425fa0 R15: 00007ffc010895d8 [ 788.930853][T19030] [ 789.331136][ T37] audit: type=1800 audit(1789770737.358:5665): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 789.614855][ T37] audit: type=1800 audit(1789770737.638:5666): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 789.801821][ T37] audit: type=1800 audit(1789770737.828:5667): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 789.869824][ T37] audit: type=1800 audit(1789770737.898:5668): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272664 res=0 errno=0 [ 789.891267][ T37] audit: type=1800 audit(1789770737.918:5669): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272679 res=0 errno=0 [ 790.279842][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 791.232953][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 791.232972][ T37] audit: type=1800 audit(1789770739.258:5677): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 791.280790][ T37] audit: type=1800 audit(1789770739.308:5678): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=272951 res=0 errno=0 [ 791.295784][ T37] audit: type=1800 audit(1789770739.318:5679): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=272956 res=0 errno=0 [ 791.307517][ T37] audit: type=1800 audit(1789770739.338:5680): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=272960 res=0 errno=0 [ 791.310216][ T37] audit: type=1800 audit(1789770739.338:5681): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=272959 res=0 errno=0 [ 791.322954][ T37] audit: type=1800 audit(1789770739.348:5682): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=272962 res=0 errno=0 [ 791.850682][T19058] veth1_to_bond: entered allmulticast mode [ 791.964490][T19057] veth1_to_bond: left allmulticast mode [ 792.013234][ T37] audit: type=1800 audit(1789770740.038:5683): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=273207 res=0 errno=0 [ 792.030721][ T37] audit: type=1800 audit(1789770740.058:5684): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=273212 res=0 errno=0 [ 792.039868][ T37] audit: type=1800 audit(1789770740.068:5685): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=273216 res=0 errno=0 [ 792.043254][ T37] audit: type=1800 audit(1789770740.068:5686): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=273215 res=0 errno=0 [ 792.377140][T19071] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4467'. [ 792.377177][T19071] netlink: 'syz.6.4467': attribute type 7 has an invalid length. [ 792.377191][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4467'. [ 792.828203][T19071] erspan0: entered promiscuous mode [ 792.835537][T19071] gretap0: entered promiscuous mode [ 792.852305][T19071] debugfs: 'hsr1' already exists in 'hsr' [ 792.852333][T19071] Cannot create hsr debugfs directory [ 793.090002][T13008] bridge_slave_1: left allmulticast mode [ 793.090040][T13008] bridge_slave_1: left promiscuous mode [ 793.090309][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.262093][T13008] bridge_slave_0: left allmulticast mode [ 793.262130][T13008] bridge_slave_0: left promiscuous mode [ 793.265726][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.702107][T19094] FAULT_INJECTION: forcing a failure. [ 794.702107][T19094] name failslab, interval 1, probability 0, space 0, times 0 [ 794.702147][T19094] CPU: 1 UID: 0 PID: 19094 Comm: syz.6.4476 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 794.702176][T19094] Tainted: [L]=SOFTLOCKUP [ 794.702184][T19094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.702197][T19094] Call Trace: [ 794.702205][T19094] [ 794.702214][T19094] dump_stack_lvl+0xe8/0x150 [ 794.702249][T19094] should_fail_ex+0x46b/0x600 [ 794.702282][T19094] should_failslab+0xa8/0x100 [ 794.702318][T19094] __kmalloc_noprof+0xfb/0x790 [ 794.702344][T19094] ? lock_acquire+0x115/0x350 [ 794.702369][T19094] ? tomoyo_encode+0x2ad/0x570 [ 794.702396][T19094] ? tomoyo_encode+0x2ad/0x570 [ 794.702436][T19094] tomoyo_encode+0x2ad/0x570 [ 794.702471][T19094] tomoyo_mount_permission+0x3a4/0x9e0 [ 794.702499][T19094] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 794.702532][T19094] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 794.702558][T19094] ? kasan_save_track+0x4f/0x80 [ 794.702633][T19094] ? kasan_quarantine_put+0xbb/0x1f0 [ 794.702662][T19094] security_sb_mount+0xe4/0x320 [ 794.702696][T19094] path_mount+0xbc/0x1050 [ 794.702721][T19094] ? user_path_at+0xd4/0x160 [ 794.702747][T19094] __se_sys_mount+0x31d/0x420 [ 794.702774][T19094] ? __pfx___se_sys_mount+0x10/0x10 [ 794.702802][T19094] ? __x64_sys_mount+0x20/0xc0 [ 794.702825][T19094] do_syscall_64+0x166/0x520 [ 794.702854][T19094] ? trace_irq_disable+0x3b/0x140 [ 794.702879][T19094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.702900][T19094] ? clear_bhb_loop+0x70/0xc0 [ 794.702925][T19094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.702945][T19094] RIP: 0033:0x7f7222ebe159 [ 794.702964][T19094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.702982][T19094] RSP: 002b:00007f7221116028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 794.703005][T19094] RAX: ffffffffffffffda RBX: 00007f7223145fa0 RCX: 00007f7222ebe159 [ 794.703020][T19094] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 794.703034][T19094] RBP: 00007f7222f5506b R08: 0000000000000000 R09: 0000000000000000 [ 794.703047][T19094] R10: 000000000002cc31 R11: 0000000000000246 R12: 0000000000000000 [ 794.703060][T19094] R13: 00007f7223146038 R14: 00007f7223145fa0 R15: 00007ffde161daf8 [ 794.703094][T19094] [ 794.848089][ T35] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 4013 jiffies old. [ 795.142975][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 795.167978][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 795.177466][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 795.234623][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 795.253680][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 795.667123][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 795.818385][ T10] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 795.821091][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.821122][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.821159][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.898399][ T10] usb 7-1: config 0 descriptor?? [ 796.406963][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 796.406980][ T37] audit: type=1800 audit(1789770744.438:5713): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274103 res=0 errno=0 [ 796.442923][ T10] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 796.442960][ T10] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 796.442987][ T10] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 796.443014][ T10] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 796.443041][ T10] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 796.532706][ T10] playstation 0003:054C:0DF2.001B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 796.560202][ T37] audit: type=1800 audit(1789770744.588:5714): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274125 res=0 errno=0 [ 796.608211][T13008] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 796.700649][ T37] audit: type=1800 audit(1789770744.728:5715): pid=19108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=274105 res=0 errno=0 [ 796.972471][T13008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.008838][ T10] playstation 0003:054C:0DF2.001B: Failed to retrieve feature with reportID 5: -71 [ 797.008868][ T10] playstation 0003:054C:0DF2.001B: Failed to retrieve DualSense calibration info: -71 [ 797.008922][ T10] playstation 0003:054C:0DF2.001B: Failed to get calibration data from DualSense [ 797.008942][ T10] playstation 0003:054C:0DF2.001B: Failed to create dualsense. [ 797.014924][ T10] playstation 0003:054C:0DF2.001B: probe with driver playstation failed with error -71 [ 797.100917][ T10] usb 7-1: USB disconnect, device number 8 [ 797.144505][T13008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.192868][T13008] bond0 (unregistering): Released all slaves [ 797.346404][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.420199][ T1013] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.538427][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.547359][T13008] tipc: Disabling bearer [ 797.547968][T13008] tipc: Left network mode [ 797.583898][ T5600] Bluetooth: hci0: command tx timeout [ 797.963101][ T37] audit: type=1800 audit(1789770745.988:5716): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 798.336367][T16462] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 798.496485][T16462] usb 7-1: Using ep0 maxpacket: 32 [ 798.500252][T16462] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 798.501714][T16462] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 798.501739][T16462] usb 7-1: config 0 has no interface number 0 [ 798.501785][T16462] usb 7-1: config 0 interface 184 has no altsetting 0 [ 798.504405][T16462] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.504429][T16462] usb 7-1: Product: syz [ 798.504443][T16462] usb 7-1: Manufacturer: syz [ 798.504458][T16462] usb 7-1: SerialNumber: syz [ 798.511240][T16462] usb 7-1: config 0 descriptor?? [ 798.511406][ T37] audit: type=1800 audit(1789770746.538:5717): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274181 res=0 errno=0 [ 798.514266][ T37] audit: type=1800 audit(1789770746.538:5718): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=274213 res=0 errno=0 [ 798.515573][ T37] audit: type=1800 audit(1789770746.538:5719): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=274188 res=0 errno=0 [ 798.558823][ T37] audit: type=1800 audit(1789770746.588:5720): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=274189 res=0 errno=0 [ 798.863172][T19133] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 798.863172][T19133] [ 798.863449][T19133] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 798.863607][T19133] CIFS: Attempting to mount //127.0.0.1/share [ 799.230076][T16462] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 799.230108][T16462] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 799.637956][ T5600] Bluetooth: hci0: command tx timeout [ 799.671714][T16462] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 799.671745][T16462] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 799.671765][T16462] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 799.672063][T16462] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 799.739577][ T37] audit: type=1800 audit(1789770747.768:5721): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=274210 