last executing test programs: 2m33.209899507s ago: executing program 1 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x6c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) 2m33.0157408s ago: executing program 1 (id=1282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000140800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a3200000000090001007379"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24004804) 2m32.407846851s ago: executing program 1 (id=1288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5421, &(0x7f0000000540)=0x6) connect$bt_rfcomm(r1, &(0x7f0000000580)={0x1f, @any, 0x6}, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, &(0x7f0000000500)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m32.225743927s ago: executing program 1 (id=1289): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0xeafbff3, &(0x7f00000007c0)=[{&(0x7f0000000800)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000d6500010000000000000000000fff47b94ce5b470fe0b2bee51c9556c3677c77b822bf39a33b1d85c87694329860e40d091346c3d109f409e8ac81bc55bb9f8e77b927424734cf6121779213910f55a2f9bc254cabfa4b1e8098c64a6d718e0232d4d2e27926d29e4d29e757047980e522d38859f9c0e7fa2e2fc0b7b0047690a4c10af6b7de1a8a645c5f33a521609cde0c44e605d2dae61475eb3dd967"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) membarrier(0x10, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e23, 0x28001, @rand_addr=' \x01\x00', 0x9}, 0xf) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0x8d, @empty, 0x4}, 0x1c) mkdir(&(0x7f00000001c0)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_mount\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) 2m29.456531673s ago: executing program 1 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x6c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) 2m29.038468563s ago: executing program 1 (id=1295): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000006940)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000006980)='./nfsd\x00', &(0x7f00000069c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000006a00)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000006a40)='-2 -3\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000006a80)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000006ac0)='3', 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 2m12.518151895s ago: executing program 32 (id=1295): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000006940)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000006980)='./nfsd\x00', &(0x7f00000069c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000006a00)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000006a40)='-2 -3\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000006a80)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000006ac0)='3', 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 1m19.731662398s ago: executing program 2 (id=1510): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x47, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000680)=0x10000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8fff9) 1m12.001151538s ago: executing program 2 (id=1518): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f000000b300)={0x1100, 0x402000, 0x0, 0xffffffff, 0x2}) 1m11.208331514s ago: executing program 2 (id=1520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048c10}, 0x48010) 1m7.271586623s ago: executing program 2 (id=1532): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0xeafbff3, &(0x7f00000007c0)=[{&(0x7f0000000800)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000d6500010000000000000000000fff47b94ce5b470fe0b2bee51c9556c3677c77b822bf39a33b1d85c87694329860e40d091346c3d109f409e8ac81bc55bb9f8e77b927424734cf6121779213910f55a2f9bc254cabfa4b1e8098c64a6d718e0232d4d2e27926d29e4d29e757047980e522d38859f9c0e7fa2e2fc0b7b0047690a4c10af6b7de1a8a645c5f33a521609cde0c44e605d2dae61475eb3dd9672ff4e47a33d1231dc41f9b0b7b"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) membarrier(0x10, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e23, 0x28001, @rand_addr=' \x01\x00', 0x9}, 0xf) mkdir(&(0x7f00000001c0)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_mount\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) 1m5.636331318s ago: executing program 4 (id=1535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x114}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="a8bd123320", 0x5}], 0x1}}], 0x1, 0x6085084) 1m4.491436371s ago: executing program 2 (id=1537): syz_open_procfs$namespace(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x9) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)="3100f3a70c57aab9346531b3f6ad5b6ec75a0fc0a6c0bbd4b2d8ee9d3c891dff36500980fc1652c71193785d5ff7f83552ca2dbc", 0x34) 1m1.995061562s ago: executing program 4 (id=1540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002a00)={0x1, &(0x7f0000002cc0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002d00), 0x6f5e, 0x2) syz_ublk_setup_io_uring(0x20, &(0x7f0000002dc0)={0x0, 0xfffdfffc, 0x10, 0x3, 0xb4}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="090000000700000000800000"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000280)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000002c0)=0x1, 