last executing test programs: 8m30.497690586s ago: executing program 1 (id=113): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000480), &(0x7f0000000500)='%ps \x00'}, 0x20) 8m30.328506367s ago: executing program 1 (id=115): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000bc0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000c40)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000c80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000cc0)={&(0x7f0000000d00)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 8m29.834401892s ago: executing program 1 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000a80)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8) 8m29.479097221s ago: executing program 1 (id=118): mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x2210081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x9801) move_mount(r0, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x89901) umount2(&(0x7f0000000540)='./file0\x00', 0x9) 8m28.8919929s ago: executing program 1 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000580)={0x3c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0xa1}]}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) write(r0, &(0x7f0000000540)='3', 0x1) 8m25.4060186s ago: executing program 1 (id=136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4069, 0xfe5, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 8m24.861969499s ago: executing program 32 (id=136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4069, 0xfe5, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) 6m31.051469375s ago: executing program 5 (id=826): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2d5, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 6m30.771800101s ago: executing program 5 (id=828): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000009c0)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000a40)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000b00)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000b40)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000b80)={@multicast2, @loopback, @empty}, 0xc) 6m30.573891036s ago: executing program 5 (id=830): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) io_uring_setup(0x76a7, &(0x7f00000001c0)={0x0, 0x9450, 0x800, 0x0, 0x2f3}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m30.475579179s ago: executing program 5 (id=832): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/trace_pipe\x00', 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m30.239692311s ago: executing program 5 (id=835): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x39, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) 6m26.559729528s ago: executing program 5 (id=856): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000140)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x40, 0x17, 0x67, "db2b59fa1db515c31c7537bbcd8eb9005c6fb72b07b4f68568cb55d67e8f55e80b690b82e4d21a85e072fb2b3e16854e015f7364dac6b86bab9b28d97f50fb5de674e63c65433782f1e5c8d40d69be7af7df18a2e5eafffa1cd18537b218d6ece6550a042158d1"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0xc0, 0x5, 0x5, "d33107c7c1"}, &(0x7f00000002c0)={0x40, 0x5, 0x3, "c4085a"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f00000007c0)={0x20, 0x18, 0x1, '?'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m26.30197675s ago: executing program 33 (id=856): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000140)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x40, 0x17, 0x67, "db2b59fa1db515c31c7537bbcd8eb9005c6fb72b07b4f68568cb55d67e8f55e80b690b82e4d21a85e072fb2b3e16854e015f7364dac6b86bab9b28d97f50fb5de674e63c65433782f1e5c8d40d69be7af7df18a2e5eafffa1cd18537b218d6ece6550a042158d1"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0xc0, 0x5, 0x5, "d33107c7c1"}, &(0x7f00000002c0)={0x40, 0x5, 0x3, "c4085a"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f00000007c0)={0x20, 0x18, 0x1, '?'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 38.017158098s ago: executing program 0 (id=2250): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x0, &(0x7f0000000100)}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x7}, 0x0) setresgid(0x0, 0x0, 0xee01) r2 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) prlimit64(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x83f, 0x40000) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) 36.92802816s ago: executing program 0 (id=2254): openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000800000000000000080000006b11b80000000000950000"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 35.655965618s ago: executing program 0 (id=2258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 34.473135429s ago: executing program 0 (id=2261): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) socket$inet6(0xa, 0x400000000001, 0x0) openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r5 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 33.725398022s ago: executing program 0 (id=2265): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x6375, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x101042, 0x5) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127\xae0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 31.199849534s ago: executing program 2 (id=2273): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) writev(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 26.125594414s ago: executing program 0 (id=2280): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'ovf\x00', 0x0, 0x4, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010100, 0x4e24, 0x6, 'lblcr\x00', 0x4, 0x5, 0x166}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 25.549346534s ago: executing program 2 (id=2281): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r2, &(0x7f0000000380), 0x0) sendmmsg(r2, &(0x7f000001d940), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f000001da00)=[{r2, 0x2220}, {0xffffffffffffffff, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r1) 25.130832149s ago: executing program 2 (id=2284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sysinfo(0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 11.71376727s ago: executing program 2 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TCFLSH(r1, 0x5434, 0x4) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r3, 0x0, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x2d05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x1, 0xa0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x2e, 0x7}, [@extension_unit={0x11, 0x24, 0xa, 0x6, 0x1, [0x0, 0x3, 0x2]}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x303, 0x1, 0x2, 0x6, 0x2, 0xfffd, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xd, 0x4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0x6, 0x3, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0xec}}}}}}}}]}}, 0x0) 10.355526576s ago: executing program 34 (id=2280): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'ovf\x00', 0x0, 0x4, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010100, 0x4e24, 0x6, 'lblcr\x00', 0x4, 0x5, 0x166}, 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 9.360611113s ago: executing program 3 (id=2295): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "0fa2f4"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}], 0x7b}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20003) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 8.125304782s ago: executing program 4 (id=2298): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x5}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9000}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x40800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000340)=0x3, 0x4) getsockopt$inet_tcp_int(r2, 0x6, 0x6, 0x0, 0x0) 6.883327159s ago: executing program 2 (id=2300): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) 6.864802475s ago: executing program 3 (id=2301): munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000c01000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000800000/0x1000)=nil, 0x1000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) munmap(&(0x7f0000c20000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 5.967594772s ago: executing program 6 (id=2302): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0) 5.743566536s ago: executing program 3 (id=2303): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00001a6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) 5.587024209s ago: executing program 4 (id=2304): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10021, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @mcast2}}}, 0x32) 5.327391185s ago: executing program 6 (id=2305): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x40040c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)='#', 0x1}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.007943153s ago: executing program 4 (id=2306): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$dsp(r0, &(0x7f0000000080)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x80}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000009c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000a40), 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000600)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f00000006c0)={0x1, 0x0, 0xffff5f0f, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) poll(&(0x7f0000000540), 0x20000000000000b5, 0x9) 4.409182787s ago: executing program 3 (id=2307): socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.224123103s ago: executing program 6 (id=2308): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) fsopen(&(0x7f0000000540)='cgroup2\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x1, 0xd82, 0x0, 0x0, 0x1000, 0x100003, 0x0, 0x0, 0x162}}}, &(0x7f0000000640)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9825, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2b, 0x80, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7, 0x1, 0x1, 0x2000033d}}], 0x1, 0x0, 0x0) 2.612766164s ago: executing program 4 (id=2309): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000006c0), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000a80)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c40)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 1.576389822s ago: executing program 3 (id=2310): socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b40), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000b80)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000c00)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x80047458, 0x0) socket(0x10, 0x3, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='S', 0x1}], 0x1}, 0x0) listen(0xffffffffffffffff, 0xa) write(r1, &(0x7f0000000640)="00000081fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000", 0x6c) 1.561647186s ago: executing program 2 (id=2311): r0 = epoll_create1(0x80000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r2) r3 = epoll_create1(0x0) dup2(r1, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 1.291162592s ago: executing program 6 (id=2312): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x6, @remote}}, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108) syz_open_procfs(0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) listen(r1, 0x1) msgctl$IPC_RMID(0x0, 0x0) 1.219050012s ago: executing program 4 (id=2313): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) getpeername$inet6(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.01800065s ago: executing program 6 (id=2314): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) 127.576292ms ago: executing program 3 (id=2315): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8e}, 0x0) r0 = getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x3d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0af9400000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c000100e7ffff7f"], 0x100}}, 0x0) 124.907645ms ago: executing program 4 (id=2316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) mkdirat(r0, 0x0, 0x44) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x27, 0x78, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4, 0x9, 0x40}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a0800ff", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c30010", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @empty}}}}}}, 0x0) 0s ago: executing program 6 (id=2317): ptrace(0x4208, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) kernel console output (not intermixed with test programs): 50.477669][ T36] audit: type=1326 audit(1792012555.139:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 250.477718][ T36] audit: type=1326 audit(1792012555.139:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 250.477754][ T36] audit: type=1326 audit(1792012555.139:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 250.478199][ T36] audit: type=1326 audit(1792012555.139:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 250.482089][ T36] audit: type=1326 audit(1792012555.139:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 250.482775][ T36] audit: type=1326 audit(1792012555.139:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 250.484573][ T36] audit: type=1326 audit(1792012555.139:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8625 comm="syz.2.869" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 250.835167][ T4900] Bluetooth: hci0: command tx timeout [ 250.946523][ T8582] rxe_eth0 speed is unknown, defaulting to 1000 [ 252.914796][ T4900] Bluetooth: hci0: command tx timeout [ 254.076148][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 254.076173][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 254.299570][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.299780][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.299992][ T8582] bridge_slave_0: entered allmulticast mode [ 254.305341][ T8582] bridge_slave_0: entered promiscuous mode [ 254.322429][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.322632][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.322811][ T8582] bridge_slave_1: entered allmulticast mode [ 254.327741][ T8582] bridge_slave_1: entered promiscuous mode [ 254.528905][ T8582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.564208][ T8582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.650065][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 254.650084][ T36] audit: type=1326 audit(1792012559.309:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.650127][ T36] audit: type=1326 audit(1792012559.309:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.650181][ T36] audit: type=1326 audit(1792012559.309:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.650224][ T36] audit: type=1326 audit(1792012559.309:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.650389][ T36] audit: type=1326 audit(1792012559.309:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.651947][ T36] audit: type=1326 audit(1792012559.309:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.653522][ T36] audit: type=1326 audit(1792012559.309:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.653569][ T36] audit: type=1326 audit(1792012559.309:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.804841][ T36] audit: type=1326 audit(1792012559.309:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.805202][ T36] audit: type=1326 audit(1792012559.469:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8695 comm="syz.0.890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 254.853903][ T8582] team0: Port device