res=0 errno=0 [ 799.739624][ T37] audit: type=1800 audit(1789770747.768:5722): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=274211 res=0 errno=0 [ 799.794262][T16462] usb 7-1: USB disconnect, device number 9 [ 799.853821][T19133] CIFS: VFS: cifs_mount failed w/return code = -512 [ 799.879731][T19133] syz.7.4487 (19133) used greatest stack depth: 17992 bytes left [ 801.471494][T19158] netlink: 1355 bytes leftover after parsing attributes in process `syz.7.4492'. [ 801.563691][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 801.563711][ T37] audit: type=1800 audit(1789770749.588:5727): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 801.716310][ T5600] Bluetooth: hci0: command tx timeout [ 801.935589][ T37] audit: type=1800 audit(1789770749.958:5728): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274301 res=0 errno=0 [ 801.971132][ T37] audit: type=1800 audit(1789770749.998:5729): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274312 res=0 errno=0 [ 802.009844][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 802.044524][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 802.088754][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 802.110293][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 802.111645][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 802.168450][ T37] audit: type=1800 audit(1789770750.198:5730): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274331 res=0 errno=0 [ 802.384642][ T37] audit: type=1800 audit(1789770750.408:5731): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274342 res=0 errno=0 [ 802.510722][ T37] audit: type=1800 audit(1789770750.538:5732): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 802.738441][ T5247] 8021q: adding VLAN 0 to HW filter on device eth12 [ 803.796540][ T5600] Bluetooth: hci0: command tx timeout [ 803.832229][T19184] fuse: Bad value for 'fd' [ 803.936133][ T37] audit: type=1800 audit(1789770751.948:5733): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 804.049684][ T37] audit: type=1800 audit(1789770752.078:5734): pid=19191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4500" name="new_array" dev="sysfs" ino=60542 res=0 errno=0 [ 804.053057][ T37] audit: type=1800 audit(1789770752.078:5735): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274354 res=0 errno=0 [ 804.095778][ T37] audit: type=1800 audit(1789770752.118:5736): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=274369 res=0 errno=0 [ 804.196460][ T5600] Bluetooth: hci3: command tx timeout [ 806.276373][ T5600] Bluetooth: hci3: command tx timeout [ 806.683230][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4511'. [ 807.608304][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 807.608324][ T37] audit: type=1800 audit(1789770755.638:5742): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 807.921885][ T37] audit: type=1800 audit(1789770755.948:5743): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 808.191044][ T37] audit: type=1800 audit(1789770756.218:5744): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 808.280904][ T37] audit: type=1800 audit(1789770756.308:5745): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277936 res=0 errno=0 [ 808.400119][ T60] Bluetooth: hci3: command tx timeout [ 808.403338][ T37] audit: type=1800 audit(1789770756.428:5746): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=277957 res=0 errno=0 [ 808.471434][T14669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 808.535577][T14669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 808.548027][T14669] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 808.551402][T14669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 808.551773][ T37] audit: type=1800 audit(1789770756.578:5747): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 808.560574][T14669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 808.615492][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.615549][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.960699][ T37] audit: type=1800 audit(1789770756.978:5748): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=278197 res=0 errno=0 [ 809.059141][ T37] audit: type=1800 audit(1789770757.088:5749): pid=17719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=278225 res=0 errno=0 [ 809.813886][ T37] audit: type=1800 audit(1789770757.838:5750): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 810.021055][T19274] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4520'. [ 810.021077][T19274] tipc: Invalid UDP bearer configuration [ 810.021119][T19274] tipc: Enabling of bearer rejected, failed to enable media [ 810.345139][ T37] audit: type=1800 audit(1789770758.368:5751): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15447 res=0 errno=0 [ 810.449705][ T5600] Bluetooth: hci3: command tx timeout [ 810.673343][T13008] hsr_slave_0: left promiscuous mode [ 810.713334][T13008] hsr_slave_1: left promiscuous mode [ 810.714876][T13008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.714901][T13008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.873232][T13008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.873261][T13008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.078021][ T5600] Bluetooth: hci7: command tx timeout [ 811.334500][T13008] veth1_macvtap: left promiscuous mode [ 811.334613][T13008] veth0_macvtap: left promiscuous mode [ 811.334877][T13008] veth1_vlan: left promiscuous mode [ 811.359359][T13008] veth0_vlan: left promiscuous mode [ 813.156726][ T5600] Bluetooth: hci7: command tx timeout [ 813.572160][T13008] team0 (unregistering): Port device team_slave_1 removed [ 813.631557][T13008] team0 (unregistering): Port device team_slave_0 removed [ 814.123698][T13008] team0 (unregistering): Port device dummy0 removed [ 814.566689][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 815.246780][ T5600] Bluetooth: hci7: command tx timeout [ 816.522871][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 816.522895][ T37] audit: type=1800 audit(1789770764.538:5754): pid=19311 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=284725 res=0 errno=0 [ 816.564378][T14669] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.609984][ T37] audit: type=1800 audit(1789770764.638:5755): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285066 res=0 errno=0 [ 816.619811][T14669] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 816.640515][T14669] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.657698][T14669] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 816.659229][T14669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 816.860963][ T37] audit: type=1800 audit(1789770764.888:5756): pid=19311 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285309 res=0 errno=0 [ 817.047178][ T37] audit: type=1800 audit(1789770765.068:5757): pid=19311 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285333 res=0 errno=0 [ 817.316683][ T5600] Bluetooth: hci7: command tx timeout [ 818.050950][T19354] tipc: Started in network mode [ 818.050975][T19354] tipc: Node identity 1000001, cluster identity 4711 [ 818.050989][T19354] tipc: Node number set to 16777217 [ 818.862789][ T5600] Bluetooth: hci5: command tx timeout [ 819.067323][T13008] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.067360][T13008] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.451974][T19356] tipc: Enabling of bearer rejected, failed to enable media [ 819.517953][T19095] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.518077][T19095] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.518242][T19095] bridge_slave_0: entered allmulticast mode [ 819.523977][T19095] bridge_slave_0: entered promiscuous mode [ 819.613106][T19095] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.613228][T19095] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.613387][T19095] bridge_slave_1: entered allmulticast mode [ 819.652828][T19095] bridge_slave_1: entered promiscuous mode [ 820.170916][T13008] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.170953][T13008] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.665182][T19095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.916401][ T5600] Bluetooth: hci5: command tx timeout [ 821.110552][T13008] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.110589][T13008] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.194711][T19095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.206436][T19161] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.206556][T19161] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.206738][T19161] bridge_slave_0: entered allmulticast mode [ 821.209394][T19161] bridge_slave_0: entered promiscuous mode [ 821.306642][T19161] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.306765][T19161] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.306936][T19161] bridge_slave_1: entered allmulticast mode [ 821.358785][T19161] bridge_slave_1: entered promiscuous mode [ 821.637623][T19095] team0: Port device team_slave_0 added [ 821.967065][T13008] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.967101][T13008] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.073101][T19387] fuse: Bad value for 'fd' [ 822.386269][T19095] team0: Port device team_slave_1 added [ 822.467021][T19161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.585602][T19161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.797306][T19095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.797324][T19095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.797351][T19095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.006365][ T5600] Bluetooth: hci5: command tx timeout [ 823.185958][T19095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.185977][T19095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.186004][T19095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.263429][T19161] team0: Port device team_slave_0 added [ 823.481393][T19161] team0: Port device team_slave_1 added [ 824.224986][ T37] audit: type=1800 audit(1789770772.248:5758): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296156 res=0 errno=0 [ 824.259683][ T37] audit: type=1800 audit(1789770772.288:5759): pid=19404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=296161 res=0 errno=0 [ 824.265447][ T37] audit: type=1800 audit(1789770772.288:5760): pid=19404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=296165 res=0 errno=0 [ 824.273737][ T37] audit: type=1800 audit(1789770772.298:5761): pid=19404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=296164 res=0 errno=0 [ 