last executing test programs: 8m46.67060468s ago: executing program 1 (id=112): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 8m46.083796689s ago: executing program 1 (id=115): r0 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_open_procfs(r0, &(0x7f00000000c0)='stack\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 8m45.220110229s ago: executing program 1 (id=123): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/19, 0x13}, 0x68000}], 0x1, 0x10002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8m44.284387009s ago: executing program 1 (id=127): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x1, 0x1, 0x3, 0x6}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59}) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59}) 8m43.737954358s ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, '-'}}]}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 8m43.228043225s ago: executing program 1 (id=133): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) timer_create(0x4, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) 8m30.649665797s ago: executing program 4 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='00:03\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='disable\n', 0x8) write(r2, &(0x7f0000000280)='disable', 0x7) 8m28.385318662s ago: executing program 4 (id=189): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd8ea}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000006c0)=0x30000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000700)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@host}, {@local}, 0x400, "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"}, 0x418}) 8m27.96592905s ago: executing program 32 (id=133): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) timer_create(0x4, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) 8m27.700941901s ago: executing program 4 (id=194): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x40000, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 8m26.272243679s ago: executing program 4 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 8m25.847530025s ago: executing program 4 (id=199): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 8m23.963692433s ago: executing program 4 (id=207): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 8m23.575611067s ago: executing program 33 (id=207): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 2m51.781410153s ago: executing program 2 (id=1076): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090024206d041cc3400000010001090224"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) r3 = syz_open_procfs(r1, &(0x7f0000000040)='ns\x00') readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 2m48.386329783s ago: executing program 2 (id=1083): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) 2m45.390928855s ago: executing program 2 (id=1090): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) r1 = gettid() mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x122) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) syz_open_dev$evdev(0x0, 0x1, 0x80) 2m44.297561214s ago: executing program 2 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m42.808418165s ago: executing program 2 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040044) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000940)=@buf={0xc2, &(0x7f0000000840)="520bf6dde943406dc4198a448bf4aa5810e6f12c27583ca473ed6c490689002b828719b06e1c1620b7cf167369a54014de1587245bc2c4fde6e44eab7ba52acf1641b980b3668225cb9c29ef22b82ecddcc551946a555123cdf2afa4cf6726ac1adfdc8af8de43573f499c5a892c7d9f15a95ba754caa69447093ef2529e37defbae6bbb5b5b9970b3fead0d4bc7306e994d2e93c82c2abf0c61b6b43f8dc867955539096f48ab8795a5141d7c8650963b262ef525b08cc810da445d5e4548edf51c"}) 2m40.511830932s ago: executing program 2 (id=1098): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='2049\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='4\n', 0x2) close(r2) 2m23.800875256s ago: executing program 34 (id=1098): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4 +4.1 +4.2\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='2049\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='4\n', 0x2) close(r2) 7.70866716s ago: executing program 3 (id=1365): syz_usb_connect(0x3, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x111, 0x7b, 0xd6, 0xdd, 0x20, 0x2304, 0x21a, 0xc78c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa4, 0xb, 0x0, 0x8b, "", [{{0x9, 0x4, 0xc3, 0x1, 0x0, 0xcf, 0xa0, 0x32, 0x9}}]}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 5.931238493s ago: executing program 0 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 4.343420383s ago: executing program 0 (id=1369): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) unshare(0x22020600) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280), &(0x7f0000000580), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4.264833833s ago: executing program 3 (id=1370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x80000003) 3.9649531s ago: executing program 0 (id=1371): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) write$9p(r1, &(0x7f0000000540)="af721b", 0x3) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.877444843s ago: executing program 3 (id=1372): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x3b, 0x9) 3.551963348s ago: executing program 0 (id=1373): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fstat(0xffffffffffffffff, 0x0) 2.2894994s ago: executing program 0 (id=1374): openat$ptp0(0xffffffffffffff9c, &(0x7f0000001dc0), 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.223631281s ago: executing program 3 (id=1375): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.042971913s ago: executing program 0 (id=1376): syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setreuid(0xee00, r1) getdents64(r0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYBLOB]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 227.273056ms ago: executing program 3 (id=1377): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x200000c1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) connect$unix(r0, 0x0, 0x0) 0s ago: executing program 3 (id=1378): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r1, 0x0, 0x3d, 0x4088010, 0x0, 0x0) kernel console output (not intermixed with test programs): 2][ T7388] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 254.299572][ T7388] asymmetric_key_match_preparse+0x21c/0x3a0 [ 254.299606][ T7388] request_key_and_link+0x200/0x15a0 [ 254.299645][ T7388] ? lock_acquire+0x115/0x350 [ 254.299674][ T7388] ? __pfx_request_key_and_link+0x10/0x10 [ 254.299716][ T7388] ? __pfx_key_default_cmp+0x10/0x10 [ 254.299751][ T7388] ? _copy_from_user+0x94/0xb0 [ 254.299790][ T7388] __se_sys_request_key+0x29a/0x350 [ 254.299821][ T7388] ? __pfx___se_sys_request_key+0x10/0x10 [ 254.299862][ T7388] do_syscall_64+0x166/0x520 [ 254.299905][ T7388] ? trace_irq_disable+0x3b/0x140 [ 254.299933][ T7388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.299956][ T7388] ? clear_bhb_loop+0x70/0xc0 [ 254.299983][ T7388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.300006][ T7388] RIP: 0033:0x7f95dc2ee159 [ 254.300029][ T7388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.300048][ T7388] RSP: 002b:00007f95da546028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 254.300073][ T7388] RAX: ffffffffffffffda RBX: 00007f95dc575fa0 RCX: 00007f95dc2ee159 [ 254.300089][ T7388] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 254.300105][ T7388] RBP: 00007f95dc38506b R08: 0000000000000000 R09: 0000000000000000 [ 254.300119][ T7388] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 254.300135][ T7388] R13: 00007f95dc576038 R14: 00007f95dc575fa0 R15: 00007ffff40330c8 [ 254.300172][ T7388] [ 255.962504][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962581][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.334160][ T7425] gadgetfs: bound to dummy_udc driver [ 257.986868][ T38] audit: type=1800 audit(1789715652.252:27): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.450" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 258.025305][ T7438] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 258.025354][ T7438] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 258.025376][ T7438] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 261.667265][ T5818] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 261.678342][ T7471] input: syz0 as /devices/virtual/input/input7 [ 261.823353][ T5818] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 261.825057][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.825108][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.505539][ T5818] usb 3-1: config 0 descriptor?? [ 262.801475][ T5818] usbhid 3-1:0.0: can't add hid device: -71 [ 262.801612][ T5818] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 262.990283][ T5818] usb 3-1: USB disconnect, device number 6 [ 263.548292][ T5818] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 263.701743][ T5818] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 263.707090][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.707269][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.805409][ T5818] usb 3-1: config 0 descriptor?? [ 264.688657][ T5818] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 264.885189][ T5818] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 265.566856][ T1384] bridge_slave_1: left allmulticast mode [ 265.566897][ T1384] bridge_slave_1: left promiscuous mode [ 265.567379][ T1384] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.042482][ T7514] FAULT_INJECTION: forcing a failure. [ 266.042482][ T7514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.042528][ T7514] CPU: 1 UID: 0 PID: 7514 Comm: syz.3.467 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.042558][ T7514] Tainted: [L]=SOFTLOCKUP [ 266.042566][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.042578][ T7514] Call Trace: [ 266.042596][ T7514] [ 266.042606][ T7514] dump_stack_lvl+0xe8/0x150 [ 266.042643][ T7514] should_fail_ex+0x46b/0x600 [ 266.042676][ T7514] prepare_alloc_pages+0x223/0x650 [ 266.042711][ T7514] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 266.042746][ T7514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 266.042781][ T7514] ? __pfx_policy_nodemask+0x10/0x10 [ 266.042814][ T7514] ? hrtimer_start_range_ns_common+0x7fc/0xb70 [ 266.042853][ T7514] alloc_pages_mpol+0xd4/0x280 [ 266.042882][ T7514] alloc_pages_noprof+0xd2/0x2f0 [ 266.042908][ T7514] __pmd_alloc+0x3a/0x5e0 [ 266.042940][ T7514] handle_mm_fault+0x2198/0x28c0 [ 266.042971][ T7514] ? handle_mm_fault+0xeb/0x28c0 [ 266.042992][ T7514] ? mt_find+0x186/0x630 [ 266.043014][ T7514] ? __pfx_mt_find+0x10/0x10 [ 266.043040][ T7514] ? __pfx_handle_mm_fault+0x10/0x10 [ 266.043092][ T7514] __get_user_pages+0x1676/0x2650 [ 266.043156][ T7514] populate_vma_page_range+0x2be/0x3c0 [ 266.043183][ T7514] ? __pfx_populate_vma_page_range+0x10/0x10 [ 266.043207][ T7514] ? userfaultfd_unmap_complete+0x292/0x310 [ 266.043263][ T7514] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 266.043291][ T7514] __mm_populate+0x25f/0x390 [ 266.043317][ T7514] ? __pfx___mm_populate+0x10/0x10 [ 266.043336][ T7514] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 266.043370][ T7514] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 266.043398][ T7514] ? up_write+0x5a/0x190 [ 266.043422][ T7514] vm_mmap_pgoff+0x356/0x4e0 [ 266.043451][ T7514] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 266.043477][ T7514] ? rcu_is_watching+0x16/0xb0 [ 266.043515][ T7514] ? __x64_sys_mmap+0x7f/0x140 [ 266.043542][ T7514] do_syscall_64+0x166/0x520 [ 266.043571][ T7514] ? trace_irq_disable+0x3b/0x140 [ 266.043606][ T7514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.043626][ T7514] ? clear_bhb_loop+0x70/0xc0 [ 266.043652][ T7514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.043673][ T7514] RIP: 0033:0x7f84c829e159 [ 266.043696][ T7514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.043713][ T7514] RSP: 002b:00007f84c64f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 266.043738][ T7514] RAX: ffffffffffffffda RBX: 00007f84c8525fa0 RCX: 00007f84c829e159 [ 266.043754][ T7514] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000000000000 [ 266.043767][ T7514] RBP: 00007f84c833506b R08: ffffffffffffffff R09: 0000000010000000 [ 266.043782][ T7514] R10: 0000000000109031 R11: 0000000000000246 R12: 0000000000000000 [ 266.043796][ T7514] R13: 00007f84c8526038 R14: 00007f84c8525fa0 R15: 00007ffd723824d8 [ 266.043832][ T7514] [ 266.159016][ T1384] bridge_slave_0: left allmulticast mode [ 266.159058][ T1384] bridge_slave_0: left promiscuous mode [ 266.159339][ T1384] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.811728][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 266.811801][ T5818] usb 3-1: USB disconnect, device number 7 [ 267.188416][ T38] audit: type=1800 audit(1789715661.442:28): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.469" name="file1" dev="ramfs" ino=16527 res=0 errno=0 [ 269.018947][ T1384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.104032][ T1384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.151191][ T1384] bond0 (unregistering): Released all slaves [ 270.429239][ T1384] hsr_slave_0: left promiscuous mode [ 270.469193][ T1384] hsr_slave_1: left promiscuous mode [ 270.492678][ T1384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.528522][ T1384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.389483][ T1384] team0 (unregistering): Port device team_slave_1 removed [ 272.468052][ T1384] team0 (unregistering): Port device team_slave_0 removed [ 274.452610][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 277.222954][ T4900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.236927][ T4900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.246873][ T4900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.275070][ T4900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.276830][ T4900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.144285][ T7678] input: syz0 as /devices/virtual/input/input9 [ 279.367302][ T5592] Bluetooth: hci0: command tx timeout [ 279.937903][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 281.449074][ T5592] Bluetooth: hci0: command tx timeout [ 281.690689][ T4900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.765128][ T4900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.766786][ T4900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.791280][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 281.791306][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 281.816789][ T4900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.826929][ T4900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.527654][ T5592] Bluetooth: hci0: command tx timeout [ 284.167545][ T5592] Bluetooth: hci3: command tx timeout [ 284.334100][ T7752] all: renamed from bridge_slave_1 (while UP) [ 285.607604][ T5592] Bluetooth: hci0: command tx timeout [ 286.247323][ T5592] Bluetooth: hci3: command tx timeout [ 288.326455][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 288.326485][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 288.327470][ T5592] Bluetooth: hci3: command tx timeout [ 289.953991][ T38] audit: type=1804 audit(1789715684.132:29): pid=7832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.537" name="/newroot/162/file0" dev="tmpfs" ino=888 res=1 errno=0 [ 290.408303][ T5592] Bluetooth: hci3: command tx timeout [ 291.058281][ T6536] bridge_slave_1: left allmulticast mode [ 291.058334][ T6536] bridge_slave_1: left promiscuous mode [ 291.058734][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.233213][ T6536] bridge_slave_0: left allmulticast mode [ 291.233254][ T6536] bridge_slave_0: left promiscuous mode [ 291.233549][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.559275][ T6536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.721166][ T6536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.815702][ T6536] bond0 (unregistering): Released all slaves [ 292.917735][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.917892][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.918096][ T7663] bridge_slave_0: entered allmulticast mode [ 292.925042][ T7663] bridge_slave_0: entered promiscuous mode [ 292.983360][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.983504][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.983710][ T7663] bridge_slave_1: entered allmulticast mode [ 293.007874][ T7663] bridge_slave_1: entered promiscuous mode [ 293.210807][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.276898][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.715957][ T7663] team0: Port device team_slave_0 added [ 293.820269][ T7663] team0: Port device team_slave_1 added [ 294.760874][ T38] audit: type=1800 audit(1789715689.032:30): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.548" name="file1" dev="sda1" ino=2055 res=0 errno=0 [ 296.172526][ T7891] FAULT_INJECTION: forcing a failure. [ 296.172526][ T7891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.172568][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz.3.549 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 296.172600][ T7891] Tainted: [L]=SOFTLOCKUP [ 296.172609][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.172623][ T7891] Call Trace: [ 296.172632][ T7891] [ 296.172642][ T7891] dump_stack_lvl+0xe8/0x150 [ 296.172683][ T7891] should_fail_ex+0x46b/0x600 [ 296.172720][ T7891] _copy_to_user+0x31/0xb0 [ 296.172761][ T7891] bpf_verifier_vlog+0x606/0x900 [ 296.172805][ T7891] __btf_verifier_log+0xe2/0x140 [ 296.172838][ T7891] ? __pfx___btf_verifier_log+0x10/0x10 [ 296.172880][ T7891] __btf_verifier_log_type+0x4fd/0x6a0 [ 296.172921][ T7891] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 296.172957][ T7891] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 296.172994][ T7891] btf_enum_check_meta+0x49b/0xdc0 [ 296.173029][ T7891] ? __btf_verifier_log+0xe2/0x140 [ 296.173062][ T7891] btf_parse_type_sec+0x3cf/0x2360 [ 296.173103][ T7891] ? btf_parse_hdr+0x1da/0x810 [ 296.173140][ T7891] ? btf_parse_hdr+0x5f2/0x810 [ 296.173169][ T7891] ? btf_parse_str_sec+0x244/0x2f0 [ 296.173214][ T7891] btf_new_fd+0x487/0xc10 [ 296.173256][ T7891] __sys_bpf+0xd2e/0xd90 [ 296.173300][ T7891] ? __pfx___sys_bpf+0x10/0x10 [ 296.173338][ T7891] ? do_futex+0x458/0x4e0 [ 296.173395][ T7891] ? rcu_is_watching+0x16/0xb0 [ 296.173438][ T7891] __x64_sys_bpf+0xba/0xd0 [ 296.173472][ T7891] do_syscall_64+0x166/0x520 [ 296.173506][ T7891] ? trace_irq_disable+0x3b/0x140 [ 296.173536][ T7891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.173560][ T7891] ? clear_bhb_loop+0x70/0xc0 [ 296.173590][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.173613][ T7891] RIP: 0033:0x7f84c829e159 [ 296.173636][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.173655][ T7891] RSP: 002b:00007f84c64f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.173681][ T7891] RAX: ffffffffffffffda RBX: 00007f84c8525fa0 RCX: 00007f84c829e159 [ 296.173698][ T7891] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 296.173710][ T7891] RBP: 00007f84c833506b R08: 0000000000000000 R09: 0000000000000000 [ 296.173722][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.173736][ T7891] R13: 00007f84c8526038 R14: 00007f84c8525fa0 R15: 00007ffd723824d8 [ 296.173773][ T7891] [ 297.343267][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 297.387512][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.387534][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.387563][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.549009][ T5592] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 297.549044][ T5592] CPU: 1 UID: 0 PID: 5592 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.549080][ T5592] Tainted: [L]=SOFTLOCKUP [ 297.549088][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.549104][ T5592] Workqueue: hci2 hci_rx_work [ 297.549138][ T5592] Call Trace: [ 297.549147][ T5592] [ 297.549158][ T5592] dump_stack_lvl+0xe8/0x150 [ 297.549199][ T5592] sysfs_create_dir_ns+0x271/0x2a0 [ 297.549230][ T5592] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 297.549264][ T5592] ? rt_spin_unlock+0x165/0x200 [ 297.549298][ T5592] kobject_add_internal+0x62c/0xce0 [ 297.549334][ T5592] kobject_add+0x163/0x240 [ 297.549358][ T5592] ? rt_spin_unlock+0x159/0x200 [ 297.549393][ T5592] ? __pfx_kobject_add+0x10/0x10 [ 297.549427][ T5592] ? get_device_parent+0x370/0x3a0 [ 297.549467][ T5592] device_add+0x3fa/0xb80 [ 297.549504][ T5592] hci_conn_add_sysfs+0xd5/0x210 [ 297.549536][ T5592] le_conn_complete_evt+0xfe3/0x16d0 [ 297.549579][ T5592] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 297.549615][ T5592] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.549648][ T5592] ? rt_mutex_slowunlock+0x219/0x460 [ 297.549678][ T5592] ? skb_pull_data+0xf0/0x200 [ 297.549717][ T5592] hci_le_conn_complete_evt+0x187/0x470 [ 297.549771][ T5592] hci_event_packet+0x67a/0xf10 [ 297.549800][ T5592] ? reacquire_held_locks+0x117/0x1a0 [ 297.549841][ T5592] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 297.549872][ T5592] ? __pfx_hci_event_packet+0x10/0x10 [ 297.549900][ T5592] ? rt_spin_unlock+0x159/0x200 [ 297.549939][ T5592] ? hci_send_to_monitor+0xe2/0x590 [ 297.549977][ T5592] hci_rx_work+0x3ee/0x1020 [ 297.550012][ T5592] ? process_scheduled_works+0x97a/0x1630 [ 297.550041][ T5592] process_scheduled_works+0xc3d/0x1630 [ 297.550105][ T5592] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.550141][ T5592] ? assign_work+0x3cf/0x5d0 [ 297.550176][ T5592] worker_thread+0xa47/0xfb0 [ 297.550224][ T5592] ? __kthread_parkme+0x71/0x1f0 [ 297.550271][ T5592] kthread+0x38b/0x470 [ 297.550295][ T5592] ? __pfx_worker_thread+0x10/0x10 [ 297.550320][ T5592] ? __pfx_kthread+0x10/0x10 [ 297.550345][ T5592] ret_from_fork+0x514/0xb70 [ 297.550370][ T5592] ? __pfx_ret_from_fork+0x10/0x10 [ 297.550391][ T5592] ? __switch_to+0xc89/0x1420 [ 297.550425][ T5592] ? __pfx_kthread+0x10/0x10 [ 297.550448][ T5592] ret_from_fork_asm+0x1a/0x30 [ 297.550482][ T5592] [ 297.550540][ T5592] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 297.550576][ T5592] Bluetooth: hci2: failed to register connection device [ 297.759001][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.759018][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.759044][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.237519][ T6536] hsr_slave_0: left promiscuous mode [ 298.270741][ T6536] hsr_slave_1: left promiscuous mode [ 298.272124][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.338685][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.636540][ T7913] FAULT_INJECTION: forcing a failure. [ 298.636540][ T7913] name failslab, interval 1, probability 0, space 0, times 0 [ 298.636585][ T7913] CPU: 1 UID: 0 PID: 7913 Comm: syz.3.556 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 298.636619][ T7913] Tainted: [L]=SOFTLOCKUP [ 298.636628][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.636643][ T7913] Call Trace: [ 298.636652][ T7913] [ 298.636663][ T7913] dump_stack_lvl+0xe8/0x150 [ 298.636705][ T7913] should_fail_ex+0x46b/0x600 [ 298.636742][ T7913] should_failslab+0xa8/0x100 [ 298.636790][ T7913] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 298.636825][ T7913] ? lockdep_hardirqs_on+0x7b/0x110 [ 298.636858][ T7913] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 298.636886][ T7913] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 298.636922][ T7913] kmemdup_nul+0x36/0xf0 [ 298.636949][ T7913] vfs_parse_monolithic_sep+0x21b/0x360 [ 298.636980][ T7913] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 298.637012][ T7913] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 298.637048][ T7913] ? v9fs_init_fs_context+0x174/0x540 [ 298.637083][ T7913] ? alloc_fs_context+0x9b7/0xd00 [ 298.637127][ T7913] do_new_mount+0x2e2/0xdc0 [ 298.637149][ T7913] ? cap_capable+0x123/0x460 [ 298.637179][ T7913] ? __pfx_do_new_mount+0x10/0x10 [ 298.637203][ T7913] ? ns_capable+0x89/0xe0 [ 298.637235][ T7913] ? path_mount+0x647/0x1050 [ 298.637260][ T7913] ? user_path_at+0xd4/0x160 [ 298.637288][ T7913] __se_sys_mount+0x31d/0x420 [ 298.637317][ T7913] ? __pfx___se_sys_mount+0x10/0x10 [ 298.637347][ T7913] ? __x64_sys_mount+0x20/0xc0 [ 298.637373][ T7913] do_syscall_64+0x166/0x520 [ 298.637408][ T7913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.637432][ T7913] ? clear_bhb_loop+0x70/0xc0 [ 298.637461][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.637484][ T7913] RIP: 0033:0x7f84c829e159 [ 298.637507][ T7913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.637527][ T7913] RSP: 002b:00007f84c64f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.637553][ T7913] RAX: ffffffffffffffda RBX: 00007f84c8525fa0 RCX: 00007f84c829e159 [ 298.637571][ T7913] RDX: 0000200000000380 RSI: 0000200000000680 RDI: 0000000000000000 [ 298.637586][ T7913] RBP: 00007f84c833506b R08: 0000200000002780 R09: 0000000000000000 [ 298.637601][ T7913] R10: 0000000000014c98 R11: 0000000000000246 R12: 0000000000000000 [ 298.637617][ T7913] R13: 00007f84c8526038 R14: 00007f84c8525fa0 R15: 00007ffd723824d8 [ 298.637653][ T7913] [ 299.559702][ T6536] team0 (unregistering): Port device team_slave_1 removed [ 299.619775][ T6536] team0 (unregistering): Port device team_slave_0 removed [ 299.873615][ T7915] jffs2: notice: (7915) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 300.529682][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.529906][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.530116][ T7731] bridge_slave_0: entered allmulticast mode [ 300.542038][ T7731] bridge_slave_0: entered promiscuous mode [ 300.552247][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.552378][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.552556][ T7731] bridge_slave_1: entered allmulticast mode [ 300.556993][ T7731] bridge_slave_1: entered promiscuous mode [ 301.023549][ T7663] hsr_slave_0: entered promiscuous mode [ 301.027919][ T7663] hsr_slave_1: entered promiscuous mode [ 301.032257][ T7663] debugfs: 'hsr0' already exists in 'hsr' [ 301.032286][ T7663] Cannot create hsr debugfs directory [ 301.109749][ T7731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.136822][ T7731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.475355][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 301.516189][ T7731] team0: Port device team_slave_0 added [ 301.814853][ T7731] team0: Port device team_slave_1 added [ 301.839178][ T31] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 301.840736][ T31] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 301.840764][ T31] usb 4-1: config 0 has no interface number 0 [ 301.840825][ T31] usb 4-1: config 0 interface 41 has no altsetting 0 [ 301.843851][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.843876][ T31] usb 4-1: Product: syz [ 301.843893][ T31] usb 4-1: Manufacturer: syz [ 301.843909][ T31] usb 4-1: SerialNumber: syz [ 301.970203][ T31] usb 4-1: config 0 descriptor?? [ 302.292893][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 302.314831][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.565'. [ 302.889109][ T31] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 302.941371][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.941393][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.941422][ T7731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.031799][ T7731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.031822][ T7731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.031852][ T7731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.685654][ T7731] hsr_slave_0: entered promiscuous mode [ 303.688690][ T7731] hsr_slave_1: entered promiscuous mode [ 303.689692][ T7731] debugfs: 'hsr0' already exists in 'hsr' [ 303.689717][ T7731] Cannot create hsr debugfs directory [ 304.113299][ T31] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 304.113334][ T31] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 304.113645][ T31] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 304.186417][ T31] usb 4-1: USB disconnect, device number 4 [ 304.562245][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 313.290555][ T6536] bridge_slave_1: left allmulticast mode [ 313.290597][ T6536] bridge_slave_1: left promiscuous mode [ 313.290882][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.483580][ T6536] bridge_slave_0: left allmulticast mode [ 313.483620][ T6536] bridge_slave_0: left promiscuous mode [ 313.483936][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.932903][ T4900] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 315.006007][ T6536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.162615][ T6536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.252214][ T6536] bond0 (unregistering): Released all slaves [ 316.653618][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 316.769607][ T6536] hsr_slave_0: left promiscuous mode [ 316.830188][ T6536] hsr_slave_1: left promiscuous mode [ 316.831576][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.860393][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.872735][ T8085] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 317.307272][ T1226] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 317.371670][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.500539][ T1226] usb 4-1: Using ep0 maxpacket: 32 [ 317.541506][ T8090] netlink: 'syz.3.600': attribute type 10 has an invalid length. [ 317.541536][ T8090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.600'. [ 317.836383][ T6536] team0 (unregistering): Port device team_slave_1 removed [ 317.929958][ T6536] team0 (unregistering): Port device team_slave_0 removed [ 318.017712][ T4900] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 318.041923][ T4900] Bluetooth: hci4: Injecting HCI hardware error event [ 318.050253][ T5592] Bluetooth: hci4: hardware error 0x00 [ 320.184476][ T8085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.194286][ T8089] dummy0: left promiscuous mode [ 320.329767][ T5592] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 320.658910][ T8089] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 320.659451][ T6534] net_ratelimit: 13 callbacks suppressed [ 320.659471][ T6534] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 320.660253][ T8090] dummy0: entered promiscuous mode [ 320.748588][ T1384] bond2: (slave dummy0): link status up again after 0 ms [ 320.759775][ T8090] bond2: (slave dummy0): Removing an active aggregator [ 320.765281][ T8090] bond2: (slave dummy0): Releasing backup interface [ 321.079520][ T5695] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 321.144514][ T1226] usb 4-1: unable to get BOS descriptor or descriptor too short [ 321.144574][ T1226] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 321.146144][ T1226] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 321.146181][ T1226] usb 4-1: can't read configurations, error -71 [ 321.363008][ T5695] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 321.400099][ T5695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.400162][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.430593][ T5695] usb 3-1: config 0 descriptor?? [ 321.910773][ T5695] ath6kl: Unsupported hardware version: 0x0 [ 321.912795][ T5695] ath6kl: Failed to init ath6kl core: -22 [ 322.003943][ T5695] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 322.321351][ T5319] usb 3-1: USB disconnect, device number 8 [ 324.692599][ T8183] FAULT_INJECTION: forcing a failure. [ 324.692599][ T8183] name fail_futex, interval 1, probability 0, space 0, times 1 [ 324.692645][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.3.625 