last executing test programs: 4m23.001233232s ago: executing program 0 (id=408): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000a00)=@isdn={0x22, 0x7, 0x1d, 0x5, 0x6}, 0x80, 0x0}, 0x24008000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x44041}, 0x84841) 4m22.92147727s ago: executing program 0 (id=409): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0) 4m22.791325756s ago: executing program 0 (id=411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a4", 0x5}], 0x1) 4m21.942128347s ago: executing program 0 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05484, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0xa00a, 0x0) 4m21.835361228s ago: executing program 0 (id=416): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m20.379202214s ago: executing program 0 (id=436): landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 4m20.107941723s ago: executing program 32 (id=436): landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m12.095050388s ago: executing program 1 (id=1517): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x400c084) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0xfffffffffffffe42, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="81000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1m11.881669781s ago: executing program 1 (id=1520): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r3 = accept(r2, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000380)={&(0x7f00000001c0), 0x12, &(0x7f0000000340)={0x0}}, 0x80) 1m9.490195644s ago: executing program 1 (id=1532): syz_open_dev$dri(&(0x7f0000000400), 0x9, 0x301082) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, 0x0, 0x23101, 0x0, 0xa948, &(0x7f0000000200), &(0x7f0000000180)=0x39fb}, {[0x152, 0x8, 0xffffffff, 0x4]}, 0x3, 0x9e, &(0x7f00000002c0)=""/158}) prctl$PR_SET_SECUREBITS(0x1c, 0x15) syz_emit_ethernet(0x86, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet(0x2, 0x5, 0x3) 1m8.231040485s ago: executing program 1 (id=1536): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0049364, &(0x7f00000001c0)) 1m7.893755574s ago: executing program 1 (id=1540): setns(0xc9, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe) 1m5.192274678s ago: executing program 4 (id=1541): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @empty}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='team_slave_0\x00', 0x6, 0xffffffff, 0x2}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000003980)={0xb, {{0xa, 0x0, 0x0, @mcast2, 0x1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @empty}}, {{0xa, 0xfffc, 0x0, @remote, 0x7}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd001829fffe8000000000000000000000000000bbff0200"/53], 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x114, 0xfffffffffffffffe) 1m4.070964077s ago: executing program 1 (id=1549): bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x18, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1m3.1110854s ago: executing program 33 (id=1549): bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x18, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1m1.78843145s ago: executing program 4 (id=1556): close(0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m1.388945582s ago: executing program 4 (id=1559): setns(0xc9, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe) 1m1.241614927s ago: executing program 4 (id=1560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0) umount2(&(0x7f0000000000)='./file0/file0/..\x00', 0x1) 1m1.051143097s ago: executing program 4 (id=1562): io_uring_setup(0x4dec, 0x0) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) 59.668159813s ago: executing program 5 (id=1566): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) 59.395205964s ago: executing program 5 (id=1569): setns(0xc9, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xffe) 59.176312755s ago: executing program 5 (id=1571): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e0999"}}) 58.564055385s ago: executing program 5 (id=1574): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) inotify_init1(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 58.474765773s ago: executing program 2 (id=1575): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r1, 0x16, 0x0, @void}, 0x10) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x5, 0x20000000, 0x3) 58.47435371s ago: executing program 4 (id=1576): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000004c0)="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", 0xfd48, 0x90, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000240)=0x27d, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @remote, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) memfd_secret(0x80000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 58.125353204s ago: executing program 34 (id=1576): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000004c0)="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", 0xfd48, 0x90, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000240)=0x27d, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @remote, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) memfd_secret(0x80000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 58.115163274s ago: executing program 5 (id=1578): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) 56.987653396s ago: executing program 2 (id=1580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 55.866736261s ago: executing program 2 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r4 = io_uring_setup(0x1b7b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @remote, 0x2}, 0x1c) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 54.768283558s ago: executing program 5 (id=1586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 54.630838761s ago: executing program 2 (id=1587): r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) 54.455761672s ago: executing program 2 (id=1589): syz_open_dev$dri(&(0x7f0000000400), 0x9, 0x301082) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, 0x0, 0x23101, 0x0, 0xa948, &(0x7f0000000200), &(0x7f0000000180)=0x39fb}, {[0x152, 0x8, 0xffffffff, 0x4]}, 0x3, 0x9e, &(0x7f00000002c0)=""/158}) prctl$PR_SET_SECUREBITS(0x1c, 0x15) syz_emit_ethernet(0x86, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000100)) 53.217735147s ago: executing program 2 (id=1593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 39.702533721s ago: executing program 35 (id=1586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 37.717888598s ago: executing program 36 (id=1593): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 6.222754919s ago: executing program 3 (id=1674): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008804}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5.674021446s ago: executing program 3 (id=1675): openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000440)=ANY=[@ANYBLOB="14001102000000000000000028001100fa004adf411e47060aefedfa75752a4c0cf9900ce745046950430064532db28aa83c41bd161dc41ca00fb84d9dd81ee86a1e2ad894b74537dbf0f8b4308b6f08adb10bf255d409513ee9c103b0269aa5e2a4c67af06f64dc2dd0435544e5ecf911f7c812a011d1bc640f33c0ee10bc1048ce45301fa6cddde9f2a2fb8bb2e8399d023d4db186c252c83a7b9d988ef1a9cdd85088e70ee5217ac190d0f7239b587b949d3525e7f6fd3032aed892"], 0x28}}, 0x20000000) 5.405045714s ago: executing program 3 (id=1676): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 3.915619997s ago: executing program 3 (id=1677): socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0xfffffffffffffd9b) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 503.097058ms ago: executing program 3 (id=1678): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x5}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 0s ago: executing program 3 (id=1679): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0x241, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): T7488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.630018][ T7589] FAULT_INJECTION: forcing a failure. [ 182.630018][ T7589] name failslab, interval 1, probability 0, space 0, times 0 [ 182.630058][ T7589] CPU: 0 UID: 0 PID: 7589 Comm: syz.2.623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 182.630096][ T7589] Tainted: [L]=SOFTLOCKUP [ 182.630104][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.630116][ T7589] Call Trace: [ 182.630124][ T7589] [ 182.630133][ T7589] dump_stack_lvl+0xe8/0x150 [ 182.630169][ T7589] should_fail_ex+0x46b/0x600 [ 182.630206][ T7589] should_failslab+0xa8/0x100 [ 182.630231][ T7589] __kvmalloc_node_noprof+0x176/0x890 [ 182.630253][ T7589] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 182.630284][ T7589] ? ip_vs_rht_alloc+0x11f/0x890 [ 182.630303][ T7589] ? ip_vs_rht_alloc+0x11f/0x890 [ 182.630330][ T7589] ip_vs_rht_alloc+0x11f/0x890 [ 182.630353][ T7589] ? ip_vs_rht_alloc+0x75b/0x890 [ 182.630377][ T7589] ip_vs_conn_tab_alloc+0x60/0x110 [ 182.630411][ T7589] ip_vs_add_service+0x8be/0x2060 [ 182.630449][ T7589] ? ip_vs_add_service+0x1f5/0x2060 [ 182.630487][ T7589] ? rcu_read_unlock+0x87/0xa0 [ 182.630519][ T7589] do_ip_vs_set_ctl+0x8ce/0xaf0 [ 182.630554][ T7589] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 182.630600][ T7589] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 182.630639][ T7589] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 182.630674][ T7589] nf_setsockopt+0x26f/0x290 [ 182.630701][ T7589] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 182.630725][ T7589] do_sock_setsockopt+0x17c/0x1b0 [ 182.630762][ T7589] __x64_sys_setsockopt+0x143/0x1b0 [ 182.630793][ T7589] do_syscall_64+0x166/0x520 [ 182.630819][ T7589] ? trace_irq_disable+0x3b/0x140 [ 182.630846][ T7589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.630867][ T7589] ? clear_bhb_loop+0x70/0xc0 [ 182.630893][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.630921][ T7589] RIP: 0033:0x7efe5085e1d9 [ 182.630941][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.630957][ T7589] RSP: 002b:00007efe4eab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.630980][ T7589] RAX: ffffffffffffffda RBX: 00007efe50ae5fa0 RCX: 00007efe5085e1d9 [ 182.630995][ T7589] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 182.631008][ T7589] RBP: 00007efe508f5888 R08: 000000000000002c R09: 0000000000000000 [ 182.631021][ T7589] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 182.631034][ T7589] R13: 00007efe50ae6038 R14: 00007efe50ae5fa0 R15: 00007ffc70ad5cf8 [ 182.631068][ T7589] [ 183.580765][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.628'. [ 183.580934][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 184.256773][ T1539] IPVS: starting estimator thread 0... [ 184.342834][ T7621] IPVS: using max 15 ests per chain, 36000 per kthread [ 184.495351][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 185.493890][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 185.503481][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 185.505839][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 185.511402][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 185.512695][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 186.124615][ T7595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.106571][ T1486] IPVS: starting estimator thread 0... [ 187.211904][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 187.232432][ T7663] IPVS: using max 8 ests per chain, 19200 per kthread [ 188.479791][ T7664] vlan2: entered promiscuous mode [ 192.040280][ T7695] FAULT_INJECTION: forcing a failure. [ 192.040280][ T7695] name failslab, interval 1, probability 0, space 0, times 0 [ 192.040320][ T7695] CPU: 0 UID: 0 PID: 7695 Comm: syz.5.659 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 192.040348][ T7695] Tainted: [L]=SOFTLOCKUP [ 192.040356][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 192.040367][ T7695] Call Trace: [ 192.040375][ T7695] [ 192.040387][ T7695] dump_stack_lvl+0xe8/0x150 [ 192.040422][ T7695] should_fail_ex+0x46b/0x600 [ 192.040456][ T7695] should_failslab+0xa8/0x100 [ 192.040481][ T7695] __kmalloc_cache_noprof+0xa1/0x680 [ 192.040510][ T7695] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 192.040530][ T7695] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 192.040557][ T7695] io_uring_alloc_task_context+0xa2/0x6c0 [ 192.040589][ T7695] ? __asan_memcpy+0x40/0x70 [ 192.040616][ T7695] ? errseq_sample+0x40/0x70 [ 192.040637][ T7695] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 192.040661][ T7695] ? alloc_file_pseudo+0x156/0x1e0 [ 192.040684][ T7695] __io_uring_add_tctx_node+0x48d/0x630 [ 192.040710][ T7695] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 192.040733][ T7695] ? __anon_inode_getfile+0x16c/0x210 [ 192.040759][ T7695] io_uring_create+0x596/0x990 [ 192.040782][ T7695] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 192.040807][ T7695] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 192.040839][ T7695] ? rcu_is_watching+0x16/0xb0 [ 192.040869][ T7695] do_syscall_64+0x166/0x520 [ 192.040895][ T7695] ? trace_irq_disable+0x3b/0x140 [ 192.040922][ T7695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.040943][ T7695] ? clear_bhb_loop+0x70/0xc0 [ 192.040967][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.040987][ T7695] RIP: 0033:0x7f4b9c75e1d9 [ 192.041006][ T7695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.041023][ T7695] RSP: 002b:00007f4b9a9b5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 192.041043][ T7695] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f4b9c75e1d9 [ 192.041056][ T7695] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 192.041068][ T7695] RBP: 00007f4b9c7f5888 R08: 0000000000000000 R09: 0000000000000000 [ 192.041079][ T7695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.041089][ T7695] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc4f2af358 [ 192.041116][ T7695] [ 192.279024][ T1440] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.624939][ T1539] IPVS: starting estimator thread 0... [ 192.644968][ T7717] syzkaller0: entered promiscuous mode [ 192.644992][ T7717] syzkaller0: entered allmulticast mode [ 192.649173][ T7717] tipc: Started in network mode [ 192.649201][ T7717] tipc: Node identity 3e5c6d21229d, cluster identity 4711 [ 192.652205][ T7717] tipc: Enabled bearer , priority 0 [ 192.691948][ T7717] tipc: Resetting bearer [ 192.712605][ T7718] IPVS: using max 9 ests per chain, 21600 per kthread [ 192.762740][ T7715] tipc: Resetting bearer [ 192.770308][ T7722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.672'. [ 192.770811][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 192.770839][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.674'. [ 193.548492][ T7715] tipc: Disabling bearer [ 195.069052][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.142497][ T998] tipc: Node number set to 482438433 [ 197.536280][ T7793] netlink: 'syz.5.699': attribute type 13 has an invalid length. [ 197.536301][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.699'. [ 197.536323][ T7793] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 198.123136][ T7780] FAULT_INJECTION: forcing a failure. [ 198.123136][ T7780] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.123174][ T7780] CPU: 1 UID: 0 PID: 7780 Comm: syz.1.695 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 198.123201][ T7780] Tainted: [L]=SOFTLOCKUP [ 198.123207][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.123217][ T7780] Call Trace: [ 198.123225][ T7780] [ 198.123233][ T7780] dump_stack_lvl+0xe8/0x150 [ 198.123268][ T7780] should_fail_ex+0x46b/0x600 [ 198.123304][ T7780] prepare_alloc_pages+0x223/0x650 [ 198.123347][ T7780] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 198.123374][ T7780] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.123401][ T7780] ? __pfx_policy_nodemask+0x10/0x10 [ 198.123436][ T7780] alloc_pages_mpol+0xd4/0x280 [ 198.123464][ T7780] alloc_pages_noprof+0xd2/0x2f0 [ 198.123494][ T7780] pte_alloc_one+0x22/0x380 [ 198.123523][ T7780] __pte_alloc+0x25/0x1a0 [ 198.123549][ T7780] do_pte_missing+0x1bda/0x28f0 [ 198.123577][ T7780] ? rt_spin_unlock+0x165/0x200 [ 198.123604][ T7780] ? __pmd_alloc+0x41b/0x5e0 [ 198.123636][ T7780] handle_mm_fault+0xf64/0x28c0 [ 198.123671][ T7780] ? handle_mm_fault+0xeb/0x28c0 [ 198.123706][ T7780] ? futex_unqueue+0x22/0x240 [ 198.123725][ T7780] ? __pfx_handle_mm_fault+0x10/0x10 [ 198.123755][ T7780] ? __lock_acquire+0x747/0x2de0 [ 198.123781][ T7780] ? lock_mm_and_find_vma+0xa7/0x340 [ 198.123802][ T7780] do_user_addr_fault+0x746/0x1340 [ 198.123830][ T7780] exc_page_fault+0x6a/0xc0 [ 198.123853][ T7780] asm_exc_page_fault+0x26/0x30 [ 198.123872][ T7780] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 198.123891][ T7780] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 198.123905][ T7780] RSP: 0018:ffffc9000603fcb8 EFLAGS: 00050202 [ 198.123922][ T7780] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 198.123935][ T7780] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000603fd70 [ 198.123946][ T7780] RBP: ffffc9000603fe68 R08: 0000000000000003 R09: 0000000000000004 [ 198.123957][ T7780] R10: dffffc0000000000 R11: fffff52000c07fae R12: 1ffff92000c07fa4 [ 198.123969][ T7780] R13: 0000000000000000 R14: ffffc9000603fd70 R15: 0000000000000000 [ 198.123995][ T7780] _copy_from_user+0x7a/0xb0 [ 198.124014][ T7780] do_sock_getsockopt+0x200/0x7e0 [ 198.124042][ T7780] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 198.124077][ T7780] ? __fget_files+0x3a8/0x420 [ 198.124098][ T7780] ? __fget_files+0x2a/0x420 [ 198.124133][ T7780] __x64_sys_getsockopt+0x1aa/0x250 [ 198.124164][ T7780] do_syscall_64+0x166/0x520 [ 198.124187][ T7780] ? trace_irq_disable+0x3b/0x140 [ 198.124211][ T7780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.124228][ T7780] ? clear_bhb_loop+0x70/0xc0 [ 198.124249][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.124265][ T7780] RIP: 0033:0x7f996cd8e1d9 [ 198.124280][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.124295][ T7780] RSP: 002b:00007f996afe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 198.124313][ T7780] RAX: ffffffffffffffda RBX: 00007f996d015fa0 RCX: 00007f996cd8e1d9 [ 198.124326][ T7780] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000004 [ 198.124337][ T7780] RBP: 00007f996ce25888 R08: 0000000000000000 R09: 0000000000000000 [ 198.124348][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.124360][ T7780] R13: 00007f996d016038 R14: 00007f996d015fa0 R15: 00007ffc319ff918 [ 198.124387][ T7780] [ 198.882788][ T7818] 9p: Bad value for 'rfdno' [ 198.924387][ T7820] netlink: 68 bytes leftover after parsing attributes in process `syz.5.708'. [ 199.105424][ T57] bond0: (slave bond_slave_0): interface is now down [ 199.105455][ T57] bond0: (slave bond_slave_1): interface is now down [ 199.126630][ T1463] bond0: (slave bond_slave_0): interface is now down [ 199.126653][ T1463] bond0: (slave bond_slave_1): interface is now down [ 199.146269][ T1463] bond0: (slave bond_slave_0): interface is now down [ 199.146293][ T1463] bond0: (slave bond_slave_1): interface is now down [ 199.162375][ T57] bond0: (slave bond_slave_0): interface is now down [ 199.162398][ T57] bond0: (slave bond_slave_1): interface is now down [ 199.170033][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 199.170056][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 199.204659][ T57] bond0: (slave bond_slave_0): interface is now down [ 199.204682][ T57] bond0: (slave bond_slave_1): interface is now down [ 199.224123][ T1463] bond0: (slave bond_slave_0): interface is now down [ 199.224147][ T1463] bond0: (slave bond_slave_1): interface is now down [ 199.253830][ T74] bond0: (slave bond_slave_0): interface is now down [ 199.253854][ T74] bond0: (slave bond_slave_1): interface is now down [ 199.272366][ T74] bond0: (slave bond_slave_0): interface is now down [ 199.272388][ T74] bond0: (slave bond_slave_1): interface is now down [ 199.293837][ T74] bond0: (slave bond_slave_0): interface is now down [ 199.293860][ T74] bond0: (slave bond_slave_1): interface is now down [ 199.300203][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 199.300226][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 199.312747][ T57] bond0: (slave bond_slave_0): interface is now down [ 199.312769][ T57] bond0: (slave bond_slave_1): interface is now down [ 199.419788][ T57] bond0: now running without any active interface! [ 199.419910][ T57] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.421053][ T57] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.432639][ T3423] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.432684][ T3423] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.862130][ T7846] FAULT_INJECTION: forcing a failure. [ 199.862130][ T7846] name fail_futex, interval 1, probability 0, space 0, times 0 [ 199.862170][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.3.719 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 199.862201][ T7846] Tainted: [L]=SOFTLOCKUP [ 199.862209][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 199.862225][ T7846] Call Trace: [ 199.862233][ T7846] [ 199.862242][ T7846] dump_stack_lvl+0xe8/0x150 [ 199.862275][ T7846] should_fail_ex+0x46b/0x600 [ 199.862311][ T7846] get_futex_key+0x1b4/0x1580 [ 199.862342][ T7846] ? lock_acquire+0x115/0x350 [ 199.862378][ T7846] ? __pfx_get_futex_key+0x10/0x10 [ 199.862409][ T7846] ? futex_private_hash+0x319/0x330 [ 199.862443][ T7846] futex_wait_multiple_setup+0x167/0x6c0 [ 199.862498][ T7846] futex_wait_multiple+0xb2/0x3c0 [ 199.862534][ T7846] __se_sys_futex_waitv+0x20d/0x2c0 [ 199.862558][ T7846] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 199.862585][ T7846] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 199.862610][ T7846] ? __task_pid_nr_ns+0x28/0x470 [ 199.862638][ T7846] ? __x64_sys_futex_waitv+0x20/0xc0 [ 199.862660][ T7846] do_syscall_64+0x166/0x520 [ 199.862685][ T7846] ? trace_irq_disable+0x3b/0x140 [ 199.862713][ T7846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.862734][ T7846] ? clear_bhb_loop+0x70/0xc0 [ 199.862758][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.862779][ T7846] RIP: 0033:0x7f78f4fae1d9 [ 199.862797][ T7846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.862815][ T7846] RSP: 002b:00007f78f3206028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 199.862838][ T7846] RAX: ffffffffffffffda RBX: 00007f78f5235fa0 RCX: 00007f78f4fae1d9 [ 199.862854][ T7846] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000004040 [ 199.862867][ T7846] RBP: 00007f78f5045888 R08: 0000000000000001 R09: 0000000000000000 [ 199.862878][ T7846] R10: 00002000000040c0 R11: 0000000000000246 R12: 0000000000000000 [ 199.862889][ T7846] R13: 00007f78f5236038 R14: 00007f78f5235fa0 R15: 00007ffee392c2b8 [ 199.862920][ T7846] [ 200.171225][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 200.171247][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 200.191646][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 200.191670][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 200.204256][ T7859] FAULT_INJECTION: forcing a failure. [ 200.204256][ T7859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.204294][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.5.723 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 200.204322][ T7859] Tainted: [L]=SOFTLOCKUP [ 200.204329][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 200.204340][ T7859] Call Trace: [ 200.204348][ T7859] [ 200.204357][ T7859] dump_stack_lvl+0xe8/0x150 [ 200.204393][ T7859] should_fail_ex+0x46b/0x600 [ 200.204430][ T7859] _copy_from_user+0x2d/0xb0 [ 200.204452][ T7859] __sys_bpf+0x2e7/0xd90 [ 200.204490][ T7859] ? __pfx___sys_bpf+0x10/0x10 [ 200.204523][ T7859] ? do_futex+0x3e7/0x4e0 [ 200.204572][ T7859] ? rcu_is_watching+0x16/0xb0 [ 200.204599][ T7859] __x64_sys_bpf+0xba/0xd0 [ 200.204628][ T7859] do_syscall_64+0x166/0x520 [ 200.204655][ T7859] ? trace_irq_disable+0x3b/0x140 [ 200.204682][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.204702][ T7859] ? clear_bhb_loop+0x70/0xc0 [ 200.204730][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.204750][ T7859] RIP: 0033:0x7f4b9c75e1d9 [ 200.204769][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.204785][ T7859] RSP: 002b:00007f4b9a9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.204806][ T7859] RAX: ffffffffffffffda RBX: 00007f4b9c9e5fa0 RCX: 00007f4b9c75e1d9 [ 200.204821][ T7859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 200.204833][ T7859] RBP: 00007f4b9c7f5888 R08: 0000000000000000 R09: 0000000000000000 [ 200.204846][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.204859][ T7859] R13: 00007f4b9c9e6038 R14: 00007f4b9c9e5fa0 R15: 00007ffc4f2af358 [ 200.204890][ T7859] [ 200.465172][ T7866] 9p: Bad value for 'rfdno' [ 200.468124][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.725'. [ 200.540230][ T7874] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 200.793919][ T7889] process 'syz.3.734' launched '/dev/fd/3' with NULL argv: empty string added [ 200.842022][ T7891] FAULT_INJECTION: forcing a failure. [ 200.842022][ T7891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.842061][ T7891] CPU: 0 UID: 0 PID: 7891 Comm: syz.5.735 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 200.842087][ T7891] Tainted: [L]=SOFTLOCKUP [ 200.842094][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 200.842104][ T7891] Call Trace: [ 200.842112][ T7891] [ 200.842121][ T7891] dump_stack_lvl+0xe8/0x150 [ 200.842156][ T7891] should_fail_ex+0x46b/0x600 [ 200.842192][ T7891] _copy_from_user+0x2d/0xb0 [ 200.842218][ T7891] __sys_bpf+0x2e7/0xd90 [ 200.842253][ T7891] ? __pfx___sys_bpf+0x10/0x10 [ 200.842283][ T7891] ? do_futex+0x3e7/0x4e0 [ 200.842329][ T7891] ? rcu_is_watching+0x16/0xb0 [ 200.842354][ T7891] __x64_sys_bpf+0xba/0xd0 [ 200.842384][ T7891] do_syscall_64+0x166/0x520 [ 200.842418][ T7891] ? trace_irq_disable+0x3b/0x140 [ 200.842444][ T7891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.842465][ T7891] ? clear_bhb_loop+0x70/0xc0 [ 200.842489][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.842510][ T7891] RIP: 0033:0x7f4b9c75e1d9 [ 200.842529][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.842545][ T7891] RSP: 002b:00007f4b9a9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.842567][ T7891] RAX: ffffffffffffffda RBX: 00007f4b9c9e5fa0 RCX: 00007f4b9c75e1d9 [ 200.842582][ T7891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 200.842595][ T7891] RBP: 00007f4b9c7f5888 R08: 0000000000000000 R09: 0000000000000000 [ 200.842608][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.842620][ T7891] R13: 00007f4b9c9e6038 R14: 00007f4b9c9e5fa0 R15: 00007ffc4f2af358 [ 200.842653][ T7891] [ 201.095449][ T7902] netlink: 'syz.5.741': attribute type 1 has an invalid length. [ 202.903512][ T7957] FAULT_INJECTION: forcing a failure. [ 202.903512][ T7957] name failslab, interval 1, probability 0, space 0, times 0 [ 202.903550][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: syz.4.763 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 202.903577][ T7957] Tainted: [L]=SOFTLOCKUP [ 202.903585][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 202.903596][ T7957] Call Trace: [ 202.903604][ T7957] [ 202.903616][ T7957] dump_stack_lvl+0xe8/0x150 [ 202.903651][ T7957] should_fail_ex+0x46b/0x600 [ 202.903687][ T7957] should_failslab+0xa8/0x100 [ 202.903712][ T7957] __kmalloc_noprof+0xfb/0x790 [ 202.903741][ T7957] ? __register_sysctl_table+0xc02/0x1370 [ 202.903769][ T7957] ? __register_sysctl_table+0xc02/0x1370 [ 202.903804][ T7957] __register_sysctl_table+0xc02/0x1370 [ 202.903843][ T7957] register_pidns_sysctls+0x105/0x1e0 [ 202.903870][ T7957] copy_pid_ns+0x54d/0x940 [ 202.903906][ T7957] ? __pfx_copy_pid_ns+0x10/0x10 [ 202.903934][ T7957] ? rcu_is_watching+0x16/0xb0 [ 202.903955][ T7957] ? __pfx_copy_mnt_ns+0x10/0x10 [ 202.903976][ T7957] ? create_new_namespaces+0x33/0x6b0 [ 202.904018][ T7957] ? copy_ipcs+0x2a9/0x6c0 [ 202.904048][ T7957] ? copy_utsname+0x184/0x620 [ 202.904076][ T7957] create_new_namespaces+0x2ad/0x6b0 [ 202.904105][ T7957] ? security_capable+0x7e/0x2c0 [ 202.904134][ T7957] unshare_nsproxy_namespaces+0x149/0x190 [ 202.904164][ T7957] ksys_unshare+0x5a7/0x950 [ 202.904197][ T7957] ? __pfx_ksys_unshare+0x10/0x10 [ 202.904232][ T7957] ? rcu_is_watching+0x16/0xb0 [ 202.904263][ T7957] __x64_sys_unshare+0x38/0x50 [ 202.904293][ T7957] do_syscall_64+0x166/0x520 [ 202.904319][ T7957] ? trace_irq_disable+0x3b/0x140 [ 202.904345][ T7957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.904367][ T7957] ? clear_bhb_loop+0x70/0xc0 [ 202.904392][ T7957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.904412][ T7957] RIP: 0033:0x7fdcdd15e1d9 [ 202.904431][ T7957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.904447][ T7957] RSP: 002b:00007fdcdb3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 202.904469][ T7957] RAX: ffffffffffffffda RBX: 00007fdcdd3e5fa0 RCX: 00007fdcdd15e1d9 [ 202.904484][ T7957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 202.904497][ T7957] RBP: 00007fdcdd1f5888 R08: 0000000000000000 R09: 0000000000000000 [ 202.904510][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.904523][ T7957] R13: 00007fdcdd3e6038 R14: 00007fdcdd3e5fa0 R15: 00007ffe98c2ed78 [ 202.904555][ T7957] [ 202.906161][ T7957] sysctl could not get directory: /kernel -12 [ 204.100321][ T7971] __nla_validate_parse: 3 callbacks suppressed [ 204.100343][ T7971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.765'. [ 204.100381][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 205.317105][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 205.426166][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 205.426191][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 205.545754][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 205.545778][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 205.576008][ T3423] netdevsim netdevsim120 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.577537][ T1463] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.577687][ T1463] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.577824][ T1463] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.577859][ T1463] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.882839][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 210.202262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.222270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.232257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.262260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.272273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.292285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.302286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.312290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.322295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.332287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 212.228313][ T8111] FAULT_INJECTION: forcing a failure. [ 212.228313][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 212.228350][ T8111] CPU: 0 UID: 0 PID: 8111 Comm: syz.1.821 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 212.228379][ T8111] Tainted: [L]=SOFTLOCKUP [ 212.228386][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 212.228398][ T8111] Call Trace: [ 212.228407][ T8111] [ 212.228416][ T8111] dump_stack_lvl+0xe8/0x150 [ 212.228451][ T8111] should_fail_ex+0x46b/0x600 [ 212.228487][ T8111] should_failslab+0xa8/0x100 [ 212.228512][ T8111] __kmalloc_cache_noprof+0xa1/0x680 [ 212.228544][ T8111] ? __io_uring_add_tctx_node+0x186/0x630 [ 212.228569][ T8111] ? __io_uring_add_tctx_node+0x186/0x630 [ 212.228598][ T8111] __io_uring_add_tctx_node+0x186/0x630 [ 212.228626][ T8111] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 212.228652][ T8111] ? __anon_inode_getfile+0x16c/0x210 [ 212.228678][ T8111] io_uring_create+0x596/0x990 [ 212.228704][ T8111] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 212.228727][ T8111] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 212.228751][ T8111] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 212.228790][ T8111] ? rcu_is_watching+0x16/0xb0 [ 212.228823][ T8111] do_syscall_64+0x166/0x520 [ 212.228849][ T8111] ? trace_irq_disable+0x3b/0x140 [ 212.228876][ T8111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.228896][ T8111] ? clear_bhb_loop+0x70/0xc0 [ 212.228921][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.228941][ T8111] RIP: 0033:0x7f996cd8e1d9 [ 212.228960][ T8111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.228977][ T8111] RSP: 002b:00007f996afe5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 212.228999][ T8111] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f996cd8e1d9 [ 212.229021][ T8111] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 212.229035][ T8111] RBP: 00007f996ce25888 R08: 0000000000000000 R09: 0000000000000000 [ 212.229048][ T8111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 212.229060][ T8111] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc319ff918 [ 212.229092][ T8111] [ 212.550698][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 214.723976][ T8139] FAULT_INJECTION: forcing a failure. [ 214.723976][ T8139] name failslab, interval 1, probability 0, space 0, times 0 [ 214.724016][ T8139] CPU: 0 UID: 0 PID: 8139 Comm: syz.3.833 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 214.724046][ T8139] Tainted: [L]=SOFTLOCKUP [ 214.724053][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.724065][ T8139] Call Trace: [ 214.724073][ T8139] [ 214.724083][ T8139] dump_stack_lvl+0xe8/0x150 [ 214.724119][ T8139] should_fail_ex+0x46b/0x600 [ 214.724156][ T8139] should_failslab+0xa8/0x100 [ 214.724181][ T8139] __kmalloc_noprof+0xfb/0x790 [ 214.724211][ T8139] ? mpi_alloc+0x77/0x140 [ 214.724229][ T8139] ? mpi_alloc+0x77/0x140 [ 214.724256][ T8139] mpi_alloc+0x77/0x140 [ 214.724278][ T8139] mpi_read_raw_from_sgl+0x2b5/0x610 [ 214.724314][ T8139] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 214.724350][ T8139] ? mpi_alloc+0x52/0x140 [ 214.724373][ T8139] ? __asan_memset+0x22/0x50 [ 214.724406][ T8139] rsa_enc+0x165/0x480 [ 214.724434][ T8139] ? __virt_addr_valid+0x137/0x390 [ 214.724465][ T8139] ? __pfx_rsa_enc+0x10/0x10 [ 214.724489][ T8139] ? __virt_addr_valid+0x137/0x390 [ 214.724515][ T8139] ? __virt_addr_valid+0x2e8/0x390 [ 214.724544][ T8139] ? sg_init_one+0xf5/0x1c0 [ 214.724573][ T8139] rsassa_pkcs1_verify+0x52b/0xbb0 [ 214.724607][ T8139] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 214.724644][ T8139] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 214.724671][ T8139] ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0 [ 214.724697][ T8139] public_key_verify_signature+0x79b/0x9e0 [ 214.724735][ T8139] ? __pfx_public_key_verify_signature+0x10/0x10 [ 214.724775][ T8139] ? asymmetric_key_generate_id+0x60/0x170 [ 214.724802][ T8139] ? asymmetric_key_id_same+0x67/0xe0 [ 214.724829][ T8139] x509_check_for_self_signed+0x326/0x430 [ 214.724860][ T8139] x509_cert_parse+0x622/0x7a0 [ 214.724888][ T8139] x509_key_preparse+0x64/0x6d0 [ 214.724912][ T8139] ? __pfx_smack_key_permission+0x10/0x10 [ 214.724935][ T8139] asymmetric_key_preparse+0xb9/0x1b0 [ 214.724959][ T8139] __key_create_or_update+0x354/0xa70 [ 214.724993][ T8139] ? __pfx___key_create_or_update+0x10/0x10 [ 214.725020][ T8139] ? lookup_user_key+0xb68/0x1150 [ 214.725054][ T8139] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 214.725077][ T8139] ? __pfx_keyring_search_iterator+0x10/0x10 [ 214.725111][ T8139] key_create_or_update+0x42/0x60 [ 214.725139][ T8139] __se_sys_add_key+0x349/0x420 [ 214.725170][ T8139] ? __pfx___se_sys_add_key+0x10/0x10 [ 214.725207][ T8139] ? __x64_sys_add_key+0x20/0xc0 [ 214.725237][ T8139] do_syscall_64+0x166/0x520 [ 214.725265][ T8139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.725285][ T8139] ? clear_bhb_loop+0x70/0xc0 [ 214.725311][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.725331][ T8139] RIP: 0033:0x7f78f4fae1d9 [ 214.725350][ T8139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.725366][ T8139] RSP: 002b:00007f78f3206028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 214.725388][ T8139] RAX: ffffffffffffffda RBX: 00007f78f5235fa0 RCX: 00007f78f4fae1d9 [ 214.725403][ T8139] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 214.725417][ T8139] RBP: 00007f78f5045888 R08: 0000000024cb34f6 R09: 0000000000000000 [ 214.725431][ T8139] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 214.725443][ T8139] R13: 00007f78f5236038 R14: 00007f78f5235fa0 R15: 00007ffee392c2b8 [ 214.725477][ T8139] [ 215.449491][ T8150] FAULT_INJECTION: forcing a failure. [ 215.449491][ T8150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.449533][ T8150] CPU: 0 UID: 0 PID: 8150 Comm: syz.1.836 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 215.449561][ T8150] Tainted: [L]=SOFTLOCKUP [ 215.449569][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 215.449580][ T8150] Call Trace: [ 215.449587][ T8150] [ 215.449597][ T8150] dump_stack_lvl+0xe8/0x150 [ 215.449638][ T8150] should_fail_ex+0x46b/0x600 [ 215.449674][ T8150] _copy_from_user+0x2d/0xb0 [ 215.449696][ T8150] __sys_bpf+0x2e7/0xd90 [ 215.449739][ T8150] ? __pfx___sys_bpf+0x10/0x10 [ 215.449771][ T8150] ? do_futex+0x3e7/0x4e0 [ 215.449821][ T8150] ? rcu_is_watching+0x16/0xb0 [ 215.449848][ T8150] __x64_sys_bpf+0xba/0xd0 [ 215.449878][ T8150] do_syscall_64+0x166/0x520 [ 215.449904][ T8150] ? trace_irq_disable+0x3b/0x140 [ 215.449932][ T8150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.449952][ T8150] ? clear_bhb_loop+0x70/0xc0 [ 215.449977][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.449997][ T8150] RIP: 0033:0x7f996cd8e1d9 [ 215.450016][ T8150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.450032][ T8150] RSP: 002b:00007f996afe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.450054][ T8150] RAX: ffffffffffffffda RBX: 00007f996d015fa0 RCX: 00007f996cd8e1d9 [ 215.450070][ T8150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 215.450082][ T8150] RBP: 00007f996ce25888 R08: 0000000000000000 R09: 0000000000000000 [ 215.450095][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.450106][ T8150] R13: 00007f996d016038 R14: 00007f996d015fa0 R15: 00007ffc319ff918 [ 215.450140][ T8150] [ 216.840826][ T8168] binder: binder_mmap: 8166 0-800000 bad vm_flags failed -1 [ 218.454078][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.856'. [ 218.454124][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 219.926373][ T8236] IPVS: length: 103 != 8 [ 220.918865][ T8247] binder: 8245:8247 ioctl c0306201 200000000080 returned -14 [ 220.930402][ T8247] binder: 8245:8247 ioctl c0306201 2000000003c0 returned -14 [ 221.640790][ T8284] netlink: 'syz.1.889': attribute type 13 has an invalid length. [ 221.640812][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 221.640836][ T8284] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 222.214253][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 222.214296][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 222.321601][ T8311] netlink: 'syz.3.901': attribute type 13 has an invalid length. [ 222.321621][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 222.321643][ T8311] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 222.539834][ T8320] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 224.836204][ T8377] netlink: 'syz.1.930': attribute type 2 has an invalid length. [ 224.836227][ T8377] netlink: 224 bytes leftover after parsing attributes in process `syz.1.930'. [ 225.224040][ T8390] netlink: 68 bytes leftover after parsing attributes in process `syz.3.935'. [ 226.967871][ T8418] netlink: 'syz.2.943': attribute type 2 has an invalid length. [ 226.967894][ T8418] netlink: 224 bytes leftover after parsing attributes in process `syz.2.943'. [ 227.485692][ T8425] netlink: 68 bytes leftover after parsing attributes in process `syz.5.946'. [ 227.537083][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 228.857084][ T8458] netlink: 'syz.2.957': attribute type 2 has an invalid length. [ 228.857107][ T8458] netlink: 224 bytes leftover after parsing attributes in process `syz.2.957'. [ 229.065151][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 229.159773][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 229.271537][ T8464] syzkaller0: entered promiscuous mode [ 229.271564][ T8464] syzkaller0: entered allmulticast mode [ 229.355069][ T8475] tipc: Enabled bearer , priority 0 [ 229.812984][ T8475] tipc: Resetting bearer [ 230.549366][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 230.549396][ T8489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.966'. [ 230.614340][ T8463] tipc: Resetting bearer [ 230.767773][ T8463] tipc: Disabling bearer [ 232.202652][ T8510] netlink: 'syz.2.971': attribute type 2 has an invalid length. [ 232.202675][ T8510] netlink: 224 bytes leftover after parsing attributes in process `syz.2.971'. [ 232.335344][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 232.340029][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 232.506565][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 232.506594][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.977'. [ 233.758485][ T8533] vivid-000: kernel_thread() failed [ 234.312361][ T8546] netlink: 'syz.1.987': attribute type 2 has an invalid length. [ 234.312384][ T8546] netlink: 224 bytes leftover after parsing attributes in process `syz.1.987'. [ 235.928371][ T8595] syzkaller1: entered allmulticast mode [ 236.204630][ T8601] netlink: 'syz.5.1003': attribute type 2 has an invalid length. [ 236.204655][ T8601] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1003'. [ 237.512736][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 237.512759][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 237.665033][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 237.665049][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 240.390725][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1022'. [ 240.390750][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1022'. [ 240.476439][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1022'. [ 240.476463][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1022'. [ 240.480882][ T8663] netlink: 'syz.1.1023': attribute type 2 has an invalid length. [ 240.480901][ T8663] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1023'. [ 240.483273][ T1539] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.483317][ T1539] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.483351][ T1539] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.483385][ T1539] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.246921][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1035'. [ 242.271407][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.308720][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.341630][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.387404][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 242.387429][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'. [ 242.442481][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.492844][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.524753][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 242.524779][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'. [ 242.531648][ T8698] netlink: 'syz.4.1038': attribute type 2 has an invalid length. [ 242.531668][ T8698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1038'. [ 242.542658][ T6536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.993319][ T8714] netlink: 'syz.2.1043': attribute type 2 has an invalid length. [ 247.455298][ T37] audit: type=1326 audit(1791519836.393:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.3.1048" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f4fae1d9 code=0x7ffc0000 [ 247.455662][ T37] audit: type=1326 audit(1791519836.413:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.3.1048" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f4fae1d9 code=0x7ffc0000 [ 247.457442][ T37] audit: type=1326 audit(1791519836.413:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.3.1048" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f78f4fae1d9 code=0x7ffc0000 [ 247.459528][ T37] audit: type=1326 audit(1791519836.413:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.3.1048" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f4fae1d9 code=0x7ffc0000 [ 247.460030][ T37] audit: type=1326 audit(1791519836.413:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.3.1048" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f4fae1d9 code=0x7ffc0000 [ 247.691795][ T8743] netlink: 'syz.4.1051': attribute type 2 has an invalid length. [ 247.691819][ T8743] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1051'. [ 247.725847][ T8728] batman_adv: batadv0: Adding interface: syzkaller0 [ 247.725867][ T8728] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.725898][ T8728] batman_adv: batadv0: Interface activated: syzkaller0 [ 247.953335][ T8726] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 248.888354][ T8726] batman_adv: batadv0: Removing interface: syzkaller0 [ 248.928391][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 248.928413][ T8761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1057'. [ 251.453088][ T8789] batman_adv: batadv0: Adding interface: syzkaller0 [ 251.453107][ T8789] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.453137][ T8789] batman_adv: batadv0: Interface activated: syzkaller0 [ 252.471420][ T8794] netlink: 'syz.3.1071': attribute type 13 has an invalid length. [ 252.471442][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 252.471466][ T8794] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 253.888826][ T8808] 9p: Bad value for 'rfdno' [ 254.415310][ T8789] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 254.742669][ T8789] batman_adv: batadv0: Removing interface: syzkaller0 [ 254.748508][ T8828] netlink: 'syz.2.1082': attribute type 13 has an invalid length. [ 254.748529][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 255.729344][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.788039][ T8828] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 256.164679][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1084'. [ 257.075125][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1086'. [ 257.079413][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.079702][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.103605][ T998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.182559][ T6536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.229730][ T8858] 9p: Bad value for 'wfdno' [ 259.963061][ T8888] 9p: Bad value for 'wfdno' [ 261.299934][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1110'. [ 261.328525][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.329625][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.353032][ T201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.562707][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.590943][ T8931] 9p: Bad value for 'wfdno' [ 261.993005][ T5612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.014737][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.087635][ T8953] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1122'. [ 264.796912][ T8971] FAULT_INJECTION: forcing a failure. [ 264.796912][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 264.797132][ T8971] CPU: 1 UID: 0 PID: 8971 Comm: syz.3.1128 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 264.797165][ T8971] Tainted: [L]=SOFTLOCKUP [ 264.797173][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.797185][ T8971] Call Trace: [ 264.797193][ T8971] [ 264.797203][ T8971] dump_stack_lvl+0xe8/0x150 [ 264.797240][ T8971] should_fail_ex+0x46b/0x600 [ 264.797321][ T8971] ? __d_alloc+0x37/0x6f0 [ 264.797348][ T8971] should_failslab+0xa8/0x100 [ 264.797373][ T8971] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 264.797406][ T8971] ? __d_alloc+0x37/0x6f0 [ 264.797432][ T8971] ? __asan_memset+0x22/0x50 [ 264.797463][ T8971] __d_alloc+0x37/0x6f0 [ 264.797488][ T8971] ? __pfx___schedule+0x10/0x10 [ 264.797512][ T8971] ? dquot_alloc_inode+0x216/0xa50 [ 264.797542][ T8971] d_alloc_pseudo+0x21/0xc0 [ 264.797571][ T8971] alloc_path_pseudo+0x107/0x220 [ 264.797597][ T8971] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 264.797632][ T8971] alloc_file_pseudo+0xa8/0x1e0 [ 264.797658][ T8971] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 264.797692][ T8971] __shmem_file_setup+0x2e9/0x370 [ 264.797722][ T8971] ? __pfx___shmem_file_setup+0x10/0x10 [ 264.797749][ T8971] ? big_key_preparse+0x200/0x500 [ 264.797774][ T8971] ? big_key_preparse+0x200/0x500 [ 264.797806][ T8971] big_key_preparse+0x28b/0x500 [ 264.797839][ T8971] ? __pfx_big_key_preparse+0x10/0x10 [ 264.797865][ T8971] ? __pfx_smack_key_permission+0x10/0x10 [ 264.797895][ T8971] __key_create_or_update+0x354/0xa70 [ 264.797930][ T8971] ? __pfx___key_create_or_update+0x10/0x10 [ 264.797975][ T8971] ? lookup_user_key+0xb68/0x1150 [ 264.798009][ T8971] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 264.798041][ T8971] key_create_or_update+0x42/0x60 [ 264.798069][ T8971] __se_sys_add_key+0x349/0x420 [ 264.798102][ T8971] ? __pfx___se_sys_add_key+0x10/0x10 [ 264.798139][ T8971] ? __x64_sys_add_key+0x20/0xc0 [ 264.798170][ T8971] do_syscall_64+0x166/0x520 [ 264.798200][ T8971] ? trace_irq_disable+0x3b/0x140 [ 264.798228][ T8971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.798255][ T8971] ? clear_bhb_loop+0x70/0xc0 [ 264.798281][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.798302][ T8971] RIP: 0033:0x7f78f4fae1d9 [ 264.798323][ T8971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.798341][ T8971] RSP: 002b:00007f78f3206028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 264.798364][ T8971] RAX: ffffffffffffffda RBX: 00007f78f5235fa0 RCX: 00007f78f4fae1d9 [ 264.798380][ T8971] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000 [ 264.798394][ T8971] RBP: 00007f78f5045888 R08: fffffffffffffffe R09: 0000000000000000 [ 264.798410][ T8971] R10: 000000000000fe3a R11: 0000000000000246 R12: 0000000000000000 [ 264.798423][ T8971] R13: 00007f78f5236038 R14: 00007f78f5235fa0 R15: 00007ffee392c2b8 [ 264.798459][ T8971] [ 265.501299][ T1008] IPVS: starting estimator thread 0... [ 265.592500][ T8983] IPVS: using max 7 ests per chain, 16800 per kthread [ 266.737881][ T8991] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1134'.                    