team_slave_0 added [ 254.922601][ T8582] team0: Port device team_slave_1 added [ 254.994872][ T4900] Bluetooth: hci0: command tx timeout [ 255.390519][ T8582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.390539][ T8582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.390563][ T8582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.401485][ T8582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.401502][ T8582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.401527][ T8582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.644067][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.644137][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.857678][ T8582] hsr_slave_0: entered promiscuous mode [ 255.859443][ T8582] hsr_slave_1: entered promiscuous mode [ 256.350001][ T8724] netlink: 'syz.3.900': attribute type 11 has an invalid length. [ 256.976931][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 257.074846][ T4900] Bluetooth: hci0: command tx timeout [ 257.589428][ T8751] fuse: fd is not a fuse device [ 258.071989][ T8766] netlink: 48 bytes leftover after parsing attributes in process `syz.3.916'. [ 258.159693][ T8767] netlink: 48 bytes leftover after parsing attributes in process `syz.3.916'. [ 258.476586][ T8766] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 258.477004][ T8767] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 258.691830][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 258.957462][ T8783] FAULT_INJECTION: forcing a failure. [ 258.957462][ T8783] name failslab, interval 1, probability 0, space 0, times 0 [ 258.957504][ T8783] CPU: 1 UID: 0 PID: 8783 Comm: syz.3.921 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 258.957534][ T8783] Tainted: [L]=SOFTLOCKUP [ 258.957541][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.957553][ T8783] Call Trace: [ 258.957562][ T8783] [ 258.957572][ T8783] dump_stack_lvl+0xe8/0x150 [ 258.957609][ T8783] should_fail_ex+0x46b/0x600 [ 258.957652][ T8783] should_failslab+0xa8/0x100 [ 258.957682][ T8783] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 258.957717][ T8783] ? x509_cert_parse+0x2ee/0x7a0 [ 258.957740][ T8783] ? x509_cert_parse+0x2ee/0x7a0 [ 258.957772][ T8783] kmemdup_noprof+0x2b/0x70 [ 258.957797][ T8783] x509_cert_parse+0x2ee/0x7a0 [ 258.957826][ T8783] x509_key_preparse+0x64/0x6d0 [ 258.957853][ T8783] ? __pfx_smack_key_permission+0x10/0x10 [ 258.957878][ T8783] asymmetric_key_preparse+0xb9/0x1b0 [ 258.957899][ T8783] __key_create_or_update+0x354/0xa70 [ 258.957933][ T8783] ? __pfx___key_create_or_update+0x10/0x10 [ 258.957961][ T8783] ? lookup_user_key+0xb68/0x1150 [ 258.957995][ T8783] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 258.958026][ T8783] key_create_or_update+0x42/0x60 [ 258.958054][ T8783] __se_sys_add_key+0x349/0x420 [ 258.958086][ T8783] ? __pfx___se_sys_add_key+0x10/0x10 [ 258.958130][ T8783] ? __x64_sys_add_key+0x20/0xc0 [ 258.958160][ T8783] do_syscall_64+0x166/0x520 [ 258.958189][ T8783] ? trace_irq_disable+0x3b/0x140 [ 258.958216][ T8783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.958237][ T8783] ? clear_bhb_loop+0x70/0xc0 [ 258.958262][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.958282][ T8783] RIP: 0033:0x7f42dd7fe559 [ 258.958301][ T8783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.958319][ T8783] RSP: 002b:00007f42dba56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 258.958343][ T8783] RAX: ffffffffffffffda RBX: 00007f42dda85fa0 RCX: 00007f42dd7fe559 [ 258.958359][ T8783] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 258.958373][ T8783] RBP: 00007f42dd8958b0 R08: ffffffffffffffff R09: 0000000000000000 [ 258.958388][ T8783] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 258.958401][ T8783] R13: 00007f42dda86038 R14: 00007f42dda85fa0 R15: 00007ffce1cf7ad8 [ 258.958436][ T8783] [ 259.446483][ T8582] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 259.551937][ T8582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 259.565635][ T8582] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.092550][ T8582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.167040][ T8582] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.419213][ T8582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.427820][ T8582] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 260.590188][ T8582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.456221][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.542644][ T8582] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.573578][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.573667][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.637816][ T8820] veth1_macvtap: left promiscuous mode [ 261.949024][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.949102][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.308795][ T8830] rxe_eth0 speed is unknown, defaulting to 1000 [ 262.525412][ T8825] Invalid ELF header magic: != ELF [ 264.002114][ T8846] FAULT_INJECTION: forcing a failure. [ 264.002114][ T8846] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 264.002169][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.3.941 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 264.002208][ T8846] Tainted: [L]=SOFTLOCKUP [ 264.002216][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.002228][ T8846] Call Trace: [ 264.002237][ T8846] [ 264.002247][ T8846] dump_stack_lvl+0xe8/0x150 [ 264.002284][ T8846] should_fail_ex+0x46b/0x600 [ 264.002321][ T8846] _copy_from_user+0x2d/0xb0 [ 264.002345][ T8846] kstrtouint_from_user+0xd6/0x180 [ 264.002377][ T8846] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 264.002413][ T8846] ? lock_acquire+0x115/0x350 [ 264.002445][ T8846] proc_fail_nth_write+0x8e/0x210 [ 264.002474][ T8846] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 264.002513][ T8846] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 264.002543][ T8846] vfs_write+0x29f/0xbb0 [ 264.002578][ T8846] ? __pfx_vfs_write+0x10/0x10 [ 264.002608][ T8846] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 264.002640][ T8846] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 264.002678][ T8846] ? mutex_lock_nested+0x152/0x1d0 [ 264.002700][ T8846] ? fdget_pos+0x252/0x320 [ 264.002733][ T8846] ksys_write+0x156/0x270 [ 264.002760][ T8846] ? __pfx_ksys_write+0x10/0x10 [ 264.002805][ T8846] do_syscall_64+0x166/0x520 [ 264.002834][ T8846] ? trace_irq_disable+0x3b/0x140 [ 264.002862][ T8846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.002885][ T8846] ? clear_bhb_loop+0x70/0xc0 [ 264.002912][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.002933][ T8846] RIP: 0033:0x7f42dd7fe559 [ 264.002954][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.002971][ T8846] RSP: 002b:00007f42dba56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.002995][ T8846] RAX: ffffffffffffffda RBX: 00007f42dda85fa0 RCX: 00007f42dd7fe559 [ 264.003012][ T8846] RDX: 000000000000fefe RSI: 0000000000000000 RDI: 0000000000000003 [ 264.003025][ T8846] RBP: 00007f42dd8958b0 R08: 0000000000000000 R09: 0000000000000000 [ 264.003039][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.003052][ T8846] R13: 00007f42dda86038 R14: 00007f42dda85fa0 R15: 00007ffce1cf7ad8 [ 264.003088][ T8846] [ 264.289517][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 264.289538][ T36] audit: type=1326 audit(1792012568.939:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 264.289578][ T36] audit: type=1326 audit(1792012568.939:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 264.322721][ T36] audit: type=1326 audit(1792012568.979:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 264.322769][ T36] audit: type=1326 audit(1792012568.979:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 264.322817][ T36] audit: type=1326 audit(1792012568.979:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 264.334505][ T36] audit: type=1326 audit(1792012568.989:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 264.340550][ T36] audit: type=1326 audit(1792012568.989:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 264.340598][ T36] audit: type=1326 audit(1792012568.999:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 264.357807][ T36] audit: type=1326 audit(1792012569.019:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 264.357856][ T36] audit: type=1326 audit(1792012569.019:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8852 comm="syz.2.942" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 265.713359][ T5245] veth1_macvtap: entered promiscuous mode [ 265.847807][ T8582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.849599][ T8582] veth0_vlan: entered promiscuous mode [ 266.932505][ T8582] veth1_vlan: entered promiscuous mode [ 267.579158][ T8920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.949'. [ 267.580966][ T8920] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 267.580987][ T8920] netlink: 'syz.0.949': attribute type 2 has an invalid length. [ 267.588500][ T8920] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 267.588520][ T8920] netlink: 'syz.0.949': attribute type 2 has an invalid length. [ 267.591515][ T8920] net_ratelimit: 11 callbacks suppressed [ 267.591531][ T8920] openvswitch: netlink: Message has 46 unknown bytes. [ 267.592618][ T8920] openvswitch: netlink: Message has 46 unknown bytes. [ 268.321854][ T8920] ovs-dp0: entered promiscuous mode [ 268.350239][ T4900] Bluetooth: hci3: unexpected event for opcode 0x041b [ 268.432104][ T8930] Bluetooth: MGMT ver 1.23 [ 268.504403][ T8582] veth0_macvtap: entered promiscuous mode [ 268.528086][ T8582] veth1_macvtap: entered promiscuous mode [ 268.583228][ T8582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.672711][ T8582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.107226][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.129221][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.130425][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.130462][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.550490][ T8969] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (12) [ 269.628566][ T5888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.628590][ T5888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.836726][ T8960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.836750][ T8960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.514800][ T4900] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 270.524919][ T4900] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.784735][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 272.954851][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.954912][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 272.956996][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.957022][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.957072][ T31] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 272.960466][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.960493][ T31] usb 3-1: Product: syz [ 272.960507][ T31] usb 3-1: Manufacturer: syz [ 272.960522][ T31] usb 3-1: SerialNumber: syz [ 274.711062][ T31] usb 3-1: USB disconnect, device number 4 [ 275.200409][ T8878] udevd[8878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.967274][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.006969][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.372626][ T9106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.473295][ T9106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.079977][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 281.079999][ T36] audit: type=1804 audit(1792012585.719:130): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1015" name="file0" dev="tmpfs" ino=1315 res=1 errno=0 [ 281.198118][ T9149] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 281.198145][ T9149] ref_ctr increment failed for inode: 0x523 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803c5cb400 [ 281.256093][ T9145] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 281.256132][ T9145] ref_ctr decrement failed for inode: 0x523 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803c5cb400 [ 281.256185][ T9145] uprobe: syz.0.1015:9145 failed to unregister, leaking uprobe [ 281.323295][ T9106] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 281.591812][ T9147] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 281.707815][ T5881] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.707867][ T5881] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.707903][ T5881] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.707937][ T5881] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.835802][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'. [ 286.553617][ T9247] macvlan2: entered promiscuous mode [ 286.553656][ T9247] macvlan2: entered allmulticast mode [ 286.595408][ T9247] bond1: (slave macvlan2): Opening slave failed [ 286.745857][ T9259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1040'. [ 286.931957][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'. [ 287.326136][ T1002] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 287.487772][ T1002] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 287.488588][ T1002] usb 4-1: config 0 has no interfaces? [ 287.491880][ T1002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.491904][ T1002] usb 4-1: Product: syz [ 287.491919][ T1002] usb 4-1: Manufacturer: syz [ 287.491938][ T1002] usb 4-1: SerialNumber: syz [ 287.516625][ T1002] usb 4-1: config 0 descriptor?? [ 288.099970][ T42] usb 4-1: USB disconnect, device number 4 [ 289.101096][ T9329] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 289.433436][ T9329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.714139][ T9334] bond1 (unregistering): Released all slaves [ 293.138864][ T4900] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 295.608131][ T9475] overlayfs: failed to clone upperpath [ 295.761256][ T9478] Bluetooth: ISO socket layer initialized [ 295.822081][ T4900] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 295.850846][ T36] audit: type=1326 audit(1792012600.509:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 295.851793][ T36] audit: type=1326 audit(1792012600.509:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 295.851836][ T36] audit: type=1326 audit(1792012600.509:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 295.857152][ T36] audit: type=1326 audit(1792012600.519:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 295.857467][ T36] audit: type=1326 audit(1792012600.519:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 295.864395][ T36] audit: type=1326 audit(1792012600.519:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 295.876415][ T36] audit: type=1326 audit(1792012600.539:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 295.876468][ T36] audit: type=1326 audit(1792012600.539:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 295.926025][ T36] audit: type=1326 audit(1792012600.579:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.0.1099" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x7ffc0000 [ 296.730550][ T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 296.892649][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 296.894011][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.328140][ T42] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 297.564784][ T5851] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 297.655370][ T5737] usb 3-1: USB disconnect, device number 5 [ 297.714792][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 297.715762][ T5851] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 297.717443][ T5851] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 297.717483][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.717506][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.717527][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 297.717563][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.855920][ T5851] usb 4-1: config 0 descriptor?? [ 297.922196][ T9499] cdc_acm 3-1:1.0: acm_port_activate - usb_submit_urb(ctrl irq) failed [ 298.101570][ T9531] netlink: 'syz.4.1113': attribute type 12 has an invalid length. [ 298.449207][ T5851] hid-led 0003:0FC5:B080.0001: unknown main item tag 0x1 [ 298.449254][ T5851] hid-led 0003:0FC5:B080.0001: unknown main item tag 0x0 [ 298.449281][ T5851] hid-led 0003:0FC5:B080.0001: unknown main item tag 0x4 [ 298.747059][ T5851] hid-led 0003:0FC5:B080.0001: probe with driver hid-led failed with error -71 [ 298.807318][ T5851] usb 4-1: USB disconnect, device number 5 [ 298.989298][ T9548] binder: 9546:9548 ioctl c0306201 200000000080 returned -14 [ 299.988387][ T9581] uprobe: syz.6.1126:9581 failed to unregister, leaking uprobe [ 299.988472][ T9581] uprobe: syz.6.1126:9581 failed to unregister, leaking uprobe [ 302.796569][ T9621] 9pnet_fd: p9_fd_create_tcp (9621): problem connecting socket to 127.0.0.1 [ 303.092167][ T36] audit: type=1326 audit(1792012607.749:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.092462][ T36] audit: type=1326 audit(1792012607.749:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.099507][ T36] audit: type=1326 audit(1792012607.759:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.099553][ T36] audit: type=1326 audit(1792012607.759:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.099587][ T36] audit: type=1326 audit(1792012607.759:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.100065][ T36] audit: type=1326 audit(1792012607.759:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.100428][ T36] audit: type=1326 audit(1792012607.759:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.100707][ T36] audit: type=1326 audit(1792012607.759:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.101035][ T36] audit: type=1326 audit(1792012607.759:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.101275][ T36] audit: type=1326 audit(1792012607.759:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9641 comm="syz.6.1144" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 303.461535][ T9655] tipc: Failed to remove unknown binding: 66,0,0/16777217:1649581007/1649581008 [ 303.462242][ T9655] tipc: Failed to remove unknown binding: 66,0,0/16777217:1649581007/1649581008 [ 303.659553][ T9640] smpboot: CPU 1 is now offline [ 303.703989][ T9666] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1151'. [ 304.371175][ T9674] input: syz1 as /devices/virtual/input/input5 [ 304.585074][ T9686] netlink: 'syz.3.1159': attribute type 39 has an invalid length. [ 304.669084][ T9691] sctp: [Deprecated]: syz.0.1161 (pid 9691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.669084][ T9691] Use struct sctp_sack_info instead [ 304.832629][ T9644] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 305.226791][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1163'. [ 305.734908][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1168'. [ 305.808917][ T9709] ip6gre1: entered promiscuous mode [ 305.808944][ T9709] ip6gre1: entered allmulticast mode [ 305.830576][ T9713] netlink: 'syz.2.1168': attribute type 6 has an invalid length. [ 305.830601][ T9713] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1168'. [ 307.132158][ T9730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.181399][ T9730] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 307.535611][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 307.620894][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 307.724793][ T5881] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 307.725471][ T5881] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.725512][ T5881] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.725555][ T5881] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.765898][ T5851] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 307.925763][ T5851] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 307.927843][ T5851] usb 5-1: config 0 has no interfaces? [ 307.927879][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.975275][ T5851] usb 5-1: config 0 descriptor?? [ 308.418539][ T5851] usb 5-1: USB disconnect, device number 8 [ 309.735809][ T1002] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 309.885607][ T1002] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 309.928625][ T1002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.928645][ T1002] usb 4-1: Product: syz [ 309.928653][ T1002] usb 4-1: Manufacturer: syz [ 309.928661][ T1002] usb 4-1: SerialNumber: syz [ 310.425299][ T1002] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 310.425366][ T1002] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 312.381218][ T1002] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 312.396646][ T1002] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 312.475496][ T1002] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 312.475549][ T1002] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 312.509879][ T1002] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 312.564213][ T1002] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 312.625970][ T1002] usb 4-1: USB disconnect, device number 6 [ 312.999788][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 314.744641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 314.904642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 314.924639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.074624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.104628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.134633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 316.634761][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 317.094449][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.094537][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.687249][ T9863] io-wq is not configured for unbound workers [ 317.916479][ T9872] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1219'. [ 323.670024][ T9936] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 323.864857][ T5799] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 324.024787][ T5799] usb 4-1: Using ep0 maxpacket: 16 [ 324.025713][ T5799] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 324.028678][ T5799] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 324.028704][ T5799] usb 4-1: config 0 has no interface number 0 [ 324.028750][ T5799] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 324.028776][ T5799] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 324.031374][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.031400][ T5799] usb 4-1: Product: syz [ 324.031415][ T5799] usb 4-1: Manufacturer: syz [ 324.031430][ T5799] usb 4-1: SerialNumber: syz [ 324.040084][ T5799] usb 4-1: config 0 descriptor?? [ 324.128025][ T9935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.128651][ T9935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.485464][ T9935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.485587][ T9935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.640393][ T9949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1243'. [ 324.641758][ T9949] netlink: 'syz.4.1243': attribute type 7 has an invalid length. [ 324.641776][ T9949] netlink: 'syz.4.1243': attribute type 8 has an invalid length. [ 324.641790][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 324.702041][ T9949] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 324.743474][ T9949] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 324.788441][ T9949] erspan0: entered promiscuous mode [ 324.813004][ T9949] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 325.655160][ T5799] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 325.655336][ T5799] asix 4-1:0.34: probe with driver asix failed with error -71 [ 325.780644][ T5799] usb 4-1: USB disconnect, device number 8 [ 327.639755][ T5889] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.639923][ T5889] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.640390][ T5889] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.640491][ T5889] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.777714][ T9987] ref_ctr increment failed for inode: 0x52d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888063876800 [ 328.972736][ T9987] uprobe: syz.3.1255:9987 failed to unregister, leaking uprobe [ 329.604975][ T9987] uprobe: syz.3.1255:9987 failed to unregister, leaking uprobe [ 329.681408][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.698205][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.483455][T10005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.040858][ T9984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.168737][ T9984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.535613][ T42] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 331.713355][ T42] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 331.714181][ T42] usb 3-1: config 0 has no interfaces? [ 331.714229][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.761585][ T42] usb 3-1: config 0 descriptor?? [ 332.009623][T10011] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 333.193850][T10028] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 333.401521][T10011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.528349][T10022] bond1: (slave gretap1): making interface the new active one [ 333.530583][T10022] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 333.532186][T10023] batman_adv: batadv0: Interface deactivated: dummy0 [ 333.560408][T10023] batman_adv: batadv0: Removing interface: dummy0 [ 333.611467][T10023] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 333.625330][ T5889] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.659418][ T31] usb 3-1: USB disconnect, device number 6 [ 333.960886][ T5885] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.961010][ T5885] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.961047][ T5885] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.551878][T10067] netlink: 'syz.6.1278': attribute type 12 has an invalid length. [ 334.573933][T10068] fuse: fd is not a fuse device [ 335.454436][T10088] netlink: 'syz.4.1285': attribute type 5 has an invalid length. [ 336.415411][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 336.415432][ T36] audit: type=1800 audit(1792012641.069:164): pid=10105 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1290" name="file0" dev="overlay" ino=1386 res=0 errno=0 [ 339.348069][T10159] tipc: Failed to remove unknown binding: 66,0,0/0:2214342300/2214342301 [ 339.355246][T10159] tipc: Failed to remove unknown binding: 66,0,0/0:2214342300/2214342301 [ 339.544897][T10162] overlayfs: failed to clone upperpath [ 339.898751][ T4900] Bluetooth: Frame is too long (len 10, expected len 4) [ 339.930353][ T4900] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 341.164967][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1319'. [ 341.274624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.294629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.384623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.965042][ T4900] Bluetooth: hci2: command 0x2016 tx timeout [ 342.346580][ T36] audit: type=1800 audit(1792012646.999:165): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1322" name="file0" dev="overlay" ino=1387 res=0 errno=0 [ 342.850778][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'. [ 343.229623][T10227] macvlan2: entered promiscuous mode [ 343.229653][T10227] macvlan2: entered allmulticast mode [ 343.251133][T10227] bond2: entered promiscuous mode [ 343.334060][T10227] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 343.584319][T10227] bond2: left promiscuous mode [ 344.198132][ T4900] Bluetooth: hci2: command 0x2016 tx timeout [ 344.279289][T10248] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 344.330783][T10248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.656050][T10248] bond3 (unregistering): Released all slaves [ 344.963528][T10264] netlink: 'syz.6.1339': attribute type 4 has an invalid length. [ 345.922683][T10264] netlink: 'syz.6.1339': attribute type 4 has an invalid length. [ 347.321598][ T36] audit: type=1326 audit(1792012651.979:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.321719][ T36] audit: type=1326 audit(1792012651.979:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.324126][ T36] audit: type=1326 audit(1792012651.979:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.402326][ T36] audit: type=1326 audit(1792012652.059:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.402526][ T36] audit: type=1326 audit(1792012652.059:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.402714][ T36] audit: type=1326 audit(1792012652.059:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.404292][ T36] audit: type=1326 audit(1792012652.059:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.440693][ T36] audit: type=1326 audit(1792012652.059:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.440885][ T36] audit: type=1326 audit(1792012652.099:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.447382][ T36] audit: type=1326 audit(1792012652.109:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.447430][ T36] audit: type=1326 audit(1792012652.109:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.447468][ T36] audit: type=1326 audit(1792012652.109:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.580837][ T36] audit: type=1326 audit(1792012652.239:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10278 comm="syz.6.1345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 347.733898][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 347.928417][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 347.940397][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 347.981765][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 347.994185][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 347.998449][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.001785][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.003695][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.011991][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.013981][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.017112][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.044785][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.047407][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.058874][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.073282][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.082306][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.084530][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.089099][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.094289][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.107399][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.114133][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.143695][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.198089][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.234208][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.264369][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.286856][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.290808][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.329620][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.333033][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.398840][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.493682][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.634572][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.639048][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.644524][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.679650][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.692190][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.701973][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.798655][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 