0x4) 1m0.14799904s ago: executing program 2 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x21842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x3}]}}}]}, 0x3c}}, 0x0) 58.641516421s ago: executing program 4 (id=1544): r0 = open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f000000b300)={0x1100, 0x402000, 0x0, 0xffffffff, 0x2}) 57.635425045s ago: executing program 4 (id=1545): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x8b, 0x100000500) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000740)={&(0x7f0000000680)=[{0x6, 0x8, 0x3, 0x7}, {0x5, 0x8, 0x4, 0x9}, {0x1000, 0x4, 0x7}, {0x1, 0x7, 0x8b9f, 0x3}, {0x8001, 0x498, 0x0, 0x5e88}], 0x5, 0x20, 0x7, 0x5}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r1, &(0x7f0000000280)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000440), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000440)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c000280080001400000004214000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x8040) socket$inet_icmp_raw(0x2, 0x3, 0x1) 55.440423569s ago: executing program 4 (id=1550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x180) mount(0x0, &(0x7f0000002040)='./proc\x00', &(0x7f0000002080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x71) write(r0, &(0x7f0000002100)='27', 0x2) futex_waitv(&(0x7f0000002140)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) write$P9_RREADDIR(r0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) 54.458692088s ago: executing program 5 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local}) 54.226625126s ago: executing program 4 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000001b80)='./nfsd\x00', &(0x7f0000001bc0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000001c40)='tcp 2', 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001cc0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x100000001, 0x1000}}, 0x30) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setuid(0xee01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001980)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000001a40)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000340)=0x9, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) 48.823635094s ago: executing program 5 (id=1556): mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001940)='270', 0x3) pipe2$watch_queue(0x0, 0x80) mount(0x0, 0x0, &(0x7f0000001a80)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./proc/net/afs/cells\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b00)='./dir0\x00', 0x1ff) mount(&(0x7f0000001b40)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000001b80)='./dir0\x00', &(0x7f0000001bc0)='ceph\x00', 0x0, 0x0) 46.197414839s ago: executing program 5 (id=1560): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x89, @empty, 0x4e24, 0xb, 'sed\x00', 0x34, 0x83, 0x6e}, {@multicast2, 0x4e22, 0x1, 0x28, 0x12d5c, 0x3dbf}}, 0x44) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 43.670033773s ago: executing program 33 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x21842}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x3}]}}}]}, 0x3c}}, 0x0) 43.644379732s ago: executing program 0 (id=1562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) 42.991061833s ago: executing program 0 (id=1563): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='NULL', 0x4) 42.395477905s ago: executing program 5 (id=1564): r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000001940)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001980)={&(0x7f00000019c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001a00)={&(0x7f0000001a40)=[r1], 0x1, 0x800}) 42.393748411s ago: executing program 5 (id=1565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001b00)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001b40)={@val={0x1c, 0xf5}, @val, @mpls}, 0xe) 42.393338799s ago: executing program 0 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local}) 37.860839556s ago: executing program 34 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000001b80)='./nfsd\x00', &(0x7f0000001bc0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000001c40)='tcp 2', 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001cc0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x100000001, 0x1000}}, 0x30) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) setuid(0xee01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001980)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000001a40)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000340)=0x9, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) 37.860502969s ago: executing program 0 (id=1569): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x883, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@raid={0x0, 0x888, 0x0, 0x90, 'raid\x00', {'raid10', 0x20, '2 64 raid10_use_near_sets', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @dev=@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x0}}]}}]}) 37.860280889s ago: executing program 5 (id=1570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) 36.743769604s ago: executing program 0 (id=1572): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x5) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) link(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00') 35.35230081s ago: executing program 0 (id=1574): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000a40)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000008050010010b", @ANYRESDEC], 0xa) 26.141427737s ago: executing program 3 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local}) 24.489698115s ago: executing program 3 (id=1579): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 23.12620313s ago: executing program 35 (id=1570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) 23.065264157s ago: executing program 3 (id=1581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 20.990039911s ago: executing program 3 (id=1582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000400), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0xc080, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="030000", 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001d80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) write(r4, &(0x7f0000001dc0)='7', 0x6) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000300)={0x0, 0x8000, 0x0, 0x6}) 20.369025755s ago: executing program 36 (id=1574): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a00)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000a40)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000008050010010b", @ANYRESDEC], 0xa) 20.286994677s ago: executing program 3 (id=1584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 15.386517424s ago: executing program 3 (id=1585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x24, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x0, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xff, 0x100}}}}}}}}, 0x36) 0s ago: executing program 37 (id=1585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x24, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x0, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xff, 0x100}}}}}}}}, 0x36) kernel console output (not intermixed with test programs): 0: (slave syz_tun): interface is now down [ 245.188972][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.189186][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.189344][ T174] bond0: (slave bridge0): interface is now down [ 245.189358][ T174] bond0: (slave syz_tun): interface is now down [ 245.209179][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.209391][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.209665][ T174] bond0: (slave bridge0): interface is now down [ 245.209679][ T174] bond0: (slave syz_tun): interface is now down [ 245.224742][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.225089][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.225247][ T174] bond0: (slave bridge0): interface is now down [ 245.225262][ T174] bond0: (slave syz_tun): interface is now down [ 245.243987][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.244191][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.244893][ T2926] bond0: (slave bridge0): interface is now down [ 245.244909][ T2926] bond0: (slave syz_tun): interface is now down [ 245.263892][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.264092][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.264260][ T174] bond0: (slave bridge0): interface is now down [ 245.264275][ T174] bond0: (slave syz_tun): interface is now down [ 245.267329][ T8568] veth1_macvtap: left promiscuous mode [ 245.272776][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 245.281319][ T8568] veth0_macvtap: left promiscuous mode [ 245.283871][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.284071][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.284242][ T174] bond0: (slave bridge0): interface is now down [ 245.284256][ T174] bond0: (slave syz_tun): interface is now down [ 245.306010][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.306214][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.306372][ T174] bond0: (slave bridge0): interface is now down [ 245.306386][ T174] bond0: (slave syz_tun): interface is now down [ 245.324584][ T57] bond0: (slave bond_slave_0): interface is now down [ 245.324798][ T57] bond0: (slave bond_slave_1): interface is now down [ 245.324955][ T57] bond0: (slave bridge0): interface is now down [ 245.324970][ T57] bond0: (slave syz_tun): interface is now down [ 245.337534][ T8568] veth0_macvtap: entered promiscuous mode [ 245.342576][ T57] bond0: (slave bond_slave_0): interface is now down [ 245.349353][ T57] bond0: (slave bond_slave_1): interface is now down [ 245.352324][ T57] bond0: (slave bridge0): interface is now down [ 245.352342][ T57] bond0: (slave syz_tun): interface is now down [ 245.352921][ T8568] veth1_macvtap: entered promiscuous mode [ 245.373311][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.373518][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.373685][ T2926] bond0: (slave bridge0): interface is now down [ 245.373699][ T2926] bond0: (slave syz_tun): interface is now down [ 245.392914][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.393132][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.393297][ T2926] bond0: (slave bridge0): interface is now down [ 