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 324.692674][ T8183] Tainted: [L]=SOFTLOCKUP [ 324.692682][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.692695][ T8183] Call Trace: [ 324.692705][ T8183] [ 324.692715][ T8183] dump_stack_lvl+0xe8/0x150 [ 324.692754][ T8183] should_fail_ex+0x46b/0x600 [ 324.692789][ T8183] get_futex_key+0x1b4/0x1580 [ 324.692820][ T8183] ? __lock_acquire+0x747/0x2de0 [ 324.692852][ T8183] ? kasan_save_track+0x3e/0x80 [ 324.692880][ T8183] ? __kasan_slab_free+0x5c/0x80 [ 324.692909][ T8183] ? kmem_cache_free+0x187/0x6d0 [ 324.692942][ T8183] ? __pfx_get_futex_key+0x10/0x10 [ 324.692985][ T8183] futex_wake+0x119/0x600 [ 324.693018][ T8183] ? __pfx_futex_wake+0x10/0x10 [ 324.693060][ T8183] do_futex+0x458/0x4e0 [ 324.693087][ T8183] ? __pfx_do_futex+0x10/0x10 [ 324.693107][ T8183] ? kmem_cache_free+0x187/0x6d0 [ 324.693135][ T8183] ? do_sys_openat2+0x14e/0x200 [ 324.693176][ T8183] __se_sys_futex+0x3a8/0x450 [ 324.693206][ T8183] ? __pfx___se_sys_futex+0x10/0x10 [ 324.693228][ T8183] ? rcu_is_watching+0x16/0xb0 [ 324.693266][ T8183] ? __x64_sys_futex+0x21/0xf0 [ 324.693292][ T8183] do_syscall_64+0x166/0x520 [ 324.693331][ T8183] ? trace_irq_disable+0x3b/0x140 [ 324.693361][ T8183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.693384][ T8183] ? clear_bhb_loop+0x70/0xc0 [ 324.693413][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.693435][ T8183] RIP: 0033:0x7f84c829e159 [ 324.693466][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.693484][ T8183] RSP: 002b:00007f84c64f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 324.693504][ T8183] RAX: ffffffffffffffda RBX: 00007f84c8525fa8 RCX: 00007f84c829e159 [ 324.693517][ T8183] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f84c8525fac [ 324.693529][ T8183] RBP: 00007f84c8525fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 324.693540][ T8183] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 324.693551][ T8183] R13: 00007f84c8526038 R14: 00007ffd723823f0 R15: 00007ffd723824d8 [ 324.693577][ T8183] [ 325.642819][ T5818] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 325.928546][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 326.215257][ T5818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 326.215323][ T5818] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 326.333091][ T5818] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 326.333136][ T5818] usb 3-1: can't read configurations, error -71 [ 326.889350][ T7663] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 327.017636][ T7663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.022158][ T7663] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.233416][ T7663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.271087][ T7663] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.399114][ T7663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.405687][ T7663] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.505869][ T7663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.072520][ T8238] XFS (nbd3): no-recovery mounts must be read-only. [ 330.656690][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.688835][ T7731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.889878][ T7731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.121429][ T7731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 333.812545][ T7731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.953055][ T7731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.012409][ T7731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.042078][ T7731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.258857][ T7731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.700483][ T7663] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.879544][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.879683][ T6534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.007197][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.008574][ T6537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.108653][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.217497][ T7731] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.251742][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.255144][ T6537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.410850][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.412615][ T6534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.567300][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 336.651004][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 336.940287][ T8307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.545822][ T4900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.614718][ T4900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.630996][ T4900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.640263][ T4900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.650343][ T4900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.844234][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 338.937620][ T8352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.658'. [ 339.187411][ T6539] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.397465][ T6531] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.397760][ T6531] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.687436][ T5592] Bluetooth: hci5: command tx timeout [ 340.569082][ T8381] fuse: fd is not a fuse device [ 341.131748][ T8376] bond1: entered allmulticast mode [ 341.239093][ T8379] macvlan2: entered promiscuous mode [ 341.239158][ T8379] macvlan2: entered allmulticast mode [ 341.242181][ T8379] bond1: entered promiscuous mode [ 341.290426][ T8379] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 341.424793][ T8379] bond1: left promiscuous mode [ 341.783338][ T5592] Bluetooth: hci5: command tx timeout [ 341.894509][ T4900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.954867][ T4900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.975042][ T4900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.986785][ T4900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.038196][ T4900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.285229][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 342.286905][ T8405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.669'. [ 342.456244][ T8410] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 342.988599][ T8410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.066658][ T8414] bond3: (slave geneve2): making interface the new active one [ 343.094188][ T8414] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 343.235099][ T8417] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 343.451288][ T8418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.578151][ T8418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.661501][ T8418] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 343.703862][ T8418] bond0 (unregistering): Released all slaves [ 343.789170][ T8427] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 343.868560][ T5592] Bluetooth: hci5: command tx timeout [ 344.251912][ T5592] Bluetooth: hci0: command tx timeout [ 344.554357][ T8427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.565407][ T8427] team0: Port device netdevsim1 added [ 344.798122][ T8442] netlink: 'syz.3.681': attribute type 4 has an invalid length. [ 344.850702][ T8444] netlink: 'syz.3.681': attribute type 4 has an invalid length. [ 345.929909][ T5592] Bluetooth: hci5: command tx timeout [ 346.117418][ T8460] Could not find key with description: [syz0] [ 346.117441][ T8460] process_request_key_err: No key [ 346.117451][ T8460] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 346.117464][ T8460] One or more global auth toks could not properly register; rc = [-2] [ 346.117540][ T8460] Error validating options; rc = [-2] [ 346.328014][ T5592] Bluetooth: hci0: command tx timeout [ 348.407346][ T5592] Bluetooth: hci0: command tx timeout [ 349.804361][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.698'. [ 350.487291][ T5592] Bluetooth: hci0: command tx timeout [ 350.768019][ T6531] bridge_slave_1: left allmulticast mode [ 350.768064][ T6531] bridge_slave_1: left promiscuous mode [ 350.768359][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.056231][ T6531] bridge_slave_0: left allmulticast mode [ 351.056274][ T6531] bridge_slave_0: left promiscuous mode [ 351.056561][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.382792][ T8518] FAULT_INJECTION: forcing a failure. [ 351.382792][ T8518] name failslab, interval 1, probability 0, space 0, times 0 [ 351.382837][ T8518] CPU: 0 UID: 0 PID: 8518 Comm: syz.3.705 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 351.382868][ T8518] Tainted: [L]=SOFTLOCKUP [ 351.382876][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.382888][ T8518] Call Trace: [ 351.382933][ T8518] [ 351.382991][ T8518] dump_stack_lvl+0xe8/0x150 [ 351.383145][ T8518] should_fail_ex+0x46b/0x600 [ 351.383219][ T8518] should_failslab+0xa8/0x100 [ 351.383282][ T8518] __kmalloc_cache_noprof+0xa1/0x680 [ 351.383322][ T8518] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 351.383356][ T8518] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 351.383384][ T8518] io_uring_alloc_task_context+0xa2/0x6c0 [ 351.383408][ T8518] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 351.383442][ T8518] __io_uring_add_tctx_node+0x48d/0x630 [ 351.383500][ T8518] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 351.383528][ T8518] ? __fget_files+0x2a/0x420 [ 351.383564][ T8518] ? __fget_files+0x2a/0x420 [ 351.383589][ T8518] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 351.383621][ T8518] __se_sys_io_uring_enter+0x18c9/0x1bb0 [ 351.383669][ T8518] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 351.383711][ T8518] ? rcu_is_watching+0x16/0xb0 [ 351.383779][ T8518] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 351.383812][ T8518] do_syscall_64+0x166/0x520 [ 351.383925][ T8518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.383963][ T8518] ? clear_bhb_loop+0x70/0xc0 [ 351.383989][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.384010][ T8518] RIP: 0033:0x7f84c829e159 [ 351.384051][ T8518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.384070][ T8518] RSP: 002b:00007f84c64d4fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 351.384117][ T8518] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f84c829e159 [ 351.384133][ T8518] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 351.384146][ T8518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008 [ 351.384159][ T8518] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 351.384171][ T8518] R13: 00007f84c8526128 R14: 00007f84c8526090 R15: 00007ffd723824d8 [ 351.384206][ T8518] [ 353.158238][ T6531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.219477][ T6531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.381988][ T6531] bond0 (unregistering): Released all slaves [ 353.979494][ T6537] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.811611][ T6531] hsr_slave_0: left promiscuous mode [ 354.858663][ T6531] hsr_slave_1: left promiscuous mode [ 354.862416][ T8555] tipc: Failed to remove unknown binding: 66,0,0/0:3518006011/3518006012 [ 354.863224][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.914555][ T8555] tipc: Failed to remove unknown binding: 66,0,0/0:3518006011/3518006012 [ 355.040778][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.849246][ T8575] overlayfs: failed to clone upperpath [ 356.717085][ T8591] FAULT_INJECTION: forcing a failure. [ 356.717085][ T8591] name failslab, interval 1, probability 0, space 0, times 0 [ 356.717186][ T8591] CPU: 0 UID: 0 PID: 8591 Comm: syz.3.726 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.717223][ T8591] Tainted: [L]=SOFTLOCKUP [ 356.717232][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.717248][ T8591] Call Trace: [ 356.717258][ T8591] [ 356.717269][ T8591] dump_stack_lvl+0xe8/0x150 [ 356.717326][ T8591] should_fail_ex+0x46b/0x600 [ 356.717365][ T8591] should_failslab+0xa8/0x100 [ 356.717433][ T8591] ? fanotify_add_mark+0x328/0x12d0 [ 356.717509][ T8591] kmem_cache_alloc_noprof+0x9e/0x690 [ 356.717539][ T8591] ? fsnotify_grab_connector+0x42/0x240 [ 356.717574][ T8591] ? fsnotify_grab_connector+0x197/0x240 [ 356.717607][ T8591] ? fanotify_add_mark+0x328/0x12d0 [ 356.717644][ T8591] fanotify_add_mark+0x328/0x12d0 [ 356.717694][ T8591] do_fanotify_mark+0xe95/0x1020 [ 356.717738][ T8591] ? __pfx_do_fanotify_mark+0x10/0x10 [ 356.717775][ T8591] ? rcu_is_watching+0x16/0xb0 [ 356.717820][ T8591] __x64_sys_fanotify_mark+0xb5/0xd0 [ 356.717852][ T8591] do_syscall_64+0x166/0x520 [ 356.717885][ T8591] ? trace_irq_disable+0x3b/0x140 [ 356.717937][ T8591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.717961][ T8591] ? clear_bhb_loop+0x70/0xc0 [ 356.717989][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.718013][ T8591] RIP: 0033:0x7f84c829e159 [ 356.718034][ T8591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.718054][ T8591] RSP: 002b:00007f84c64f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 356.718082][ T8591] RAX: ffffffffffffffda RBX: 00007f84c8525fa0 RCX: 00007f84c829e159 [ 356.718099][ T8591] RDX: 0000000040009965 RSI: 0000000000000105 RDI: 0000000000000004 [ 356.718114][ T8591] RBP: 00007f84c833506b R08: 0000000000000000 R09: 0000000000000000 [ 356.718130][ T8591] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 356.718144][ T8591] R13: 00007f84c8526038 R14: 00007f84c8525fa0 R15: 00007ffd723824d8 [ 356.718181][ T8591] [ 357.510226][ T6531] team0 (unregistering): Port device team_slave_1 removed [ 357.568187][ T6531] team0 (unregistering): Port device team_slave_0 removed [ 358.833687][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 359.849289][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.849549][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.849771][ T8331] bridge_slave_0: entered allmulticast mode [ 359.881106][ T8331] bridge_slave_0: entered promiscuous mode [ 359.956565][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.956727][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.957055][ T8331] bridge_slave_1: entered allmulticast mode [ 360.009018][ T8331] bridge_slave_1: entered promiscuous mode [ 360.120983][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.121192][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.121377][ T8400] bridge_slave_0: entered allmulticast mode [ 360.125568][ T8400] bridge_slave_0: entered promiscuous mode [ 360.162153][ T8331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.163770][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.163975][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.164161][ T8400] bridge_slave_1: entered allmulticast mode [ 360.208093][ T8400] bridge_slave_1: entered promiscuous mode [ 360.238021][ T8331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.599393][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.605124][ T8331] team0: Port device team_slave_0 added [ 360.625257][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.638178][ T8331] team0: Port device team_slave_1 added [ 360.917997][ T8400] team0: Port device team_slave_0 added [ 360.920169][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.920187][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.920214][ T8331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.007056][ T8400] team0: Port device team_slave_1 added [ 361.017767][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.017786][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.017813][ T8331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.420984][ T8626] 9pnet_fd: p9_fd_create_tcp (8626): problem connecting socket to 127.0.0.1 [ 363.117268][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 