348.802009][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 349.419532][T10281] 9pnet_fd: p9_fd_create_tcp (10281): problem connecting socket to 127.0.0.1 [ 355.040550][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 355.040573][ T36] audit: type=1800 audit(1792012659.649:211): pid=10401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1384" name="syzkaller1" dev="sda1" ino=2055 res=0 errno=0 [ 356.670001][T10434] uprobe: syz.0.1394:10434 failed to unregister, leaking uprobe [ 356.670088][T10434] uprobe: syz.0.1394:10434 failed to unregister, leaking uprobe [ 356.876661][T10439] FAULT_INJECTION: forcing a failure. [ 356.876661][T10439] name failslab, interval 1, probability 0, space 0, times 0 [ 356.876711][T10439] CPU: 1 UID: 0 PID: 10439 Comm: syz.2.1396 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.876743][T10439] Tainted: [L]=SOFTLOCKUP [ 356.876751][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.876769][T10439] Call Trace: [ 356.876777][T10439] [ 356.876787][T10439] dump_stack_lvl+0xe8/0x150 [ 356.876826][T10439] should_fail_ex+0x46b/0x600 [ 356.876865][T10439] should_failslab+0xa8/0x100 [ 356.876893][T10439] __kmalloc_cache_node_noprof+0xac/0x670 [ 356.876927][T10439] ? kasan_save_track+0x4f/0x80 [ 356.876965][T10439] ? __get_vm_area_node+0x155/0x2f0 [ 356.876992][T10439] ? __get_vm_area_node+0x155/0x2f0 [ 356.877021][T10439] ? vb2_core_reqbufs+0xc3f/0x1470 [ 356.877057][T10439] __get_vm_area_node+0x155/0x2f0 [ 356.877092][T10439] __vmalloc_node_range_noprof+0x343/0x1540 [ 356.877123][T10439] ? vb2_vmalloc_alloc+0xef/0x360 [ 356.877174][T10439] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 356.877206][T10439] ? __kasan_kmalloc+0x93/0xb0 [ 356.877228][T10439] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 356.877264][T10439] vmalloc_user_noprof+0xad/0xe0 [ 356.877294][T10439] ? vb2_vmalloc_alloc+0xef/0x360 [ 356.877320][T10439] vb2_vmalloc_alloc+0xef/0x360 [ 356.877341][T10439] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 356.877362][T10439] __vb2_queue_alloc+0xa0b/0x1660 [ 356.877420][T10439] vb2_core_reqbufs+0xc3f/0x1470 [ 356.877463][T10439] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 356.877497][T10439] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 356.877530][T10439] ? __vb2_init_fileio+0x1e2/0x1040 [ 356.877558][T10439] __vb2_init_fileio+0x310/0x1040 [ 356.877595][T10439] vb2_core_poll+0x44b/0x7b0 [ 356.877615][T10439] ? vb2_fop_poll+0xce/0x310 [ 356.877650][T10439] vb2_fop_poll+0x19c/0x310 [ 356.877687][T10439] ? __pfx_vb2_fop_poll+0x10/0x10 [ 356.877717][T10439] v4l2_poll+0x14a/0x2c0 [ 356.877745][T10439] ? __pfx_v4l2_poll+0x10/0x10 [ 356.877774][T10439] do_sys_poll+0x92e/0xf50 [ 356.877805][T10439] ? do_sys_poll+0x421/0xf50 [ 356.877835][T10439] ? __pfx_do_sys_poll+0x10/0x10 [ 356.877867][T10439] ? lock_acquire+0x115/0x350 [ 356.877901][T10439] ? __pfx_pollwake+0x10/0x10 [ 356.877927][T10439] ? __pfx_pollwake+0x10/0x10 [ 356.877973][T10439] ? __pfx_pollwake+0x10/0x10 [ 356.877999][T10439] ? __pfx_pollwake+0x10/0x10 [ 356.878025][T10439] ? __pfx_pollwake+0x10/0x10 [ 356.878052][T10439] ? __pfx_pollwake+0x10/0x10 [ 356.878099][T10439] ? futex_wait+0x2a2/0x390 [ 356.878129][T10439] ? __pfx_futex_wait+0x10/0x10 [ 356.878183][T10439] ? set_user_sigmask+0xcd/0x1c0 [ 356.878212][T10439] ? __pfx_set_user_sigmask+0x10/0x10 [ 356.878239][T10439] ? smack_file_ioctl+0x2c4/0x370 [ 356.878278][T10439] __se_sys_ppoll+0x209/0x2b0 [ 356.878307][T10439] ? __pfx___se_sys_ppoll+0x10/0x10 [ 356.878340][T10439] ? __x64_sys_ppoll+0x20/0xc0 [ 356.878365][T10439] do_syscall_64+0x166/0x520 [ 356.878394][T10439] ? trace_irq_disable+0x3b/0x140 [ 356.878422][T10439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.878443][T10439] ? clear_bhb_loop+0x70/0xc0 [ 356.878502][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.878534][T10439] RIP: 0033:0x7f2163abe559 [ 356.878555][T10439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.878574][T10439] RSP: 002b:00007f2161d16028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 356.878598][T10439] RAX: ffffffffffffffda RBX: 00007f2163d45fa0 RCX: 00007f2163abe559 [ 356.878614][T10439] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 356.878629][T10439] RBP: 00007f2163b558b0 R08: 0000000000000000 R09: 0000000000000000 [ 356.878644][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.878657][T10439] R13: 00007f2163d46038 R14: 00007f2163d45fa0 R15: 00007ffe057c7628 [ 356.878692][T10439] [ 356.879150][T10439] syz.2.1396: vmalloc error: size 4096, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 357.158575][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.2.1396 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 357.158607][T10439] Tainted: [L]=SOFTLOCKUP [ 357.158615][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.158628][T10439] Call Trace: [ 357.158636][T10439] [ 357.158646][T10439] dump_stack_lvl+0xe8/0x150 [ 357.158683][T10439] warn_alloc+0x24d/0x270 [ 357.158715][T10439] ? __kasan_kmalloc+0x22/0xb0 [ 357.158739][T10439] ? __pfx_warn_alloc+0x10/0x10 [ 357.158775][T10439] ? kasan_save_track+0x4f/0x80 [ 357.158806][T10439] ? __get_vm_area_node+0x155/0x2f0 [ 357.158834][T10439] ? vb2_core_reqbufs+0xc3f/0x1470 [ 357.158869][T10439] ? __get_vm_area_node+0x2a9/0x2f0 [ 357.158905][T10439] __vmalloc_node_range_noprof+0x36b/0x1540 [ 357.158962][T10439] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 357.158993][T10439] ? __kasan_kmalloc+0x93/0xb0 [ 357.159014][T10439] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 357.159048][T10439] vmalloc_user_noprof+0xad/0xe0 [ 357.159078][T10439] ? vb2_vmalloc_alloc+0xef/0x360 [ 357.159099][T10439] vb2_vmalloc_alloc+0xef/0x360 [ 357.159119][T10439] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 357.159141][T10439] __vb2_queue_alloc+0xa0b/0x1660 [ 357.159197][T10439] vb2_core_reqbufs+0xc3f/0x1470 [ 357.159241][T10439] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 357.159275][T10439] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 357.159306][T10439] ? __vb2_init_fileio+0x1e2/0x1040 [ 357.159334][T10439] __vb2_init_fileio+0x310/0x1040 [ 357.159372][T10439] vb2_core_poll+0x44b/0x7b0 [ 357.159391][T10439] ? vb2_fop_poll+0xce/0x310 [ 357.159425][T10439] vb2_fop_poll+0x19c/0x310 [ 357.159460][T10439] ? __pfx_vb2_fop_poll+0x10/0x10 [ 357.159492][T10439] v4l2_poll+0x14a/0x2c0 [ 357.159522][T10439] ? __pfx_v4l2_poll+0x10/0x10 [ 357.159552][T10439] do_sys_poll+0x92e/0xf50 [ 357.159581][T10439] ? do_sys_poll+0x421/0xf50 [ 357.159610][T10439] ? __pfx_do_sys_poll+0x10/0x10 [ 357.159640][T10439] ? lock_acquire+0x115/0x350 [ 357.159674][T10439] ? __pfx_pollwake+0x10/0x10 [ 357.159699][T10439] ? __pfx_pollwake+0x10/0x10 [ 357.159725][T10439] ? __pfx_pollwake+0x10/0x10 [ 357.159751][T10439] ? __pfx_pollwake+0x10/0x10 [ 357.159782][T10439] ? __pfx_pollwake+0x10/0x10 [ 357.159808][T10439] ? __pfx_pollwake+0x10/0x10 [ 357.159853][T10439] ? futex_wait+0x2a2/0x390 [ 357.159883][T10439] ? __pfx_futex_wait+0x10/0x10 [ 357.159936][T10439] ? set_user_sigmask+0xcd/0x1c0 [ 357.159965][T10439] ? __pfx_set_user_sigmask+0x10/0x10 [ 357.159991][T10439] ? smack_file_ioctl+0x2c4/0x370 [ 357.160027][T10439] __se_sys_ppoll+0x209/0x2b0 [ 357.160054][T10439] ? __pfx___se_sys_ppoll+0x10/0x10 [ 357.160087][T10439] ? __x64_sys_ppoll+0x20/0xc0 [ 357.160111][T10439] do_syscall_64+0x166/0x520 [ 357.160140][T10439] ? trace_irq_disable+0x3b/0x140 [ 357.160168][T10439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.160188][T10439] ? clear_bhb_loop+0x70/0xc0 [ 357.160213][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.160233][T10439] RIP: 0033:0x7f2163abe559 [ 357.160253][T10439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.160270][T10439] RSP: 002b:00007f2161d16028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 357.160292][T10439] RAX: ffffffffffffffda RBX: 00007f2163d45fa0 RCX: 00007f2163abe559 [ 357.160309][T10439] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 357.160324][T10439] RBP: 00007f2163b558b0 R08: 0000000000000000 R09: 0000000000000000 [ 357.160338][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.160350][T10439] R13: 00007f2163d46038 R14: 00007f2163d45fa0 R15: 00007ffe057c7628 [ 357.160385][T10439] [ 357.171789][T10439] Mem-Info: [ 357.171808][T10439] active_anon:193 inactive_anon:45059 isolated_anon:0 [ 357.171808][T10439] active_file:25888 inactive_file:35831 isolated_file:0 [ 357.171808][T10439] unevictable:168 dirty:359 writeback:0 [ 357.171808][T10439] slab_reclaimable:12387 slab_unreclaimable:109271 [ 357.171808][T10439] mapped:31992 shmem:37465 pagetables:1444 [ 357.171808][T10439] sec_pagetables:0 bounce:0 [ 357.171808][T10439] kernel_misc_reclaimable:0 [ 357.171808][T10439] free:1236528 free_pcp:3912 free_cma:0 [ 357.172021][T10439] Node 0 active_anon:772kB inactive_anon:180236kB active_file:103296kB inactive_file:143324kB unevictable:672kB isolated(anon):0kB isolated(file):0kB mapped:127912kB dirty:1432kB writeback:0kB shmem:149860kB kernel_stack:15044kB pagetables:5620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 357.172078][T10439] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 357.172129][T10439] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.172192][T10439] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 357.172230][T10439] Node 0 DMA32 free:1004564kB boost:0kB min:3900kB low:6412kB high:8924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:772kB inactive_anon:180236kB active_file:103296kB inactive_file:143324kB unevictable:672kB writepending:1432kB zspages:0kB present:3129332kB managed:2540300kB mlocked:608kB bounce:0kB free_pcp:15648kB local_pcp:5064kB free_cma:0kB [ 357.172294][T10439] lowmem_reserve[]: 0 0 1 1 1 [ 357.172328][T10439] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1804kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.173339][T10439] lowmem_reserve[]: 0 0 0 0 0 [ 357.173378][T10439] Node 1 Normal free:3926188kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.173445][T10439] lowmem_reserve[]: 0 0 0 0 0 [ 357.173488][T10439] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 357.174322][T10439] Node 0 DMA32: 334*4kB (UE) 501*8kB (UME) 978*16kB (UME) 961*32kB (UME) 480*64kB (UME) 367*128kB (UME) 104*256kB (UM) 25*512kB (UM) 6*1024kB (UME) 1*2048kB (M) 202*4096kB (UM) = 1004448kB [ 357.174492][T10439] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 357.176313][T10439] Node 1 Normal: 1*4kB (M) 3*8kB (U) 7*16kB (U) 3*32kB (U) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 957*4096kB (M) = 3926188kB [ 357.176488][T10439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.176505][T10439] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 357.176522][T10439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.176538][T10439] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.176554][T10439] 99174 total pagecache pages [ 357.176573][T10439] 0 pages in swap cache [ 357.176581][T10439] Free swap = 124996kB [ 357.176588][T10439] Total swap = 124996kB [ 357.176597][T10439] 2097051 pages RAM [ 357.191706][T10439] 0 pages HighMem/MovableOnly [ 357.191736][T10439] 429909 pages reserved [ 357.191743][T10439] 0 pages cma reserved [ 368.919631][T10560] libceph: resolve 'v2' (ret=-3): failed [ 368.919655][T10560] libceph: Failed to parse monitor IPs: -3 [ 369.031541][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 369.031568][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 369.195864][ T1002] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 369.344800][ T1002] usb 3-1: Using ep0 maxpacket: 8 [ 369.350265][ T1002] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 369.351942][ T1002] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.351969][ T1002] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.397408][ T1002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.397439][ T1002] usb 3-1: Product: syz [ 369.397453][ T1002] usb 3-1: Manufacturer: syz [ 369.397468][ T1002] usb 3-1: SerialNumber: syz [ 370.049850][ T1002] usb 3-1: 6:0: cannot get min/max values for control 8 (id 6) [ 370.050561][ T1002] usb 3-1: unit 4 not found! [ 370.227721][ T1002] usb 3-1: USB disconnect, device number 7 [ 370.325664][T10605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1464'. [ 370.360406][T10571] udevd[10571]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.509693][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 371.125030][T10608] 9pnet_fd: p9_fd_create_tcp (10608): problem connecting socket to 127.0.0.1 [ 371.322227][T10626] retu-mfd 0-0001: could not read Retu revision: -5 [ 371.392000][T10626] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 371.393321][T10626] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 371.498472][T10639] syz.2.1466 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 372.122641][ T4900] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 372.218558][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1473'. [ 372.218595][T10664] netlink: 'syz.0.1473': attribute type 7 has an invalid length. [ 372.218608][T10664] netlink: 'syz.0.1473': attribute type 8 has an invalid length. [ 372.218620][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 372.244399][T10664] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 372.258823][T10664] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 372.260916][T10664] erspan0: entered promiscuous mode [ 372.264443][T10664] debugfs: 'hsr1' already exists in 'hsr' [ 372.264472][T10664] Cannot create hsr debugfs directory [ 372.273506][T10664] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 372.510264][T10672] fuse: fd is not a fuse device [ 376.197234][ T4900] Bluetooth: hci0: command 0x0c1a tx timeout [ 376.981445][T10721] netlink: 'syz.2.1489': attribute type 4 has an invalid length. [ 378.551971][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.552030][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.003401][T10764] netlink: 'syz.6.1501': attribute type 1 has an invalid length. [ 379.077765][T10764] bond1: (slave bridge1): making interface the new active one [ 379.078714][T10764] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 379.150464][ T36] audit: type=1804 audit(1792012683.809:212): pid=10769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1503" name="/newroot/294/file0" dev="tmpfs" ino=1605 res=1 errno=0 [ 379.151740][T10769] ref_ctr increment failed for inode: 0x645 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888032dd2700 [ 379.153459][T10766] uprobe: syz.2.1503:10766 failed to unregister, leaking uprobe [ 379.508598][T10775] fuse: Bad value for 'fd' [ 379.614224][ T5592] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 381.288660][T10793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.072794][T10802] netlink: 'syz.0.1513': attribute type 2 has an