824.299332][ T37] audit: type=1800 audit(1789770772.328:5762): pid=19404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=296167 res=0 errno=0 [ 824.490906][T19161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.490926][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.490954][T19161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.492502][T19409] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 824.833979][ T37] audit: type=1800 audit(1789770772.858:5763): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=296974 res=0 errno=0 [ 824.840270][ T37] audit: type=1800 audit(1789770772.868:5764): pid=19404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=296979 res=0 errno=0 [ 824.843033][ T37] audit: type=1800 audit(1789770772.868:5765): pid=19404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=296983 res=0 errno=0 [ 824.845746][ T37] audit: type=1800 audit(1789770772.868:5766): pid=19404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=296982 res=0 errno=0 [ 824.849876][ T37] audit: type=1800 audit(1789770772.878:5767): pid=19404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=296985 res=0 errno=0 [ 824.936851][T19161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.936869][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.936895][T19161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.016966][T19095] hsr_slave_0: entered promiscuous mode [ 825.020725][T19095] hsr_slave_1: entered promiscuous mode [ 825.021659][T19095] debugfs: 'hsr0' already exists in 'hsr' [ 825.021684][T19095] Cannot create hsr debugfs directory [ 825.071825][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 825.077300][ T5600] Bluetooth: hci5: command tx timeout [ 825.596173][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4548'. [ 825.596313][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4548'. [ 826.099693][T19161] hsr_slave_0: entered promiscuous mode [ 826.101036][T19161] hsr_slave_1: entered promiscuous mode [ 826.102018][T19161] debugfs: 'hsr0' already exists in 'hsr' [ 826.102043][T19161] Cannot create hsr debugfs directory [ 826.278177][T13008] bridge_slave_1: left allmulticast mode [ 826.278215][T13008] bridge_slave_1: left promiscuous mode [ 826.278489][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.460275][T13008] bridge_slave_0: left allmulticast mode [ 826.460312][T13008] bridge_slave_0: left promiscuous mode [ 826.498982][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.757951][T13008] bridge_slave_1: left allmulticast mode [ 826.757988][T13008] bridge_slave_1: left promiscuous mode [ 826.758226][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.910823][T13008] bridge_slave_0: left allmulticast mode [ 826.910858][T13008] bridge_slave_0: left promiscuous mode [ 826.911102][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.941117][T19439] netlink: 'syz.7.4550': attribute type 1 has an invalid length. [ 827.187942][T13008] bridge_slave_1: left allmulticast mode [ 827.187981][T13008] bridge_slave_1: left promiscuous mode [ 827.188248][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.309623][T13008] bridge_slave_0: left allmulticast mode [ 827.309664][T13008] bridge_slave_0: left promiscuous mode [ 827.309907][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.518168][T13008] bridge_slave_1: left allmulticast mode [ 827.518207][T13008] bridge_slave_1: left promiscuous mode [ 827.518452][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.635148][T13008] bridge_slave_0: left allmulticast mode [ 827.635187][T13008] bridge_slave_0: left promiscuous mode [ 827.635459][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.148951][T19446] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4553'. [ 829.191367][T13008] erspan0 (unregistering): left promiscuous mode [ 829.347951][T13008] gretap0 (unregistering): left promiscuous mode [ 829.427889][T19455] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4557'. [ 829.898548][T13008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.291499][T13008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.335518][T13008] bond0 (unregistering): Released all slaves [ 830.938267][T13008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.017667][T13008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.082847][T13008] bond0 (unregistering): Released all slaves [ 831.588464][T13008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.693462][T13008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.769603][T13008] bond0 (unregistering): Released all slaves [ 832.717788][T13008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.777213][T13008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.825661][T13008] bond0 (unregistering): Released all slaves [ 833.598469][T19251] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.598598][T19251] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.598759][T19251] bridge_slave_0: entered allmulticast mode [ 833.610532][T19251] bridge_slave_0: entered promiscuous mode [ 833.829884][T19251] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.830011][T19251] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.830177][T19251] bridge_slave_1: entered allmulticast mode [ 833.837462][T19251] bridge_slave_1: entered promiscuous mode [ 834.311199][T19251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.419508][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 834.419526][ T37] audit: type=1800 audit(1789770782.448:5778): pid=19095 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24325 res=0 errno=0 [ 834.421862][ T37] audit: type=1800 audit(1789770782.448:5779): pid=19095 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24324 res=0 errno=0 [ 834.422346][T19251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.625023][ T37] audit: type=1800 audit(1789770782.648:5780): pid=19483 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302240 res=0 errno=0 [ 835.895585][T19251] team0: Port device team_slave_0 added [ 836.049625][T19251] team0: Port device team_slave_1 added [ 837.338940][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4578'. [ 837.503281][ T37] audit: type=1800 audit(1789770785.528:5781): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24325 res=0 errno=0 [ 837.509275][T19251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.509291][T19251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.509322][T19251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.067167][T19251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.067186][T19251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.067214][T19251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.427991][T19532] Bluetooth: MGMT ver 1.23 [ 838.533060][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 838.951346][T19324] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.951486][T19324] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.951694][T19324] bridge_slave_0: entered allmulticast mode [ 838.991629][T19324] bridge_slave_0: entered promiscuous mode [ 839.076808][T19324] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.076931][T19324] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.077104][T19324] bridge_slave_1: entered allmulticast mode [ 839.082121][T19324] bridge_slave_1: entered promiscuous mode [ 839.328388][T19547] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 839.904587][T19251] hsr_slave_0: entered promiscuous mode [ 839.914897][T19251] hsr_slave_1: entered promiscuous mode [ 839.918422][T19251] debugfs: 'hsr0' already exists in 'hsr' [ 839.918448][T19251] Cannot create hsr debugfs directory [ 840.099400][T19324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.124937][T19095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 840.267876][T19095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 840.278150][T19324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.444083][T19095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 840.484384][T19095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 843.015616][T19095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 843.114542][T19095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 843.364627][T19095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 843.461925][T19095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 843.483263][T19324] team0: Port device team_slave_0 added [ 843.548057][ T37] audit: type=1326 audit(1789770791.578:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27719e159 code=0x7ffc0000 [ 843.548607][ T37] audit: type=1326 audit(1789770791.578:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27719e159 code=0x7ffc0000 [ 843.548848][ T37] audit: type=1326 audit(1789770791.578:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27719e159 code=0x7ffc0000 [ 843.551733][ T37] audit: type=1326 audit(1789770791.578:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe27719e159 code=0x7ffc0000 [ 843.609106][ T37] audit: type=1326 audit(1789770791.638:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe27715e98e code=0x7ffc0000 [ 843.613920][ T37] audit: type=1326 audit(1789770791.638:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe27715e98e code=0x7ffc0000 [ 843.618966][ T37] audit: type=1326 audit(1789770791.648:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe27715e98e code=0x7ffc0000 [ 843.631540][ T37] audit: type=1326 audit(1789770791.658:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe27715e98e code=0x7ffc0000 [ 843.636580][ T37] audit: type=1326 audit(1789770791.668:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe27715e98e code=0x7ffc0000 [ 843.641479][ T37] audit: type=1326 audit(1789770791.668:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19610 comm="syz.7.4597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe27715e98e code=0x7ffc0000 [ 843.699777][T19324] team0: Port device team_slave_1 added [ 846.460820][T19324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.460839][T19324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.460867][T19324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.527220][T19324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.527239][T19324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.527267][T19324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.856671][T13008] hsr_slave_0: left promiscuous mode [ 846.896346][T13008] hsr_slave_1: left promiscuous mode [ 846.897567][T13008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.897593][T13008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.980630][T13008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.980659][T13008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.170395][T13008] hsr_slave_0: left promiscuous mode [ 847.207970][T13008] hsr_slave_1: left promiscuous mode [ 847.211654][T13008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.257161][T13008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.539126][T13008] hsr_slave_0: left promiscuous mode [ 847.558413][T13008] hsr_slave_1: left promiscuous mode [ 847.559641][T13008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.608481][T13008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.796606][T13008] hsr_slave_0: left promiscuous mode [ 847.840048][T13008] hsr_slave_1: left promiscuous mode [ 847.841289][T13008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.841316][T13008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.907376][T13008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.907405][T13008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.898675][T13008] veth1_macvtap: left promiscuous mode [ 848.898782][T13008] veth0_macvtap: left promiscuous mode [ 848.899067][T13008] veth1_vlan: left promiscuous mode [ 848.899351][T13008] veth0_vlan: left promiscuous mode [ 849.056729][T13008] veth1_macvtap: left promiscuous mode [ 849.056829][T13008] veth0_macvtap: left promiscuous mode [ 849.057079][T13008] veth1_vlan: left promiscuous mode [ 849.057258][T13008] veth0_vlan: left promiscuous mode [ 851.016393][T19684] fuse: Bad value for 'fd' [ 851.228745][T13008] team0 (unregistering): Port device team_slave_1 removed [ 851.300473][T13008] team0 (unregistering): Port device team_slave_0 removed [ 852.547956][T13008] team0 (unregistering): Port device team_slave_1 removed [ 852.609638][T13008] team0 (unregistering): Port device team_slave_0 removed [ 853.858973][T13008] team0 (unregistering): Port device team_slave_1 removed [ 853.937174][T13008] team0 (unregistering): Port device team_slave_0 removed [ 854.929434][ T37] kauditd_printk_skb: 48 callbacks suppressed [ 854.929454][ T37] audit: type=1800 audit(1789770802.958:5840): pid=19698 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307516 res=0 errno=0 [ 854.932698][ T37] audit: type=1800 audit(1789770802.958:5841): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307527 res=0 errno=0 [ 854.944535][T14669] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 855.061229][T14669] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 855.085579][T14669] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 855.108658][T14669] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 855.115013][T14669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 855.265825][ T37] audit: type=1800 audit(1789770803.288:5842): pid=19698 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307546 res=0 errno=0 [ 855.310286][ T37] audit: type=1800 audit(1789770803.338:5843): pid=19698 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307557 res=0 errno=0 [ 855.721533][T13008] team0 (unregistering): Port device team_slave_1 removed [ 855.806616][T13008] team0 (unregistering): Port device team_slave_0 removed [ 857.427485][ T5600] Bluetooth: hci6: command tx timeout [ 857.582853][ T37] audit: type=1800 audit(1789770805.608:5844): pid=19251 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24325 res=0 errno=0 [ 857.590156][T19324] hsr_slave_0: entered promiscuous mode [ 857.591386][T19324] hsr_slave_1: entered promiscuous mode [ 857.592231][T19324] debugfs: 'hsr0' already exists in 'hsr' [ 857.592254][T19324] Cannot create hsr debugfs directory [ 857.898003][ T37] audit: type=1800 audit(1789770805.928:5845): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24324 res=0 errno=0 [ 857.898050][ T37] audit: type=1800 audit(1789770805.928:5846): pid=19251 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24324 res=0 errno=0 [ 857.901563][ T37] audit: type=1800 audit(1789770805.928:5847): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308943 res=0 errno=0 [ 859.338575][ T37] audit: type=1800 audit(1789770807.368:5848): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=3319 res=0 errno=0 [ 859.499051][ T5600] Bluetooth: hci6: command tx timeout [ 860.332823][ T37] audit: type=1800 audit(1789770808.358:5849): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=21933 res=0 errno=0 [ 860.590796][ T37] audit: type=1800 audit(1789770808.618:5850): pid=19324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24325 res=0 errno=0 [ 860.670528][ T37] audit: type=1800 audit(1789770808.698:5851): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22182 res=0 errno=0 [ 861.054196][ T37] audit: type=1800 audit(1789770809.078:5852): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22256 res=0 errno=0 [ 861.557902][ T5600] Bluetooth: hci6: command tx timeout [ 861.700527][ T37] audit: type=1800 audit(1789770809.728:5853): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=314123 res=0 errno=0 [ 861.711777][ T37] audit: type=1800 audit(1789770809.738:5854): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22339 res=0 errno=0 [ 861.775686][ T37] audit: type=1800 audit(1789770809.798:5855): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22422 res=0 errno=0 [ 861.816376][ T37] audit: type=1800 audit(1789770809.838:5856): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=22875 res=0 errno=0 [ 861.970087][ T37] audit: type=1800 audit(1789770809.998:5857): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=314364 res=0 errno=0 [ 862.110799][ T37] audit: type=1800 audit(1789770810.138:5858): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=314382 res=0 errno=0 [ 862.458532][T14669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 862.519090][T14669] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 862.538396][T14669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 862.589319][T14669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 862.675501][T14669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 863.676923][T14669] Bluetooth: hci6: command tx timeout [ 864.916959][T14669] Bluetooth: hci0: command tx timeout [ 865.653398][T19760] file system registered [ 866.010102][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 866.010119][ T37] audit: type=1800 audit(1789770814.038:5872): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52461 res=0 errno=0 [ 866.070290][ T37] audit: type=1800 audit(1789770814.098:5873): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315611 res=0 errno=0 [ 866.122630][ T37] audit: type=1800 audit(1789770814.148:5874): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=315626 res=0 errno=0 [ 866.340296][ T37] audit: type=1800 audit(1789770814.368:5875): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52544 res=0 errno=0 [ 866.382144][ T37] audit: type=1800 audit(1789770814.408:5876): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52618 res=0 errno=0 [ 866.455026][ T37] audit: type=1800 audit(1789770814.478:5877): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52716 res=0 errno=0 [ 866.654549][T13008] IPVS: stop unused estimator thread 0... [ 866.997187][T14669] Bluetooth: hci0: command tx timeout [ 866.998808][ T37] audit: type=1800 audit(1789770815.028:5878): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52794 res=0 errno=0 [ 867.303569][T19251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 867.340198][T19251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 867.457219][T19251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 867.461064][ T37] audit: type=1800 audit(1789770815.488:5879): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52868 res=0 errno=0 [ 867.653265][T19251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 867.725834][T19696] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.725957][T19696] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.726148][T19696] bridge_slave_0: entered allmulticast mode [ 867.757099][T19696] bridge_slave_0: entered promiscuous mode [ 867.811213][T19696] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.811333][T19696] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.811544][T19696] bridge_slave_1: entered allmulticast mode [ 867.815315][ T37] audit: type=1800 audit(1789770815.838:5880): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=81335 res=0 errno=0 [ 867.833824][T19696] bridge_slave_1: entered promiscuous mode [ 868.086021][ T37] audit: type=1800 audit(1789770816.108:5881): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=319130 res=0 errno=0 [ 868.174924][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 868.224687][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 868.282457][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 868.290485][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 868.308172][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 869.081779][T14669] Bluetooth: hci0: command tx timeout [ 870.044250][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.044316][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.599541][T14669] Bluetooth: hci3: command tx timeout [ 871.157702][T14669] Bluetooth: hci0: command tx timeout [ 871.291403][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 871.291421][ T37] audit: type=1800 audit(1789770819.318:5887): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=81409 res=0 errno=0 [ 871.780354][T19696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.855850][ T37] audit: type=1800 audit(1789770819.878:5888): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=81483 res=0 errno=0 [ 871.892749][T19696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.615044][ T37] audit: type=1800 audit(1789770820.638:5889): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=81557 res=0 errno=0 [ 872.678002][T14669] Bluetooth: hci3: command tx timeout [ 872.954647][T19696] team0: Port device team_slave_0 added [ 872.971625][ T37] audit: type=1800 audit(1789770820.998:5890): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=81631 res=0 errno=0 [ 873.012600][T19696] team0: Port device team_slave_1 added [ 873.144357][ T37] audit: type=1800 audit(1789770821.168:5891): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=81705 res=0 errno=0 [ 873.917577][T19696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.917596][T19696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.917623][T19696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.967837][ T37] audit: type=1800 audit(1789770821.998:5892): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=81779 res=0 errno=0 [ 