245.393311][ T2926] bond0: (slave syz_tun): interface is now down [ 245.413254][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.413470][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.413638][ T174] bond0: (slave bridge0): interface is now down [ 245.413652][ T174] bond0: (slave syz_tun): interface is now down [ 245.438272][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.438487][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.438651][ T174] bond0: (slave bridge0): interface is now down [ 245.438665][ T174] bond0: (slave syz_tun): interface is now down [ 245.458066][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.458270][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.458441][ T174] bond0: (slave bridge0): interface is now down [ 245.458454][ T174] bond0: (slave syz_tun): interface is now down [ 245.473712][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.535243][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.535529][ T2926] bond0: (slave bridge0): interface is now down [ 245.535544][ T2926] bond0: (slave syz_tun): interface is now down [ 245.552577][ T68] bond0: (slave bond_slave_0): interface is now down [ 245.552777][ T68] bond0: (slave bond_slave_1): interface is now down [ 245.552935][ T68] bond0: (slave bridge0): interface is now down [ 245.552950][ T68] bond0: (slave syz_tun): interface is now down [ 245.573860][ T57] bond0: (slave bond_slave_0): interface is now down [ 245.574064][ T57] bond0: (slave bond_slave_1): interface is now down [ 245.574283][ T57] bond0: (slave bridge0): interface is now down [ 245.574298][ T57] bond0: (slave syz_tun): interface is now down [ 245.597927][ T57] bond0: (slave bond_slave_0): interface is now down [ 245.598137][ T57] bond0: (slave bond_slave_1): interface is now down [ 245.598297][ T57] bond0: (slave bridge0): interface is now down [ 245.598311][ T57] bond0: (slave syz_tun): interface is now down [ 245.612643][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.612843][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.631647][ T174] bond0: (slave bridge0): interface is now down [ 245.631665][ T174] bond0: (slave syz_tun): interface is now down [ 245.655465][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.655665][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.655821][ T174] bond0: (slave bridge0): interface is now down [ 245.655834][ T174] bond0: (slave syz_tun): interface is now down [ 245.664783][ T8568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.668237][ T8568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.673056][ T57] bond0: (slave bond_slave_0): interface is now down [ 245.674684][ T57] bond0: (slave bond_slave_1): interface is now down [ 245.674870][ T57] bond0: (slave bridge0): interface is now down [ 245.674884][ T57] bond0: (slave syz_tun): interface is now down [ 245.692626][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.692933][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.693292][ T174] bond0: (slave bridge0): interface is now down [ 245.693306][ T174] bond0: (slave syz_tun): interface is now down [ 245.712586][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.712904][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.713065][ T2926] bond0: (slave bridge0): interface is now down [ 245.713078][ T2926] bond0: (slave syz_tun): interface is now down [ 245.718109][ T8568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.724412][ T8568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.736139][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.736346][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.736515][ T2926] bond0: (slave bridge0): interface is now down [ 245.736530][ T2926] bond0: (slave syz_tun): interface is now down [ 245.756473][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.756686][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.756843][ T174] bond0: (slave bridge0): interface is now down [ 245.756857][ T174] bond0: (slave syz_tun): interface is now down [ 245.764416][ T8568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.772618][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.772823][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.772979][ T2926] bond0: (slave bridge0): interface is now down [ 245.772993][ T2926] bond0: (slave syz_tun): interface is now down [ 245.793026][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.793234][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.793392][ T2926] bond0: (slave bridge0): interface is now down [ 245.793407][ T2926] bond0: (slave syz_tun): interface is now down [ 245.818061][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.818273][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.818639][ T2926] bond0: (slave bridge0): interface is now down [ 245.818654][ T2926] bond0: (slave syz_tun): interface is now down [ 245.832579][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.832791][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.832959][ T174] bond0: (slave bridge0): interface is now down [ 245.832974][ T174] bond0: (slave syz_tun): interface is now down [ 245.852761][ T174] bond0: (slave bond_slave_0): interface is now down [ 245.852980][ T174] bond0: (slave