invalid length. [ 382.072820][T10802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1513'. [ 382.269314][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 382.524500][T10802] : entered promiscuous mode [ 384.104416][ T5592] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 384.137526][ T5592] Bluetooth: hci1: Injecting HCI hardware error event [ 384.172014][ T5592] Bluetooth: hci1: hardware error 0x00 [ 385.040374][T10851] xt_IDLETIMER: label is empty or not nul-terminated [ 385.526623][T10861] netlink: 'syz.2.1534': attribute type 11 has an invalid length. [ 385.881932][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1538'. [ 385.918110][T10871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.994902][ T5592] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 389.797223][T10912] fuse: fd is not a fuse device [ 390.272886][T10923] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 392.987706][T10953] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 393.407148][ T36] audit: type=1326 audit(1792012698.059:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 393.407195][ T36] audit: type=1326 audit(1792012698.069:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 393.408286][ T36] audit: type=1326 audit(1792012698.069:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 393.409763][ T36] audit: type=1326 audit(1792012698.069:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 393.411737][ T36] audit: type=1326 audit(1792012698.069:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 393.484921][ T36] audit: type=1326 audit(1792012698.079:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 393.484970][ T36] audit: type=1326 audit(1792012698.139:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 393.506090][ T36] audit: type=1326 audit(1792012698.159:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 393.506316][ T36] audit: type=1326 audit(1792012698.159:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 393.514224][ T36] audit: type=1326 audit(1792012698.169:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10969 comm="syz.2.1573" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 398.802624][T11029] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 399.947044][T11036] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 401.929551][T11062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.583438][T11081] tipc: Failed to remove unknown binding: 66,0,0/0:4230589441/4230589442 [ 402.628708][T11081] tipc: Failed to remove unknown binding: 66,0,0/0:4230589441/4230589442 [ 402.829565][T11085] tipc: Failed to remove unknown binding: 66,0,0/0:962564927/962564928 [ 402.833065][T11085] tipc: Failed to remove unknown binding: 66,0,0/0:962564927/962564928 [ 403.598392][T11093] netlink: 'syz.2.1610': attribute type 1 has an invalid length. [ 404.030048][T11093] bond3: (slave bridge2): making interface the new active one [ 404.031319][T11093] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 408.992924][T11168] gretap1: entered promiscuous mode [ 412.814795][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 412.814818][ T36] audit: type=1326 audit(1792012716.899:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11191 comm="syz.4.1643" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34fd89e559 code=0x0 [ 415.620385][ T36] audit: type=1326 audit(1792012720.279:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11218 comm="syz.6.1648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 415.620440][ T36] audit: type=1326 audit(1792012720.279:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11218 comm="syz.6.1648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 415.626474][ T36] audit: type=1326 audit(1792012720.279:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11218 comm="syz.6.1648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 415.626522][ T36] audit: type=1326 audit(1792012720.289:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11218 comm="syz.6.1648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 415.626562][ T36] audit: type=1326 audit(1792012720.289:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11218 comm="syz.6.1648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 415.630202][ T36] audit: type=1326 audit(1792012720.289:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11218 comm="syz.6.1648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 415.634999][ T36] audit: type=1326 audit(1792012720.289:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11218 comm="syz.6.1648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 415.638086][ T36] audit: type=1326 audit(1792012720.299:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11218 comm="syz.6.1648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 415.640273][ T36] audit: type=1326 audit(1792012720.299:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11218 comm="syz.6.1648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 420.911916][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1670'. [ 421.123801][T11280] macvlan2: entered promiscuous mode [ 421.123830][T11280] macvlan2: entered allmulticast mode [ 421.143907][T11280] bond2: entered promiscuous mode [ 421.146965][T11280] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 421.254821][T11280] bond2: left promiscuous mode [ 428.328339][T11397] netlink: ct family unspecified [ 428.328385][T11397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.448586][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 435.878012][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1748'. [ 436.430460][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 436.430481][ T36] audit: type=1326 audit(1792012741.039:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.6.1746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 436.430530][ T36] audit: type=1326 audit(1792012741.039:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.6.1746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 436.430571][ T36] audit: type=1326 audit(1792012741.039:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.6.1746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 436.430611][ T36] audit: type=1326 audit(1792012741.039:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11499 comm="syz.6.1746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 436.656266][ T36] audit: type=1326 audit(1792012741.309:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11511 comm="syz.0.1749" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ae24de559 code=0x0 [ 436.804364][T11517] netlink: 'syz.6.1752': attribute type 2 has an invalid length. [ 436.804392][T11517] netlink: 'syz.6.1752': attribute type 2 has an invalid length. [ 437.800371][ T5592] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 437.800403][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 437.800434][ T5592] Tainted: [L]=SOFTLOCKUP [ 437.800442][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.800456][ T5592] Workqueue: hci0 hci_rx_work [ 437.800484][ T5592] Call Trace: [ 437.800493][ T5592] [ 437.800503][ T5592] dump_stack_lvl+0xe8/0x150 [ 437.800539][ T5592] sysfs_create_dir_ns+0x271/0x2a0 [ 437.800572][ T5592] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 437.800607][ T5592] ? rt_spin_unlock+0x165/0x200 [ 437.800634][ T5592] kobject_add_internal+0x62c/0xce0 [ 437.800665][ T5592] kobject_add+0x163/0x240 [ 437.800683][ T5592] ? rt_spin_unlock+0x159/0x200 [ 437.800714][ T5592] ? __pfx_kobject_add+0x10/0x10 [ 437.800742][ T5592] ? get_device_parent+0x370/0x3a0 [ 437.800771][ T5592] device_add+0x3fa/0xb80 [ 437.800807][ T5592] hci_conn_add_sysfs+0xd5/0x210 [ 437.800845][ T5592] le_conn_complete_evt+0xfe3/0x16d0 [ 437.800880][ T5592] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 437.800910][ T5592] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 437.800939][ T5592] ? rt_mutex_slowunlock+0x219/0x460 [ 437.800965][ T5592] ? skb_pull_data+0xf0/0x200 [ 437.801001][ T5592] hci_le_conn_complete_evt+0x187/0x470 [ 437.801036][ T5592] hci_event_packet+0x67a/0xf10 [ 437.801058][ T5592] ? reacquire_held_locks+0x117/0x1a0 [ 437.801097][ T5592] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 437.801122][ T5592] ? __pfx_hci_event_packet+0x10/0x10 [ 437.801144][ T5592] ? rt_spin_unlock+0x159/0x200 [ 437.801189][ T5592] ? hci_send_to_monitor+0xe2/0x590 [ 437.801223][ T5592] hci_rx_work+0x3ee/0x1020 [ 437.801254][ T5592] ? process_scheduled_works+0x97a/0x1630 [ 437.801285][ T5592] process_scheduled_works+0xc3d/0x1630 [ 437.801351][ T5592] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.801388][ T5592] ? assign_work+0x3cf/0x5d0 [ 437.801424][ T5592] worker_thread+0xa47/0xfb0 [ 437.801485][ T5592] kthread+0x38b/0x470 [ 437.801508][ T5592] ? __pfx_worker_thread+0x10/0x10 [ 437.801536][ T5592] ? __pfx_kthread+0x10/0x10 [ 437.801560][ T5592] ret_from_fork+0x514/0xb70 [ 437.801586][ T5592] ? __pfx_ret_from_fork+0x10/0x10 [ 437.801609][ T5592] ? __switch_to+0xc89/0x1420 [ 437.801642][ T5592] ? __pfx_kthread+0x10/0x10 [ 437.801667][ T5592] ret_from_fork_asm+0x1a/0x30 [ 437.801707][ T5592] [ 437.801739][ T5592] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 437.801788][ T5592] Bluetooth: hci0: failed to register connection device [ 439.611418][ T5592] Bluetooth: hci3: unexpected event 0x01 length: 14 > 1 [ 440.570752][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.570825][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.251819][T11590] overlayfs: failed to resolve './file2': -2 [ 441.291161][T11568] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.291552][T11568] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.315623][T11573] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 442.201291][T11573] Bluetooth: hci0: Failed to read MSFT supported features (-4) [ 444.297990][T11568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.359684][T11568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.429675][T11633] cgroup: fork rejected by pids controller in /syz6 [ 450.374787][ T5737] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 450.524892][ T5737] usb 3-1: Using ep0 maxpacket: 16 [ 450.525778][ T5737] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 450.528228][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.528254][ T5737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.531583][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 450.531610][ T5737] usb 3-1: SerialNumber: syz [ 450.875680][ T5737] usb 3-1: 0:2 : does not exist [ 453.035270][ T8949] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.035307][ T8949] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.035348][ T8949] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.035373][ T8949] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.035409][ T8949] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.035434][ T8949] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.035468][ T8949] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.035493][ T8949] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.179365][ T36] audit: type=1326 audit(1792012757.839:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.179420][ T36] audit: type=1326 audit(1792012757.839:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.179522][ T36] audit: type=1326 audit(1792012757.839:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.179571][ T36] audit: type=1326 audit(1792012757.839:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.179612][ T36] audit: type=1326 audit(1792012757.839:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.179705][ T36] audit: type=1326 audit(1792012757.839:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.179745][ T36] audit: type=1326 audit(1792012757.839:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.179782][ T36] audit: type=1326 audit(1792012757.839:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.179888][ T36] audit: type=1326 audit(1792012757.839:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.179928][ T36] audit: type=1326 audit(1792012757.839:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.6.1808" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 453.321491][ T5737] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 453.324455][ T5737] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 453.324479][ T5737] usb 3-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 453.786123][ T5737] usb 3-1: USB disconnect, device number 8 [ 453.895449][T11706] udevd[11706]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.520461][T11807] .: renamed from bond0 [ 459.340584][T11807] FAULT_INJECTION: forcing a failure. [ 459.340584][T11807] name failslab, interval 1, probability 0, space 0, times 0 [ 459.340627][T11807] CPU: 1 UID: 0 PID: 11807 Comm: syz.3.1835 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.340660][T11807] Tainted: [L]=SOFTLOCKUP [ 459.340669][T11807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.340683][T11807] Call Trace: [ 459.340692][T11807] [ 459.340702][T11807] dump_stack_lvl+0xe8/0x150 [ 459.340741][T11807] should_fail_ex+0x46b/0x600 [ 459.340781][T11807] should_failslab+0xa8/0x100 [ 459.340809][T11807] kmem_cache_alloc_node_noprof+0xac/0x660 [ 459.340841][T11807] ? __alloc_skb+0x1db/0x7a0 [ 459.340866][T11807] ? __alloc_skb+0x1db/0x7a0 [ 459.340899][T11807] __alloc_skb+0x1db/0x7a0 [ 459.340928][T11807] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 459.340959][T11807] rtnetlink_event+0x1b7/0x270 [ 459.340989][T11807] notifier_call_chain+0x1a5/0x3d0 [ 459.341022][T11807] netif_change_name+0x62a/0x9f0 [ 459.341053][T11807] ? dev_change_name+0x101/0x220 [ 459.341076][T11807] ? netif_change_name+0x149/0x9f0 [ 459.341104][T11807] ? __pfx_netif_change_name+0x10/0x10 [ 459.341132][T11807] ? full_name_hash+0x92/0xe0 [ 459.341171][T11807] dev_change_name+0x101/0x220 [ 459.341201][T11807] dev_ioctl+0x5ec/0x1150 [ 459.341232][T11807] sock_do_ioctl+0x23e/0x320 [ 459.341257][T11807] ? __pfx_sock_do_ioctl+0x10/0x10 [ 459.341287][T11807] ? hook_file_ioctl+0x1f5/0x610 [ 459.341319][T11807] ? __asan_memset+0x22/0x50 [ 459.341349][T11807] ? smack_file_ioctl+0x265/0x370 [ 459.341386][T11807] sock_ioctl+0x57d/0x7f0 [ 459.341421][T11807] ? __pfx_sock_ioctl+0x10/0x10 [ 459.341454][T11807] ? __fget_files+0x2a/0x420 [ 459.341478][T11807] ? __fget_files+0x3a8/0x420 [ 459.341501][T11807] ? __fget_files+0x2a/0x420 [ 459.341541][T11807] ? bpf_lsm_file_ioctl+0x9/0x20 [ 459.341570][T11807] ? __pfx_sock_ioctl+0x10/0x10 [ 459.341603][T11807] __se_sys_ioctl+0xff/0x170 [ 459.341638][T11807] do_syscall_64+0x166/0x520 [ 459.341667][T11807] ? trace_irq_disable+0x3b/0x140 [ 459.341696][T11807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.341718][T11807] ? clear_bhb_loop+0x70/0xc0 [ 459.341745][T11807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.341767][T11807] RIP: 0033:0x7f42dd7fe559 [ 459.341788][T11807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.341807][T11807] RSP: 002b:00007f42dba56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.341833][T11807] RAX: ffffffffffffffda RBX: 00007f42dda85fa0 RCX: 00007f42dd7fe559 [ 459.341857][T11807] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000005 [ 459.341872][T11807] RBP: 00007f42dd8958b0 R08: 0000000000000000 R09: 0000000000000000 [ 459.341886][T11807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.341899][T11807] R13: 00007f42dda86038 R14: 00007f42dda85fa0 R15: 00007ffce1cf7ad8 [ 459.341938][T11807] [ 463.589877][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 