873.983453][T19696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.983471][T19696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.983497][T19696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.178777][T19811] fuse: Bad value for 'fd' [ 874.756944][T14669] Bluetooth: hci3: command tx timeout [ 875.229710][T19696] hsr_slave_0: entered promiscuous mode [ 875.231037][T19696] hsr_slave_1: entered promiscuous mode [ 875.233536][T19696] debugfs: 'hsr0' already exists in 'hsr' [ 875.233563][T19696] Cannot create hsr debugfs directory [ 875.448828][ T37] audit: type=1800 audit(1789770823.478:5893): pid=19324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24324 res=0 errno=0 [ 875.464622][ T37] audit: type=1800 audit(1789770823.488:5894): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326173 res=0 errno=0 [ 876.267526][ T37] audit: type=1800 audit(1789770824.298:5895): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326594 res=0 errno=0 [ 876.337129][ T37] audit: type=1800 audit(1789770824.358:5896): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326605 res=0 errno=0 [ 876.347955][ T5600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 876.489970][ T5600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 876.499971][ T5600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 876.507632][ T5600] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 876.508864][ T5600] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 876.689782][ T37] audit: type=1800 audit(1789770824.718:5897): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326624 res=0 errno=0 [ 876.783269][ T37] audit: type=1800 audit(1789770824.808:5898): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326635 res=0 errno=0 [ 876.828311][ T37] audit: type=1800 audit(1789770824.858:5899): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326508 res=0 errno=0 [ 876.836398][ T5600] Bluetooth: hci3: command tx timeout [ 876.883188][ T37] audit: type=1800 audit(1789770824.908:5900): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=326513 res=0 errno=0 [ 876.910953][ T37] audit: type=1800 audit(1789770824.938:5901): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=326517 res=0 errno=0 [ 876.930712][ T37] audit: type=1800 audit(1789770824.958:5902): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=326516 res=0 errno=0 [ 876.961835][ T37] audit: type=1800 audit(1789770824.988:5903): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=326519 res=0 errno=0 [ 877.086783][T19853] fuse: Bad value for 'fd' [ 877.522016][ T37] audit: type=1800 audit(1789770825.548:5904): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327222 res=0 errno=0 [ 877.541208][ T37] audit: type=1800 audit(1789770825.568:5905): pid=19707 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=327227 res=0 errno=0 [ 878.849692][ T5600] Bluetooth: hci7: command tx timeout [ 879.719902][T19875] FAULT_INJECTION: forcing a failure. [ 879.719902][T19875] name failslab, interval 1, probability 0, space 0, times 0 [ 879.719943][T19875] CPU: 0 UID: 60928 PID: 19875 Comm: syz.7.4655 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 879.719974][T19875] Tainted: [L]=SOFTLOCKUP [ 879.719982][T19875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.719995][T19875] Call Trace: [ 879.720004][T19875] [ 879.720014][T19875] dump_stack_lvl+0xe8/0x150 [ 879.720052][T19875] should_fail_ex+0x46b/0x600 [ 879.720087][T19875] should_failslab+0xa8/0x100 [ 879.720121][T19875] __kmalloc_cache_noprof+0xa1/0x680 [ 879.720151][T19875] ? mqueue_init_fs_context+0x55/0x580 [ 879.720179][T19875] ? mqueue_init_fs_context+0x55/0x580 [ 879.720212][T19875] mqueue_init_fs_context+0x55/0x580 [ 879.720251][T19875] alloc_fs_context+0x9a3/0xd00 [ 879.720287][T19875] mq_init_ns+0x10d/0x770 [ 879.720315][T19875] copy_ipcs+0x45c/0x6c0 [ 879.720347][T19875] create_new_namespaces+0x210/0x6b0 [ 879.720380][T19875] ? security_capable+0x7e/0x2c0 [ 879.720416][T19875] unshare_nsproxy_namespaces+0x149/0x190 [ 879.720447][T19875] ksys_unshare+0x5a7/0x950 [ 879.720482][T19875] ? __pfx_ksys_unshare+0x10/0x10 [ 879.720512][T19875] ? __pfx_ksys_write+0x10/0x10 [ 879.720546][T19875] __x64_sys_unshare+0x38/0x50 [ 879.720575][T19875] do_syscall_64+0x166/0x520 [ 879.720607][T19875] ? trace_irq_disable+0x3b/0x140 [ 879.720634][T19875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.720656][T19875] ? clear_bhb_loop+0x70/0xc0 [ 879.720681][T19875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.720703][T19875] RIP: 0033:0x7fe27719e159 [ 879.720723][T19875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.720741][T19875] RSP: 002b:00007fe2753f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 879.720764][T19875] RAX: ffffffffffffffda RBX: 00007fe277425fa0 RCX: 00007fe27719e159 [ 879.720780][T19875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 879.720794][T19875] RBP: 00007fe27723506b R08: 0000000000000000 R09: 0000000000000000 [ 879.720807][T19875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.720821][T19875] R13: 00007fe277426038 R14: 00007fe277425fa0 R15: 00007ffc010895d8 [ 879.720854][T19875] [ 880.916849][ T5600] Bluetooth: hci7: command tx timeout [ 881.674663][T19732] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.674785][T19732] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.674971][T19732] bridge_slave_0: entered allmulticast mode [ 881.680710][T19732] bridge_slave_0: entered promiscuous mode [ 881.713602][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 881.713620][ T37] audit: type=1800 audit(1789770829.738:5920): pid=19696 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24325 res=0 errno=0 [ 882.153625][T19732] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.153757][T19732] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.153959][T19732] bridge_slave_1: entered allmulticast mode [ 882.173754][T19732] bridge_slave_1: entered promiscuous mode [ 882.997981][T14669] Bluetooth: hci7: command tx timeout [ 883.007671][T19732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.097970][T19732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.975653][T19732] team0: Port device team_slave_0 added [ 884.062188][T19732] team0: Port device team_slave_1 added [ 884.864801][T19915] FAULT_INJECTION: forcing a failure. [ 884.864801][T19915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.864842][T19915] CPU: 1 UID: 0 PID: 19915 Comm: syz.7.4663 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 884.864869][T19915] Tainted: [L]=SOFTLOCKUP [ 884.864876][T19915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.864889][T19915] Call Trace: [ 884.864899][T19915] [ 884.864909][T19915] dump_stack_lvl+0xe8/0x150 [ 884.864944][T19915] should_fail_ex+0x46b/0x600 [ 884.864975][T19915] _copy_to_user+0x31/0xb0 [ 884.865006][T19915] __se_sys_rt_sigprocmask+0x20a/0x2a0 [ 884.865039][T19915] ? __pfx___se_sys_rt_sigprocmask+0x10/0x10 [ 884.865071][T19915] ? rcu_is_watching+0x16/0xb0 [ 884.865125][T19915] do_syscall_64+0x166/0x520 [ 884.865156][T19915] ? trace_irq_disable+0x3b/0x140 [ 884.865183][T19915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.865203][T19915] ? clear_bhb_loop+0x70/0xc0 [ 884.865228][T19915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.865248][T19915] RIP: 0033:0x7fe27719e159 [ 884.865268][T19915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.865284][T19915] RSP: 002b:00007fe2753f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000000e [ 884.865306][T19915] RAX: ffffffffffffffda RBX: 00007fe277425fa0 RCX: 00007fe27719e159 [ 884.865321][T19915] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000000000000001 [ 884.865335][T19915] RBP: 00007fe27723506b R08: 0000000000000000 R09: 0000000000000000 [ 884.865348][T19915] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 884.865360][T19915] R13: 00007fe277426038 R14: 00007fe277425fa0 R15: 00007ffc010895d8 [ 884.865392][T19915] [ 884.984138][T19732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.984156][T19732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.984183][T19732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.016361][ T35] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 13030 jiffies old. [ 885.076415][T14669] Bluetooth: hci7: command tx timeout [ 885.117154][T19732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.117172][T19732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.117199][T19732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.214719][T19773] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.214844][T19773] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.215028][T19773] bridge_slave_0: entered allmulticast mode [ 885.279659][T19773] bridge_slave_0: entered promiscuous mode [ 885.430783][T19773] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.430879][T19773] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.431046][T19773] bridge_slave_1: entered allmulticast mode [ 885.439025][T19773] bridge_slave_1: entered promiscuous mode [ 885.969024][T19773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.009287][T19732] hsr_slave_0: entered promiscuous mode [ 886.010571][T19732] hsr_slave_1: entered promiscuous mode [ 886.011452][T19732] debugfs: 'hsr0' already exists in 'hsr' [ 886.011476][T19732] Cannot create hsr debugfs directory [ 886.065474][T19773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.173030][T19773] team0: Port device team_slave_0 added [ 886.207534][T19773] team0: Port device team_slave_1 added [ 887.305566][ T37] audit: type=1800 audit(1789770835.328:5921): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=339300 res=0 errno=0 [ 887.331405][ T37] audit: type=1800 audit(1789770835.358:5922): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=339305 res=0 errno=0 [ 887.342554][ T37] audit: type=1800 audit(1789770835.368:5923): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=339309 res=0 errno=0 [ 887.346077][ T37] audit: type=1800 audit(1789770835.368:5924): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=339308 res=0 errno=0 [ 887.351685][ T37] audit: type=1800 audit(1789770835.378:5925): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=339311 res=0 errno=0 [ 887.546784][ T37] audit: type=1804 audit(1789770835.578:5926): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.4666" name="/newroot/687/file0" dev="tmpfs" ino=3607 res=1 errno=0 [ 887.717113][T19773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.717131][T19773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.717158][T19773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.965429][ T37] audit: type=1800 