363.223737][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.223758][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.223786][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.248780][ T8646] Bluetooth: MGMT ver 1.23 [ 363.305310][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.305330][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.305355][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.564948][ T8331] hsr_slave_0: entered promiscuous mode [ 363.593156][ T8331] hsr_slave_1: entered promiscuous mode [ 363.596077][ T8331] debugfs: 'hsr0' already exists in 'hsr' [ 363.596105][ T8331] Cannot create hsr debugfs directory [ 364.360199][ T8400] hsr_slave_0: entered promiscuous mode [ 364.366813][ T8400] hsr_slave_1: entered promiscuous mode [ 364.374499][ T8400] debugfs: 'hsr0' already exists in 'hsr' [ 364.374532][ T8400] Cannot create hsr debugfs directory [ 365.027906][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 366.232382][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 366.282576][ T8677] bridge3: port 1(erspan0) entered blocking state [ 366.298882][ T8677] bridge3: port 1(erspan0) entered disabled state [ 366.299124][ T8677] erspan0: entered allmulticast mode [ 366.308322][ T8677] erspan0: entered promiscuous mode [ 366.311721][ T8677] bridge3: port 1(erspan0) entered blocking state [ 366.311872][ T8677] bridge3: port 1(erspan0) entered forwarding state [ 367.751652][ T8699] netlink: 'syz.2.758': attribute type 4 has an invalid length. [ 368.646422][ T8712] overlayfs: failed to clone upperpath [ 369.546735][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 372.308722][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 376.559092][ T6531] bridge_slave_1: left allmulticast mode [ 376.559131][ T6531] bridge_slave_1: left promiscuous mode [ 376.559475][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.886924][ T6531] bridge_slave_0: left allmulticast mode [ 376.886968][ T6531] bridge_slave_0: left promiscuous mode [ 376.900881][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.835095][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.069090][ T6531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.127911][ T6531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.152127][ T6531] bond0 (unregistering): Released all slaves [ 379.338775][ T8836] netlink: 56 bytes leftover after parsing attributes in process `syz.0.797'. [ 379.903106][ T6531] hsr_slave_0: left promiscuous mode [ 379.931007][ T8845] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 379.931032][ T8845] netlink: 'syz.3.800': attribute type 2 has an invalid length. [ 379.952774][ T6531] hsr_slave_1: left promiscuous mode [ 379.954192][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.000000][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.329702][ T6531] team0 (unregistering): Port device team_slave_1 removed [ 382.191856][ T6531] team0 (unregistering): Port device team_slave_0 removed [ 384.737074][ T8890] pxa27x-udc pcspkr: error -EINVAL: invalid resource (null) [ 384.738868][ T8890] pxa27x-udc pcspkr: probe with driver pxa27x-udc failed with error -22 [ 385.145580][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 385.300186][ T8898] bridge1: port 1(veth0_to_bond) entered blocking state [ 385.300332][ T8898] bridge1: port 1(veth0_to_bond) entered disabled state [ 385.300537][ T8898] veth0_to_bond: entered allmulticast mode [ 385.336739][ T8898] veth0_to_bond: entered promiscuous mode [ 385.587904][ T8904] netlink: 15143 bytes leftover after parsing attributes in process `syz.0.815'. [ 385.808224][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 387.188945][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'. [ 387.188979][ T8937] netlink: 44 bytes leftover after parsing attributes in process `syz.2.822'. [ 387.192803][ T8937] FAULT_INJECTION: forcing a failure. [ 387.192803][ T8937] name fail_futex, interval 1, probability 0, space 0, times 0 [ 387.192847][ T8937] CPU: 1 UID: 0 PID: 8937 Comm: syz.2.822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.192880][ T8937] Tainted: [L]=SOFTLOCKUP [ 387.192888][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.192902][ T8937] Call Trace: [ 387.192912][ T8937] [ 387.192922][ T8937] dump_stack_lvl+0xe8/0x150 [ 387.192967][ T8937] should_fail_ex+0x46b/0x600 [ 387.193005][ T8937] get_futex_key+0x1b4/0x1580 [ 387.193076][ T8937] ? __pfx_get_futex_key+0x10/0x10 [ 387.193106][ T8937] ? kasan_save_free_info+0x40/0x50 [ 387.193132][ T8937] ? __kasan_slab_free+0x5c/0x80 [ 387.193161][ T8937] ? kfree+0x1c5/0x6d0 [ 387.193186][ T8937] ? __se_sys_add_key+0x3a3/0x420 [ 387.193230][ T8937] ? do_syscall_64+0x166/0x520 [ 387.193261][ T8937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.193296][ T8937] futex_wake+0x119/0x600 [ 387.193328][ T8937] ? __pfx_futex_wake+0x10/0x10 [ 387.193374][ T8937] do_futex+0x458/0x4e0 [ 387.193401][ T8937] ? __pfx_do_futex+0x10/0x10 [ 387.193423][ T8937] ? rcu_is_watching+0x16/0xb0 [ 387.193461][ T8937] __se_sys_futex+0x3a8/0x450 [ 387.193492][ T8937] ? __pfx___se_sys_futex+0x10/0x10 [ 387.193514][ T8937] ? rcu_is_watching+0x16/0xb0 [ 387.193553][ T8937] ? __x64_sys_futex+0x21/0xf0 [ 387.193579][ T8937] do_syscall_64+0x166/0x520 [ 387.193612][ T8937] ? trace_irq_disable+0x3b/0x140 [ 387.193640][ T8937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.193663][ T8937] ? clear_bhb_loop+0x70/0xc0 [ 387.193691][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.193715][ T8937] RIP: 0033:0x7f1619d9e159 [ 387.193737][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.193759][ T8937] RSP: 002b:00007f1617ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 387.193785][ T8937] RAX: ffffffffffffffda RBX: 00007f161a025fa8 RCX: 00007f1619d9e159 [ 387.193802][ T8937] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f161a025fac [ 387.193819][ T8937] RBP: 00007f161a025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 387.193835][ T8937] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 387.193850][ T8937] R13: 00007f161a026038 R14: 00007ffd08dfe4f0 R15: 00007ffd08dfe5d8 [ 387.193886][ T8937] [ 392.165341][ T8331] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 392.352901][ T8331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.402959][ T8331] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.675213][ T8331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.679546][ T8331] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.817836][ T8331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.236873][ T8331] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 394.303390][ T8331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.497844][ T8400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 395.646532][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.656967][ T8400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 395.852836][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.870268][ T8400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 395.999480][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.025634][ T8400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 396.075348][ T8400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 396.764230][ T8331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.156575][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.301740][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.455019][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.845'. [ 397.845906][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.846148][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.861523][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.861735][ T6538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.024982][ T4900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 398.095851][ T4900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.128760][ T4900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.153067][ T4900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 398.155533][ T4900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 398.223195][ T9081] overlayfs: failed to clone upperpath [ 398.951387][ T9094] jffs2: notice: (9094) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 399.606866][ T9099] @ÿ: renamed from veth0_vlan (while UP) [ 400.337270][ T4900] Bluetooth: hci3: command tx timeout [ 402.418533][ T5592] Bluetooth: hci3: command tx timeout [ 402.463212][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.509484][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.511634][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.514646][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.515421][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.905281][ T9143] lo: entered allmulticast mode [ 402.916087][ T9143] lo: left allmulticast mode [ 404.489511][ T4900] Bluetooth: hci3: command tx timeout [ 404.887323][ T4900] Bluetooth: hci5: command tx timeout [ 404.907400][ T5716] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 405.228771][ T5716] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 405.239360][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.239477][ T5716] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 405.239506][ T5716] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.266058][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.266089][ T5716] usb 3-1: Product: syz [ 405.266104][ T5716] usb 3-1: Manufacturer: syz [ 405.266118][ T5716] usb 3-1: SerialNumber: syz [ 405.625638][ T9181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.849338][ T5716] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 405.849394][ T5716] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 405.849506][ T5716] usbserial_generic 3-1:1.0: generic converter detected [ 406.117047][ T5716] usb 3-1: generic converter now attached to ttyUSB0 [ 406.236512][ T5716] usb 3-1: USB disconnect, device number 11 [ 406.572668][ T4900] Bluetooth: hci3: command tx timeout [ 406.960729][ T5716] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 406.971349][ T4900] Bluetooth: hci5: command tx timeout [ 407.215718][ T5716] usbserial_generic 3-1:1.0: device disconnected [ 408.490905][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.877'. [ 408.763674][ T9207] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 408.943203][ T9212] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 408.943229][ T9212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.879'. [ 409.047492][ T4900] Bluetooth: hci5: command tx timeout [ 409.115316][ T9207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.156485][ T9208] dummy0: left promiscuous mode [ 409.301752][ T9208] bond4: (slave dummy0): making interface the new active one [ 409.323629][ T9208] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 409.351122][ T9212] dummy0: entered promiscuous mode [ 409.568762][ T9212] bond4: (slave dummy0): Releasing active interface [ 410.960391][ T9235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.960416][ T9235] IPv6: NLM_F_CREATE should be set when creating new route [ 411.131018][ T4900] Bluetooth: hci5: command tx timeout [ 412.389714][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.393522][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.606719][ T9235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.634629][ T9235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.247395][ T5319] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 414.411063][ T5319] usb 3-1: Using ep0 maxpacket: 32 [ 414.412059][ T5319] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 414.414133][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.454595][ T5319] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 414.843700][ T5319] gspca_nw80x: reg_r err -71 [ 414.843874][ T5319] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 414.865322][ T5319] usb 3-1: USB disconnect, device number 12 [ 415.371636][ T9076] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.372046][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.372249][ T9076] bridge_slave_0: entered allmulticast mode [ 415.375899][ T9076] bridge_slave_0: entered promiscuous mode [ 415.386482][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.386735][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.386910][ T9076] bridge_slave_1: entered allmulticast mode [ 415.409411][ T9076] bridge_slave_1: entered promiscuous mode [ 415.667471][ T5994] bridge_slave_1: left allmulticast mode [ 415.667502][ T5994] bridge_slave_1: left promiscuous mode [ 415.667693][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.863469][ T5994] bridge_slave_0: left allmulticast mode [ 415.863511][ T5994] bridge_slave_0: left promiscuous mode [ 415.883493][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.948103][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.038216][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.121105][ T5994] bond0 (unregistering): Released all slaves [ 418.597870][ T9076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.651631][ T9076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.139546][ T5994] hsr_slave_0: left promiscuous mode [ 419.183248][ T5994] hsr_slave_1: left promiscuous mode [ 419.184746][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.232431][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.770540][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 420.878238][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 421.162974][ T4900] Bluetooth: hci2: unexpected event for opcode 0x203c [ 421.399972][ T9076] team0: Port device team_slave_0 added [ 421.470804][ T9076] team0: Port device team_slave_1 added [ 421.907812][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.907835][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.907865][ T9076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.931460][ T38] audit: type=1326 audit(1789716328.203:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1619d9ef49 code=0x7ffc0000 [ 421.931515][ T38] audit: type=1326 audit(1789716328.203:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1619d5aebb code=0x7ffc0000 [ 421.931558][ T38] audit: type=1326 audit(1789716328.203:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1619d9e159 code=0x7ffc0000 [ 421.931602][ T38] audit: type=1326 audit(1789716328.203:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1619d9e159 code=0x7ffc0000 [ 421.958626][ T38] audit: type=1326 audit(1789716328.203:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1619d5a5ac code=0x7ffc0000 [ 421.958683][ T38] audit: type=1326 audit(1789716328.213:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1619d9e159 code=0x7ffc0000 [ 421.958727][ T38] audit: type=1326 audit(1789716328.223:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1619d5a60e code=0x7ffc0000 [ 421.958783][ T38] audit: type=1326 audit(1789716328.223:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1619d9ddeb code=0x7ffc0000 [ 421.958826][ T38] audit: type=1326 audit(1789716328.223:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1619d9e159 code=0x7ffc0000 [ 421.959074][ T38] audit: type=1326 audit(1789716328.233:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9298 comm="syz.2.909" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1619d9e159 code=0x7ffc0000 [ 421.997003][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.997022][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.997048][ T9076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.949724][ T9076] hsr_slave_0: entered promiscuous mode [ 422.954493][ T9076] hsr_slave_1: entered promiscuous mode [ 422.958337][ T9076] debugfs: 'hsr0' already exists in 'hsr' [ 422.958366][ T9076] Cannot create hsr debugfs directory [ 422.981454][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.981596][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.981797][ T9144] bridge_slave_0: entered allmulticast mode [ 422.994257][ T9144] bridge_slave_0: entered promiscuous mode [ 423.237953][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.238113][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.238342][ T9144] bridge_slave_1: entered allmulticast mode [ 423.310474][ T9144] bridge_slave_1: entered promiscuous mode [ 423.944703][ T9326] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.915'. [ 423.984441][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.142469][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.442414][ T9144] team0: Port device team_slave_0 added [ 425.142875][ T9342] netlink: 32 bytes leftover after parsing attributes in process `syz.2.919'. [ 425.245368][ T9343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.919'. [ 426.323838][ T9144] team0: Port device team_slave_1 added [ 426.578628][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 427.196116][ T38] kauditd_printk_skb: 24 callbacks suppressed [ 427.196140][ T38] audit: type=1326 audit(1789716333.463:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.2.922" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1619d9e159 code=0x7fc00000 [ 427.245562][ T38] audit: type=1326 audit(1789716333.513:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.2.922" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1619d9e159 code=0x7fc00000 [ 427.321477][ T38] audit: type=1326 audit(1789716333.593:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.2.922" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1619d97ed7 code=0x7fc00000 [ 427.331237][ T38] audit: type=1326 audit(1789716333.603:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.2.922" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1619d3f4d9 code=0x7fc00000 [ 427.331292][ T38] audit: type=1326 audit(1789716333.603:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.2.922" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1619d3f59d code=0x7fc00000 [ 427.343548][ T38] audit: type=1326 audit(1789716333.613:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.2.922" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1619d9e159 code=0x7fc00000 [ 428.221173][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.221195][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.221227][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.360153][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.360174][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.360205][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.581841][ T6535] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.581881][ T6535] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.209550][ T9144] hsr_slave_0: entered promiscuous mode [ 430.212593][ T9144] hsr_slave_1: entered promiscuous mode [ 430.234219][ T9144] debugfs: 'hsr0' already exists in 'hsr' [ 430.234250][ T9144] Cannot create hsr debugfs directory [ 430.546586][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 430.659482][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880328b6000: rx timeout, send abort [ 430.664674][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880328b6000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 430.860416][ T5709] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 431.082520][ T5709] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 431.105962][ T5709] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 431.105996][ T5709] usb 3-1: config 0 has no interface number 0 [ 431.106048][ T5709] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 431.106079][ T5709] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.106113][ T5709] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.106142][ T5709] usb 3-1: config 0 interface 1 has no altsetting 0 [ 431.164198][ T5709] usb 3-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 431.164229][ T5709] usb 3-1: Manufacturer: syz [ 431.219008][ T5709] usb 3-1: config 0 descriptor?? [ 431.992219][ T5709] uclogic 0003:145F:0212.0003: pen parameters not found [ 431.992328][ T5709] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 432.035896][ T9406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.281426][ T9406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.393697][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 432.479348][ T5695] usb 3-1: USB disconnect, device number 13 [ 432.887628][ T3322] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.887671][ T3322] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.887893][ T3322] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.887923][ T3322] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.887973][ T3322] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.888001][ T3322] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.440657][ T5994] bridge_slave_1: left allmulticast mode [ 437.440699][ T5994] bridge_slave_1: left promiscuous mode [ 437.440995][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.619688][ T5994] bridge_slave_0: left allmulticast mode [ 437.619730][ T5994] bridge_slave_0: left promiscuous mode [ 437.620015][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.228237][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.252816][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.288088][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.344109][ T5994] bond0 (unregistering): Released all slaves [ 441.157330][ T5994] hsr_slave_0: left promiscuous mode [ 441.197299][ T5994] hsr_slave_1: left promiscuous mode [ 441.198702][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.317260][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.617274][ T5599] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 441.768340][ T5599] usb 3-1: Using ep0 maxpacket: 8 [ 441.771745][ T5599] usb 3-1: unable to get BOS descriptor or descriptor too short [ 441.771806][ T5599] usb 3-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 441.773304][ T5599] usb 3-1: config 10 has an invalid interface number: 91 but max is 0 [ 441.773331][ T5599] usb 3-1: config 10 has no interface number 0 [ 441.773365][ T5599] usb 3-1: config 10 interface 91 has no altsetting 0 [ 441.782936][ T5599] usb 3-1: string descriptor 0 read error: -22 [ 441.783089][ T5599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.897740][ T5599] uvcvideo 3-1:10.91: Found Unit with invalid ID 0 [ 441.899413][ T5599] uvcvideo 3-1:10.91: Found UVC 0.40 device (097b:61f6) [ 441.899753][ T5599] uvcvideo 3-1:10.91: Entity type for entity Output 32771 was not initialized! [ 441.941522][ T5599] uvcvideo 3-1:10.91: Entity type for entity Media 2 was not initialized! [ 442.326446][ T5716] usb 3-1: USB disconnect, device number 14 [ 443.150311][ T38] audit: type=1800 audit(1789716349.423:71): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.958" name="bus" dev="tmpfs" ino=1488 res=0 errno=0 [ 443.178843][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 443.350737][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 444.695337][ T38] audit: type=1800 audit(1789716350.963:72): pid=9502 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.962" name="file1" dev="tmpfs" ino=1604 res=0 errno=0 [ 445.294571][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 445.456707][ T9515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.967'. [ 449.155146][ T9564] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 449.676273][ T9567] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 449.877282][ T9569] macvlan2: entered promiscuous mode [ 449.877340][ T9569] macvlan2: entered allmulticast mode [ 449.880008][ T9569] bond0: entered promiscuous mode [ 450.046890][ T9569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 450.092365][ T9569] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 450.127514][ T9569] bond0: left promiscuous mode [ 453.703865][ T9076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 453.819063][ T9076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.880953][ T9076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 454.055005][ T9076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.122068][ T9076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 454.209177][ T9076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 455.181755][ T9076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 456.159879][ T9076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.688624][ T9144] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.784847][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.790087][ T9144] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 458.904240][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.914875][ T9144] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.119053][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.139786][ T9144] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 459.356624][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.492251][ T5592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.543146][ T5592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.546105][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.577427][ T5592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.593080][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 460.788250][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.847352][ T4900] Bluetooth: hci0: command tx timeout [ 462.973853][ T9754] syzkaller0: entered allmulticast mode [ 463.057675][ T4900] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 463.094253][ T4900] Bluetooth: hci2: Injecting HCI hardware error event [ 463.095187][ T4900] Bluetooth: hci2: hardware error 0x00 [ 463.441155][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 463.530016][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 463.552313][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 463.569662][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 463.570852][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.940258][ T5605] Bluetooth: hci0: command tx timeout [ 466.008528][ T5591] Bluetooth: hci0: command tx timeout [ 466.008530][ T5592] Bluetooth: hci3: command tx timeout [ 466.168028][ T4900] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 466.196023][ T9824] binder_alloc: 9823: binder_alloc_buf size 1024 failed, no address space [ 466.196143][ T9824] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 467.552365][ T5319] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 467.603271][ T9838] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 468.102671][ T4900] Bluetooth: hci3: command tx timeout [ 468.102900][ T4900] Bluetooth: hci0: command tx timeout [ 468.557017][ T5319] usb 3-1: New USB device found, idVendor=13d3, idProduct=3207, bcdDevice= 1.00 [ 468.566167][ T5319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 468.566200][ T5319] usb 3-1: Product: syz [ 468.566217][ T5319] usb 3-1: Manufacturer: syz [ 468.795527][ T5319] dvb-usb: found a 'TwinhanDTV StarBox DVB-S USB2.0 (VP7021)' in cold state, will try to load a firmware [ 468.822633][ T5319] usb 3-1: Direct firmware load for dvb-usb-vp702x-02.fw failed with error -2 [ 468.822668][ T5319] usb 3-1: Falling back to sysfs fallback for: dvb-usb-vp702x-02.fw [ 470.469382][ T4900] Bluetooth: hci3: command tx timeout [ 472.568471][ T4900] Bluetooth: hci3: command tx timeout [ 473.083602][ T5994] bridge_slave_1: left allmulticast mode [ 473.083645][ T5994] bridge_slave_1: left promiscuous mode [ 473.083940][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.391272][ T9906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1042'. [ 473.392520][ T9906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1042'. [ 473.548182][ T5994] bridge_slave_0: left allmulticast mode [ 473.548226][ T5994] bridge_slave_0: left promiscuous mode [ 473.548545][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.996714][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.252080][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.428684][ T5994] bond0 (unregistering): Released all slaves [ 478.633500][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1053'. [ 478.781540][ T9948] 9p: Bad value for 'rfdno' [ 479.063624][ T5994] hsr_slave_0: left promiscuous mode [ 479.102159][ T5994] hsr_slave_1: left promiscuous mode [ 479.105981][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.156373][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.505997][ T5695] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 481.210675][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 481.333548][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 481.573437][ T9978] ceph: No mds server is up or the cluster is laggy [ 481.694638][ T5695] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 482.646938][ T9985] ceph: No mds server is up or the cluster is laggy [ 482.727267][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.727415][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.727605][ T9700] bridge_slave_0: entered allmulticast mode [ 482.730442][ T9700] bridge_slave_0: entered promiscuous mode [ 483.038785][ T9700] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.038910][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.039110][ T9700] bridge_slave_1: entered allmulticast mode [ 483.049575][ T9700] bridge_slave_1: entered promiscuous mode [ 483.468699][ T9700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.777445][ T9700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.029954][ T9764] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.030081][ T9764] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.030290][ T9764] bridge_slave_0: entered allmulticast mode [ 486.061201][ T9764] bridge_slave_0: entered promiscuous mode [ 486.079959][ T9700] team0: Port device team_slave_0 added [ 486.239967][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.240118][ T9764] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.240348][ T9764] bridge_slave_1: entered allmulticast mode [ 486.275115][ T9764] bridge_slave_1: entered promiscuous mode [ 486.298504][ T9700] team0: Port device team_slave_1 added [ 486.977992][ T38] audit: type=1326 audit(1789716392.783:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10022 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1619d9e159 code=0x0 [ 487.559531][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 489.071452][ T9764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.090613][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.090632][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.090659][ T9700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.096615][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.096632][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.096659][ T9700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.205365][ T9764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.535766][ T9764] team0: Port device team_slave_0 added [ 489.584967][ T9764] team0: Port device team_slave_1 added [ 489.778890][ T9700] hsr_slave_0: entered promiscuous mode [ 489.782636][ T9700] hsr_slave_1: entered promiscuous mode [ 489.786681][ T9700] debugfs: 'hsr0' already exists in 'hsr' [ 489.786710][ T9700] Cannot create hsr debugfs directory [ 490.036053][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.036073][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.036099][ T9764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.091945][ T9764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.091967][ T9764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.091997][ T9764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.472398][ T9764] hsr_slave_0: entered promiscuous mode [ 493.479985][ T9764] hsr_slave_1: entered promiscuous mode [ 493.483328][ T9764] debugfs: 'hsr0' already exists in 'hsr' [ 493.518908][ T9764] Cannot create hsr debugfs directory [ 495.409991][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 