463.677955][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 463.679759][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 464.353810][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 464.355904][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 464.380064][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 464.395230][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 464.402159][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 464.474274][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 464.548999][T11857] 9pnet_fd: p9_fd_create_tcp (11857): problem connecting socket to 127.0.0.1 [ 465.046945][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 465.046964][ T36] audit: type=1804 audit(1792012769.669:347): pid=11866 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1854" name="/newroot/349/file0" dev="tmpfs" ino=1895 res=1 errno=0 [ 465.674504][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 465.902035][T11881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.266590][T11897] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1866'. [ 468.676511][T11906] 9pnet_fd: p9_fd_create_tcp (11906): problem connecting socket to 127.0.0.1 [ 470.026032][T11905] geneve2: entered promiscuous mode [ 470.225768][ T8955] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 470.225829][ T8955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.225865][ T8955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.225906][ T8955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.403187][T11922] futex_wake_op: syz.6.1875 tries to shift op by 144; fix this program [ 470.976946][T11928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 471.853500][ T36] audit: type=1326 audit(1792012776.489:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11934 comm="syz.2.1880" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x0 [ 472.790881][T11944] binder_alloc: 11943: binder_alloc_buf, no vma [ 473.359761][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 477.757894][ T36] audit: type=1326 audit(1792012782.419:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 477.758477][ T36] audit: type=1326 audit(1792012782.419:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 477.758522][ T36] audit: type=1326 audit(1792012782.419:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 477.758746][ T36] audit: type=1326 audit(1792012782.419:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 477.759023][ T36] audit: type=1326 audit(1792012782.419:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 477.987107][ T36] audit: type=1326 audit(1792012782.629:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2163a7ed8e code=0x7ffc0000 [ 477.987161][ T36] audit: type=1326 audit(1792012782.629:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2163a7ed8e code=0x7ffc0000 [ 477.987204][ T36] audit: type=1326 audit(1792012782.629:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2163a7ed8e code=0x7ffc0000 [ 477.987245][ T36] audit: type=1326 audit(1792012782.639:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2163a7ed8e code=0x7ffc0000 [ 477.987285][ T36] audit: type=1326 audit(1792012782.639:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11996 comm="syz.2.1899" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2163a7ed8e code=0x7ffc0000 [ 479.932357][T12003] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 479.932406][T12003] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 479.932452][T12003] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 483.013068][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 483.013088][ T36] audit: type=1326 audit(1792012787.669:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12029 comm="syz.6.1908" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x0 [ 491.194873][ T5592] Bluetooth: hci2: Malformed LE Event: 0x02 [ 496.660202][ T5592] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 497.596235][ T36] audit: type=1326 audit(1792012802.179:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12191 comm="syz.3.1954" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42dd7fe559 code=0x0 [ 498.180617][ T36] audit: type=1326 audit(1792012802.839:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12200 comm="syz.2.1961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 498.182447][ T36] audit: type=1326 audit(1792012802.839:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12200 comm="syz.2.1961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 498.723679][ T36] audit: type=1326 audit(1792012802.839:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12200 comm="syz.2.1961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 498.919373][ T36] audit: type=1326 audit(1792012803.419:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12200 comm="syz.2.1961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 498.919758][ T36] audit: type=1326 audit(1792012803.419:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12200 comm="syz.2.1961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 498.919925][ T36] audit: type=1326 audit(1792012803.479:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12200 comm="syz.2.1961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 499.043645][ T4900] Bluetooth: hci2: command 0x2016 tx timeout [ 499.203129][ T36] audit: type=1326 audit(1792012803.859:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12200 comm="syz.2.1961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 499.203386][ T36] audit: type=1326 audit(1792012803.859:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12200 comm="syz.2.1961" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2163abe559 code=0x7ffc0000 [ 499.298193][T12216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.333643][T12218] overlayfs: failed to clone upperpath [ 499.883840][ T36] audit: type=1326 audit(1792012804.539:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.4.1972" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fd89e559 code=0x7ffc0000 [ 501.535774][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535847][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.875710][T11128] syz.0.1618 (11128) used greatest stack depth: 16416 bytes left [ 505.428205][T12310] FAULT_INJECTION: forcing a failure. [ 505.428205][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 505.428247][T12310] CPU: 1 UID: 0 PID: 12310 Comm: syz.2.1997 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 505.428277][T12310] Tainted: [L]=SOFTLOCKUP [ 505.428285][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.428299][T12310] Call Trace: [ 505.428308][T12310] [ 505.428318][T12310] dump_stack_lvl+0xe8/0x150 [ 505.428355][T12310] should_fail_ex+0x46b/0x600 [ 505.428390][T12310] ? alloc_inode+0xb8/0x1b0 [ 505.428415][T12310] should_failslab+0xa8/0x100 [ 505.428441][T12310] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 505.428479][T12310] ? alloc_inode+0xb8/0x1b0 [ 505.428510][T12310] alloc_inode+0xb8/0x1b0 [ 505.428535][T12310] new_inode+0x1f/0x170 [ 505.428564][T12310] fuse_ctl_add_dentry+0x48/0x350 [ 505.428601][T12310] fuse_ctl_add_conn+0x1ba/0xd10 [ 505.428628][T12310] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 505.428672][T12310] ? __pfx_fuse_ctl_add_conn+0x10/0x10 [ 505.428712][T12310] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 505.428741][T12310] ? mutex_lock_nested+0x152/0x1d0 [ 505.428764][T12310] ? fuse_fill_super_common+0xa64/0x10e0 [ 505.428793][T12310] fuse_fill_super_common+0xaeb/0x10e0 [ 505.428828][T12310] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 505.428874][T12310] fuse_fill_super+0x98/0x120 [ 505.428899][T12310] ? __pfx_fuse_fill_super+0x10/0x10 [ 505.428925][T12310] get_tree_nodev+0xbb/0x150 [ 505.428956][T12310] fuse_get_tree+0x29d/0x3b0 [ 505.428985][T12310] vfs_get_tree+0x92/0x2a0 [ 505.429017][T12310] do_new_mount+0x325/0xb00 [ 505.429048][T12310] ? cap_capable+0x123/0x460 [ 505.429084][T12310] ? __pfx_do_new_mount+0x10/0x10 [ 505.429112][T12310] ? ns_capable+0x89/0xe0 [ 505.429144][T12310] ? path_mount+0x647/0x1050 [ 505.429171][T12310] ? user_path_at+0xd4/0x160 [ 505.429203][T12310] __se_sys_mount+0x31d/0x420 [ 505.429232][T12310] ? __pfx___se_sys_mount+0x10/0x10 [ 505.429265][T12310] ? __x64_sys_mount+0x20/0xc0 [ 505.429293][T12310] do_syscall_64+0x166/0x520 [ 505.429323][T12310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.429345][T12310] ? clear_bhb_loop+0x70/0xc0 [ 505.429373][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.429394][T12310] RIP: 0033:0x7f2163abe559 [ 505.429415][T12310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.429435][T12310] RSP: 002b:00007f2161d16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 505.429459][T12310] RAX: ffffffffffffffda RBX: 00007f2163d45fa0 RCX: 00007f2163abe559 [ 505.429476][T12310] RDX: 0000200000002100 RSI: 00002000000001c0 RDI: 0000000000000000 [ 505.429491][T12310] RBP: 00007f2163b558b0 R08: 00002000000002c0 R09: 0000000000000000 [ 505.429506][T12310] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 505.429520][T12310] R13: 00007f2163d46038 R14: 00007f2163d45fa0 R15: 00007ffe057c7628 [ 505.429556][T12310] [ 507.642333][T12335] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 510.219437][T12347] 9p: Bad value for 'rfdno' [ 511.654646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 511.673488][T12362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 511.673592][T12362] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 511.779708][T12362] vhci_hcd vhci_hcd.0: Device attached [ 511.826766][T12364] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 511.826799][T12364] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 511.833683][T12371] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(7) [ 511.833711][T12371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 511.833778][T12371] vhci_hcd vhci_hcd.0: Device attached [ 511.839187][T12366] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 511.839217][T12366] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 511.839273][T12366] vhci_hcd vhci_hcd.0: Device attached [ 511.858870][T12364] vhci_hcd vhci_hcd.0: Device attached [ 511.877301][T12362] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(10) [ 511.877329][T12362] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 511.879367][T12362] vhci_hcd vhci_hcd.0: Device attached [ 511.903715][T12372] vhci_hcd: connection closed [ 511.909507][T12368] vhci_hcd: connection closed [ 511.911645][T12374] vhci_hcd: connection closed [ 511.912771][T12378] vhci_hcd: connection closed [ 511.919896][T12363] vhci_hcd: connection closed [ 512.015538][ T5888] vhci_hcd vhci_hcd.3: stop threads [ 512.017334][ T5888] vhci_hcd vhci_hcd.3: release socket [ 512.063782][ T5888] vhci_hcd vhci_hcd.3: disconnect device [ 512.064808][ T31] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 512.096121][T12367] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 512.309971][ T5888] vhci_hcd vhci_hcd.3: stop threads [ 512.310000][ T5888] vhci_hcd vhci_hcd.3: release socket [ 512.348044][ T5888] vhci_hcd vhci_hcd.3: disconnect device [ 512.358475][ T5888] vhci_hcd vhci_hcd.3: stop threads [ 512.358502][ T5888] vhci_hcd vhci_hcd.3: release socket [ 512.385375][ T5888] vhci_hcd vhci_hcd.3: disconnect device [ 512.387310][ T5888] vhci_hcd vhci_hcd.3: stop threads [ 512.387334][ T5888] vhci_hcd vhci_hcd.3: release socket [ 512.387422][ T5888] vhci_hcd vhci_hcd.3: disconnect device [ 512.387511][ T5888] vhci_hcd vhci_hcd.3: stop threads [ 512.387524][ T5888] vhci_hcd vhci_hcd.3: release socket [ 512.387558][ T5888] vhci_hcd vhci_hcd.3: disconnect device [ 513.534925][T12404] FAULT_INJECTION: forcing a failure. [ 513.534925][T12404] name failslab, interval 1, probability 0, space 0, times 0 [ 513.534966][T12404] CPU: 0 UID: 0 PID: 12404 Comm: syz.3.2020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 513.534995][T12404] Tainted: [L]=SOFTLOCKUP [ 513.535003][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.535016][T12404] Call Trace: [ 513.535025][T12404] [ 513.535034][T12404] dump_stack_lvl+0xe8/0x150 [ 513.535071][T12404] should_fail_ex+0x46b/0x600 [ 513.535111][T12404] should_failslab+0xa8/0x100 [ 513.535135][T12404] ? op_alloc+0x2a/0x500 [ 513.535156][T12404] kmem_cache_alloc_noprof+0x9e/0x690 [ 513.535188][T12404] ? op_alloc+0x2a/0x500 [ 513.535217][T12404] op_alloc+0x2a/0x500 [ 513.535242][T12404] orangefs_get_tree+0xf6/0xeb0 [ 513.535277][T12404] ? __pfx_orangefs_get_tree+0x10/0x10 [ 513.535307][T12404] ? rcu_is_watching+0x16/0xb0 [ 513.535328][T12404] ? cap_capable+0x123/0x460 [ 513.535358][T12404] ? safesetid_security_capable+0xa9/0x1a0 [ 513.535407][T12404] vfs_get_tree+0x92/0x2a0 [ 513.535441][T12404] vfs_cmd_create+0xa2/0x200 [ 513.535467][T12404] __se_sys_fsconfig+0x6bf/0x810 [ 513.535495][T12404] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 513.535519][T12404] ? rcu_is_watching+0x16/0xb0 [ 513.535548][T12404] ? __x64_sys_fsconfig+0x20/0xc0 [ 513.535571][T12404] do_syscall_64+0x166/0x520 [ 513.535600][T12404] ? trace_irq_disable+0x3b/0x140 [ 513.535628][T12404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.535650][T12404] ? clear_bhb_loop+0x70/0xc0 [ 513.535675][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.535697][T12404] RIP: 0033:0x7f42dd7fe559 [ 513.535717][T12404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.535736][T12404] RSP: 002b:00007f42dba56028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 513.535760][T12404] RAX: ffffffffffffffda RBX: 00007f42dda85fa0 RCX: 00007f42dd7fe559 [ 513.535776][T12404] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 513.535789][T12404] RBP: 00007f42dd8958b0 R08: 0000000000000000 R09: 0000000000000000 [ 513.535803][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.535817][T12404] R13: 00007f42dda86038 R14: 00007f42dda85fa0 R15: 00007ffce1cf7ad8 [ 513.535851][T12404] [ 513.535872][T12404] op_alloc: kmem_cache_zalloc failed! [ 516.214811][ T5588] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 516.364838][ T5588] usb 3-1: Using ep0 maxpacket: 32 [ 516.365912][ T5588] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 516.367704][ T5588] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 516.367731][ T5588] usb 3-1: config 0 has no interface number 0 [ 516.367878][ T5588] usb 3-1: config 0 interface 12 has no altsetting 0 [ 516.373134][ T5588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.373161][ T5588] usb 3-1: Product: syz [ 516.373177][ T5588] usb 3-1: Manufacturer: syz [ 516.373192][ T5588] usb 3-1: SerialNumber: syz [ 516.425076][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 516.526590][ T5588] usb 3-1: config 0 descriptor?? [ 517.344789][ T31] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 519.531019][ T5588] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 519.531160][ T5588] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 519.531182][ T5588] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 519.531416][ T5588] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 519.588571][ T5588] usb 3-1: USB disconnect, device number 9 [ 522.133922][T12491] FAULT_INJECTION: forcing a failure. [ 522.133922][T12491] name failslab, interval 1, probability 0, space 0, times 0 [ 522.133959][T12491] CPU: 0 UID: 0 PID: 12491 Comm: syz.3.2047 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 522.133984][T12491] Tainted: [L]=SOFTLOCKUP [ 522.133991][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.134003][T12491] Call Trace: [ 522.134010][T12491] [ 522.134019][T12491] dump_stack_lvl+0xe8/0x150 [ 