audit(1789770835.988:5927): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=339808 res=0 errno=0 [ 887.970263][ T37] audit: type=1800 audit(1789770835.998:5928): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=339813 res=0 errno=0 [ 887.972412][ T37] audit: type=1800 audit(1789770835.998:5929): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=339817 res=0 errno=0 [ 887.975090][ T37] audit: type=1800 audit(1789770835.998:5930): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=339816 res=0 errno=0 [ 888.029896][T19773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.029913][T19773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.029940][T19773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.318491][T13010] bridge_slave_1: left allmulticast mode [ 889.318527][T13010] bridge_slave_1: left promiscuous mode [ 889.318791][T13010] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.478158][T13010] bridge_slave_0: left allmulticast mode [ 889.478196][T13010] bridge_slave_0: left promiscuous mode [ 889.478453][T13010] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.766918][T13010] bridge_slave_1: left allmulticast mode [ 889.766957][T13010] bridge_slave_1: left promiscuous mode [ 889.767305][T13010] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.938164][T13010] bridge_slave_0: left allmulticast mode [ 889.938201][T13010] bridge_slave_0: left promiscuous mode [ 889.938438][T13010] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.559162][T13010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.647023][T13010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.710168][T13010] bond0 (unregistering): Released all slaves [ 891.179228][T13010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.300351][T13010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.338956][T13010] bond0 (unregistering): Released all slaves [ 891.571708][T19773] hsr_slave_0: entered promiscuous mode [ 891.575830][T19773] hsr_slave_1: entered promiscuous mode [ 891.579924][T19773] debugfs: 'hsr0' already exists in 'hsr' [ 891.579950][T19773] Cannot create hsr debugfs directory [ 891.659525][T19977] tipc: Enabling of bearer rejected, failed to enable media [ 893.312023][T19847] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.312153][T19847] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.312343][T19847] bridge_slave_0: entered allmulticast mode [ 893.390929][T19847] bridge_slave_0: entered promiscuous mode [ 893.409449][T19996] Bluetooth: MGMT ver 1.23 [ 893.655667][T19847] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.655788][T19847] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.655966][T19847] bridge_slave_1: entered allmulticast mode [ 893.679560][T19847] bridge_slave_1: entered promiscuous mode [ 894.814647][T19847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.729530][T19847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.146516][T13010] hsr_slave_0: left promiscuous mode [ 896.188384][T13010] hsr_slave_1: left promiscuous mode [ 896.189598][T13010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.239105][T13010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.570070][T13010] hsr_slave_0: left promiscuous mode [ 896.618437][T13010] hsr_slave_1: left promiscuous mode [ 896.619808][T13010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.669273][T13010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.579259][T13010] team0 (unregistering): Port device team_slave_1 removed [ 897.651194][T13010] team0 (unregistering): Port device team_slave_0 removed [ 898.790959][T13010] team0 (unregistering): Port device team_slave_1 removed [ 898.857984][T13010] team0 (unregistering): Port device team_slave_0 removed [ 899.551914][T19847] team0: Port device team_slave_0 added [ 899.664651][T19847] team0: Port device team_slave_1 added [ 899.999969][T19847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.999987][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.000014][T19847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.014376][T19847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.014392][T19847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.014419][T19847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.024336][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 900.024353][ T37] audit: type=1800 audit(1789770848.048:5943): pid=19773 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24325 res=0 errno=0 [ 900.121669][T19847] hsr_slave_0: entered promiscuous mode [ 900.123021][T19847] hsr_slave_1: entered promiscuous mode [ 900.123902][T19847] debugfs: 'hsr0' already exists in 'hsr' [ 900.123927][T19847] Cannot create hsr debugfs directory [ 900.662471][ T37] audit: type=1800 audit(1789770848.688:5944): pid=19696 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24324 res=0 errno=0 [ 900.964671][T20061] FAULT_INJECTION: forcing a failure. [ 900.964671][T20061] name failslab, interval 1, probability 0, space 0, times 0 [ 900.964709][T20061] CPU: 0 UID: 0 PID: 20061 Comm: syz.7.4681 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 900.964739][T20061] Tainted: [L]=SOFTLOCKUP [ 900.964747][T20061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.964760][T20061] Call Trace: [ 900.964769][T20061] [ 900.964778][T20061] dump_stack_lvl+0xe8/0x150 [ 900.964814][T20061] should_fail_ex+0x46b/0x600 [ 900.964848][T20061] should_failslab+0xa8/0x100 [ 900.964881][T20061] __kmalloc_noprof+0xfb/0x790 [ 900.964907][T20061] ? __kasan_kmalloc+0x93/0xb0 [ 900.964934][T20061] ? security_shm_alloc+0x48/0x310 [ 900.964963][T20061] ? security_shm_alloc+0x48/0x310 [ 900.964997][T20061] security_shm_alloc+0x48/0x310 [ 900.965029][T20061] newseg+0x35a/0xc90 [ 900.965063][T20061] ? __pfx_newseg+0x10/0x10 [ 900.965089][T20061] ? rwbase_write_lock+0x550/0x720 [ 900.965123][T20061] ipcget+0x1db/0xf30 [ 900.965153][T20061] ? do_futex+0x3e7/0x4e0 [ 900.965181][T20061] ? __pfx_do_futex+0x10/0x10 [ 900.965204][T20061] ? __pfx_ipcget+0x10/0x10 [ 900.965237][T20061] ? __se_sys_futex+0x3a8/0x450 [ 900.965262][T20061] __x64_sys_shmget+0x140/0x190 [ 900.965294][T20061] ? __pfx___x64_sys_shmget+0x10/0x10 [ 900.965336][T20061] do_syscall_64+0x166/0x520 [ 900.965365][T20061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.965387][T20061] ? clear_bhb_loop+0x70/0xc0 [ 900.965413][T20061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.965434][T20061] RIP: 0033:0x7fe27719e159 [ 900.965461][T20061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.965479][T20061] RSP: 002b:00007fe2753f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 900.965503][T20061] RAX: ffffffffffffffda RBX: 00007fe277425fa0 RCX: 00007fe27719e159 [ 900.965519][T20061] RDX: 0000000000000200 RSI: 0000000000004000 RDI: 0000000000000000 [ 900.965532][T20061] RBP: 00007fe27723506b R08: 0000000000000000 R09: 0000000000000000 [ 900.965547][T20061] R10: 0000200000ff9000 R11: 0000000000000246 R12: 0000000000000000 [ 900.965561][T20061] R13: 00007fe277426038 R14: 00007fe277425fa0 R15: 00007ffc010895d8 [ 900.965596][T20061] [ 902.014934][ T37] audit: type=1800 audit(1789770850.038:5945): pid=19847 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24325 res=0 errno=0 [ 903.622545][ T37] audit: type=1804 audit(1789770851.648:5946): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.4685" name="/newroot/706/file0" dev="tmpfs" ino=3708 res=1 errno=0 [ 904.557408][ T37] audit: type=1800 audit(1789770852.588:5947): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24324 res=0 errno=0 [ 905.327072][ T37] audit: type=1800 audit(1789770853.358:5948): pid=20113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4690" name="mem_sleep" dev="sysfs" ino=1413 res=0 errno=0 [ 906.951071][T20134] fuse: Bad value for 'fd' [ 907.390105][T20142] FAULT_INJECTION: forcing a failure. [ 907.390105][T20142] name failslab, interval 1, probability 0, space 0, times 0 [ 907.390145][T20142] CPU: 0 UID: 0 PID: 20142 Comm: syz.7.4696 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 907.390175][T20142] Tainted: [L]=SOFTLOCKUP [ 907.390184][T20142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 907.390196][T20142] Call Trace: [ 907.390205][T20142] [ 907.390216][T20142] dump_stack_lvl+0xe8/0x150 [ 907.390252][T20142] should_fail_ex+0x46b/0x600 [ 907.390286][T20142] should_failslab+0xa8/0x100 [ 907.390317][T20142] ? proc_net_ns_init+0x4e/0x380 [ 907.390348][T20142] kmem_cache_alloc_noprof+0x9e/0x690 [ 907.390376][T20142] ? proc_net_ns_init+0x4e/0x380 [ 907.390412][T20142] proc_net_ns_init+0x4e/0x380 [ 907.390445][T20142] ops_init+0x35d/0x5d0 [ 907.390496][T20142] setup_net+0x118/0x350 [ 907.390527][T20142] ? __pfx_setup_net+0x10/0x10 [ 907.390560][T20142] ? __ns_common_init+0x2fc/0x4a0 [ 907.390593][T20142] copy_net_ns+0x53b/0x780 [ 907.390626][T20142] create_new_namespaces+0x3f0/0x6b0 [ 907.390656][T20142] ? security_capable+0x7e/0x2c0 [ 907.390692][T20142] unshare_nsproxy_namespaces+0x149/0x190 [ 907.390726][T20142] ksys_unshare+0x5a7/0x950 [ 907.390762][T20142] ? __pfx_ksys_unshare+0x10/0x10 [ 907.390789][T20142] ? rcu_is_watching+0x16/0xb0 [ 907.390831][T20142] __x64_sys_unshare+0x38/0x50 [ 907.390859][T20142] do_syscall_64+0x166/0x520 [ 907.390890][T20142] ? trace_irq_disable+0x3b/0x140 [ 907.390915][T20142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.390937][T20142] ? clear_bhb_loop+0x70/0xc0 [ 907.390962][T20142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.390982][T20142] RIP: 0033:0x7fe27719e159 [ 907.391002][T20142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.391019][T20142] RSP: 002b:00007fe2753f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 907.391047][T20142] RAX: ffffffffffffffda RBX: 00007fe277425fa0 RCX: 00007fe27719e159 [ 907.391064][T20142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 907.391078][T20142] RBP: 00007fe27723506b R08: 0000000000000000 R09: 0000000000000000 [ 907.391092][T20142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.391105][T20142] R13: 00007fe277426038 R14: 00007fe277425fa0 R15: 00007ffc010895d8 [ 907.391141][T20142] [ 908.999715][ T37] audit: type=1800 audit(1789770857.028:5949): pid=19773 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24324 res=0 errno=0 [ 909.092058][ T37] audit: type=1800 audit(1789770857.118:5950): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=346964 res=0 errno=0 [ 909.279067][ T37] audit: type=1800 audit(1789770857.308:5951): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=346980 res=0 errno=0 [ 909.281699][ T37] audit: type=1800 audit(1789770857.308:5952): pid=20166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=346985 