498.136828][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 498.139145][T10109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1088'. [ 501.087478][T10143] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1095'. [ 501.199090][T10147] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1095'. [ 503.010631][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.488575][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 504.893023][ T5994] bridge_slave_1: left allmulticast mode [ 504.893062][ T5994] bridge_slave_1: left promiscuous mode [ 504.923115][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.269385][ T5994] bridge_slave_0: left allmulticast mode [ 505.269427][ T5994] bridge_slave_0: left promiscuous mode [ 505.269701][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.732965][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 506.898018][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.080340][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.164414][ T5994] bond0 (unregistering): Released all slaves [ 508.409857][ T5994] hsr_slave_0: left promiscuous mode [ 508.478874][ T5994] hsr_slave_1: left promiscuous mode [ 508.496849][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.519396][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.558271][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 510.628015][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 511.500959][ T5246] 8021q: adding VLAN 0 to HW filter on device eth12 [ 520.468587][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.569167][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.572526][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.586953][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.615430][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.153413][ T5592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 521.193318][ T5592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 521.195142][ T5592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 521.203840][ T5592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 521.243347][ T5592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 522.807284][ T4900] Bluetooth: hci5: command tx timeout [ 523.449428][ T4900] Bluetooth: hci6: command tx timeout [ 524.050152][ T5592] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 524.092723][ T5592] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 524.096830][ T5592] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 524.111526][ T5592] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 524.128292][ T5592] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 524.897617][ T5592] Bluetooth: hci5: command tx timeout [ 525.537190][ T5592] Bluetooth: hci6: command tx timeout [ 526.411834][ T5592] Bluetooth: hci7: command tx timeout [ 526.968388][ T5592] Bluetooth: hci5: command tx timeout [ 527.607217][ T5592] Bluetooth: hci6: command tx timeout [ 527.970242][T10445] fuse: fd is not a fuse device [ 528.487189][ T5592] Bluetooth: hci7: command tx timeout [ 529.047300][ T5592] Bluetooth: hci5: command tx timeout [ 529.687146][ T5592] Bluetooth: hci6: command tx timeout [ 529.762082][ T4951] udevd[4951]: worker [8870] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 530.567963][ T5592] Bluetooth: hci7: command tx timeout [ 532.995443][ T5592] Bluetooth: hci7: command tx timeout [ 533.336311][ T5319] dvb-usb: did not find the firmware file 'dvb-usb-vp702x-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 533.336408][ T5319] dvb_usb_vp702x 3-1:1.0: probe with driver dvb_usb_vp702x failed with error -110 [ 533.351358][ T5319] usb 3-1: USB disconnect, device number 15 [ 533.413880][ T38] audit: type=1800 audit(1789716439.683:74): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1155" name="file1" dev="tmpfs" ino=2082 res=0 errno=0 [ 535.717961][ T38] audit: type=1326 audit(1789716441.993:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 535.718239][ T38] audit: type=1326 audit(1789716441.993:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 535.732599][ T38] audit: type=1326 audit(1789716441.993:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 535.732660][ T38] audit: type=1326 audit(1789716442.013:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 535.732707][ T38] audit: type=1326 audit(1789716442.013:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 535.735212][ T38] audit: type=1326 audit(1789716442.013:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 535.735278][ T38] audit: type=1326 audit(1789716442.013:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 535.735327][ T38] audit: type=1326 audit(1789716442.013:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 535.738130][ T38] audit: type=1326 audit(1789716442.013:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10503 comm="syz.3.1162" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 537.122751][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.122907][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.123094][T10326] bridge_slave_0: entered allmulticast mode [ 537.162430][T10326] bridge_slave_0: entered promiscuous mode [ 537.474425][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.474578][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.474795][T10326] bridge_slave_1: entered allmulticast mode [ 537.509762][T10326] bridge_slave_1: entered promiscuous mode [ 538.317377][T10334] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.317626][T10334] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.317860][T10334] bridge_slave_0: entered allmulticast mode [ 538.326712][T10334] bridge_slave_0: entered promiscuous mode [ 539.322998][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.328525][T10334] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.328675][T10334] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.328886][T10334] bridge_slave_1: entered allmulticast mode [ 539.344737][T10334] bridge_slave_1: entered promiscuous mode [ 539.518576][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.410106][ T3322] bridge_slave_1: left allmulticast mode [ 541.410163][ T3322] bridge_slave_1: left promiscuous mode [ 541.410481][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.582639][ T3322] bridge_slave_0: left allmulticast mode [ 541.582683][ T3322] bridge_slave_0: left promiscuous mode [ 541.582955][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.050010][ T9782] IPVS: starting estimator thread 0... [ 542.147282][T10554] IPVS: using max 7 ests per chain, 16800 per kthread [ 542.354708][ T3322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.708490][ T3322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.982831][ T3322] bond0 (unregistering): Released all slaves [ 544.437113][T10334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.458220][T10380] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.458369][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.458595][T10380] bridge_slave_0: entered allmulticast mode [ 544.492397][T10380] bridge_slave_0: entered promiscuous mode [ 544.540741][T10326] team0: Port device team_slave_0 added [ 544.549245][T10334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.549672][T10568] syz_tun: entered allmulticast mode [ 544.552672][T10380] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.552815][T10380] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.553009][T10380] bridge_slave_1: entered allmulticast mode [ 544.556147][T10380] bridge_slave_1: entered promiscuous mode [ 544.560957][T10326] team0: Port device team_slave_1 added [ 544.600983][T10567] syz_tun: left allmulticast mode [ 544.787388][ T3322] hsr_slave_0: left promiscuous mode [ 544.827465][ T3322] hsr_slave_1: left promiscuous mode [ 544.828866][ T3322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.877072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 544.897069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 544.907084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 544.917069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 544.927062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 544.937077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 544.947066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 544.957069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 544.967079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 544.977066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 545.399826][ T3322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.389545][ T3322] team0 (unregistering): Port device team_slave_1 removed [ 546.663685][ T3322] team0 (unregistering): Port device team_slave_0 removed [ 548.645412][T10334] team0: Port device team_slave_0 added [ 549.973762][T10380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.007216][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.007238][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.007269][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.022558][T10334] team0: Port device team_slave_1 added [ 550.069775][T10380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.090649][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.090668][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.090707][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.660050][T10334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.660070][T10334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.660100][T10334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.671704][T10380] team0: Port device team_slave_0 added [ 550.691821][T10380] team0: Port device team_slave_1 added [ 550.959841][T10334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.959864][T10334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.959895][T10334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.653796][T10326] hsr_slave_0: entered promiscuous mode [ 551.655394][T10326] hsr_slave_1: entered promiscuous mode [ 551.656900][T10326] debugfs: 'hsr0' already exists in 'hsr' [ 551.656991][T10326] Cannot create hsr debugfs directory [ 551.701682][T10380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.701705][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.701735][T10380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.705770][T10380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.705790][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.705820][T10380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.465129][T10380] hsr_slave_0: entered promiscuous mode [ 552.470959][T10380] hsr_slave_1: entered promiscuous mode [ 552.475917][T10380] debugfs: 'hsr0' already exists in 'hsr' [ 552.475946][T10380] Cannot create hsr debugfs directory [ 552.530493][T10334] hsr_slave_0: entered promiscuous mode [ 552.823288][T10334] hsr_slave_1: entered promiscuous mode [ 552.824342][T10334] debugfs: 'hsr0' already exists in 'hsr' [ 552.824369][T10334] Cannot create hsr debugfs directory [ 555.414071][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 555.977384][T10642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.977421][T10642] IPv6: NLM_F_CREATE should be set when creating new route [ 556.512922][ T9813] IPVS: starting estimator thread 0... [ 556.598244][T10649] IPVS: using max 7 ests per chain, 16800 per kthread [ 563.424647][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.958600][T10746] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1219'. [ 565.990521][ T68] bridge_slave_1: left allmulticast mode [ 565.990562][ T68] bridge_slave_1: left promiscuous mode [ 565.990855][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.022446][T10748] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1219'. [ 566.199121][ T68] bridge_slave_0: left allmulticast mode [ 566.199163][ T68] bridge_slave_0: left promiscuous mode [ 566.204496][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.000337][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.118098][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.203038][ T68] bond0 (unregistering): Released all slaves [ 569.721155][ T68] hsr_slave_0: left promiscuous mode [ 569.767264][ T68] hsr_slave_1: left promiscuous mode [ 569.770817][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.808358][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.760437][ T68] team0 (unregistering): Port device team_slave_1 removed [ 572.478064][ T68] team0 (unregistering): Port device team_slave_0 removed [ 578.044115][T10334] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 578.252376][T10334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 578.255626][T10334] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 578.484091][T10334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 578.797685][T10334] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 579.829367][T10334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 579.855144][T10334] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 579.890024][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 579.961378][T10334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.261373][T10862] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 582.070503][ T4900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.135449][ T4900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.144463][ T4900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.166885][ T4900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.177412][ T4900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 582.632076][ T4900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 582.683468][ T4900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 582.693723][ T4900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 582.705083][ T4900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 582.740379][ T4900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 584.247258][ T5592] Bluetooth: hci0: command tx timeout [ 585.383016][ T5591] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 585.426315][ T5591] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 585.434954][ T5591] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 585.461809][ T5591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 585.465247][ T5591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 585.769153][ T5592] Bluetooth: hci3: command tx timeout [ 586.327309][ T5592] Bluetooth: hci0: command tx timeout [ 587.717216][ T5592] Bluetooth: hci6: command tx timeout [ 587.847696][ T5592] Bluetooth: hci3: command tx timeout [ 588.407276][ T5592] Bluetooth: hci0: command tx timeout [ 588.698789][T10958] fuse: fd is not a fuse device [ 589.767472][ T5592] Bluetooth: hci6: command tx timeout [ 589.941070][ T5592] Bluetooth: hci3: command tx timeout [ 590.153940][T10969] tipc: Enabling of bearer rejected, failed to enable media [ 590.487233][ T5592] Bluetooth: hci0: command tx timeout [ 590.746442][ T38] kauditd_printk_skb: 20 callbacks suppressed [ 590.746466][ T38] audit: type=1326 audit(1789716497.013:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 590.843163][ T38] audit: type=1326 audit(1789716497.013:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 591.090381][ T38] audit: type=1326 audit(1789716497.363:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 591.283815][ T38] audit: type=1326 audit(1789716497.503:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 591.284084][ T38] audit: type=1326 audit(1789716497.503:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 591.497847][ T38] audit: type=1326 audit(1789716497.773:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 591.498218][ T38] audit: type=1326 audit(1789716497.773:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 591.499533][ T38] audit: type=1326 audit(1789716497.773:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 591.500047][ T38] audit: type=1326 audit(1789716497.773:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 