522.134051][T12491] should_fail_ex+0x46b/0x600 [ 522.134083][T12491] should_failslab+0xa8/0x100 [ 522.134104][T12491] __kvmalloc_node_noprof+0x176/0x890 [ 522.134120][T12491] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 522.134147][T12491] ? alloc_netdev_mqs+0x900/0x12c0 [ 522.134172][T12491] ? alloc_netdev_mqs+0x900/0x12c0 [ 522.134203][T12491] alloc_netdev_mqs+0x900/0x12c0 [ 522.134228][T12491] ? __pfx_reg_vif_setup+0x10/0x10 [ 522.134255][T12491] vif_add+0x5b7/0x1690 [ 522.134281][T12491] ? lock_acquire+0x115/0x350 [ 522.134308][T12491] ? __pfx_vif_add+0x10/0x10 [ 522.134330][T12491] ? lock_acquire+0x115/0x350 [ 522.134376][T12491] ip_mroute_setsockopt+0xf8a/0x10d0 [ 522.134403][T12491] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 522.134439][T12491] ? __lock_acquire+0x747/0x2de0 [ 522.134497][T12491] do_ip_setsockopt+0xeba/0x2e30 [ 522.134523][T12491] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 522.134539][T12491] ? do_futex+0x3e7/0x4e0 [ 522.134558][T12491] ? __asan_memcpy+0x40/0x70 [ 522.134586][T12491] ? lock_acquire+0x115/0x350 [ 522.134623][T12491] ? __fget_files+0x2a/0x420 [ 522.134648][T12491] ip_setsockopt+0x66/0x110 [ 522.134666][T12491] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 522.134689][T12491] do_sock_setsockopt+0x17c/0x1b0 [ 522.134724][T12491] __x64_sys_setsockopt+0x143/0x1b0 [ 522.134752][T12491] do_syscall_64+0x166/0x520 [ 522.134797][T12491] ? trace_irq_disable+0x3b/0x140 [ 522.134820][T12491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.134838][T12491] ? clear_bhb_loop+0x70/0xc0 [ 522.134858][T12491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.134875][T12491] RIP: 0033:0x7f42dd7fe559 [ 522.134892][T12491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.134909][T12491] RSP: 002b:00007f42dba56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 522.134929][T12491] RAX: ffffffffffffffda RBX: 00007f42dda85fa0 RCX: 00007f42dd7fe559 [ 522.134942][T12491] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000004 [ 522.134953][T12491] RBP: 00007f42dd8958b0 R08: 0000000000000010 R09: 0000000000000000 [ 522.134965][T12491] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 522.134977][T12491] R13: 00007f42dda86038 R14: 00007f42dda85fa0 R15: 00007ffce1cf7ad8 [ 522.135003][T12491] [ 534.275896][T12589] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2072'. [ 537.217996][T12639] rxe_eth0 speed is unknown, defaulting to 1000 [ 540.829358][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2094'. [ 545.454902][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2108'. [ 545.755863][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2108'. [ 546.837280][ T8951] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.837765][ T8951] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.580113][T12755] overlayfs: failed to clone upperpath [ 551.186434][T12717] tipc: Started in network mode [ 551.186461][T12717] tipc: Node identity 4, cluster identity 4711 [ 551.186475][T12717] tipc: Node number set to 4 [ 551.402667][T12763] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 551.803771][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 551.803795][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 551.807805][T12767] smpboot: CPU 1 is now offline [ 551.978400][ T1239] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 552.183856][ T1239] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 552.185173][ T1239] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 552.185191][ T1239] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 552.185204][ T1239] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.194048][ T1239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 552.194065][ T1239] usb 4-1: Product: syz [ 552.194072][ T1239] usb 4-1: Manufacturer: syz [ 552.194081][ T1239] usb 4-1: SerialNumber: syz [ 552.578600][ T8951] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.578624][ T8951] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.140482][ T1239] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 553.560693][ T1239] usb 4-1: USB disconnect, device number 9 [ 553.667943][ T1239] usblp0: removed [ 554.249337][ T8951] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.249360][ T8951] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.784461][T12822] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2143'. [ 559.006043][ T8951] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.006068][ T8951] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.997560][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 559.997575][ T36] audit: type=1800 audit(1792012864.649:467): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2155" name="file0" dev="overlay" ino=2283 res=0 errno=0 [ 561.512425][ T36] audit: type=1326 audit(1792012866.169:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.3.2162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd7fe559 code=0x7ffc0000 [ 561.528439][ T36] audit: type=1326 audit(1792012866.189:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.3.2162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd7fe559 code=0x7ffc0000 [ 561.528472][ T36] audit: type=1326 audit(1792012866.189:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.3.2162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd7fe559 code=0x7ffc0000 [ 561.529412][ T36] audit: type=1326 audit(1792012866.189:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.3.2162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42dd7fe559 code=0x7ffc0000 [ 561.538281][ T36] audit: type=1326 audit(1792012866.199:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.3.2162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd7fe559 code=0x7ffc0000 [ 561.538313][ T36] audit: type=1326 audit(1792012866.199:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.3.2162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd7fe559 code=0x7ffc0000 [ 561.559033][ T36] audit: type=1326 audit(1792012866.219:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.3.2162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd7fe559 code=0x7ffc0000 [ 561.568138][ T36] audit: type=1326 audit(1792012866.219:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.3.2162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd7fe559 code=0x7ffc0000 [ 561.568171][ T36] audit: type=1326 audit(1792012866.239:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.3.2162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42dd7fe559 code=0x7ffc0000 [ 561.944752][ T1239] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 562.094820][ T1239] usb 4-1: Using ep0 maxpacket: 16 [ 562.096579][ T1239] usb 4-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 562.140622][ T1239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.140641][ T1239] usb 4-1: Product: syz [ 562.140649][ T1239] usb 4-1: Manufacturer: syz [ 562.140657][ T1239] usb 4-1: SerialNumber: syz [ 562.580770][ T1239] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 562.840646][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.840690][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.745911][ T1239] usb 4-1: USB disconnect, device number 10 [ 564.693575][ T8951] bridge_slave_1: left allmulticast mode [ 564.693603][ T8951] bridge_slave_1: left promiscuous mode [ 564.693767][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.776764][T12890] udevd[12890]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.829195][ T8951] bridge_slave_0: left allmulticast mode [ 564.829219][ T8951] bridge_slave_0: left promiscuous mode [ 564.829396][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.793255][T12981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2190'. [ 568.843074][T12983] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2190'. [ 568.956520][ T8951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.960003][ T8951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.963726][ T8951] bond0 (unregistering): Released all slaves [ 569.035837][ T5245] 8021q: adding VLAN 0 to HW filter on device eth5 [ 569.121419][T12981] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.227040][T12981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.227300][T12981] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.227470][T12981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.206773][ T4900] Bluetooth: hci2: unexpected event for opcode 0x080c [ 578.647564][ T5245] 8021q: adding VLAN 0 to HW filter on device eth6 [ 583.160384][ T8951] hsr_slave_0: left promiscuous mode [ 583.218295][ T8951] hsr_slave_1: left promiscuous mode [ 583.219180][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.219197][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.239211][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.239230][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.363891][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'. [ 583.654019][ T8951] veth1_macvtap: left promiscuous mode [ 583.654084][ T8951] veth0_macvtap: left promiscuous mode [ 583.728754][ T8951] veth1_vlan: left promiscuous mode [ 583.728897][ T8951] veth0_vlan: left promiscuous mode [ 584.254756][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 590.944701][ T5721] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 591.127910][ T5721] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 591.128790][ T5721] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 591.130497][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.130511][ T5721] usb 4-1: Product: syz [ 591.130519][ T5721] usb 4-1: Manufacturer: syz [ 591.130526][ T5721] usb 4-1: SerialNumber: syz [ 591.142305][ T5721] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 591.170556][ T5721] dvb-usb: bulk message failed: -22 (3/0) [ 591.192059][ T8951] team0 (unregistering): Port device team_slave_1 removed [ 591.391095][ T8951] team0 (unregistering): Port device team_slave_0 removed [ 592.435103][ T5721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 592.437890][ T5721] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 592.438025][ T5721] usb 4-1: media controller created [ 593.190671][T13199] fuse: fd is not a fuse device [ 594.630350][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.684555][T13211] tipc: Failed to remove unknown binding: 66,0,0/0:4002251299/4002251301 [ 594.684582][T13211] tipc: Failed to remove unknown binding: 66,0,0/0:4002251299/4002251300 [ 594.686697][T13211] tipc: Failed to remove unknown binding: 66,0,0/0:4002251299/4002251301 [ 594.686719][T13211] tipc: Failed to remove unknown binding: 66,0,0/0:4002251299/4002251300 [ 595.009594][ T5245] 8021q: adding VLAN 0 to HW filter on device eth7 [ 596.498950][ T5721] DVB: Unable to find symbol mt352_attach() [ 596.499035][ T5721] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 596.512574][ T5721] dvb-usb: bulk message failed: -22 (3/0) [ 596.524726][ T5721] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 596.547902][ T5721] usb 4-1: USB disconnect, device number 11 [ 598.506712][ T5721] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 599.159075][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 599.287364][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 599.345773][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 599.345787][ T36] audit: type=1326 audit(1792012903.999:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 599.346043][ T36] audit: type=1326 audit(1792012904.009:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 599.346070][ T36] audit: type=1326 audit(1792012904.009:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 599.351429][ T36] audit: type=1326 audit(1792012904.009:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 599.367516][ T36] audit: type=1326 audit(1792012904.029:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 599.367549][ T36] audit: type=1326 audit(1792012904.029:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 599.369240][ T36] audit: type=1326 audit(1792012904.029:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 599.384830][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 599.392587][ T36] audit: type=1326 audit(1792012904.049:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 599.392624][ T36] audit: type=1326 audit(1792012904.049:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 599.392750][ T36] audit: type=1326 audit(1792012904.049:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.6.2259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67aa3ee559 code=0x7ffc0000 [ 600.376753][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'. [ 600.376774][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'. [ 601.251454][ T5245] 8021q: adding VLAN 0 to HW filter on device eth8 [ 601.681487][T13309] CIFS: bad ip= option (127®0.0.1) [ 601.683243][T13309] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 601.683690][T13309] CIFS: Attempting to mount (null) [ 602.269635][T13318] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2269'. [ 605.398864][T13345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2274'. [ 605.595827][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2275'. [ 605.595847][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2275'. [ 605.894771][ T5721] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 607.103713][T13309] CIFS: VFS: Error connecting to socket. Aborting operation. [ 607.112848][T13309] CIFS: VFS: cifs_mount failed w/return code = -4 [ 607.981093][ T5721] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 608.030015][ T5721] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.030033][ T5721] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 608.030054][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.061461][ T5721] usb 4-1: USB disconnect, device number 12 [ 609.302769][ T8957] IPVS: starting estimator thread 0... [ 612.588698][ T8951] IPVS: starting estimator thread 0... [ 620.597524][T13375] IPVS: using max 15 ests per chain, 36000 per kthread [ 623.312681][T13386] IPVS: using max 15 ests per chain, 36000 per kthread [ 624.281307][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.281350][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.994817][ T1239] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 625.329235][ T1239] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 625.332669][ T1239] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 625.341424][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.341441][ T1239] usb 3-1: Product: syz [ 625.341449][ T1239] usb 3-1: Manufacturer: syz [ 625.341457][ T1239] usb 3-1: SerialNumber: syz [ 625.739724][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.789065][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.815784][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.892010][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.894199][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 626.193249][ T1239] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 626.229077][ T1239] usb 3-1: unit 2 not found! [ 627.492712][ T1239] usb 3-1: USB disconnect, device number 10 [ 628.037411][ T4900] Bluetooth: hci5: command tx timeout [ 628.071942][T13439] IPv6: sit2: Disabled Multicast RS [ 628.369748][T13413] udevd[13413]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.114766][ T4900] Bluetooth: hci5: command tx timeout [ 630.482635][T13488] futex_wake_op: syz.6.2308 tries to shift op by 144; fix this program [ 632.766420][ T4900] Bluetooth: hci5: command tx timeout [ 634.382176][T13499] [ 635.905410][T13499] ============================================ [ 635.911538][T13499] WARNING: possible recursive locking detected [ 635.917691][T13499] syzkaller #0 Tainted: G L [ 635.923644][T13499] -------------------------------------------- [ 635.929769][T13499] syz.2.2311/13499 is trying to acquire lock: [ 635.935811][T13499] ffffffff8fbc3a88 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 635.945894][T13499] [ 635.945894][T13499] but task is already holding lock: [ 635.953234][T13499] ffffffff8fbc3a88 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 635.963298][T13499] [ 635.963298][T13499] other info that might help us debug this: [ 635.971331][T13499] Possible unsafe locking scenario: [ 635.971331][T13499] [ 635.978756][T13499] CPU0 [ 635.982037][T13499] ---- [ 635.985294][T13499] lock(qp_broker_list.mutex); [ 635.990121][T13499] lock(qp_broker_list.mutex); [ 635.994965][T13499] [ 635.994965][T13499] *** DEADLOCK *** [ 635.994965][T13499] [ 636.003086][T13499] May be due to missing lock nesting notation [ 636.003086][T13499] [ 636.011381][T13499] locks held by syz.2.2311/13499: 1, last CPU#0: [ 636.017687][T13499] #0: ffffffff8fbc3a88 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 636.028197][T13499] [ 636.028197][T13499] stack backtrace: [ 636.034117][T13499] CPU: 0 UID: 0 PID: 13499 Comm: syz.2.2311 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 636.045570][T13499] Tainted: [L]=SOFTLOCKUP [ 636.049884][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.059938][T13499] Call Trace: [ 636.063232][T13499] [ 636.066149][T13499] dump_stack_lvl+0xe8/0x150 [ 636.070730][T13499] print_deadlock_bug+0x27a/0x290 [ 636.075731][T13499] __lock_acquire+0x25db/0x2de0 [ 636.080566][T13499] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 636.086356][T13499] ? stack_depot_save_flags+0x404/0x7f0 [ 636.091886][T13499] ? kasan_save_track+0x4f/0x80 [ 636.096719][T13499] ? kasan_save_track+0x3e/0x80 [ 636.101569][T13499] ? kasan_save_free_info+0x40/0x50 [ 636.106746][T13499] ? __kasan_slab_free+0x5c/0x80 [ 636.111660][T13499] ? kfree+0x1c5/0x6d0 [ 636.115710][T13499] ? vmci_ctx_put+0x5ba/0xc00 [ 636.120384][T13499] ? vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 636.126191][T13499] ? vmci_datagram_dispatch+0x450/0xc80 [ 636.131746][T13499] lock_acquire+0x115/0x350 [ 636.136230][T13499] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 636.141594][T13499] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 636.146942][T13499] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 636.152309][T13499] mutex_lock_nested+0x5a/0x1d0 [ 636.157139][T13499] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 636.162490][T13499] vmci_qp_broker_detach+0xe9/0xeb0 [ 636.167667][T13499] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 636.173447][T13499] ? kasan_quarantine_put+0xbb/0x1f0 [ 636.178725][T13499] ? lockdep_hardirqs_on+0x7b/0x110 [ 636.183919][T13499] ? kfree+0x1c5/0x6d0 [ 636.187979][T13499] ? vmci_ctx_put+0x5ba/0xc00 [ 636.192642][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 636.197307][T13499] vmci_ctx_put+0x619/0xc00 [ 636.201802][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 636.206460][T13499] ? __pfx_vmci_ctx_put+0x10/0x10 [ 636.211469][T13499] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 636.217102][T13499] vmci_datagram_dispatch+0x450/0xc80 [ 636.222468][T13499] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 636.228355][T13499] vmci_qp_broker_detach+0x87e/0xeb0 [ 636.233623][T13499] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 636.239407][T13499] ? kasan_quarantine_put+0xbb/0x1f0 [ 636.244692][T13499] ? kfree+0x1c5/0x6d0 [ 636.248743][T13499] ? vmci_ctx_put+0x5ba/0xc00 [ 636.253396][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 636.258075][T13499] vmci_ctx_put+0x619/0xc00 [ 636.262570][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 636.267231][T13499] ? __pfx_vmci_ctx_put+0x10/0x10 [ 636.272239][T13499] vmci_host_close+0x91/0x140 [ 636.277090][T13499] ? __pfx_vmci_host_close+0x10/0x10 [ 636.282368][T13499] __fput+0x41f/0xa80 [ 636.286330][T13499] task_work_run+0x1d9/0x270 [ 636.290900][T13499] ? __pfx_task_work_run+0x10/0x10 [ 636.295989][T13499] ? __fput_deferred+0x253/0x3e0 [ 636.300905][T13499] exit_to_user_mode_loop+0x204/0x770 [ 636.306256][T13499] ? rcu_is_watching+0x16/0xb0 [ 636.310998][T13499] do_syscall_64+0x328/0x520 [ 636.315596][T13499] ? trace_irq_disable+0x3b/0x140 [ 636.320602][T13499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.326650][T13499] ? clear_bhb_loop+0x70/0xc0 [ 636.331302][T13499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.337173][T13499] RIP: 0033:0x7f2163abe559 [ 636.341591][T13499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.361191][T13499] RSP: 002b:00007f2161cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.369592][T13499] RAX: 0000000000000000 RBX: 00007f2163d46090 RCX: 00007f2163abe559 [ 636.377553][T13499] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000005 [ 636.385502][T13499] RBP: 00007f2163b558b0 R08: 0000000000000000 R09: 0000000000000000 [ 636.393452][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.401420][T13499] R13: 00007f2163d46128 R14: 00007f2163d46090 R15: 00007ffe057c7628 [ 636.409375][T13499] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 636.719257][ T4900] Bluetooth: hci5: command tx timeout [ 636.725074][ T5893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.176378][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2315'. [ 637.176395][T13519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2315'. [ 637.321414][T13520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2316'. [ 637.956792][ T5893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.693861][T13499] ------------[ cut here ]------------ [ 638.693872][T13499] rtmutex deadlock detected [ 638.693879][T13499] WARNING: kernel/locking/rtmutex.c:1698 at rt_mutex_handle_deadlock+0x21/0xb0, CPU#0: syz.2.2311/13499 [ 638.767675][T13499] Modules linked in: [ 638.771554][T13499] CPU: 0 UID: 0 PID: 13499 Comm: syz.2.2311 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 638.783005][T13499] Tainted: [L]=SOFTLOCKUP [ 638.787323][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.797373][T13499] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 638.803538][T13499] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 41 01 00 48 8d 3d af 85 58 05 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 63 84 49 08 4c 8d [ 638.823166][T13499] RSP: 0018:ffffc900076574f0 EFLAGS: 00010286 [ 638.829248][T13499] RAX: 8000000000000000 RBX: 00000000ffffffdd RCX: ffffffff9aaf9501 [ 638.837303][T13499] RDX: 0000000000000001 RSI: ffffffff8bcc6960 RDI: ffffffff90b55140 [ 638.845285][T13499] RBP: ffffc900076576a0 R08: ffffffff90b2397f R09: 1ffffffff216472f [ 638.853237][T13499] R10: dffffc0000000000 R11: fffffbfff2164730 R12: 1ffff92000ecaeac [ 638.861214][T13499] R13: ffffffff8b5cc5d2 R14: ffffffff8fbc3a30 R15: dffffc0000000000 [ 638.869209][T13499] FS: 00007f2161cf56c0(0000) GS:ffff8881249bb000(0000) knlGS:0000000000000000 [ 638.878139][T13499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.884747][T13499] CR2: 00007fba8bcb8368 CR3: 0000000036c22000 CR4: 00000000003526f0 [ 638.892710][T13499] Call Trace: [ 638.896022][T13499] [ 638.898941][T13499] ? rt_mutex_slowlock+0x1f2/0x780 [ 638.904040][T13499] rt_mutex_slowlock+0x73e/0x780 [ 638.908990][T13499] ? rt_mutex_slowlock+0x1f2/0x780 [ 638.914085][T13499] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 638.919562][T13499] ? lock_acquire+0x232/0x350 [ 638.924226][T13499] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 638.929599][T13499] mutex_lock_nested+0x168/0x1d0 [ 638.934517][T13499] vmci_qp_broker_detach+0xe9/0xeb0 [ 638.939716][T13499] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 638.945512][T13499] ? kasan_quarantine_put+0xbb/0x1f0 [ 638.950783][T13499] ? lockdep_hardirqs_on+0x7b/0x110 [ 638.955996][T13499] ? kfree+0x1c5/0x6d0 [ 638.960049][T13499] ? vmci_ctx_put+0x5ba/0xc00 [ 638.964726][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 638.969386][T13499] vmci_ctx_put+0x619/0xc00 [ 638.973869][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 638.978573][T13499] ? __pfx_vmci_ctx_put+0x10/0x10 [ 638.983584][T13499] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 638.989219][T13499] vmci_datagram_dispatch+0x450/0xc80 [ 638.994591][T13499] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 639.000496][T13499] vmci_qp_broker_detach+0x87e/0xeb0 [ 639.005780][T13499] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 639.011562][T13499] ? kasan_quarantine_put+0xbb/0x1f0 [ 639.016876][T13499] ? kfree+0x1c5/0x6d0 [ 639.020933][T13499] ? vmci_ctx_put+0x5ba/0xc00 [ 639.025602][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 639.030259][T13499] vmci_ctx_put+0x619/0xc00 [ 639.034780][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 639.039455][T13499] ? __pfx_vmci_ctx_put+0x10/0x10 [ 639.044465][T13499] vmci_host_close+0x91/0x140 [ 639.049151][T13499] ? __pfx_vmci_host_close+0x10/0x10 [ 639.054422][T13499] __fput+0x41f/0xa80 [ 639.058425][T13499] task_work_run+0x1d9/0x270 [ 639.062998][T13499] ? __pfx_task_work_run+0x10/0x10 [ 639.068147][T13499] ? __fput_deferred+0x253/0x3e0 [ 639.073069][T13499] exit_to_user_mode_loop+0x204/0x770 [ 639.078450][T13499] ? rcu_is_watching+0x16/0xb0 [ 639.083193][T13499] do_syscall_64+0x328/0x520 [ 639.087790][T13499] ? trace_irq_disable+0x3b/0x140 [ 639.092800][T13499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.098871][T13499] ? clear_bhb_loop+0x70/0xc0 [ 639.103544][T13499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.109450][T13499] RIP: 0033:0x7f2163abe559 [ 639.113847][T13499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.133484][T13499] RSP: 002b:00007f2161cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.141907][T13499] RAX: 0000000000000000 RBX: 00007f2163d46090 RCX: 00007f2163abe559 [ 639.149881][T13499] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000005 [ 639.157852][T13499] RBP: 00007f2163b558b0 R08: 0000000000000000 R09: 0000000000000000 [ 639.165836][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.173798][T13499] R13: 00007f2163d46128 R14: 00007f2163d46090 R15: 00007ffe057c7628 [ 639.181793][T13499] [ 639.184813][T13499] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 639.192073][T13499] CPU: 0 UID: 0 PID: 13499 Comm: syz.2.2311 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 639.203526][T13499] Tainted: [L]=SOFTLOCKUP [ 639.207824][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.217873][T13499] Call Trace: [ 639.221133][T13499] [ 639.224043][T13499] vpanic+0x56d/0xa60 [ 639.228024][T13499] ? __pfx__printk+0x10/0x10 [ 639.232593][T13499] ? __pfx_vpanic+0x10/0x10 [ 639.237070][T13499] ? is_bpf_text_address+0x292/0x2b0 [ 639.242344][T13499] ? is_bpf_text_address+0x26/0x2b0 [ 639.247522][T13499] panic+0xc5/0xd0 [ 639.251220][T13499] ? __pfx_panic+0x10/0x10 [ 639.255617][T13499] __warn+0x315/0x4c0 [ 639.259575][T13499] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 639.265118][T13499] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 639.270645][T13499] __report_bug+0x276/0x570 [ 639.275133][T13499] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 639.280656][T13499] ? __pfx___report_bug+0x10/0x10 [ 639.285660][T13499] ? __schedule+0x16ef/0x5700 [ 639.290319][T13499] report_bug_entry+0x19b/0x290 [ 639.295151][T13499] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 639.300675][T13499] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 639.306196][T13499] handle_bug+0xce/0x200 [ 639.310415][T13499] exc_invalid_op+0x1a/0x50 [ 639.314894][T13499] asm_exc_invalid_op+0x1a/0x20 [ 639.319721][T13499] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 639.325852][T13499] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 41 01 00 48 8d 3d af 85 58 05 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 63 84 49 08 4c 8d [ 639.345435][T13499] RSP: 0018:ffffc900076574f0 EFLAGS: 00010286 [ 639.351482][T13499] RAX: 8000000000000000 RBX: 00000000ffffffdd RCX: ffffffff9aaf9501 [ 639.359465][T13499] RDX: 0000000000000001 RSI: ffffffff8bcc6960 RDI: ffffffff90b55140 [ 639.367415][T13499] RBP: ffffc900076576a0 R08: ffffffff90b2397f R09: 1ffffffff216472f [ 639.375363][T13499] R10: dffffc0000000000 R11: fffffbfff2164730 R12: 1ffff92000ecaeac [ 639.383312][T13499] R13: ffffffff8b5cc5d2 R14: ffffffff8fbc3a30 R15: dffffc0000000000 [ 639.391284][T13499] ? rt_mutex_slowlock+0x1f2/0x780 [ 639.396398][T13499] ? rt_mutex_slowlock+0x1f2/0x780 [ 639.401484][T13499] rt_mutex_slowlock+0x73e/0x780 [ 639.406398][T13499] ? rt_mutex_slowlock+0x1f2/0x780 [ 639.411484][T13499] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 639.416948][T13499] ? lock_acquire+0x232/0x350 [ 639.421608][T13499] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 639.426957][T13499] mutex_lock_nested+0x168/0x1d0 [ 639.431877][T13499] vmci_qp_broker_detach+0xe9/0xeb0 [ 639.437055][T13499] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 639.442843][T13499] ? kasan_quarantine_put+0xbb/0x1f0 [ 639.448113][T13499] ? lockdep_hardirqs_on+0x7b/0x110 [ 639.453304][T13499] ? kfree+0x1c5/0x6d0 [ 639.457352][T13499] ? vmci_ctx_put+0x5ba/0xc00 [ 639.462006][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 639.466663][T13499] vmci_ctx_put+0x619/0xc00 [ 639.471145][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 639.475799][T13499] ? __pfx_vmci_ctx_put+0x10/0x10 [ 639.480803][T13499] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 639.486429][T13499] vmci_datagram_dispatch+0x450/0xc80 [ 639.491803][T13499] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 639.497692][T13499] vmci_qp_broker_detach+0x87e/0xeb0 [ 639.502970][T13499] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 639.508758][T13499] ? kasan_quarantine_put+0xbb/0x1f0 [ 639.514031][T13499] ? kfree+0x1c5/0x6d0 [ 639.518082][T13499] ? vmci_ctx_put+0x5ba/0xc00 [ 639.522740][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 639.527396][T13499] vmci_ctx_put+0x619/0xc00 [ 639.531879][T13499] ? vmci_ctx_put+0x13e/0xc00 [ 639.536536][T13499] ? __pfx_vmci_ctx_put+0x10/0x10 [ 639.541545][T13499] vmci_host_close+0x91/0x140 [ 639.546223][T13499] ? __pfx_vmci_host_close+0x10/0x10 [ 639.551491][T13499] __fput+0x41f/0xa80 [ 639.555461][T13499] task_work_run+0x1d9/0x270 [ 639.560034][T13499] ? __pfx_task_work_run+0x10/0x10 [ 639.565128][T13499] ? __fput_deferred+0x253/0x3e0 [ 639.570044][T13499] exit_to_user_mode_loop+0x204/0x770 [ 639.575398][T13499] ? rcu_is_watching+0x16/0xb0 [ 639.580143][T13499] do_syscall_64+0x328/0x520 [ 639.584716][T13499] ? trace_irq_disable+0x3b/0x140 [ 639.589725][T13499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.595769][T13499] ? clear_bhb_loop+0x70/0xc0 [ 639.600425][T13499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.606296][T13499] RIP: 0033:0x7f2163abe559 [ 639.610689][T13499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.630293][T13499] RSP: 002b:00007f2161cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.638686][T13499] RAX: 0000000000000000 RBX: 00007f2163d46090 RCX: 00007f2163abe559 [ 639.646640][T13499] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000005 [ 639.654689][T13499] RBP: 00007f2163b558b0 R08: 0000000000000000 R09: 0000000000000000 [ 639.662654][T13499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.670609][T13499] R13: 00007f2163d46128 R14: 00007f2163d46090 R15: 00007ffe057c7628 [ 639.678574][T13499] [ 639.681620][T13499] Kernel Offset: disabled [ 639.685971][T13499] Rebooting in 86400 seconds..