res=0 errno=0 [ 909.287437][ T37] audit: type=1800 audit(1789770857.318:5953): pid=20166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=346989 res=0 errno=0 [ 909.295228][ T37] audit: type=1800 audit(1789770857.318:5954): pid=20166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=346988 res=0 errno=0 [ 909.301607][ T37] audit: type=1800 audit(1789770857.328:5955): pid=20166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=346991 res=0 errno=0 [ 909.443081][ T37] audit: type=1800 audit(1789770857.468:5956): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347066 res=0 errno=0 [ 909.459096][ T37] audit: type=1800 audit(1789770857.488:5957): pid=20166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=347071 res=0 errno=0 [ 909.969508][T13010] bridge_slave_1: left allmulticast mode [ 909.969546][T13010] bridge_slave_1: left promiscuous mode [ 909.969800][T13010] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.150287][T13010] bridge_slave_0: left allmulticast mode [ 910.150328][T13010] bridge_slave_0: left promiscuous mode [ 910.150588][T13010] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.416984][T13010] bridge_slave_1: left allmulticast mode [ 910.417023][T13010] bridge_slave_1: left promiscuous mode [ 910.417267][T13010] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.524525][T13010] bridge_slave_0: left allmulticast mode [ 910.524564][T13010] bridge_slave_0: left promiscuous mode [ 910.524797][T13010] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.393235][T13010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.599855][T13010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.832757][T13010] bond0 (unregistering): Released all slaves [ 912.498515][T13010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.618424][T13010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.683851][T13010] bond0 (unregistering): Released all slaves [ 913.514424][T19696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 913.629458][T19696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 913.631013][T19696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 913.843410][T19696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.849119][T19696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 913.924979][T19696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.954484][T19696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 914.047850][T19696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 916.081913][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 916.081932][ T37] audit: type=1800 audit(1789770864.108:5971): pid=20209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347702 res=0 errno=0 [ 916.233771][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 916.235684][ T37] audit: type=1800 audit(1789770864.258:5972): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347713 res=0 errno=0 [ 916.303746][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 916.315622][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 916.322659][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 916.336521][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 916.715271][T19696] kthread_run failed with err -4 [ 916.802126][ T37] audit: type=1800 audit(1789770864.788:5973): pid=20209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347732 res=0 errno=0 [ 917.003461][ T37] audit: type=1800 audit(1789770865.028:5974): pid=20250 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347743 res=0 errno=0 [ 917.155723][T13010] hsr_slave_0: left promiscuous mode [ 917.194920][T13010] hsr_slave_1: left promiscuous mode [ 917.202941][T13010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.234798][T13010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.446681][T13010] hsr_slave_0: left promiscuous mode [ 917.491963][T13010] hsr_slave_1: left promiscuous mode [ 917.493385][T13010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.533847][T13010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.439578][T14669] Bluetooth: hci5: command tx timeout [ 918.788322][T13010] team0 (unregistering): Port device team_slave_1 removed [ 918.868348][T13010] team0 (unregistering): Port device team_slave_0 removed [ 920.041962][T13010] team0 (unregistering): Port device team_slave_1 removed [ 920.120158][T13010] team0 (unregistering): Port device team_slave_0 removed [ 920.516396][T14669] Bluetooth: hci5: command tx timeout [ 922.048166][T20288] kAFS: unable to lookup cell '(' [ 922.599914][T14669] Bluetooth: hci5: command tx timeout [ 922.643807][ T37] audit: type=1800 audit(1789770870.668:5975): pid=20209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347754 res=0 errno=0 [ 922.757151][ T37] audit: type=1800 audit(1789770870.788:5976): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347765 res=0 errno=0 [ 922.795481][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 922.871924][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 922.888450][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 922.908927][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 922.938349][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 923.000494][ T37] audit: type=1800 audit(1789770871.028:5977): pid=20209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347784 res=0 errno=0 [ 923.055839][ T37] audit: type=1800 audit(1789770871.078:5978): pid=20209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=347795 res=0 errno=0 [ 923.530263][ T37] audit: type=1800 audit(1789770871.558:5979): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348363 res=0 errno=0 [ 923.540811][ T37] audit: type=1800 audit(1789770871.568:5980): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348395 res=0 errno=0 [ 923.644481][ T37] audit: type=1800 audit(1789770871.668:5981): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348427 res=0 errno=0 [ 923.661042][ T37] audit: type=1800 audit(1789770871.678:5982): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348442 res=0 errno=0 [ 923.867648][ T37] audit: type=1800 audit(1789770871.878:5983): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348516 res=0 errno=0 [ 924.676322][ T5600] Bluetooth: hci5: command tx timeout [ 924.714652][ T37] audit: type=1800 audit(1789770872.738:5984): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350241 res=0 errno=0 [ 925.076346][ T5600] Bluetooth: hci6: command tx timeout [ 926.974759][T20353] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4721'. [ 927.042295][T20354] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4721'. [ 927.156335][ T5600] Bluetooth: hci6: command tx timeout [ 927.491616][T20353] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 927.537345][T20353] bond1 (unregistering): Released all slaves [ 927.847482][T20354] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 927.861134][T20354] bond1 (unregistering): Released all slaves [ 928.497132][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 928.497151][ T37] audit: type=1800 audit(1789770876.528:5986): pid=20306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355895 res=0 errno=0 [ 928.552032][ T37] audit: type=1800 audit(1789770876.578:5987): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355906 res=0 errno=0 [ 928.583112][T14669] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 928.678868][T14669] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 928.696111][T14669] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 928.697459][T14669] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 928.705672][T14669] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 928.921978][ T37] audit: type=1800 audit(1789770876.948:5988): pid=20306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355925 res=0 errno=0 [ 928.971361][ T37] audit: type=1800 audit(1789770876.998:5989): pid=20306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=355936 res=0 errno=0 [ 929.249175][ T5600] Bluetooth: hci6: command tx timeout [ 931.061914][ T5600] Bluetooth: hci8: command tx timeout [ 931.316324][ T5600] Bluetooth: hci6: command tx timeout [ 931.487108][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.487179][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.076352][ T5600] Bluetooth: hci8: command tx timeout [ 933.256176][ T37] audit: type=1800 audit(1789770881.278:5990): pid=20430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=357509 res=0 errno=0 [ 934.052424][ T38] INFO: task syz.2.4444:18993 blocked for more than 143 seconds. [ 934.052454][ T38] Tainted: G L syzkaller #0 ** replaying previous printk message ** [ 934.052454][ T38] Tainted: G L syzkaller #0 [ 934.052466][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 934.052477][ T38] task:syz.2.4444 state:D stack:28904 pid:18993 tgid:18990 ppid:17145 task_flags:0x400040 flags:0x00080002 [ 934.052544][ T38] Call Trace: [ 934.052553][ T38] [ 934.052567][ T38] __schedule+0x16d9/0x5700 [ 934.052603][ T38] ? __lock_acquire+0x747/0x2de0 [ 934.052657][ T38] ? __pfx___schedule+0x10/0x10 [ 934.052682][ T38] ? lock_acquire+0x115/0x350 [ 934.052713][ T38] ? schedule+0x90/0x2b0 [ 934.052743][ T38] schedule+0x164/0x2b0 [ 934.052772][ T38] cgroup_lock_and_drain_offline+0x51a/0x650 [ 934.052813][ T38] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 934.052840][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 934.052878][ T38] cgroup_kn_lock_live+0x120/0x230 [ 934.052905][ T38] cgroup_subtree_control_write+0x4b5/0x1080 [ 934.052945][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 934.052970][ T38] ? kernfs_root+0x1c/0x230 [ 934.052994][ T38] ? kernfs_root+0x1c/0x230 [ 934.053018][ T38] ? kernfs_root+0x1ea/0x230 [ 934.053043][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 934.053066][ T38] cgroup_file_write+0x331/0x8f0 [ 934.053092][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 934.053114][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 934.053156][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 934.053176][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 934.053301][ T38] vfs_write+0x61e/0xbb0 [ 934.053337][ T38] ? __pfx_vfs_write+0x10/0x10 [ 934.053370][ T38] ? mutex_lock_nested+0x168/0x1d0 [ 934.053392][ T38] ? __fget_files+0x2a/0x420 [ 934.053422][ T38] ksys_write+0x156/0x270 [ 934.053449][ T38] ? __pfx_ksys_write+0x10/0x10 [ 934.053471][ T38] ? __pfx_kcov_ioctl+0x10/0x10 [ 934.053512][ T38] do_syscall_64+0x166/0x520 [ 934.053540][ T38] ? trace_irq_disable+0x3b/0x140 [ 934.053565][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.053587][ T38] ? clear_bhb_loop+0x70/0xc0 [ 934.053612][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.053633][ T38] RIP: 0033:0x7f90f123e159 [ 934.053652][ T38] RSP: 002b:00007f90ef475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 934.053674][ T38] RAX: ffffffffffffffda RBX: 00007f90f14c6090 RCX: 00007f90f123e159 [ 934.053690][ T38] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000005 [ 934.053703][ T38] RBP: 00007f90f12d506b R08: 0000000000000000 R09: 0000000000000000 [ 934.053717][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.053730][ T38] R13: 00007f90f14c6128 R14: 00007f90f14c6090 R15: 00007ffcc694f698 [ 934.053764][ T38] [ 934.053810][ T38] [ 934.053810][ T38] Showing all locks held in the system: [ 934.053824][ T38] locks held by rcu_tasks_kthre/35: 1, on CPU#1: [ 934.053840][ T38] #0: ffffffff8e1c45e0 (rcu_tasks.