591.500357][ T38] audit: type=1326 audit(1789716497.773:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10975 comm="syz.3.1254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c829e159 code=0x7ffc0000 [ 592.120464][ T5592] Bluetooth: hci6: command tx timeout [ 592.120508][ T5592] Bluetooth: hci3: command tx timeout [ 595.138755][ T5591] Bluetooth: hci6: command tx timeout [ 598.015064][T11001] Bluetooth: ISO socket layer initialized [ 601.357274][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 601.837555][T11050] netlink: 'syz.3.1268': attribute type 10 has an invalid length. [ 601.837583][T11050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1268'. [ 601.875260][T11046] 8021q: adding VLAN 0 to HW filter on device bond6 [ 601.957667][T11048] dummy0: left promiscuous mode [ 601.994270][T11048] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 602.111103][T11050] dummy0: entered promiscuous mode [ 602.140884][T11050] bond6: (slave dummy0): Releasing backup interface [ 602.977329][ T6544] bridge_slave_1: left allmulticast mode [ 602.977371][ T6544] bridge_slave_1: left promiscuous mode [ 602.977676][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.392028][ T6544] bridge_slave_0: left allmulticast mode [ 603.392071][ T6544] bridge_slave_0: left promiscuous mode [ 603.392381][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.859437][T11069] trusted_key: encrypted_key: insufficient parameters specified [ 606.500354][ T6544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.619331][ T6544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.682701][ T6544] bond0 (unregistering): Released all slaves [ 606.739687][T10886] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.739845][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.740080][T10886] bridge_slave_0: entered allmulticast mode [ 606.748877][T10886] bridge_slave_0: entered promiscuous mode [ 606.853517][T10886] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.853660][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.853892][T10886] bridge_slave_1: entered allmulticast mode [ 606.856881][T10886] bridge_slave_1: entered promiscuous mode [ 607.310855][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.311007][T10893] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.311253][T10893] bridge_slave_0: entered allmulticast mode [ 607.317528][T10893] bridge_slave_0: entered promiscuous mode [ 607.341187][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.402336][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.402486][T10893] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.402718][T10893] bridge_slave_1: entered allmulticast mode [ 607.405848][T10893] bridge_slave_1: entered promiscuous mode [ 607.411630][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.690530][ T6544] hsr_slave_0: left promiscuous mode [ 607.708265][ T6544] hsr_slave_1: left promiscuous mode [ 607.712938][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.748845][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.879037][ T6544] team0 (unregistering): Port device team_slave_1 removed [ 609.990059][ T6544] team0 (unregistering): Port device team_slave_0 removed [ 613.285723][T10893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.289314][T10886] team0: Port device team_slave_0 added [ 613.366172][T10893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.378772][T10886] team0: Port device team_slave_1 added [ 613.561906][T10919] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.562055][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.562239][T10919] bridge_slave_0: entered allmulticast mode [ 613.593952][T10919] bridge_slave_0: entered promiscuous mode [ 613.730596][T10919] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.730748][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.730957][T10919] bridge_slave_1: entered allmulticast mode [ 613.762656][T10919] bridge_slave_1: entered promiscuous mode [ 613.861532][T10893] team0: Port device team_slave_0 added [ 613.863956][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.863972][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.863998][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.992820][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.992841][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.992871][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.024513][T10893] team0: Port device team_slave_1 added [ 615.641448][T10919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.678651][T11136] fuse: fd is not a fuse device [ 615.738689][T10919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.743039][T10893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.743057][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.743088][T10893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.906497][T10893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.906519][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.906549][T10893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.053379][T10919] team0: Port device team_slave_0 added [ 616.071334][T10886] hsr_slave_0: entered promiscuous mode [ 616.072963][T10886] hsr_slave_1: entered promiscuous mode [ 616.074038][T10886] debugfs: 'hsr0' already exists in 'hsr' [ 616.074064][T10886] Cannot create hsr debugfs directory [ 616.088339][T10919] team0: Port device team_slave_1 added [ 616.550689][T10919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.550711][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.550741][T10919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.731053][T10919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.731074][T10919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.731103][T10919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.621348][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 617.621382][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 617.899811][T10893] hsr_slave_0: entered promiscuous mode [ 617.902078][T10893] hsr_slave_1: entered promiscuous mode [ 617.903217][T10893] debugfs: 'hsr0' already exists in 'hsr' [ 617.903243][T10893] Cannot create hsr debugfs directory [ 617.960704][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 618.364890][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 618.364917][ T38] audit: type=1326 audit(1789716524.553:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11155 comm="syz.0.1293" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95dc2ee159 code=0x7fc00000 [ 618.364980][ T38] audit: type=1326 audit(1789716524.553:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11155 comm="syz.0.1293" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f95dc2ee159 code=0x7fc00000 [ 618.510391][T10919] hsr_slave_0: entered promiscuous mode [ 618.511838][T10919] hsr_slave_1: entered promiscuous mode [ 618.512833][T10919] debugfs: 'hsr0' already exists in 'hsr' [ 618.512861][T10919] Cannot create hsr debugfs directory [ 624.573603][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.085577][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 626.585211][T11217] tipc: Started in network mode [ 626.585237][T11217] tipc: Node identity 2000004, cluster identity 4711 [ 626.585252][T11217] tipc: Node number set to 33554436 [ 626.974651][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 627.062401][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 629.291884][T11254] IPVS: length: 104 != 24 [ 630.017797][ T6544] bridge_slave_1: left allmulticast mode [ 630.017839][ T6544] bridge_slave_1: left promiscuous mode [ 630.018287][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.181249][ T6544] bridge_slave_0: left allmulticast mode [ 630.181291][ T6544] bridge_slave_0: left promiscuous mode [ 630.181573][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.319057][ T6544] bridge_slave_1: left allmulticast mode [ 631.319100][ T6544] bridge_slave_1: left promiscuous mode [ 631.319364][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.494865][ T6544] bridge_slave_0: left allmulticast mode [ 631.494910][ T6544] bridge_slave_0: left promiscuous mode [ 631.495193][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.353182][ T6544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.559933][ T6544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.624298][ T6544] bond0 (unregistering): Released all slaves [ 634.250260][ T6544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.382993][ T6544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.520073][ T6544] bond0 (unregistering): Released all slaves [ 634.686345][ T5246] 8021q: adding VLAN 0 to HW filter on device eth12 [ 637.377331][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 637.690348][ T6544] hsr_slave_0: left promiscuous mode [ 638.637335][ T6544] hsr_slave_1: left promiscuous mode [ 638.638792][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.678351][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.888245][ T6544] hsr_slave_0: left promiscuous mode [ 638.928724][ T6544] hsr_slave_1: left promiscuous mode [ 638.931636][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.972643][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.196385][ T6544] team0 (unregistering): Port device team_slave_1 removed [ 640.434717][ T6544] team0 (unregistering): Port device team_slave_0 removed [ 641.710366][ T6544] team0 (unregistering): Port device team_slave_1 removed [ 641.765135][ T6544] team0 (unregistering): Port device team_slave_0 removed [ 642.651083][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 642.690295][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 642.707677][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 642.711059][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 642.712124][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 643.098924][ T4900] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 643.175360][ T4900] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 643.177581][ T4900] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 643.179259][ T4900] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 643.180079][ T4900] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 645.048498][ T4900] Bluetooth: hci5: command tx timeout [ 645.287322][ T4900] Bluetooth: hci7: command tx timeout [ 646.761085][ T5592] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 646.835621][ T5592] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 646.855325][ T5592] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 646.866517][ T5592] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 646.889390][ T5592] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 647.149533][ T5592] Bluetooth: hci5: command tx timeout [ 647.378347][ T5592] Bluetooth: hci7: command tx timeout [ 647.657288][ T5246] 8021q: adding VLAN 0 to HW filter on device eth13 [ 649.047270][ T5592] Bluetooth: hci8: command tx timeout [ 649.207631][ T5592] Bluetooth: hci5: command tx timeout [ 649.449085][ T5592] Bluetooth: hci7: command tx timeout [ 651.144070][ T5592] Bluetooth: hci8: command tx timeout [ 651.287815][ T5592] Bluetooth: hci5: command tx timeout [ 651.527371][ T5592] Bluetooth: hci7: command tx timeout [ 653.068265][ T5246] 8021q: adding VLAN 0 to HW filter on device eth14 [ 653.207195][ T5592] Bluetooth: hci8: command tx timeout [ 653.877368][ T6544] bridge_slave_1: left allmulticast mode [ 653.877412][ T6544] bridge_slave_1: left promiscuous mode [ 653.889224][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.989992][ T6544] bridge_slave_0: left allmulticast mode [ 653.990033][ T6544] bridge_slave_0: left promiscuous mode [ 653.990327][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.798665][ T5592] Bluetooth: hci8: command tx timeout [ 655.876506][ T6544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.968133][ T6544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.032868][ T6544] bond0 (unregistering): Released all slaves [ 659.602361][T11533] jffs2: notice: (11533) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 660.385006][ T38] audit: type=1326 audit(1789716566.653:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.425316][ T38] audit: type=1326 audit(1789716566.693:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.426364][ T38] audit: type=1326 audit(1789716566.693:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.480393][ T38] audit: type=1326 audit(1789716566.693:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.480767][ T38] audit: type=1326 audit(1789716566.753:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.482574][ T38] audit: type=1326 audit(1789716566.753:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.482885][ T38] audit: type=1326 audit(1789716566.753:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.483333][ T38] audit: type=1326 audit(1789716566.753:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.483999][ T38] audit: type=1326 audit(1789716566.753:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.484359][ T38] audit: type=1326 audit(1789716566.753:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11547 comm="syz.0.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95dc2ee159 code=0x7ffc0000 [ 660.922433][ T6544] hsr_slave_0: left promiscuous mode [ 661.081764][ T6544] hsr_slave_1: left promiscuous mode [ 661.083330][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.164205][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.501009][ T6544] team0 (unregistering): Port device team_slave_1 removed [ 663.587985][ T6544] team0 (unregistering): Port device team_slave_0 removed [ 664.247865][ T39] INFO: task syz.2.1098:10159 blocked for more than 143 seconds. [ 664.247913][ T39] Tainted: G ** replaying previous printk message ** [ 664.247913][ T39] Tainted: G L syzkaller #0 [ 664.247924][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 664.247933][ T39] task:syz.2.1098 state:D stack:27464 pid:10159 tgid:10158 ppid:5590 task_flags:0x400140 flags:0x00080002 [ 664.248005][ T39] Call Trace: [ 664.248014][ T39] [ 664.248028][ T39] __schedule+0x16d9/0x5700 [ 664.248161][ T39] ? __pfx___schedule+0x10/0x10 [ 664.248202][ T39] rt_mutex_schedule+0x76/0xf0 [ 664.248229][ T39] rt_mutex_slowlock_block+0x55e/0x690 [ 664.248260][ T39] ? rt_mutex_slowlock_block+0x33c/0x690 [ 664.248285][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 664.248335][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 664.248358][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 664.248397][ T39] ? write_versions+0x95/0xe30 [ 664.248454][ T39] ? write_versions+0x95/0xe30 [ 664.248469][ T39] mutex_lock_nested+0x168/0x1d0 [ 664.248498][ T39] write_versions+0x95/0xe30 [ 664.248523][ T39] ? __pfx_write_versions+0x10/0x10 [ 664.248552][ T39] ? _copy_from_user+0x94/0xb0 [ 664.248588][ T39] ? simple_transaction_get+0x130/0x170 [ 664.248612][ T39] nfsctl_transaction_write+0x112/0x160 [ 664.248632][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 664.248651][ T39] vfs_write+0x29f/0xbb0 [ 664.248683][ T39] ? __pfx_vfs_write+0x10/0x10 [ 664.248706][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 664.248747][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 664.248774][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 664.248794][ T39] ? fdget_pos+0x252/0x320 [ 664.248823][ T39] ksys_write+0x156/0x270 [ 664.248848][ T39] ? __pfx_ksys_write+0x10/0x10 [ 664.248880][ T39] do_syscall_64+0x166/0x520 [ 664.248906][ T39] ? trace_irq_disable+0x3b/0x140 [ 664.248933][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.248967][ T39] ? clear_bhb_loop+0x70/0xc0 [ 664.248995][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.249019][ T39] RIP: 0033:0x7f1619d9e159 [ 664.249041][ T39] RSP: 002b:00007f1617ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.249065][ T39] RAX: ffffffffffffffda RBX: 00007f161a025fa0 RCX: 00007f1619d9e159 [ 664.249081][ T39] RDX: 0000000000000013 RSI: 0000200000000140 RDI: 0000000000000003 [ 664.249095][ T39] RBP: 00007f1619e3506b R08: 0000000000000000 R09: 0000000000000000 [ 664.249110][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.249124][ T39] R13: 00007f161a026038 R14: 00007f161a025fa0 R15: 00007ffd08dfe5d8 [ 664.249158][ T39] [ 664.249169][ T39] INFO: task syz.2.1098:10162 blocked for more than 143 seconds. [ 664.249188][ T39] Tainted: G L syzkaller #0 [ 664.249201][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 664.249210][ T39] task:syz.2.1098 state:D stack:27464 pid:10162 tgid:10158 ppid:5590 task_flags:0x400040 flags:0x00080002 [ 664.249308][ T39] Call Trace: [ 664.249316][ T39] [ 664.249330][ T39] __schedule+0x16d9/0x5700 [ 664.249396][ T39] ? __pfx___schedule+0x10/0x10 [ 664.249445][ T39] rt_mutex_schedule+0x76/0xf0 [ 664.249476][ T39] rt_mutex_slowlock_block+0x55e/0x690 [ 664.249523][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 664.249555][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 664.249584][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 664.249635][ T39] ? write_threads+0x3b4/0x610 [ 664.249667][ T39] ? write_threads+0x3b4/0x610 [ 664.249688][ T39] mutex_lock_nested+0x168/0x1d0 [ 664.249723][ T39] write_threads+0x3b4/0x610 [ 664.249751][ T39] ? __pfx_write_threads+0x10/0x10 [ 664.249797][ T39] ? _copy_from_user+0x94/0xb0 [ 664.249831][ T39] ? simple_transaction_get+0x130/0x170 [ 664.249861][ T39] nfsctl_transaction_write+0x112/0x160 [ 664.249886][ T39] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 664.249910][ T39] vfs_write+0x29f/0xbb0 [ 664.249956][ T39] ? __pfx_vfs_write+0x10/0x10 [ 664.249988][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 664.250026][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 664.250061][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 664.250087][ T39] ? fdget_pos+0x252/0x320 [ 664.250123][ T39] ksys_write+0x156/0x270 [ 664.250153][ T39] ? __pfx_ksys_write+0x10/0x10 [ 664.250195][ T39] do_syscall_64+0x166/0x520 [ 664.250229][ T39] ? trace_irq_disable+0x3b/0x140 [ 664.250258][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.250282][ T39] ? clear_bhb_loop+0x70/0xc0 [ 664.250311][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.250335][ T39] RIP: 0033:0x7f1619d9e159 [ 664.250356][ T39] RSP: 002b:00007f1617fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.250379][ T39] RAX: ffffffffffffffda RBX: 00007f161a026180 RCX: 00007f1619d9e159 [ 664.250397][ T39] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 664.250412][ T39] RBP: 00007f1619e3506b R08: 0000000000000000 R09: 0000000000000000 [ 664.250426][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.250440][ T39] R13: 00007f161a026218 R14: 00007f161a026180 R15: 00007ffd08dfe5d8 [ 664.250478][ T39] [ 664.250506][ T39] [ 664.250506][ T39] Showing all locks held in the system: [ 664.250518][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 664.250586][ T39] #0: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 664.250717][ T39] locks held by dhcpcd/5246: 2, on CPU#0: [ 664.250735][ T39] #0: ffff888037a06928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 664.250856][ T39] #1: ffffffff8f5d4138 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 664.251004][ T39] locks held by getty/6447: 3, last CPU#0: [ 664.251022][ T39] #0: ffff88802a4180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 664.251147][ T39] #1: ffff88802a418590 (&tty->write_wait){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1f0 [ 664.251209][ T39] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 664.251274][ T39] locks held by kworker/u8:28/6544: 4, on CPU#0: [ 664.251291][ T39] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 664.251372][ T39] #1: ffffc900061d7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 664.251439][ T39] #2: ffffffff8f5c58e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 664.251550][ T39] #3: ffffffff8f5d4138 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 664.251686][ T39] locks held by kworker/u8:49/9795: 3, on CPU#0: [ 664.251704][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 664.251771][ T39] #1: ffffc90005827c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 664.251837][ T39] #2: ffffffff8f5d4138 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 664.251902][ T39] locks held by syz.2.1098/10159: 3, on CPU#1: [ 664.251918][ T39] #0: ffff88803c6c3328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 664.251987][ T39] #1: ffff888033190510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 664.252078][ T39] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 664.252135][ T39] locks held by syz.2.1098/10161: 3, on CPU#0: [ 664.252152][ T39] #0: ffff888039fc7d28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 664.252210][ T39] #1: ffff888033190510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 664.252276][ T39] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 664.252331][ T39] locks held by syz.2.1098/10162: 3, on CPU#0: [ 664.252348][ T39] #0: ffff888039560728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 664.252407][ T39] #1: ffff888033190510 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 664.252471][ T39] #2: ffffffff8e4f8418 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 664.252526][ T39] locks held by syz-executor/10886: 4, on CPU#1: [ 664.252543][ T39] #0: ffff888035c42510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 664.252607][ T39] #1: ffff888033736478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 664.252690][ T39] #2: ffff88802a4f65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 664.252762][ T39] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 664.252906][ T39] locks held by syz-executor/10919: 9, last CPU#1: [ 664.252923][ T39] #0: ffff888035c42510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 664.252994][ T39] #1: ffff8880326e1878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 664.253061][ T39] #2: ffff88802a4f64b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 664.253133][ T39] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 664.253197][ T39] #4: ffff8880392f4160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 664.253337][ T39] #5: ffff88803a372310 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 664.253419][ T39] #6: ffffffff8f5d4138 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 664.253503][ T39] #7: ffff88803f941060 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2130 [ 664.253597][ T39] #8: ffff88804f4e0628 (&idev->mc_lock){+.+.}-{4:4}, at: ipv6_mc_down+0x27/0x5d0 [ 664.253696][ T39] locks held by syz-executor/11370: 2, on CPU#1: [ 664.253712][ T39] #0: ffffffff8fb224e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 664.253774][ T39] #1: ffffffff8f5d4138 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 664.253839][ T39] locks held by syz-executor/11375: 1, on CPU#0: [ 664.253856][ T39] #0: ffffffff8f5d4138 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 664.253922][ T39] locks held by syz.0.1347/11408: 4, last CPU#1: [ 664.253947][ T39] #0: ffff8880359cc510 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x376a/0x4520 [ 664.254020][ T39] #1: ffff8880614bacb0 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c5/0x12c0 [ 664.254085][ T39] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 664.254148][ T39] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1e3/0x1df0 [ 664.254226][ T39] locks held by syz-executor/11434: 2, on CPU#0: [ 664.254243][ T39] #0: ffffffff8f5c58e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 664.254322][ T39] #1: ffffffff8f5d4138 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 664.254381][ T39] locks held by syz.3.1378/11564: 3, last CPU#0: [ 664.254398][ T39] #0: ffff8880615667d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 664.254520][ T39] #1: ffff888060e2a298 (&si->socket.wq.wait){+.+.}-{3:3}, at: add_wait_queue+0x41/0x170 [ 664.254579][ T39] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 664.254640][ T39] [ 664.254647][ T39] ============================================= [ 664.254647][ T39] [ 664.254657][ T39] NMI backtrace for cpu 0 [ 664.254677][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 664.254708][ T39] Tainted: [L]=SOFTLOCKUP [ 664.254716][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.254729][ T39] Call Trace: [ 664.254738][ T39] [ 664.254748][ T39] dump_stack_lvl+0xe8/0x150 [ 664.254784][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 664.254861][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 664.254888][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 664.254921][ T39] sys_info+0x135/0x170 [ 664.254954][ T39] watchdog+0xfd7/0x1030 [ 664.254993][ T39] ? watchdog+0x1c7/0x1030 [ 664.255029][ T39] kthread+0x38b/0x470 [ 664.255053][ T39] ? __pfx_watchdog+0x10/0x10 [ 664.255080][ T39] ? __pfx_kthread+0x10/0x10 [ 664.255105][ T39] ret_from_fork+0x514/0xb70 [ 664.255132][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 664.255155][ T39] ? __switch_to+0xc89/0x1420 [ 664.255207][ T39] ? __pfx_kthread+0x10/0x10 [ 664.255232][ T39] ret_from_fork_asm+0x1a/0x30 [ 664.255273][ T39] [ 664.255282][ T39] Sending NMI from CPU 0 to CPUs 1: [ 664.255312][ C1] NMI backtrace for cpu 1 [ 664.255330][ C1] CPU: 1 UID: 0 PID: 11408 Comm: syz.0.1347 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 664.255356][ C1] Tainted: [L]=SOFTLOCKUP [ 664.255363][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.255373][ C1] RIP: 0010:preempt_count_add+0x30/0x140 [ 664.255399][ C1] Code: 41 56 53 49 bf 00 00 00 00 00 fc ff df 48 63 c7 65 48 01 05 62 b8 10 11 48 c7 c0 40 a5 ae 99 48 c1 e8 03 42 0f b6 04 38 84 c0 <0f> 85 b8 00 00 00 83 3d 73 fd 19 18 00 75 12 65 48 8b 05 39 b8 10 [ 664.255415][ C1] RSP: 0018:ffffc90005916840 EFLAGS: 00000202 [ 664.255431][ C1] RAX: 0000000000000004 RBX: 1ffff92000b22d10 RCX: 8000000000000001 [ 664.255451][ C1] RDX: 00000000f0631cc3 RSI: ffffffff8bcc2e60 RDI: 0000000000000001 [ 664.255463][ C1] RBP: ffffc90005916918 R08: ffffffff8b59d182 R09: 0000000000000000 [ 664.255475][ C1] R10: dffffc0000000000 R11: fffffbfff1f64130 R12: ffff88803995e280 [ 664.255489][ C1] R13: dffffc0000000000 R14: ffff888035d22300 R15: dffffc0000000000 [ 664.255502][ C1] FS: 0000000000000000(0000) GS:ffff888125cca000(0000) knlGS:0000000000000000 [ 664.255517][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.255529][ C1] CR2: 00007f739e1e76c6 CR3: 0000000021f54000 CR4: 00000000003526f0 [ 664.255546][ C1] Call Trace: [ 664.255552][ C1] [ 664.255561][ C1] rt_spin_lock+0x28c/0x400 [ 664.255584][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 664.255606][ C1] ? __pte_offset_map+0x178/0x200 [ 664.255640][ C1] pte_offset_map_lock+0x13d/0x210 [ 664.255664][ C1] follow_page_pte+0xc9/0xf20 [ 664.255689][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 664.255713][ C1] __get_user_pages+0xa78/0x2650 [ 664.255747][ C1] get_dump_page+0x1b5/0x410 [ 664.255767][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 664.255787][ C1] ? __asan_memset+0x22/0x50 [ 664.255807][ C1] ? iov_iter_bvec+0xb8/0x180 [ 664.255831][ C1] dump_user_range+0x20a/0x12c0 [ 664.255862][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 664.255888][ C1] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 664.255908][ C1] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 664.255927][ C1] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 664.255950][ C1] ? elf_core_dump+0x2a8f/0x3a90 [ 664.255979][ C1] elf_core_dump+0x3485/0x3a90 [ 664.256011][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 664.256035][ C1] ? __lock_acquire+0x747/0x2de0 [ 664.256058][ C1] ? arch_do_signal_or_restart+0xbb/0x860 [ 664.256104][ C1] ? lock_acquire+0x115/0x350 [ 664.256125][ C1] ? 0xffffffffff600000 [ 664.256146][ C1] coredump_write+0x129c/0x1970 [ 664.256177][ C1] ? __pfx_coredump_write+0x10/0x10 [ 664.256210][ C1] ? unshare_files+0xab/0x140 [ 664.256236][ C1] vfs_coredump+0x376a/0x4520 [ 664.256269][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 664.256293][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 664.256334][ C1] ? __lock_acquire+0x747/0x2de0 [ 664.256358][ C1] ? __lock_acquire+0x747/0x2de0 [ 664.256386][ C1] ? lock_acquire+0x115/0x350 [ 664.256409][ C1] ? lock_acquire+0x115/0x350 [ 664.256434][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 664.256469][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 664.256493][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 664.256518][ C1] ? kernel_text_address+0xa5/0xe0 [ 664.256539][ C1] ? __kernel_text_address+0xd/0x30 [ 664.256557][ C1] ? unwind_get_return_address+0x4d/0x90 [ 664.256577][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 664.256599][ C1] ? arch_stack_walk+0xfb/0x150 [ 664.256626][ C1] ? __lock_acquire+0x747/0x2de0 [ 664.256648][ C1] ? __lock_acquire+0x660/0x2de0 [ 664.256671][ C1] ? kasan_save_track+0x4f/0x80 [ 664.256692][ C1] ? kasan_save_track+0x3e/0x80 [ 664.256713][ C1] ? kasan_save_free_info+0x40/0x50 [ 664.256731][ C1] ? __kasan_slab_free+0x5c/0x80 [ 664.256752][ C1] ? kmem_cache_free+0x187/0x6d0 [ 664.256775][ C1] ? get_signal+0x9e8/0x12c0 [ 664.256795][ C1] ? arch_do_signal_or_restart+0xbb/0x860 [ 664.256818][ C1] ? irqentry_exit+0x2ba/0x910 [ 664.256841][ C1] ? asm_exc_page_fault+0x26/0x30 [ 664.256862][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 664.256886][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 664.256917][ C1] ? proc_coredump_connector+0x187/0x4e0 [ 664.256991][ C1] ? rt_spin_unlock+0x159/0x200 [ 664.257015][ C1] ? rt_spin_unlock+0x165/0x200 [ 664.257038][ C1] get_signal+0x1095/0x12c0 [ 664.257070][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 664.257096][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 664.257130][ C1] irqentry_exit+0x2ba/0x910 [ 664.257153][ C1] ? trace_irq_disable+0x3b/0x140 [ 664.257177][ C1] asm_exc_page_fault+0x26/0x30 [ 664.257194][ C1] RIP: 0033:0x7f95dc1a3bd7 [ 664.257210][ C1] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 664.257224][ C1] RSP: 002b:00007f95da506120 EFLAGS: 00010202 [ 664.257240][ C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f95dc2ee159 [ 664.257251][ C1] RDX: 00007f95da506140 RSI: 00007f95da506270 RDI: 000000000000000b [ 664.257263][ C1] RBP: 00007f95dc38506b R08: 0000000000000000 R09: 0000000000000000 [ 664.257274][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 664.257285][ C1] R13: 00007f95dc576128 R14: 00007f95dc576090 R15: 00007ffff40330c8 [ 664.257306][ C1] [ 664.270760][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 665.968996][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 665.980205][ T39] Tainted: [L]=SOFTLOCKUP [ 665.984530][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 665.994591][ T39] Call Trace: [ 665.997878][ T39] [ 666.000815][ T39] vpanic+0x56d/0xa60 [ 666.004806][ T39] ? __pfx___schedule+0x10/0x10 [ 666.009670][ T39] ? __pfx_vpanic+0x10/0x10 [ 666.014189][ T39] panic+0xc5/0xd0 [ 666.017917][ T39] ? __pfx_panic+0x10/0x10 [ 666.022337][ T39] ? preempt_schedule_common+0x7f/0xd0 [ 666.027808][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 666.033190][ T39] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 666.039363][ T39] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 666.045532][ T39] watchdog+0x1030/0x1030 [ 666.049880][ T39] ? watchdog+0x1c7/0x1030 [ 666.054312][ T39] kthread+0x38b/0x470 [ 666.058391][ T39] ? __pfx_watchdog+0x10/0x10 [ 666.063084][ T39] ? __pfx_kthread+0x10/0x10 [ 666.067680][ T39] ret_from_fork+0x514/0xb70 [ 666.072278][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 666.077393][ T39] ? __switch_to+0xc89/0x1420 [ 666.082095][ T39] ? __pfx_kthread+0x10/0x10 [ 666.086691][ T39] ret_from_fork_asm+0x1a/0x30 [ 666.091480][ T39] [ 666.094814][ T39] Kernel Offset: disabled [ 666.099134][ T39] Rebooting in 86400 seconds..