syzkaller syzkaller login: [ 269.437552][ T9017] bridge_slave_1: left allmulticast mode [ 269.445864][ T9017] bridge_slave_1: left promiscuous mode [ 269.446137][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.662923][ T9017] bond0: (slave bond_slave_0): Releasing backup interface [ 269.763304][ T9017] bond0: (slave bond_slave_1): Releasing backup interface [ 269.853589][ T9017] team0: Port device team_slave_0 removed [ 269.895572][ T9017] team0: Port device team_slave_1 removed [ 269.896156][ T9017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.896172][ T9017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.962626][ T9017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.962655][ T9017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.994055][ T9017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.732389][ T3349] IPVS: starting estimator thread 0... [ 271.834245][ T9099] IPVS: using max 10 ests per chain, 24000 per kthread [ 273.237537][ T9131] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1178'. [ 273.624447][ T9144] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1184'. [ 273.655340][ T5612] kernel write not supported for file /input/mice (pid: 5612 comm: kworker/0:4) [ 273.778158][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 273.848697][ T9163] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1192'. [ 274.100739][ T9160] FAULT_INJECTION: forcing a failure. [ 274.100739][ T9160] name failslab, interval 1, probability 0, space 0, times 0 [ 274.100778][ T9160] CPU: 0 UID: 0 PID: 9160 Comm: syz.4.1190 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 274.100807][ T9160] Tainted: [L]=SOFTLOCKUP [ 274.100814][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.100826][ T9160] Call Trace: [ 274.100835][ T9160] [ 274.100843][ T9160] dump_stack_lvl+0xe8/0x150 [ 274.100880][ T9160] should_fail_ex+0x46b/0x600 [ 274.100914][ T9160] ? __d_alloc+0x37/0x6f0 [ 274.100941][ T9160] should_failslab+0xa8/0x100 [ 274.100967][ T9160] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 274.100996][ T9160] ? __d_lookup+0x66/0x790 [ 274.101020][ T9160] ? __d_alloc+0x37/0x6f0 [ 274.101051][ T9160] __d_alloc+0x37/0x6f0 [ 274.101081][ T9160] d_alloc+0x4b/0x190 [ 274.101104][ T9160] ? lookup_one_qstr_excl+0xc4/0x360 [ 274.101134][ T9160] lookup_one_qstr_excl+0xd8/0x360 [ 274.101165][ T9160] start_dirop+0x5c/0x90 [ 274.101188][ T9160] simple_start_creating+0xcc/0x110 [ 274.101215][ T9160] ? __pfx_simple_start_creating+0x10/0x10 [ 274.101242][ T9160] ? mntput+0x65/0xc0 [ 274.101267][ T9160] debugfs_start_creating+0xca/0x1b0 [ 274.101298][ T9160] __debugfs_create_file+0x6f/0x400 [ 274.101330][ T9160] debugfs_create_file_full+0x3f/0x60 [ 274.101364][ T9160] ref_tracker_dir_debugfs+0x19d/0x370 [ 274.101386][ T9160] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 274.101450][ T9160] preinit_net+0x1cf/0x780 [ 274.101477][ T9160] copy_net_ns+0x2c8/0x780 [ 274.101502][ T9160] create_new_namespaces+0x3f0/0x6b0 [ 274.101533][ T9160] ? security_capable+0x7e/0x2c0 [ 274.101563][ T9160] unshare_nsproxy_namespaces+0x149/0x190 [ 274.101595][ T9160] ksys_unshare+0x5a7/0x950 [ 274.101641][ T9160] ? __pfx_ksys_unshare+0x10/0x10 [ 274.101671][ T9160] ? rcu_is_watching+0x16/0xb0 [ 274.101703][ T9160] __x64_sys_unshare+0x38/0x50 [ 274.101733][ T9160] do_syscall_64+0x166/0x520 [ 274.101760][ T9160] ? trace_irq_disable+0x3b/0x140 [ 274.101787][ T9160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.101808][ T9160] ? clear_bhb_loop+0x70/0xc0 [ 274.101834][ T9160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.101854][ T9160] RIP: 0033:0x7fdcdd15e1d9 [ 274.101874][ T9160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.101892][ T9160] RSP: 002b:00007fdcdb3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 274.101915][ T9160] RAX: ffffffffffffffda RBX: 00007fdcdd3e5fa0 RCX: 00007fdcdd15e1d9 [ 274.101930][ T9160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 274.101944][ T9160] RBP: 00007fdcdd1f5888 R08: 0000000000000000 R09: 0000000000000000 [ 274.101957][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.101970][ T9160] R13: 00007fdcdd3e6038 R14: 00007fdcdd3e5fa0 R15: 00007ffe98c2ed78 [ 274.102005][ T9160] [ 275.784467][ T9187] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1200'. [ 275.856965][ T9189] FAULT_INJECTION: forcing a failure. [ 275.856965][ T9189] name failslab, interval 1, probability 0, space 0, times 0 [ 275.857005][ T9189] CPU: 0 UID: 0 PID: 9189 Comm: syz.1.1201 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.857034][ T9189] Tainted: [L]=SOFTLOCKUP [ 275.857041][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 275.857054][ T9189] Call Trace: [ 275.857078][ T9189] [ 275.857087][ T9189] dump_stack_lvl+0xe8/0x150 [ 275.857124][ T9189] should_fail_ex+0x46b/0x600 [ 275.857158][ T9189] ? sock_alloc_inode+0x2c/0x1a0 [ 275.857181][ T9189] should_failslab+0xa8/0x100 [ 275.857206][ T9189] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 275.857238][ T9189] ? sock_alloc_inode+0x2c/0x1a0 [ 275.857263][ T9189] ? __pfx_sock_alloc_inode+0x10/0x10 [ 275.857281][ T9189] sock_alloc_inode+0x2c/0x1a0 [ 275.857302][ T9189] ? __pfx_sock_alloc_inode+0x10/0x10 [ 275.857320][ T9189] alloc_inode+0x6a/0x1b0 [ 275.857352][ T9189] __sock_create+0x12d/0x9d0 [ 275.857383][ T9189] __sys_socket+0xd6/0x1b0 [ 275.857409][ T9189] __x64_sys_socket+0x7a/0x90 [ 275.857433][ T9189] do_syscall_64+0x166/0x520 [ 275.857459][ T9189] ? trace_irq_disable+0x3b/0x140 [ 275.857486][ T9189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.857507][ T9189] ? clear_bhb_loop+0x70/0xc0 [ 275.857532][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.857553][ T9189] RIP: 0033:0x7f996cd8e1d9 [ 275.857573][ T9189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.857590][ T9189] RSP: 002b:00007f996afe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 275.857612][ T9189] RAX: ffffffffffffffda RBX: 00007f996d015fa0 RCX: 00007f996cd8e1d9 [ 275.857627][ T9189] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 275.857640][ T9189] RBP: 00007f996ce25888 R08: 0000000000000000 R09: 0000000000000000 [ 275.857652][ T9189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.857665][ T9189] R13: 00007f996d016038 R14: 00007f996d015fa0 R15: 00007ffc319ff918 [ 275.857697][ T9189] [ 275.857707][ T9189] socket: no more sockets [ 276.772718][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1202'. [ 277.072020][ T9208] netlink: 'syz.4.1205': attribute type 1 has an invalid length. [ 277.489803][ T9208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.085836][ T9219] FAULT_INJECTION: forcing a failure. [ 278.085836][ T9219] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 278.085876][ T9219] CPU: 0 UID: 0 PID: 9219 Comm: syz.3.1209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 278.085905][ T9219] Tainted: [L]=SOFTLOCKUP [ 278.085912][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 278.085925][ T9219] Call Trace: [ 278.085933][ T9219] [ 278.085942][ T9219] dump_stack_lvl+0xe8/0x150 [ 278.085978][ T9219] should_fail_ex+0x46b/0x600 [ 278.086013][ T9219] prepare_alloc_pages+0x223/0x650 [ 278.086040][ T9219] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 278.086064][ T9219] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 278.086095][ T9219] ? __pfx_policy_nodemask+0x10/0x10 [ 278.086116][ T9219] ? filemap_get_entry+0x374/0x3f0 [ 278.086141][ T9219] ? __pfx_filemap_get_entry+0x10/0x10 [ 278.086165][ T9219] alloc_pages_mpol+0xd4/0x280 [ 278.086192][ T9219] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 278.086219][ T9219] shmem_get_folio_gfp+0x6ee/0x1c40 [ 278.086244][ T9219] ? __asan_memcpy+0x40/0x70 [ 278.086296][ T9219] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 278.086323][ T9219] ? folio_mapping+0x16f/0x1f0 [ 278.086354][ T9219] shmem_write_begin+0x166/0x320 [ 278.086385][ T9219] generic_perform_write+0x2ad/0x8b0 [ 278.086420][ T9219] ? __pfx_generic_perform_write+0x10/0x10 [ 278.086444][ T9219] ? generic_write_checks_count+0x426/0x530 [ 278.086470][ T9219] ? file_update_time_flags+0x2db/0x450 [ 278.086502][ T9219] shmem_file_write_iter+0xfb/0x120 [ 278.086523][ T9219] __kernel_write_iter+0x453/0x8f0 [ 278.086555][ T9219] ? __pfx___kernel_write_iter+0x10/0x10 [ 278.086583][ T9219] ? __asan_memset+0x22/0x50 [ 278.086609][ T9219] ? iov_iter_kvec+0xb8/0x180 [ 278.086632][ T9219] kernel_write+0x1f8/0x320 [ 278.086662][ T9219] ? __pfx_kernel_write+0x10/0x10 [ 278.086688][ T9219] ? __shmem_file_setup+0x315/0x370 [ 278.086714][ T9219] ? __pfx___shmem_file_setup+0x10/0x10 [ 278.086748][ T9219] ? big_key_preparse+0x200/0x500 [ 278.086771][ T9219] ? big_key_preparse+0x200/0x500 [ 278.086799][ T9219] big_key_preparse+0x3c3/0x500 [ 278.086830][ T9219] ? __pfx_big_key_preparse+0x10/0x10 [ 278.086854][ T9219] ? __pfx_smack_key_permission+0x10/0x10 [ 278.086884][ T9219] __key_create_or_update+0x354/0xa70 [ 278.086917][ T9219] ? __pfx___key_create_or_update+0x10/0x10 [ 278.086944][ T9219] ? lookup_user_key+0xb68/0x1150 [ 278.086979][ T9219] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 278.087011][ T9219] key_create_or_update+0x42/0x60 [ 278.087040][ T9219] __se_sys_add_key+0x349/0x420 [ 278.087072][ T9219] ? __pfx___se_sys_add_key+0x10/0x10 [ 278.087110][ T9219] ? __x64_sys_add_key+0x20/0xc0 [ 278.087141][ T9219] do_syscall_64+0x166/0x520 [ 278.087168][ T9219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.087189][ T9219] ? clear_bhb_loop+0x70/0xc0 [ 278.087215][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.087235][ T9219] RIP: 0033:0x7f78f4fae1d9 [ 278.087256][ T9219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.087273][ T9219] RSP: 002b:00007f78f3206028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 278.087296][ T9219] RAX: ffffffffffffffda RBX: 00007f78f5235fa0 RCX: 00007f78f4fae1d9 [ 278.087312][ T9219] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000 [ 278.087327][ T9219] RBP: 00007f78f5045888 R08: fffffffffffffffe R09: 0000000000000000 [ 278.087342][ T9219] R10: 000000000000fe3a R11: 0000000000000246 R12: 0000000000000000 [ 278.087355][ T9219] R13: 00007f78f5236038 R14: 00007f78f5235fa0 R15: 00007ffee392c2b8 [ 278.087391][ T9219] [ 278.321425][ T9227] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1211'. [ 278.719574][ T9209] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 280.304722][ T9273] FAULT_INJECTION: forcing a failure. [ 280.304722][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 280.304762][ T9273] CPU: 0 UID: 0 PID: 9273 Comm: syz.4.1231 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 280.304791][ T9273] Tainted: [L]=SOFTLOCKUP [ 280.304799][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 280.304812][ T9273] Call Trace: [ 280.304820][ T9273] [ 280.304829][ T9273] dump_stack_lvl+0xe8/0x150 [ 280.304866][ T9273] should_fail_ex+0x46b/0x600 [ 280.304903][ T9273] should_failslab+0xa8/0x100 [ 280.304928][ T9273] __kmalloc_noprof+0xfb/0x790 [ 280.304958][ T9273] ? security_sk_alloc+0x52/0x360 [ 280.304983][ T9273] ? security_sk_alloc+0x52/0x360 [ 280.305016][ T9273] security_sk_alloc+0x52/0x360 [ 280.305046][ T9273] sk_prot_alloc+0x101/0x210 [ 280.305070][ T9273] ? sk_alloc+0x27/0x390 [ 280.305097][ T9273] sk_alloc+0x3a/0x390 [ 280.305126][ T9273] pppoe_create+0x32/0x2e0 [ 280.305151][ T9273] pppox_create+0x131/0x1b0 [ 280.305177][ T9273] __sock_create+0x4b3/0x9d0 [ 280.305208][ T9273] __sys_socket+0xd6/0x1b0 [ 280.305233][ T9273] __x64_sys_socket+0x7a/0x90 [ 280.305257][ T9273] do_syscall_64+0x166/0x520 [ 280.305284][ T9273] ? trace_irq_disable+0x3b/0x140 [ 280.305312][ T9273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.305334][ T9273] ? clear_bhb_loop+0x70/0xc0 [ 280.305359][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.305380][ T9273] RIP: 0033:0x7fdcdd15e1d9 [ 280.305399][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.305416][ T9273] RSP: 002b:00007fdcdb3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 280.305440][ T9273] RAX: ffffffffffffffda RBX: 00007fdcdd3e5fa0 RCX: 00007fdcdd15e1d9 [ 280.305456][ T9273] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 280.305475][ T9273] RBP: 00007fdcdd1f5888 R08: 0000000000000000 R09: 0000000000000000 [ 280.305488][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.305501][ T9273] R13: 00007fdcdd3e6038 R14: 00007fdcdd3e5fa0 R15: 00007ffe98c2ed78 [ 280.305536][ T9273] [ 282.560780][ T9285] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1232'. [ 283.825050][ T9305] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1241'. [ 285.815619][ T9328] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1247'. [ 286.405783][ T9332] ubi0: attaching mtd0 [ 287.250267][ T9332] ubi0: scanning is finished [ 287.250353][ T9332] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 287.302062][ T9345] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1254'. [ 288.136487][ T9362] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1261'. [ 288.555122][ T9370] 9p: Bad value for 'rfdno' [ 290.172779][ T9384] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1268'. [ 290.854946][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1271'. [ 290.948346][ T9399] FAULT_INJECTION: forcing a failure. [ 290.948346][ T9399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.948387][ T9399] CPU: 0 UID: 0 PID: 9399 Comm: syz.1.1274 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 290.948418][ T9399] Tainted: [L]=SOFTLOCKUP [ 290.948425][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 290.948438][ T9399] Call Trace: [ 290.948446][ T9399] [ 290.948455][ T9399] dump_stack_lvl+0xe8/0x150 [ 290.948492][ T9399] should_fail_ex+0x46b/0x600 [ 290.948529][ T9399] prepare_alloc_pages+0x223/0x650 [ 290.948567][ T9399] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 290.948612][ T9399] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 290.948646][ T9399] ? __pfx_policy_nodemask+0x10/0x10 [ 290.948669][ T9399] ? filemap_get_entry+0x374/0x3f0 [ 290.948696][ T9399] ? __pfx_filemap_get_entry+0x10/0x10 [ 290.948725][ T9399] alloc_pages_mpol+0xd4/0x280 [ 290.948760][ T9399] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 290.948788][ T9399] shmem_get_folio_gfp+0x6ee/0x1c40 [ 290.948816][ T9399] ? __asan_memcpy+0x40/0x70 [ 290.948869][ T9399] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 290.948899][ T9399] ? folio_mapping+0x16f/0x1f0 [ 290.948932][ T9399] shmem_write_begin+0x166/0x320 [ 290.948968][ T9399] generic_perform_write+0x2ad/0x8b0 [ 290.949009][ T9399] ? __pfx_generic_perform_write+0x10/0x10 [ 290.949036][ T9399] ? generic_write_checks_count+0x426/0x530 [ 290.949064][ T9399] ? file_update_time_flags+0x2db/0x450 [ 290.949099][ T9399] shmem_file_write_iter+0xfb/0x120 [ 290.949124][ T9399] __kernel_write_iter+0x453/0x8f0 [ 290.949157][ T9399] ? __pfx___kernel_write_iter+0x10/0x10 [ 290.949192][ T9399] ? __asan_memset+0x22/0x50 [ 290.949220][ T9399] ? iov_iter_kvec+0xb8/0x180 [ 290.949242][ T9399] kernel_write+0x1f8/0x320 [ 290.949276][ T9399] ? __pfx_kernel_write+0x10/0x10 [ 290.949303][ T9399] ? __shmem_file_setup+0x315/0x370 [ 290.949333][ T9399] ? __pfx___shmem_file_setup+0x10/0x10 [ 290.949360][ T9399] ? big_key_preparse+0x200/0x500 [ 290.949384][ T9399] ? big_key_preparse+0x200/0x500 [ 290.949417][ T9399] big_key_preparse+0x3c3/0x500 [ 290.949449][ T9399] ? __pfx_big_key_preparse+0x10/0x10 [ 290.949475][ T9399] ? __pfx_smack_key_permission+0x10/0x10 [ 290.949506][ T9399] __key_create_or_update+0x354/0xa70 [ 290.949541][ T9399] ? __pfx___key_create_or_update+0x10/0x10 [ 290.949570][ T9399] ? lookup_user_key+0xb68/0x1150 [ 290.949604][ T9399] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 290.949636][ T9399] key_create_or_update+0x42/0x60 [ 290.949664][ T9399] __se_sys_add_key+0x349/0x420 [ 290.949696][ T9399] ? __pfx___se_sys_add_key+0x10/0x10 [ 290.949741][ T9399] ? __x64_sys_add_key+0x20/0xc0 [ 290.949778][ T9399] do_syscall_64+0x166/0x520 [ 290.949806][ T9399] ? trace_irq_disable+0x3b/0x140 [ 290.949833][ T9399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.949855][ T9399] ? clear_bhb_loop+0x70/0xc0 [ 290.949880][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.949901][ T9399] RIP: 0033:0x7f996cd8e1d9 [ 290.949921][ T9399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.949939][ T9399] RSP: 002b:00007f996afe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 290.949961][ T9399] RAX: ffffffffffffffda RBX: 00007f996d015fa0 RCX: 00007f996cd8e1d9 [ 290.949976][ T9399] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000 [ 290.949991][ T9399] RBP: 00007f996ce25888 R08: fffffffffffffffe R09: 0000000000000000 [ 290.950006][ T9399] R10: 000000000000fe3a R11: 0000000000000246 R12: 0000000000000000 [ 290.950018][ T9399] R13: 00007f996d016038 R14: 00007f996d015fa0 R15: 00007ffc319ff918 [ 290.950054][ T9399] [ 292.148421][ T9332] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 292.178719][ T9402] netlink: 'syz.5.1273': attribute type 4 has an invalid length. [ 292.178747][ T9402] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1273'. [ 292.818180][ T9402] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 293.369488][ T9429] 9p: Bad value for 'rfdno' [ 297.184692][ T9450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'. [ 297.207500][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.207976][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.212785][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.552077][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.682654][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.717983][ T9458] FAULT_INJECTION: forcing a failure. [ 297.717983][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 297.718026][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.1.1293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.718056][ T9458] Tainted: [L]=SOFTLOCKUP [ 297.718064][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 297.718092][ T9458] Call Trace: [ 297.718100][ T9458] [ 297.718110][ T9458] dump_stack_lvl+0xe8/0x150 [ 297.718145][ T9458] should_fail_ex+0x46b/0x600 [ 297.718182][ T9458] should_failslab+0xa8/0x100 [ 297.718209][ T9458] ? security_inode_alloc+0x39/0x310 [ 297.718235][ T9458] kmem_cache_alloc_noprof+0x9e/0x690 [ 297.718265][ T9458] ? security_inode_alloc+0x39/0x310 [ 297.718296][ T9458] security_inode_alloc+0x39/0x310 [ 297.718322][ T9458] inode_init_always_gfp+0x983/0xd40 [ 297.718351][ T9458] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 297.718375][ T9458] alloc_inode+0x82/0x1b0 [ 297.718398][ T9458] new_inode+0x1f/0x170 [ 297.718420][ T9458] ? bdev_alloc+0x18/0x380 [ 297.718443][ T9458] bdev_alloc+0x24/0x380 [ 297.718467][ T9458] __alloc_disk_node+0x11f/0x610 [ 297.718501][ T9458] __blk_alloc_disk+0x105/0x1d0 [ 297.718534][ T9458] ? __pfx___blk_alloc_disk+0x10/0x10 [ 297.718594][ T9458] dm_create+0x486/0xf80 [ 297.718627][ T9458] dev_create+0x1f7/0x400 [ 297.718654][ T9458] ? __pfx_dev_create+0x10/0x10 [ 297.718688][ T9458] dm_ctl_ioctl+0x9ec/0xe10 [ 297.718720][ T9458] ? __pfx_dev_create+0x10/0x10 [ 297.718744][ T9458] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 297.718793][ T9458] ? __fget_files+0x2a/0x420 [ 297.718815][ T9458] ? __fget_files+0x3a8/0x420 [ 297.718843][ T9458] ? __fget_files+0x2a/0x420 [ 297.718867][ T9458] ? bpf_lsm_file_ioctl+0x9/0x20 [ 297.718894][ T9458] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 297.718917][ T9458] __se_sys_ioctl+0xff/0x170 [ 297.718949][ T9458] do_syscall_64+0x166/0x520 [ 297.718976][ T9458] ? trace_irq_disable+0x3b/0x140 [ 297.719004][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.719026][ T9458] ? clear_bhb_loop+0x70/0xc0 [ 297.719051][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.719082][ T9458] RIP: 0033:0x7f996cd8e1d9 [ 297.719101][ T9458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.719118][ T9458] RSP: 002b:00007f996afe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.719140][ T9458] RAX: ffffffffffffffda RBX: 00007f996d015fa0 RCX: 00007f996cd8e1d9 [ 297.719156][ T9458] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000009 [ 297.719170][ T9458] RBP: 00007f996ce25888 R08: 0000000000000000 R09: 0000000000000000 [ 297.719184][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.719198][ T9458] R13: 00007f996d016038 R14: 00007f996d015fa0 R15: 00007ffc319ff918 [ 297.719231][ T9458] [ 301.943911][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'. [ 304.344430][ T9491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.115063][ T9561] tipc: Started in network mode [ 305.115095][ T9561] tipc: Node identity 220e2803d6b5, cluster identity 4711 [ 305.115456][ T9561] tipc: Enabled bearer , priority 0 [ 305.302519][ T9567] syzkaller0: entered promiscuous mode [ 305.302547][ T9567] syzkaller0: entered allmulticast mode [ 305.483861][ T9555] tipc: Resetting bearer [ 306.195495][ T9585] FAULT_INJECTION: forcing a failure. [ 306.195495][ T9585] name failslab, interval 1, probability 0, space 0, times 0 [ 306.195535][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.5.1332 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.195562][ T9585] Tainted: [L]=SOFTLOCKUP [ 306.195570][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 306.195582][ T9585] Call Trace: [ 306.195591][ T9585] [ 306.195600][ T9585] dump_stack_lvl+0xe8/0x150 [ 306.195636][ T9585] should_fail_ex+0x46b/0x600 [ 306.195672][ T9585] should_failslab+0xa8/0x100 [ 306.195697][ T9585] kmem_cache_alloc_node_noprof+0xac/0x660 [ 306.195727][ T9585] ? dup_task_struct+0x52/0xa00 [ 306.195753][ T9585] ? dup_task_struct+0x52/0xa00 [ 306.195781][ T9585] dup_task_struct+0x52/0xa00 [ 306.195804][ T9585] ? rt_spin_unlock+0x165/0x200 [ 306.195824][ T9585] copy_process+0x7e0/0x4410 [ 306.195873][ T9585] ? __pfx_copy_process+0x10/0x10 [ 306.195906][ T9585] vhost_task_create+0x1f9/0x380 [ 306.195925][ T9585] ? __pfx_vhost_run_work_list+0x10/0x10 [ 306.195947][ T9585] ? __pfx_vhost_worker_killed+0x10/0x10 [ 306.195974][ T9585] ? __pfx_vhost_task_create+0x10/0x10 [ 306.195998][ T9585] ? __pfx_vhost_task_fn+0x10/0x10 [ 306.196025][ T9585] ? snprintf+0xe8/0x140 [ 306.196045][ T9585] vhost_task_worker_create+0x94/0x290 [ 306.196068][ T9585] ? __pfx_snprintf+0x10/0x10 [ 306.196085][ T9585] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 306.196116][ T9585] vhost_worker_create+0x245/0x310 [ 306.196137][ T9585] ? __pfx_vhost_worker_create+0x10/0x10 [ 306.196158][ T9585] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 306.196186][ T9585] vhost_dev_set_owner+0x716/0xb00 [ 306.196217][ T9585] vhost_dev_ioctl+0xcf/0x11f0 [ 306.196248][ T9585] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 306.196267][ T9585] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 306.196292][ T9585] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 306.196313][ T9585] ? mutex_lock_nested+0x152/0x1d0 [ 306.196329][ T9585] ? vhost_vsock_dev_ioctl+0x223/0xee0 [ 306.196355][ T9585] vhost_vsock_dev_ioctl+0x231/0xee0 [ 306.196381][ T9585] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 306.196404][ T9585] ? __fget_files+0x2a/0x420 [ 306.196423][ T9585] ? __fget_files+0x3a8/0x420 [ 306.196440][ T9585] ? __fget_files+0x2a/0x420 [ 306.196468][ T9585] ? bpf_lsm_file_ioctl+0x9/0x20 [ 306.196489][ T9585] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 306.196512][ T9585] __se_sys_ioctl+0xff/0x170 [ 306.196538][ T9585] do_syscall_64+0x166/0x520 [ 306.196559][ T9585] ? trace_irq_disable+0x3b/0x140 [ 306.196580][ T9585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.196597][ T9585] ? clear_bhb_loop+0x70/0xc0 [ 306.196616][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.196632][ T9585] RIP: 0033:0x7f4b9c75e1d9 [ 306.196648][ T9585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.196662][ T9585] RSP: 002b:00007f4b9a9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.196681][ T9585] RAX: ffffffffffffffda RBX: 00007f4b9c9e5fa0 RCX: 00007f4b9c75e1d9 [ 306.196693][ T9585] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 306.196703][ T9585] RBP: 00007f4b9c7f5888 R08: 0000000000000000 R09: 0000000000000000 [ 306.196714][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.196723][ T9585] R13: 00007f4b9c9e6038 R14: 00007f4b9c9e5fa0 R15: 00007ffc4f2af358 [ 306.196750][ T9585] [ 306.785774][ T9555] tipc: Disabling bearer [ 307.167796][ T5738] tipc: Node number set to 4105906179 [ 308.363108][ T9652] FAULT_INJECTION: forcing a failure. [ 308.363108][ T9652] name failslab, interval 1, probability 0, space 0, times 0 [ 308.363146][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.3.1356 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.363173][ T9652] Tainted: [L]=SOFTLOCKUP [ 308.363178][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.363185][ T9652] Call Trace: [ 308.363189][ T9652] [ 308.363195][ T9652] dump_stack_lvl+0xe8/0x150 [ 308.363220][ T9652] should_fail_ex+0x46b/0x600 [ 308.363241][ T9652] should_failslab+0xa8/0x100 [ 308.363255][ T9652] __kmalloc_cache_node_noprof+0xac/0x670 [ 308.363272][ T9652] ? blkg_alloc+0xcc/0x8f0 [ 308.363283][ T9652] ? blkg_alloc+0xcc/0x8f0 [ 308.363298][ T9652] blkg_alloc+0xcc/0x8f0 [ 308.363312][ T9652] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 308.363326][ T9652] blkcg_init_disk+0x1cf/0x2e0 [ 308.363340][ T9652] ? __pfx_blkcg_init_disk+0x10/0x10 [ 308.363354][ T9652] ? rt_spin_unlock+0x159/0x200 [ 308.363368][ T9652] ? rt_spin_unlock+0x165/0x200 [ 308.363380][ T9652] __alloc_disk_node+0x325/0x610 [ 308.363399][ T9652] __blk_alloc_disk+0x105/0x1d0 [ 308.363417][ T9652] ? __pfx___blk_alloc_disk+0x10/0x10 [ 308.363448][ T9652] dm_create+0x486/0xf80 [ 308.363465][ T9652] dev_create+0x1f7/0x400 [ 308.363480][ T9652] ? __pfx_dev_create+0x10/0x10 [ 308.363498][ T9652] dm_ctl_ioctl+0x9ec/0xe10 [ 308.363528][ T9652] ? __pfx_dev_create+0x10/0x10 [ 308.363551][ T9652] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 308.363601][ T9652] ? __fget_files+0x2a/0x420 [ 308.363624][ T9652] ? __fget_files+0x3a8/0x420 [ 308.363646][ T9652] ? __fget_files+0x2a/0x420 [ 308.363664][ T9652] ? bpf_lsm_file_ioctl+0x9/0x20 [ 308.363679][ T9652] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 308.363692][ T9652] __se_sys_ioctl+0xff/0x170 [ 308.363717][ T9652] do_syscall_64+0x166/0x520 [ 308.363732][ T9652] ? trace_irq_disable+0x3b/0x140 [ 308.363757][ T9652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.363779][ T9652] ? clear_bhb_loop+0x70/0xc0 [ 308.363802][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.363824][ T9652] RIP: 0033:0x7f78f4fae1d9 [ 308.363844][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.363861][ T9652] RSP: 002b:00007f78f31e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.363882][ T9652] RAX: ffffffffffffffda RBX: 00007f78f5236090 RCX: 00007f78f4fae1d9 [ 308.363890][ T9652] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 000000000000000a [ 308.363898][ T9652] RBP: 00007f78f5045888 R08: 0000000000000000 R09: 0000000000000000 [ 308.363905][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.363912][ T9652] R13: 00007f78f5236128 R14: 00007f78f5236090 R15: 00007ffee392c2b8 [ 308.363930][ T9652] [ 308.861373][ T9661] netlink: 'syz.5.1360': attribute type 1 has an invalid length. [ 308.893668][ T9661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.910377][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1360'. [ 308.938604][ T9661] bridge1: entered promiscuous mode [ 308.956191][ T9661] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 310.626456][ T9634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.570154][ T9703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1375'. [ 312.830178][ T9730] overlay: filesystem on ./file0 is read-only [ 313.735830][ T9759] gretap0: entered promiscuous mode [ 315.750591][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 315.807782][ T9810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1422'. [ 316.530698][ T9836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1435'. [ 316.569756][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 317.156916][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.009579][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 318.071511][ T9888] FAULT_INJECTION: forcing a failure. [ 318.071511][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 318.071549][ T9888] CPU: 1 UID: 0 PID: 9888 Comm: syz.4.1457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.071583][ T9888] Tainted: [L]=SOFTLOCKUP [ 318.071591][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.071604][ T9888] Call Trace: [ 318.071612][ T9888] [ 318.071621][ T9888] dump_stack_lvl+0xe8/0x150 [ 318.071656][ T9888] should_fail_ex+0x46b/0x600 [ 318.071694][ T9888] should_failslab+0xa8/0x100 [ 318.071719][ T9888] kmem_cache_alloc_node_noprof+0xac/0x660 [ 318.071747][ T9888] ? lock_acquire+0x115/0x350 [ 318.071774][ T9888] ? __alloc_skb+0x1db/0x7a0 [ 318.071795][ T9888] ? __alloc_skb+0x1db/0x7a0 [ 318.071824][ T9888] __alloc_skb+0x1db/0x7a0 [ 318.071852][ T9888] tcp_stream_alloc_skb+0x3f/0x5c0 [ 318.071877][ T9888] ? __asan_memset+0x22/0x50 [ 318.071907][ T9888] tcp_connect+0x1646/0x54e0 [ 318.071974][ T9888] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 318.071999][ T9888] ? __pfx_tcp_connect+0x10/0x10 [ 318.072032][ T9888] ? rt_spin_unlock+0x159/0x200 [ 318.072064][ T9888] ? __asan_memset+0x22/0x50 [ 318.072096][ T9888] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 318.072120][ T9888] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 318.072153][ T9888] ? sk_setup_caps+0x94f/0xbc0 [ 318.072178][ T9888] ? sk_setup_caps+0x29/0xbc0 [ 318.072205][ T9888] tcp_v4_connect+0x1051/0x1950 [ 318.072240][ T9888] ? __pfx_tcp_v4_connect+0x10/0x10 [ 318.072263][ T9888] ? tcp_v6_connect+0x6bc/0x1cf0 [ 318.072292][ T9888] tcp_v6_connect+0xcb1/0x1cf0 [ 318.072330][ T9888] ? __lock_acquire+0x747/0x2de0 [ 318.072357][ T9888] ? __pfx_tcp_v6_connect+0x10/0x10 [ 318.072384][ T9888] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 318.072413][ T9888] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.072442][ T9888] __inet_stream_connect+0x258/0xe00 [ 318.072485][ T9888] ? __pfx___inet_stream_connect+0x10/0x10 [ 318.072511][ T9888] ? __local_bh_enable+0x1e3/0x2f0 [ 318.072544][ T9888] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 318.072571][ T9888] ? lockdep_hardirqs_on+0x7b/0x110 [ 318.072601][ T9888] inet_stream_connect+0x66/0xa0 [ 318.072634][ T9888] __sys_connect+0x32d/0x470 [ 318.072660][ T9888] ? __pfx___sys_connect+0x10/0x10 [ 318.072695][ T9888] ? rcu_is_watching+0x16/0xb0 [ 318.072725][ T9888] __x64_sys_connect+0x7a/0x90 [ 318.072750][ T9888] do_syscall_64+0x166/0x520 [ 318.072775][ T9888] ? trace_irq_disable+0x3b/0x140 [ 318.072802][ T9888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.072823][ T9888] ? clear_bhb_loop+0x70/0xc0 [ 318.072848][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.072869][ T9888] RIP: 0033:0x7fdcdd15e1d9 [ 318.072889][ T9888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.072906][ T9888] RSP: 002b:00007fdcdb3b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 318.072928][ T9888] RAX: ffffffffffffffda RBX: 00007fdcdd3e5fa0 RCX: 00007fdcdd15e1d9 [ 318.072951][ T9888] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000005 [ 318.072965][ T9888] RBP: 00007fdcdd1f5888 R08: 0000000000000000 R09: 0000000000000000 [ 318.072978][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.072990][ T9888] R13: 00007fdcdd3e6038 R14: 00007fdcdd3e5fa0 R15: 00007ffe98c2ed78 [ 318.073024][ T9888] [ 325.329198][T10001] FAULT_INJECTION: forcing a failure. [ 325.329198][T10001] name failslab, interval 1, probability 0, space 0, times 0 [ 325.351307][T10001] CPU: 1 UID: 0 PID: 10001 Comm: syz.3.1494 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 325.351352][T10001] Tainted: [L]=SOFTLOCKUP [ 325.351361][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 325.351375][T10001] Call Trace: [ 325.351383][T10001] [ 325.351393][T10001] dump_stack_lvl+0xe8/0x150 [ 325.351431][T10001] should_fail_ex+0x46b/0x600 [ 325.351468][T10001] should_failslab+0xa8/0x100 [ 325.351494][T10001] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 325.351528][T10001] ? __kthread_create_on_node+0x1b3/0x3d0 [ 325.351558][T10001] ? __kthread_create_on_node+0x1b3/0x3d0 [ 325.351595][T10001] kvasprintf+0xeb/0x1a0 [ 325.351621][T10001] ? __pfx_kvasprintf+0x10/0x10 [ 325.351645][T10001] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 325.351676][T10001] ? __kthread_create_on_node+0x115/0x3d0 [ 325.351704][T10001] ? __kthread_create_on_node+0x115/0x3d0 [ 325.351740][T10001] __kthread_create_on_node+0x1b3/0x3d0 [ 325.351775][T10001] ? __pfx___kthread_create_on_node+0x10/0x10 [ 325.351815][T10001] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 325.351843][T10001] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 325.351870][T10001] kthread_create_on_node+0xeb/0x140 [ 325.351906][T10001] ? __pfx_kthread_create_on_node+0x10/0x10 [ 325.351937][T10001] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 325.351966][T10001] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 325.351994][T10001] ? down_interruptible+0x6d/0xe0 [ 325.352025][T10001] __dvb_frontend_open+0x841/0xc40 [ 325.352061][T10001] ? __pfx_dvb_frontend_open+0x10/0x10 [ 325.352089][T10001] dvb_device_open+0x258/0x350 [ 325.352124][T10001] chrdev_open+0x4dc/0x600 [ 325.352148][T10001] ? __pfx_chrdev_open+0x10/0x10 [ 325.352169][T10001] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 325.352202][T10001] ? __pfx_chrdev_open+0x10/0x10 [ 325.352221][T10001] do_dentry_open+0x849/0x1420 [ 325.352252][T10001] vfs_open+0x3b/0x350 [ 325.352270][T10001] ? path_openat+0x142d/0x1d60 [ 325.352298][T10001] path_openat+0x1448/0x1d60 [ 325.352356][T10001] do_file_open+0x23e/0x4a0 [ 325.352390][T10001] ? __pfx_do_file_open+0x10/0x10 [ 325.352446][T10001] ? alloc_fd+0x654/0x6d0 [ 325.352481][T10001] do_sys_openat2+0x115/0x200 [ 325.352507][T10001] ? __pfx_do_sys_openat2+0x10/0x10 [ 325.352532][T10001] ? exc_page_fault+0x6a/0xc0 [ 325.352563][T10001] ? do_user_addr_fault+0xc4c/0x1340 [ 325.352589][T10001] __x64_sys_openat+0x138/0x170 [ 325.352618][T10001] do_syscall_64+0x166/0x520 [ 325.352643][T10001] ? trace_irq_disable+0x3b/0x140 [ 325.352670][T10001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.352692][T10001] ? clear_bhb_loop+0x70/0xc0 [ 325.352718][T10001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.352738][T10001] RIP: 0033:0x7f78f4f6ea0e [ 325.352758][T10001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.352776][T10001] RSP: 002b:00007f78f3205b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 325.352799][T10001] RAX: ffffffffffffffda RBX: 00007f78f32066c0 RCX: 00007f78f4f6ea0e [ 325.352815][T10001] RDX: 0000000000000002 RSI: 00007f78f3205c00 RDI: ffffffffffffff9c [ 325.352830][T10001] RBP: 00007f78f3205c00 R08: 0000000000000000 R09: 0000000000000000 [ 325.352850][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 325.352864][T10001] R13: 00007f78f5236038 R14: 00007f78f5235fa0 R15: 00007ffee392c2b8 [ 325.352899][T10001] [ 325.362973][T10001] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 330.489691][T10078] bond0: entered promiscuous mode [ 330.489715][T10078] bond_slave_0: entered promiscuous mode [ 330.490050][T10078] bond_slave_1: entered promiscuous mode [ 330.496917][T10078] batadv0: entered promiscuous mode [ 330.573039][T10078] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 330.928345][T10099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1524'. ¸[ 336.899789][ T74] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 337.468076][ T3348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.468115][ T3348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.593536][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.169450][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.180350][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.199117][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.199909][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.765630][T10193] FAULT_INJECTION: forcing a failure. [ 339.765630][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 339.765674][T10193] CPU: 0 UID: 0 PID: 10193 Comm: syz.5.1558 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.765704][T10193] Tainted: [L]=SOFTLOCKUP [ 339.765721][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.765734][T10193] Call Trace: [ 339.765742][T10193] [ 339.765751][T10193] dump_stack_lvl+0xe8/0x150 [ 339.765788][T10193] should_fail_ex+0x46b/0x600 [ 339.765825][T10193] should_failslab+0xa8/0x100 [ 339.765850][T10193] __kmalloc_cache_node_noprof+0xac/0x670 [ 339.765882][T10193] ? blkg_alloc+0xcc/0x8f0 [ 339.765900][T10193] ? blkg_alloc+0xcc/0x8f0 [ 339.765925][T10193] blkg_alloc+0xcc/0x8f0 [ 339.765948][T10193] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 339.765976][T10193] blkcg_init_disk+0x1cf/0x2e0 [ 339.766003][T10193] ? __pfx_blkcg_init_disk+0x10/0x10 [ 339.766029][T10193] ? rt_spin_unlock+0x159/0x200 [ 339.766056][T10193] ? rt_spin_unlock+0x165/0x200 [ 339.766081][T10193] __alloc_disk_node+0x325/0x610 [ 339.766114][T10193] __blk_alloc_disk+0x105/0x1d0 [ 339.766146][T10193] ? __pfx___blk_alloc_disk+0x10/0x10 [ 339.766210][T10193] dm_create+0x486/0xf80 [ 339.766243][T10193] dev_create+0x1f7/0x400 [ 339.766269][T10193] ? __pfx_dev_create+0x10/0x10 [ 339.766302][T10193] dm_ctl_ioctl+0x9ec/0xe10 [ 339.766335][T10193] ? __pfx_dev_create+0x10/0x10 [ 339.766358][T10193] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 339.766409][T10193] ? __fget_files+0x2a/0x420 [ 339.766432][T10193] ? __fget_files+0x3a8/0x420 [ 339.766455][T10193] ? __fget_files+0x2a/0x420 [ 339.766482][T10193] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.766507][T10193] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 339.766530][T10193] __se_sys_ioctl+0xff/0x170 [ 339.766562][T10193] do_syscall_64+0x166/0x520 [ 339.766588][T10193] ? trace_irq_disable+0x3b/0x140 [ 339.766614][T10193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.766635][T10193] ? clear_bhb_loop+0x70/0xc0 [ 339.766659][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.766679][T10193] RIP: 0033:0x7f4b9c75e1d9 [ 339.766699][T10193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.766725][T10193] RSP: 002b:00007f4b9a9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.766749][T10193] RAX: ffffffffffffffda RBX: 00007f4b9c9e5fa0 RCX: 00007f4b9c75e1d9 [ 339.766764][T10193] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000009 [ 339.766778][T10193] RBP: 00007f4b9c7f5888 R08: 0000000000000000 R09: 0000000000000000 [ 339.766792][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.766806][T10193] R13: 00007f4b9c9e6038 R14: 00007f4b9c9e5fa0 R15: 00007ffc4f2af358 [ 339.766839][T10193] [ 340.010308][ T3348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.010343][ T3348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.066960][T10201] ======================================================= [ 340.066960][T10201] WARNING: The mand mount option has been deprecated and [ 340.066960][T10201] and is ignored by this kernel. Remove the mand [ 340.066960][T10201] option from the mount to silence this warning. [ 340.066960][T10201] ======================================================= [ 341.350150][ T5609] Bluetooth: hci2: command tx timeout [ 341.801142][ T3348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.801178][ T3348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.063104][ T5599] bond2: (slave syz_tun): Removing an active aggregator [ 342.063911][ T5599] bond2: (slave syz_tun): Releasing backup interface [ 342.174366][T10233] FAULT_INJECTION: forcing a failure. [ 342.174366][T10233] name failslab, interval 1, probability 0, space 0, times 0 [ 342.174401][T10233] CPU: 1 UID: 0 PID: 10233 Comm: syz.2.1572 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.174427][T10233] Tainted: [L]=SOFTLOCKUP [ 342.174434][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 342.174445][T10233] Call Trace: [ 342.174453][T10233] [ 342.174462][T10233] dump_stack_lvl+0xe8/0x150 [ 342.174500][T10233] should_fail_ex+0x46b/0x600 [ 342.174534][T10233] should_failslab+0xa8/0x100 [ 342.174556][T10233] ? security_inode_alloc+0x39/0x310 [ 342.174581][T10233] kmem_cache_alloc_noprof+0x9e/0x690 [ 342.174620][T10233] ? security_inode_alloc+0x39/0x310 [ 342.174649][T10233] security_inode_alloc+0x39/0x310 [ 342.174674][T10233] inode_init_always_gfp+0x983/0xd40 [ 342.174702][T10233] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 342.174726][T10233] alloc_inode+0x82/0x1b0 [ 342.174750][T10233] new_inode+0x1f/0x170 [ 342.174772][T10233] ? bdev_alloc+0x18/0x380 [ 342.174796][T10233] bdev_alloc+0x24/0x380 [ 342.174820][T10233] __alloc_disk_node+0x11f/0x610 [ 342.174856][T10233] __blk_alloc_disk+0x105/0x1d0 [ 342.174885][T10233] ? __pfx___blk_alloc_disk+0x10/0x10 [ 342.174938][T10233] dm_create+0x486/0xf80 [ 342.174971][T10233] dev_create+0x1f7/0x400 [ 342.174996][T10233] ? __pfx_dev_create+0x10/0x10 [ 342.175029][T10233] dm_ctl_ioctl+0x9ec/0xe10 [ 342.175060][T10233] ? __pfx_dev_create+0x10/0x10 [ 342.175083][T10233] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 342.175133][T10233] ? __fget_files+0x2a/0x420 [ 342.175157][T10233] ? __fget_files+0x3a8/0x420 [ 342.175176][T10233] ? __fget_files+0x2a/0x420 [ 342.175199][T10233] ? bpf_lsm_file_ioctl+0x9/0x20 [ 342.175233][T10233] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 342.175256][T10233] __se_sys_ioctl+0xff/0x170 [ 342.175289][T10233] do_syscall_64+0x166/0x520 [ 342.175317][T10233] ? trace_irq_disable+0x3b/0x140 [ 342.175344][T10233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.175365][T10233] ? clear_bhb_loop+0x70/0xc0 [ 342.175389][T10233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.175410][T10233] RIP: 0033:0x7efe5085e1d9 [ 342.175429][T10233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.175448][T10233] RSP: 002b:00007efe4eab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.175474][T10233] RAX: ffffffffffffffda RBX: 00007efe50ae5fa0 RCX: 00007efe5085e1d9 [ 342.175489][T10233] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000009 [ 342.175503][T10233] RBP: 00007efe508f5888 R08: 0000000000000000 R09: 0000000000000000 [ 342.175515][T10233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.175528][T10233] R13: 00007efe50ae6038 R14: 00007efe50ae5fa0 R15: 00007ffc70ad5cf8 [ 342.175560][T10233] [ 342.524664][T10231] bridge0: port 3(veth1_to_bridge) entered blocking state [ 342.525375][T10231] bridge0: port 3(veth1_to_bridge) entered disabled state [ 342.525556][T10231] veth1_to_bridge: entered allmulticast mode [ 342.531461][T10231] veth1_to_bridge: entered promiscuous mode [ 342.531655][T10231] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 342.583456][T10231] bridge0: port 3(veth1_to_bridge) entered blocking state [ 342.583792][T10231] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 342.885572][ T3348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.885611][ T3348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.394579][ T5605] Bluetooth: hci2: command tx timeout [ 344.508563][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.548410][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.549756][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.552132][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.564657][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.522521][ T5605] Bluetooth: hci2: command tx timeout [ 346.765269][ T5605] Bluetooth: hci1: command tx timeout [ 347.897089][T10177] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.897305][T10177] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.897477][T10177] bridge_slave_0: entered allmulticast mode [ 347.903631][T10177] bridge_slave_0: entered promiscuous mode [ 347.913227][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1592'. [ 347.917854][T10177] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.918955][T10177] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.919119][T10177] bridge_slave_1: entered allmulticast mode [ 347.928332][T10177] bridge_slave_1: entered promiscuous mode [ 347.936145][ T5605] Bluetooth: hci2: command tx timeout [ 348.357348][ T3348] bridge_slave_1: left allmulticast mode [ 348.357384][ T3348] bridge_slave_1: left promiscuous mode [ 348.357622][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.557666][ T3348] bridge_slave_0: left allmulticast mode [ 348.557702][ T3348] bridge_slave_0: left promiscuous mode [ 348.557933][ T3348] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.833637][ T5605] Bluetooth: hci1: command tx timeout [ 349.772869][ T3348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.853280][ T3348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.876923][ T3348] bond0 (unregistering): Released all slaves [ 349.889507][ T3348] bond1 (unregistering): Released all slaves [ 350.664289][T10337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1601'. [ 351.063905][ T5605] Bluetooth: hci1: command tx timeout [ 353.152383][ T5605] Bluetooth: hci1: command tx timeout [ 361.710564][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.776309][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.779811][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.780740][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.781366][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.656891][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.662083][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.708247][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.709252][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.754636][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.802620][ T5609] Bluetooth: hci5: command tx timeout [ 365.396949][T10177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.887074][ T5605] Bluetooth: hci5: command tx timeout [ 365.922607][T10177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.959162][ T5605] Bluetooth: hci6: command tx timeout [ 366.951697][T10177] team0: Port device team_slave_0 added [ 367.094567][T10177] team0: Port device team_slave_1 added [ 367.375914][T10177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.375932][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.375966][T10177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.643066][ T3348] hsr_slave_0: left promiscuous mode [ 367.683812][ T3348] hsr_slave_1: left promiscuous mode [ 367.684570][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.684588][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.735773][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.735803][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.853601][ T3348] veth1_macvtap: left promiscuous mode [ 367.853668][ T3348] veth0_macvtap: left promiscuous mode [ 367.859989][ T3348] veth1_vlan: left promiscuous mode [ 367.860180][ T3348] veth0_vlan: left promiscuous mode [ 367.952464][ T5605] Bluetooth: hci5: command tx timeout [ 368.032352][ T5605] Bluetooth: hci6: command tx timeout [ 368.586764][ T3348] team0 (unregistering): Port device team_slave_1 removed [ 368.642879][ T3348] team0 (unregistering): Port device team_slave_0 removed [ 368.837426][T10177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.837441][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.837456][T10177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.842137][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 369.059506][T10177] hsr_slave_0: entered promiscuous mode [ 369.060261][T10177] hsr_slave_1: entered promiscuous mode [ 369.060772][T10177] debugfs: 'hsr0' already exists in 'hsr' [ 369.060793][T10177] Cannot create hsr debugfs directory [ 370.046054][ T5605] Bluetooth: hci5: command tx timeout [ 370.112688][ T5605] Bluetooth: hci6: command tx timeout [ 370.475693][ T3348] IPVS: stop unused estimator thread 0... [ 370.605078][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 370.719415][T10258] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.719612][T10258] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.719779][T10258] bridge_slave_0: entered allmulticast mode [ 370.742912][T10258] bridge_slave_0: entered promiscuous mode [ 370.795908][T10258] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.795999][T10258] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.796098][T10258] bridge_slave_1: entered allmulticast mode [ 370.823125][T10258] bridge_slave_1: entered promiscuous mode [ 371.120262][ T3348] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.120287][ T3348] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.409344][T10258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.471191][T10258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.515073][T10395] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.515260][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.515411][T10395] bridge_slave_0: entered allmulticast mode [ 371.517983][T10395] bridge_slave_0: entered promiscuous mode [ 371.697699][ T3348] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.697723][ T3348] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.777641][T10395] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.777787][T10395] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.777940][T10395] bridge_slave_1: entered allmulticast mode [ 371.780755][T10395] bridge_slave_1: entered promiscuous mode [ 371.809989][T10389] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.810103][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.810261][T10389] bridge_slave_0: entered allmulticast mode [ 371.835103][T10389] bridge_slave_0: entered promiscuous mode [ 371.973081][T10389] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.973208][T10389] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.973408][T10389] bridge_slave_1: entered allmulticast mode [ 371.976235][T10389] bridge_slave_1: entered promiscuous mode [ 372.044422][T10258] team0: Port device team_slave_0 added [ 372.089078][T10258] team0: Port device team_slave_1 added [ 372.929541][ T5605] Bluetooth: hci6: command tx timeout [ 373.079305][ T3348] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.079339][ T3348] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.122835][T10177] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 373.165104][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.178885][T10395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.463332][T10177] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.521142][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.778892][T10395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.805464][T10389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.678447][T10177] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 374.721462][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.765704][T10389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.784227][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 374.790978][T10258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.790995][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.791019][T10258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.079684][ T3348] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.079722][ T3348] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.134476][T10177] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 375.176687][T10177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.244324][T10258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.244342][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.244358][T10258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.251801][T10395] team0: Port device team_slave_0 added [ 375.474831][T10395] team0: Port device team_slave_1 added [ 375.483138][T10389] team0: Port device team_slave_0 added [ 375.511278][T10389] team0: Port device team_slave_1 added [ 376.636583][T10395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.636601][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.636629][T10395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.734193][T10395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.734212][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.734239][T10395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.739699][T10389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.739728][T10389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.739743][T10389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.755609][T10258] hsr_slave_0: entered promiscuous mode [ 376.757287][T10258] hsr_slave_1: entered promiscuous mode [ 376.758239][T10258] debugfs: 'hsr0' already exists in 'hsr' [ 376.758264][T10258] Cannot create hsr debugfs directory [ 376.860211][T10389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.860224][T10389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.860239][T10389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.353048][T10395] hsr_slave_0: entered promiscuous mode [ 377.354364][T10395] hsr_slave_1: entered promiscuous mode [ 377.355532][T10395] debugfs: 'hsr0' already exists in 'hsr' [ 377.355558][T10395] Cannot create hsr debugfs directory [ 377.618810][T10389] hsr_slave_0: entered promiscuous mode [ 377.624448][T10389] hsr_slave_1: entered promiscuous mode [ 377.628480][T10389] debugfs: 'hsr0' already exists in 'hsr' [ 377.628505][T10389] Cannot create hsr debugfs directory [ 378.294786][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 378.600480][T10594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.600507][T10594] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 378.605683][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.689808][ T3348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.689833][ T3348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.790383][T10594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.790410][T10594] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 378.981432][T10594] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 378.981481][T10594] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 379.100631][ T3348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.100655][ T3348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.197478][T10594] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 379.197504][T10594] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 379.685570][ T3348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.687138][ T3348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.836173][ T3348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.836197][ T3348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.129148][T10258] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 381.249967][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.273094][T10258] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 381.370825][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.399376][T10258] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 381.451551][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.708391][T10258] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 381.746299][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.787871][T10177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.030745][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 382.396214][T10177] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.396556][T10395] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 382.426898][T10395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.461615][T10395] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 382.519807][T10395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.558301][T10395] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 382.597619][T10395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.690669][T10395] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 382.705142][T10395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.708008][ T3349] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.708124][ T3349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.829761][ T3348] netdevsim netdevsim120 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.829785][ T3348] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.934788][ T3349] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.934930][ T3349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.091025][T10389] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.120814][T10389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.150897][T10389] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 383.191085][T10389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.265233][T10389] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 383.291127][T10389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.310254][T10389] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 383.362598][T10389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.724282][ T3348] veth1_to_bridge: left allmulticast mode [ 383.724317][ T3348] veth1_to_bridge: left promiscuous mode [ 383.724478][ T3348] bridge0: port 3(veth1_to_bridge) entered disabled state [ 383.856707][ T3348] bridge_slave_1: left allmulticast mode [ 383.856745][ T3348] bridge_slave_1: left promiscuous mode [ 383.857064][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.014152][ T3348] bridge_slave_0: left allmulticast mode [ 384.014274][ T3348] bridge_slave_0: left promiscuous mode [ 384.014508][ T3348] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.317065][ T3348] bridge_slave_1: left allmulticast mode [ 384.317103][ T3348] bridge_slave_1: left promiscuous mode [ 384.317345][ T3348] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.424548][ T3348] bridge_slave_0: left allmulticast mode [ 384.424573][ T3348] bridge_slave_0: left promiscuous mode [ 384.424751][ T3348] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.512781][ T3348] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 385.701750][ T3348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.773004][ T3348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.816699][ T3348] bond0 (unregistering): Released all slaves [ 385.832598][ T3348] bond1 (unregistering): Released all slaves [ 386.692803][ T3348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.796641][ T3348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.836633][ T3348] bond0 (unregistering): Released all slaves [ 386.849186][ T3348] bond1 (unregistering): Released all slaves [ 386.866861][ T3348] bond2 (unregistering): Released all slaves [ 387.027664][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10 [ 387.298547][ T3348] tipc: Left network mode [ 387.452601][T10258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.693216][T10258] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.830949][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.831186][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.982617][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.982753][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.351037][T10395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.089333][T10395] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.183846][ T1539] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.183980][ T1539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.208165][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11 [ 389.377450][T10389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.416388][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.416611][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.161570][T10177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.168116][T10389] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.409880][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.411608][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.804750][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.806452][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.385205][ T3348] hsr_slave_0: left promiscuous mode [ 391.403795][ T3348] hsr_slave_1: left promiscuous mode [ 391.405099][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.405126][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.467387][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.467418][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.666413][ T3348] hsr_slave_0: left promiscuous mode [ 391.702456][ T3348] hsr_slave_1: left promiscuous mode [ 391.703535][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.703558][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.743468][ T3348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.743497][ T3348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.906940][ T3348] veth1_macvtap: left promiscuous mode [ 391.907049][ T3348] veth0_macvtap: left promiscuous mode [ 391.907307][ T3348] veth1_vlan: left promiscuous mode [ 391.907491][ T3348] veth0_vlan: left promiscuous mode [ 392.091560][ T3348] veth1_macvtap: left promiscuous mode [ 392.091670][ T3348] veth0_macvtap: left promiscuous mode [ 392.091929][ T3348] veth1_vlan: left promiscuous mode [ 392.092114][ T3348] veth0_vlan: left promiscuous mode [ 393.455834][ T3348] team0 (unregistering): Port device team_slave_1 removed [ 393.512778][ T3348] team0 (unregistering): Port device team_slave_0 removed [ 394.164281][ T3348] team0 (unregistering): Port device team_slave_1 removed [ 394.202799][ T3348] team0 (unregistering): Port device team_slave_0 removed [ 394.401586][ T5263] 8021q: adding VLAN 0 to HW filter on device eth12 [ 394.726332][T10258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.741944][T10177] veth0_vlan: entered promiscuous mode [ 394.775020][T10177] veth1_vlan: entered promiscuous mode [ 395.023874][T10177] veth0_macvtap: entered promiscuous mode [ 395.070586][T10177] veth1_macvtap: entered promiscuous mode [ 395.192734][T10777] netlink: 'syz.3.1674': attribute type 10 has an invalid length. [ 395.192760][T10777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1674'. [ 395.257999][T10777] @0Ù: entered promiscuous mode [ 395.537963][T10177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.602931][T10177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.364347][T10395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.878365][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.878386][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.174291][T10258] veth0_vlan: entered promiscuous mode [ 398.212687][ T5263] 8021q: adding VLAN 0 to HW filter on device eth13 [ 398.277049][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.277071][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.314684][T10258] veth1_vlan: entered promiscuous mode [ 398.320067][T10389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.651157][T10258] veth0_macvtap: entered promiscuous mode [ 398.736650][T10258] veth1_macvtap: entered promiscuous mode [ 398.909770][T10395] veth0_vlan: entered promiscuous mode [ 398.961617][T10258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.991551][T10258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.145666][T10395] veth1_vlan: entered promiscuous mode [ 400.018362][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.035494][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.057113][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.127586][T10395] veth0_macvtap: entered promiscuous mode [ 400.133795][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.137360][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.358416][T10395] veth1_macvtap: entered promiscuous mode [ 400.363248][ T3304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.368540][ T3304] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.369232][ T3304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.369752][ T3304] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.404722][ T3423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.404742][ T3423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.801605][ T3348] IPVS: stop unused estimator thread 0... [ 400.802411][ T3348] IPVS: stop unused estimator thread 0... [ 400.863917][T10854] FAULT_INJECTION: forcing a failure. [ 400.863917][T10854] name failslab, interval 1, probability 0, space 0, times 0 [ 400.863972][T10854] CPU: 1 UID: 0 PID: 10854 Comm: syz.3.1678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 400.864002][T10854] Tainted: [L]=SOFTLOCKUP [ 400.864010][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 400.864027][T10854] Call Trace: [ 400.864098][T10854] [ 400.864141][T10854] dump_stack_lvl+0xe8/0x150 [ 400.864288][T10854] should_fail_ex+0x46b/0x600 [ 400.864356][T10854] should_failslab+0xa8/0x100 [ 400.864408][T10854] __kmalloc_noprof+0xfb/0x790 [ 400.864438][T10854] ? tomoyo_encode+0x2ad/0x570 [ 400.864481][T10854] ? tomoyo_encode+0x2ad/0x570 [ 400.864503][T10854] ? __get_fs_type+0x21/0x280 [ 400.864546][T10854] tomoyo_encode+0x2ad/0x570 [ 400.864574][T10854] tomoyo_mount_permission+0x50d/0x9e0 [ 400.864595][T10854] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 400.864621][T10854] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 400.864640][T10854] ? kasan_save_track+0x4f/0x80 [ 400.864721][T10854] ? kasan_quarantine_put+0xbb/0x1f0 [ 400.864756][T10854] security_sb_mount+0xe4/0x320 [ 400.864797][T10854] path_mount+0xbc/0x1050 [ 400.864826][T10854] ? user_path_at+0xd4/0x160 [ 400.864865][T10854] __se_sys_mount+0x31d/0x420 [ 400.864895][T10854] ? __pfx___se_sys_mount+0x10/0x10 [ 400.864926][T10854] ? __x64_sys_mount+0x20/0xc0 [ 400.864954][T10854] do_syscall_64+0x166/0x520 [ 400.865077][T10854] ? trace_irq_disable+0x3b/0x140 [ 400.865122][T10854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.865161][T10854] ? clear_bhb_loop+0x70/0xc0 [ 400.865187][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.865212][T10854] RIP: 0033:0x7f78f4fae1d9 [ 400.865259][T10854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.865278][T10854] RSP: 002b:00007f78f3206028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 400.865329][T10854] RAX: ffffffffffffffda RBX: 00007f78f5235fa0 RCX: 00007f78f4fae1d9 [ 400.865345][T10854] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 400.865359][T10854] RBP: 00007f78f5045888 R08: 0000000000000000 R09: 0000000000000000 [ 400.865373][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.865386][T10854] R13: 00007f78f5236038 R14: 00007f78f5235fa0 R15: 00007ffee392c2b8 [ 400.865421][T10854] [ 401.204352][T10857] FAULT_INJECTION: forcing a failure. [ 401.204352][T10857] name failslab, interval 1, probability 0, space 0, times 0 [ 401.204392][T10857] CPU: 1 UID: 0 PID: 10857 Comm: syz.3.1679 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 401.204419][T10857] Tainted: [L]=SOFTLOCKUP [ 401.204426][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.204438][T10857] Call Trace: [ 401.204446][T10857] [ 401.204456][T10857] dump_stack_lvl+0xe8/0x150 [ 401.204491][T10857] should_fail_ex+0x46b/0x600 [ 401.204525][T10857] ? sock_alloc_inode+0x2c/0x1a0 [ 401.204662][T10857] should_failslab+0xa8/0x100 [ 401.204688][T10857] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 401.204721][T10857] ? sock_alloc_inode+0x2c/0x1a0 [ 401.204746][T10857] ? __pfx_sock_alloc_inode+0x10/0x10 [ 401.204765][T10857] sock_alloc_inode+0x2c/0x1a0 [ 401.204785][T10857] ? __pfx_sock_alloc_inode+0x10/0x10 [ 401.204802][T10857] alloc_inode+0x6a/0x1b0 [ 401.204826][T10857] __sock_create+0x12d/0x9d0 [ 401.204877][T10857] __sys_socket+0xd6/0x1b0 [ 401.204895][T10857] __x64_sys_socket+0x7a/0x90 [ 401.204914][T10857] do_syscall_64+0x166/0x520 [ 401.204935][T10857] ? trace_irq_disable+0x3b/0x140 [ 401.204960][T10857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.204976][T10857] ? clear_bhb_loop+0x70/0xc0 [ 401.204997][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.205014][T10857] RIP: 0033:0x7f78f4fae1d9 [ 401.205031][T10857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.205048][T10857] RSP: 002b:00007f78f3206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 401.205067][T10857] RAX: ffffffffffffffda RBX: 00007f78f5235fa0 RCX: 00007f78f4fae1d9 [ 401.205081][T10857] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 401.205130][T10857] RBP: 00007f78f5045888 R08: 0000000000000000 R09: 0000000000000000 [ 401.205141][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.205151][T10857] R13: 00007f78f5236038 R14: 00007f78f5235fa0 R15: 00007ffee392c2b8 [ 401.205178][T10857] [ 401.205198][T10857] socket: no more sockets [ 401.206464][T10857] ================================================================== [ 401.206505][T10857] BUG: KASAN: slab-out-of-bounds in try_module_get+0x46/0xc0 [ 401.206541][T10857] Write of size 4 at addr ffff88802ddbb508 by task syz.3.1679/10857 [ 401.206583][T10857] [ 401.206621][T10857] CPU: 1 UID: 0 PID: 10857 Comm: syz.3.1679 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 401.206667][T10857] Tainted: [L]=SOFTLOCKUP [ 401.206673][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.206683][T10857] Call Trace: [ 401.206690][T10857] [ 401.206697][T10857] dump_stack_lvl+0xe8/0x150 [ 401.206723][T10857] print_address_description+0x55/0x1e0 [ 401.206754][T10857] ? try_module_get+0x46/0xc0 [ 401.206773][T10857] print_report+0x58/0x70 [ 401.206794][T10857] kasan_report+0x117/0x150 [ 401.206814][T10857] ? try_module_get+0x46/0xc0 [ 401.206839][T10857] kasan_check_range+0x264/0x2c0 [ 401.206860][T10857] try_module_get+0x46/0xc0 [ 401.206880][T10857] dvb_device_open+0xef/0x350 [ 401.207023][T10857] ? rt_spin_unlock+0x165/0x200 [ 401.207093][T10857] chrdev_open+0x4dc/0x600 [ 401.207110][T10857] ? __pfx_chrdev_open+0x10/0x10 [ 401.207126][T10857] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 401.207160][T10857] ? __pfx_chrdev_open+0x10/0x10 [ 401.207174][T10857] do_dentry_open+0x849/0x1420 [ 401.207196][T10857] vfs_open+0x3b/0x350 [ 401.207214][T10857] ? path_openat+0x142d/0x1d60 [ 401.207238][T10857] path_openat+0x1448/0x1d60 [ 401.207273][T10857] do_file_open+0x23e/0x4a0 [ 401.207310][T10857] ? __pfx_do_file_open+0x10/0x10 [ 401.207348][T10857] ? alloc_fd+0x654/0x6d0 [ 401.207372][T10857] do_sys_openat2+0x115/0x200 [ 401.207391][T10857] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.207411][T10857] ? exc_page_fault+0x6a/0xc0 [ 401.207439][T10857] ? do_user_addr_fault+0xc4c/0x1340 [ 401.207474][T10857] __x64_sys_openat+0x138/0x170 [ 401.207497][T10857] do_syscall_64+0x166/0x520 [ 401.207523][T10857] ? trace_irq_disable+0x3b/0x140 [ 401.207550][T10857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.207570][T10857] ? clear_bhb_loop+0x70/0xc0 [ 401.207592][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.207611][T10857] RIP: 0033:0x7f78f4f6ea0e [ 401.207629][T10857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 401.207648][T10857] RSP: 002b:00007f78f3205b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 401.207670][T10857] RAX: ffffffffffffffda RBX: 00007f78f32066c0 RCX: 00007f78f4f6ea0e [ 401.207687][T10857] RDX: 0000000000000002 RSI: 00007f78f3205c00 RDI: ffffffffffffff9c [ 401.207703][T10857] RBP: 00007f78f3205c00 R08: 0000000000000000 R09: 0000000000000000 [ 401.207717][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 401.207730][T10857] R13: 00007f78f5236038 R14: 00007f78f5235fa0 R15: 00007ffee392c2b8 [ 401.207753][T10857] [ 401.207761][T10857] [ 401.207772][T10857] Allocated by task 1: [ 401.207845][T10857] kasan_save_track+0x3e/0x80 [ 401.207875][T10857] __kasan_kmalloc+0x93/0xb0 [ 401.207889][T10857] __kvmalloc_node_noprof+0x5b4/0x890 [ 401.207904][T10857] v4l2_ctrl_new+0xa5a/0x1820 [ 401.207952][T10857] v4l2_ctrl_new_std+0x24e/0x300 [ 401.207973][T10857] vimc_sensor_add+0x1e5/0x4f0 [ 401.208063][T10857] vimc_probe+0x386/0x1490 [ 401.208083][T10857] platform_probe+0xf9/0x190 [ 401.208147][T10857] really_probe+0x254/0xae0 [ 401.208198][T10857] __driver_probe_device+0x1e8/0x360 [ 401.208218][T10857] driver_probe_device+0x4f/0x240 [ 401.208239][T10857] __driver_attach+0x339/0x600 [ 401.208258][T10857] bus_for_each_dev+0x23e/0x2c0 [ 401.208322][T10857] bus_add_driver+0x348/0x670 [ 401.208347][T10857] driver_register+0x23a/0x320 [ 401.208369][T10857] vimc_init+0x2d/0x90 [ 401.208459][T10857] do_one_initcall+0x250/0x870 [ 401.208486][T10857] do_initcall_level+0x10a/0x1a0 [ 401.208549][T10857] do_initcalls+0x59/0xa0 [ 401.208568][T10857] kernel_init_freeable+0x29d/0x3e0 [ 401.208588][T10857] kernel_init+0x22/0x1d0 [ 401.208605][T10857] ret_from_fork+0x514/0xb70 [ 401.208629][T10857] ret_from_fork_asm+0x1a/0x30 [ 401.208646][T10857] [ 401.208651][T10857] The buggy address belongs to the object at ffff88802ddbb400 [ 401.208651][T10857] which belongs to the cache kmalloc-512 of size 512 [ 401.208670][T10857] The buggy address is located 0 bytes to the right of [ 401.208670][T10857] allocated 264-byte region [ffff88802ddbb400, ffff88802ddbb508) [ 401.208721][T10857] [ 401.208726][T10857] The buggy address belongs to the physical page: [ 401.208770][T10857] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ddb8 [ 401.208793][T10857] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 401.208816][T10857] flags: 0x80000000000040(head|node=0|zone=1) [ 401.208838][T10857] page_type: f5(slab) [ 401.208857][T10857] raw: 0080000000000040 ffff88813ffbec80 dead000000000100 dead000000000122 [ 401.208874][T10857] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 401.208892][T10857] head: 0080000000000040 ffff88813ffbec80 dead000000000100 dead000000000122 [ 401.208908][T10857] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 401.208925][T10857] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 401.208940][T10857] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 401.208950][T10857] page dumped because: kasan: bad access detected [ 401.208963][T10857] page_owner tracks the page as allocated [ 401.208971][T10857] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16492272902 [ 401.209002][T10857] post_alloc_hook+0x1f9/0x250 [ 401.209028][T10857] get_page_from_freelist+0x2591/0x2600 [ 401.209046][T10857] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 401.209064][T10857] allocate_slab+0x7d/0x620 [ 401.209084][T10857] refill_objects+0x2d8/0x350 [ 401.209105][T10857] __pcs_replace_empty_main+0x339/0x690 [ 401.209124][T10857] __kmalloc_cache_noprof+0x46f/0x680 [ 401.209150][T10857] bus_add_driver+0x165/0x670 [ 401.209175][T10857] driver_register+0x23a/0x320 [ 401.209196][T10857] usb_register_driver+0x1e4/0x390 [ 401.209271][T10857] pvr_init+0x4c/0xb0 [ 401.209349][T10857] do_one_initcall+0x250/0x870 [ 401.209379][T10857] do_initcall_level+0x10a/0x1a0 [ 401.209414][T10857] do_initcalls+0x59/0xa0 [ 401.209435][T10857] kernel_init_freeable+0x29d/0x3e0 [ 401.209457][T10857] kernel_init+0x22/0x1d0 [ 401.209474][T10857] page_owner free stack trace missing [ 401.209482][T10857] [ 401.209486][T10857] Memory state around the buggy address: [ 401.209497][T10857] ffff88802ddbb400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.209510][T10857] ffff88802ddbb480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 401.209523][T10857] >ffff88802ddbb500: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 401.209533][T10857] ^ [ 401.209543][T10857] ffff88802ddbb580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 401.209555][T10857] ffff88802ddbb600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 401.209565][T10857] ================================================================== [ 401.209621][T10857] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 402.120819][T10857] CPU: 1 UID: 0 PID: 10857 Comm: syz.3.1679 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.132277][T10857] Tainted: [L]=SOFTLOCKUP [ 402.136597][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 402.146641][T10857] Call Trace: [ 402.149914][T10857] [ 402.152922][T10857] vpanic+0x56d/0xa60 [ 402.156900][T10857] ? rcu_is_watching+0x16/0xb0 [ 402.161654][T10857] ? __pfx_vpanic+0x10/0x10 [ 402.166148][T10857] panic+0xc5/0xd0 [ 402.169861][T10857] ? __pfx_panic+0x10/0x10 [ 402.174265][T10857] ? preempt_schedule_thunk+0x16/0x40 [ 402.179628][T10857] ? preempt_schedule_thunk+0x16/0x40 [ 402.184991][T10857] ? try_module_get+0x46/0xc0 [ 402.189664][T10857] check_panic_on_warn+0x89/0xb0 [ 402.194621][T10857] ? try_module_get+0x46/0xc0 [ 402.199306][T10857] end_report+0x73/0x170 [ 402.203542][T10857] ? try_module_get+0x46/0xc0 [ 402.208294][T10857] kasan_report+0x128/0x150 [ 402.212785][T10857] ? try_module_get+0x46/0xc0 [ 402.217456][T10857] kasan_check_range+0x264/0x2c0 [ 402.222388][T10857] try_module_get+0x46/0xc0 [ 402.226895][T10857] dvb_device_open+0xef/0x350 [ 402.231568][T10857] ? rt_spin_unlock+0x165/0x200 [ 402.236421][T10857] chrdev_open+0x4dc/0x600 [ 402.240827][T10857] ? __pfx_chrdev_open+0x10/0x10 [ 402.245766][T10857] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 402.252093][T10857] ? __pfx_chrdev_open+0x10/0x10 [ 402.257017][T10857] do_dentry_open+0x849/0x1420 [ 402.261771][T10857] vfs_open+0x3b/0x350 [ 402.265825][T10857] ? path_openat+0x142d/0x1d60 [ 402.270584][T10857] path_openat+0x1448/0x1d60 [ 402.275178][T10857] do_file_open+0x23e/0x4a0 [ 402.279691][T10857] ? __pfx_do_file_open+0x10/0x10 [ 402.284720][T10857] ? alloc_fd+0x654/0x6d0 [ 402.289044][T10857] do_sys_openat2+0x115/0x200 [ 402.293710][T10857] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.299015][T10857] ? exc_page_fault+0x6a/0xc0 [ 402.303692][T10857] ? do_user_addr_fault+0xc4c/0x1340 [ 402.308967][T10857] __x64_sys_openat+0x138/0x170 [ 402.313809][T10857] do_syscall_64+0x166/0x520 [ 402.318409][T10857] ? trace_irq_disable+0x3b/0x140 [ 402.323424][T10857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.329580][T10857] ? clear_bhb_loop+0x70/0xc0 [ 402.334248][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.340128][T10857] RIP: 0033:0x7f78f4f6ea0e [ 402.344537][T10857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 402.364136][T10857] RSP: 002b:00007f78f3205b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 402.372546][T10857] RAX: ffffffffffffffda RBX: 00007f78f32066c0 RCX: 00007f78f4f6ea0e [ 402.380509][T10857] RDX: 0000000000000002 RSI: 00007f78f3205c00 RDI: ffffffffffffff9c [ 402.388468][T10857] RBP: 00007f78f3205c00 R08: 0000000000000000 R09: 0000000000000000 [ 402.396426][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 402.404385][T10857] R13: 00007f78f5236038 R14: 00007f78f5235fa0 R15: 00007ffee392c2b8 [ 402.412356][T10857] [ 402.415627][T10857] Kernel Offset: disabled [ 402.419945][T10857] Rebooting in 86400 seconds..