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xb2d/0xe30 [ 934.053916][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 934.053931][ T38] #0: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 934.054009][ T38] locks held by kworker/u8:14/13010: 11, last CPU#1: [ 934.054024][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 934.054080][ T38] #1: ffffc9000d897c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 934.054134][ T38] #2: ffffffff8f5c5ba0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 934.054192][ T38] #3: ffff88807dfb9160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 934.054447][ T38] #4: ffff888063032310 (&devlink->lock_key#19){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 934.054512][ T38] #5: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 934.054620][ T38] #6: ffff88813ff6f348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 934.054675][ T38] #7: ffff88813ff6f238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 934.054731][ T38] #8: ffff88813ff6f100 (&root->kernfs_idr_lock){+.+.}-{3:3}, at: kernfs_put+0x5de/0x820 [ 934.054782][ T38] #9: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 934.054834][ T38] #10: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 934.054892][ T38] locks held by syz.3.3931/17103: 1, last CPU#1: [ 934.054907][ T38] #0: ffff888035dbcc58 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: process_measurement+0x7e0/0x1c20 [ 934.054971][ T38] locks held by syz.2.4444/18993: 3, on CPU#1: [ 934.054986][ T38] #0: ffff888028827f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 934.055035][ T38] #1: ffff88801160c510 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 934.055090][ T38] #2: ffff888064467878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 934.055146][ T38] locks held by syz-executor/19732: 1, on CPU#0: [ 934.055161][ T38] #0: ffff88813fffc2d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x44/0x2a0 [ 934.055214][ T38] locks held by syz-executor/19773: 7, on CPU#1: [ 934.055229][ T38] #0: ffff8880361f0510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 934.055283][ T38] #1: ffff888032cdf478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 934.055339][ T38] #2: ffff888028ff54b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 934.055399][ T38] #3: ffffffff8ee44a98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 934.055586][ T38] #4: ffff888026367160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 934.055647][ T38] #5: ffff888034b56310 (&devlink->lock_key#21){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbc0 [ 934.055699][ T38] #6: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x8b/0x290 [ 934.055785][ T38] locks held by syz-executor/19847: 4, on CPU#0: [ 934.055801][ T38] #0: ffff8880361f0510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 934.055855][ T38] #1: ffff888061eefc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 934.055910][ T38] #2: ffff888028ff54b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 934.055970][ T38] #3: ffffffff8ee44a98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 934.056026][ T38] locks held by syz.7.4706/20206: 4, last CPU#0: [ 934.056041][ T38] #0: ffff8880b8643418 (&pcp->lock){+.+.}-{3:3}, at: free_frozen_page_commit+0x815/0x1850 [ 934.056092][ T38] #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 934.056145][ T38] #2: ffff88813fffc2d8 (&zone->lock){+.+.}-{3:3}, at: free_pcppages_bulk+0x61/0x540 [ 934.056321][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 934.056373][ T38] locks held by syz-executor/20243: 2, on CPU#0: [ 934.056387][ T38] #0: ffffffff8fb227e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 934.056431][ T38] #1: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 934.056484][ T38] locks held by syz-executor/20298: 1, on CPU#0: [ 934.056498][ T38] #0: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3dd/0x1e70 [ 934.056730][ T38] locks held by syz-executor/20369: 2, on CPU#0: [ 934.056746][ T38] #0: ffffffff8f5c5ba0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 934.056798][ T38] #1: ffffffff8f5d43f8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x8b/0x290 [ 934.056853][ T38] locks held by syz.7.4735/20434: 1, last CPU#0: [ 934.056867][ T38] #0: ffff88803572a098 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x359/0x1bb0 [ 934.056925][ T38] locks held by rm/20438: 6, last CPU#1: [ 934.056938][ T38] #0: ffff888025448588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 934.056992][ T38] #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12cd/0x28f0 [ 934.057044][ T38] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1e3/0x1df0 [ 934.057092][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 934.057140][ T38] #4: ffff8880360d4298 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 934.057194][ T38] #5: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 934.057257][ T38] [ 934.057263][ T38] ============================================= [ 934.057263][ T38] [ 934.057274][ T38] NMI backtrace for cpu 1 [ 934.057295][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 934.057321][ T38] Tainted: [L]=SOFTLOCKUP [ 934.057328][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.057339][ T38] Call Trace: [ 934.057348][ T38] [ 934.057357][ T38] dump_stack_lvl+0xe8/0x150 [ 934.057386][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 934.057411][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 934.057433][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 934.057461][ T38] sys_info+0x135/0x170 [ 934.057481][ T38] watchdog+0xfd7/0x1030 [ 934.057518][ T38] ? watchdog+0x1c7/0x1030 [ 934.057548][ T38] kthread+0x38b/0x470 [ 934.057569][ T38] ? __pfx_watchdog+0x10/0x10 [ 934.057590][ T38] ? __pfx_kthread+0x10/0x10 [ 934.057611][ T38] ret_from_fork+0x514/0xb70 [ 934.057634][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 934.057653][ T38] ? __switch_to+0xc89/0x1420 [ 934.057683][ T38] ? __pfx_kthread+0x10/0x10 [ 934.057704][ T38] ret_from_fork_asm+0x1a/0x30 [ 934.057738][ T38] [ 934.057764][ T38] Sending NMI from CPU 1 to CPUs 0: [ 934.057799][ C0] NMI backtrace for cpu 0 [ 934.057815][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 934.057838][ C0] Tainted: [L]=SOFTLOCKUP [ 934.057845][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.057854][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 934.057961][ C0] Code: e8 9e e5 64 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef d2 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 934.057976][ C0] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 934.057991][ C0] RAX: 1ffffffff33d4600 RBX: 00000000000003fd RCX: 0000000000000000 [ 934.058009][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 934.058020][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.058031][ C0] R10: dffffc0000000000 R11: ffffffff8561b570 R12: dffffc0000000000 [ 934.058043][ C0] R13: 0000000000000000 R14: ffffffff99ea33e0 R15: 0000000000000000 [ 934.058055][ C0] FS: 0000000000000000(0000) GS:ffff888125bca000(0000) knlGS:0000000000000000 [ 934.058070][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.058082][ C0] CR2: 00007f0588fca7b8 CR3: 0000000058f26000 CR4: 00000000003526f0 [ 934.058097][ C0] Call Trace: [ 934.058104][ C0] [ 934.058113][ C0] wait_for_lsr+0x190/0x300 [ 934.058135][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 934.058175][ C0] serial8250_console_write+0xac5/0x1230 [ 934.058200][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 934.058236][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 934.058266][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 934.058292][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 934.058325][ C0] nbcon_kthread_func+0x679/0x880 [ 934.058350][ C0] ? nbcon_kthread_func+0x163/0x880 [ 934.058370][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 934.058394][ C0] ? __kthread_parkme+0x71/0x1f0 [ 934.058418][ C0] ? __kthread_parkme+0x199/0x1f0 [ 934.058443][ C0] kthread+0x38b/0x470 [ 934.058460][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 934.058480][ C0] ? __pfx_kthread+0x10/0x10 [ 934.058497][ C0] ret_from_fork+0x514/0xb70 [ 934.058515][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 934.058531][ C0] ? __switch_to+0xc89/0x1420 [ 934.058555][ C0] ? __pfx_kthread+0x10/0x10 [ 934.058572][ C0] ret_from_fork_asm+0x1a/0x30 [ 934.058595][ C0] [ 934.071228][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 935.234424][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 935.245628][ T38] Tainted: [L]=SOFTLOCKUP [ 935.249951][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.260012][ T38] Call Trace: [ 935.263293][ T38] [ 935.266224][ T38] vpanic+0x56d/0xa60 [ 935.270216][ T38] ? __pfx___schedule+0x10/0x10 [ 935.275079][ T38] ? __pfx_vpanic+0x10/0x10 [ 935.279600][ T38] panic+0xc5/0xd0 [ 935.283329][ T38] ? __pfx_panic+0x10/0x10 [ 935.287746][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 935.293248][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 935.298638][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 935.304806][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 935.310977][ T38] watchdog+0x1030/0x1030 [ 935.315331][ T38] ? watchdog+0x1c7/0x1030 [ 935.319766][ T38] kthread+0x38b/0x470 [ 935.323840][ T38] ? __pfx_watchdog+0x10/0x10 [ 935.328522][ T38] ? __pfx_kthread+0x10/0x10 [ 935.333119][ T38] ret_from_fork+0x514/0xb70 [ 935.337722][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 935.342836][ T38] ? __switch_to+0xc89/0x1420 [ 935.347527][ T38] ? __pfx_kthread+0x10/0x10 [ 935.352121][ T38] ret_from_fork_asm+0x1a/0x30 [ 935.356901][ T38] [ 935.360162][ T38] Kernel Offset: disabled [ 935.364485][ T38] Rebooting in 86400 seconds..