bond_slave_1): interface is now down [ 245.853138][ T174] bond0: (slave bridge0): interface is now down [ 245.853152][ T174] bond0: (slave syz_tun): interface is now down [ 245.869554][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.869766][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.875406][ T57] bond0: (slave bond_slave_0): interface is now down [ 245.875615][ T57] bond0: (slave bond_slave_1): interface is now down [ 245.875773][ T57] bond0: (slave bridge0): interface is now down [ 245.875952][ T57] bond0: (slave syz_tun): interface is now down [ 245.884486][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.884618][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.893852][ T57] bond0: (slave bond_slave_0): interface is now down [ 245.894052][ T57] bond0: (slave bond_slave_1): interface is now down [ 245.894209][ T57] bond0: (slave bridge0): interface is now down [ 245.894333][ T57] bond0: (slave syz_tun): interface is now down [ 245.912592][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.912803][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.912962][ T2926] bond0: (slave bridge0): interface is now down [ 245.913090][ T2926] bond0: (slave syz_tun): interface is now down [ 245.932607][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.932814][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.932983][ T2926] bond0: (slave bridge0): interface is now down [ 245.933153][ T2926] bond0: (slave syz_tun): interface is now down [ 245.955861][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.956066][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.956222][ T2926] bond0: (slave bridge0): interface is now down [ 245.956345][ T2926] bond0: (slave syz_tun): interface is now down [ 245.973361][ T2926] bond0: (slave bond_slave_0): interface is now down [ 245.973561][ T2926] bond0: (slave bond_slave_1): interface is now down [ 245.973726][ T2926] bond0: (slave bridge0): interface is now down [ 245.973851][ T2926] bond0: (slave syz_tun): interface is now down [ 245.992955][ T57] bond0: (slave bond_slave_0): interface is now down [ 245.993160][ T57] bond0: (slave bond_slave_1): interface is now down [ 245.993315][ T57] bond0: (slave bridge0): interface is now down [ 245.993439][ T57] bond0: (slave syz_tun): interface is now down [ 246.012714][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.012928][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.013433][ T57] bond0: (slave bridge0): interface is now down [ 246.013564][ T57] bond0: (slave syz_tun): interface is now down [ 246.033012][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.033199][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.033355][ T174] bond0: (slave bridge0): interface is now down [ 246.033481][ T174] bond0: (slave syz_tun): interface is now down [ 246.052708][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.052915][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.053072][ T174] bond0: (slave bridge0): interface is now down [ 246.053195][ T174] bond0: (slave syz_tun): interface is now down [ 246.072807][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.073017][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.073174][ T174] bond0: (slave bridge0): interface is now down [ 246.073299][ T174] bond0: (slave syz_tun): interface is now down [ 246.092654][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.092871][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.093038][ T174] bond0: (slave bridge0): interface is now down [ 246.093163][ T174] bond0: (slave syz_tun): interface is now down [ 246.112655][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.112860][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.113016][ T174] bond0: (slave bridge0): interface is now down [ 246.113138][ T174] bond0: (slave syz_tun): interface is now down [ 246.132632][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.132850][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.133006][ T174] bond0: (slave bridge0): interface is now down [ 246.133131][ T174] bond0: (slave syz_tun): interface is now down [ 246.152584][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.152799][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.152955][ T57] bond0: (slave bridge0): interface is now down [ 246.153083][ T57] bond0: (slave syz_tun): interface is now down [ 246.172628][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.172848][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.173013][ T174] bond0: (slave bridge0): interface is now down [ 246.173144][ T174] bond0: (slave syz_tun): interface is now down [ 246.192624][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.192853][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.193009][ T174] bond0: (slave bridge0): interface is now down [ 246.193134][ T174] bond0: (slave syz_tun): interface is now down [ 246.212596][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.212822][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.212980][ T174] bond0: (slave bridge0): interface is now down [ 246.213103][ T174] bond0: (slave syz_tun): interface is now down [ 246.232704][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.232920][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.233077][ T57] bond0: (slave bridge0): interface is now down [ 246.233200][ T57] bond0: (slave syz_tun): interface is now down [ 246.252913][ T2926] bond0: (slave bond_slave_0): interface is now down [ 246.253104][ T2926] bond0: (slave bond_slave_1): interface is now down [ 246.253260][ T2926] bond0: (slave bridge0): interface is now down [ 246.253384][ T2926] bond0: (slave syz_tun): interface is now down [ 246.272638][ T2926] bond0: (slave bond_slave_0): interface is now down [ 246.272864][ T2926] bond0: (slave bond_slave_1): interface is now down [ 246.273028][ T2926] bond0: (slave bridge0): interface is now down [ 246.273157][ T2926] bond0: (slave syz_tun): interface is now down [ 246.292753][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.292980][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.293136][ T57] bond0: (slave bridge0): interface is now down [ 246.293260][ T57] bond0: (slave syz_tun): interface is now down [ 246.312576][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.312797][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.313019][ T174] bond0: (slave bridge0): interface is now down [ 246.313146][ T174] bond0: (slave syz_tun): interface is now down [ 246.332587][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.332806][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.332963][ T174] bond0: (slave bridge0): interface is now down [ 246.333087][ T174] bond0: (slave syz_tun): interface is now down [ 246.352618][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.352837][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.352993][ T57] bond0: (slave bridge0): interface is now down [ 246.353116][ T57] bond0: (slave syz_tun): interface is now down [ 246.372608][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.372830][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.372987][ T57] bond0: (slave bridge0): interface is now down [ 246.373127][ T57] bond0: (slave syz_tun): interface is now down [ 246.392650][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.392938][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.393096][ T174] bond0: (slave bridge0): interface is now down [ 246.393220][ T174] bond0: (slave syz_tun): interface is now down [ 246.412677][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.412891][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.413047][ T174] bond0: (slave bridge0): interface is now down [ 246.413171][ T174] bond0: (slave syz_tun): interface is now down [ 246.432616][ T68] bond0: (slave bond_slave_0): interface is now down [ 246.432836][ T68] bond0: (slave bond_slave_1): interface is now down [ 246.433059][ T68] bond0: (slave bridge0): interface is now down [ 246.433181][ T68] bond0: (slave syz_tun): interface is now down [ 246.452702][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.452917][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.453076][ T57] bond0: (slave bridge0): interface is now down [ 246.453198][ T57] bond0: (slave syz_tun): interface is now down [ 246.472675][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.472892][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.473047][ T174] bond0: (slave bridge0): interface is now down [ 246.473171][ T174] bond0: (slave syz_tun): interface is now down [ 246.492646][ T68] bond0: (slave bond_slave_0): interface is now down [ 246.492869][ T68] bond0: (slave bond_slave_1): interface is now down [ 246.493025][ T68] bond0: (slave bridge0): interface is now down [ 246.493150][ T68] bond0: (slave syz_tun): interface is now down [ 246.512760][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.512973][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.513130][ T174] bond0: (slave bridge0): interface is now down [ 246.513255][ T174] bond0: (slave syz_tun): interface is now down [ 246.532578][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.532801][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.532957][ T57] bond0: (slave bridge0): interface is now down [ 246.533081][ T57] bond0: (slave syz_tun): interface is now down [ 246.552769][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.552985][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.553142][ T57] bond0: (slave bridge0): interface is now down [ 246.553314][ T57] bond0: (slave syz_tun): interface is now down [ 246.572588][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.572807][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.572965][ T174] bond0: (slave bridge0): interface is now down [ 246.573090][ T174] bond0: (slave syz_tun): interface is now down [ 246.593806][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.594014][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.594183][ T174] bond0: (slave bridge0): interface is now down [ 246.594309][ T174] bond0: (slave syz_tun): interface is now down [ 246.612592][ T68] bond0: (slave bond_slave_0): interface is now down [ 246.612812][ T68] bond0: (slave bond_slave_1): interface is now down [ 246.612968][ T68] bond0: (slave bridge0): interface is now down [ 246.613093][ T68] bond0: (slave syz_tun): interface is now down [ 246.633125][ T68] bond0: (slave bond_slave_0): interface is now down [ 246.633361][ T68] bond0: (slave bond_slave_1): interface is now down [ 246.633521][ T68] bond0: (slave bridge0): interface is now down [ 246.633655][ T68] bond0: (slave syz_tun): interface is now down [ 246.652609][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.652825][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.652986][ T174] bond0: (slave bridge0): interface is now down [ 246.653112][ T174] bond0: (slave syz_tun): interface is now down [ 246.672755][ T2926] bond0: (slave bond_slave_0): interface is now down [ 246.672970][ T2926] bond0: (slave bond_slave_1): interface is now down [ 246.673128][ T2926] bond0: (slave bridge0): interface is now down [ 246.673253][ T2926] bond0: (slave syz_tun): interface is now down [ 246.692717][ T68] bond0: (slave bond_slave_0): interface is now down [ 246.692929][ T68] bond0: (slave bond_slave_1): interface is now down [ 246.696651][ T68] bond0: (slave bridge0): interface is now down [ 246.696800][ T68] bond0: (slave syz_tun): interface is now down [ 246.712711][ T68] bond0: (slave bond_slave_0): interface is now down [ 246.712926][ T68] bond0: (slave bond_slave_1): interface is now down [ 246.713081][ T68] bond0: (slave bridge0): interface is now down [ 246.713204][ T68] bond0: (slave syz_tun): interface is now down [ 246.732812][ T68] bond0: (slave bond_slave_0): interface is now down [ 246.733027][ T68] bond0: (slave bond_slave_1): interface is now down [ 246.733184][ T68] bond0: (slave bridge0): interface is now down [ 246.733309][ T68] bond0: (slave syz_tun): interface is now down [ 246.753060][ T68] bond0: (slave bond_slave_0): interface is now down [ 246.753293][ T68] bond0: (slave bond_slave_1): interface is now down [ 246.753451][ T68] bond0: (slave bridge0): interface is now down [ 246.753634][ T68] bond0: (slave syz_tun): interface is now down [ 246.772580][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.772804][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.772958][ T57] bond0: (slave bridge0): interface is now down [ 246.773082][ T57] bond0: (slave syz_tun): interface is now down [ 246.792626][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.792848][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.793005][ T57] bond0: (slave bridge0): interface is now down [ 246.793128][ T57] bond0: (slave syz_tun): interface is now down [ 246.812588][ T68] bond0: (slave bond_slave_0): interface is now down [ 246.812804][ T68] bond0: (slave bond_slave_1): interface is now down [ 246.812960][ T68] bond0: (slave bridge0): interface is now down [ 246.813086][ T68] bond0: (slave syz_tun): interface is now down [ 246.833076][ T2926] bond0: (slave bond_slave_0): interface is now down [ 246.833269][ T2926] bond0: (slave bond_slave_1): interface is now down [ 246.833425][ T2926] bond0: (slave bridge0): interface is now down [ 246.833553][ T2926] bond0: (slave syz_tun): interface is now down [ 246.852667][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.852883][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.853040][ T57] bond0: (slave bridge0): interface is now down [ 246.853163][ T57] bond0: (slave syz_tun): interface is now down [ 246.873090][ T57] bond0: (slave bond_slave_0): interface is now down [ 246.873319][ T57] bond0: (slave bond_slave_1): interface is now down [ 246.873474][ T57] bond0: (slave bridge0): interface is now down [ 246.877839][ T57] bond0: (slave syz_tun): interface is now down [ 246.892649][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.892863][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.893021][ T174] bond0: (slave bridge0): interface is now down [ 246.899292][ T174] bond0: (slave syz_tun): interface is now down [ 246.912630][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.917022][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.917211][ T174] bond0: (slave bridge0): interface is now down [ 246.917335][ T174] bond0: (slave syz_tun): interface is now down [ 246.932694][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.932903][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.933144][ T174] bond0: (slave bridge0): interface is now down [ 246.933273][ T174] bond0: (slave syz_tun): interface is now down [ 246.952869][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.953082][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.953240][ T174] bond0: (slave bridge0): interface is now down [ 246.953367][ T174] bond0: (slave syz_tun): interface is now down [ 246.972783][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.972995][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.973154][ T174] bond0: (slave bridge0): interface is now down [ 246.973286][ T174] bond0: (slave syz_tun): interface is now down [ 246.993106][ T174] bond0: (slave bond_slave_0): interface is now down [ 246.993390][ T174] bond0: (slave bond_slave_1): interface is now down [ 246.993549][ T174] bond0: (slave bridge0): interface is now down [ 246.993683][ T174] bond0: (slave syz_tun): interface is now down [ 247.012590][ T2926] bond0: (slave bond_slave_0): interface is now down [ 247.012800][ T2926] bond0: (slave bond_slave_1): interface is now down [ 247.012955][ T2926] bond0: (slave bridge0): interface is now down [ 247.013077][ T2926] bond0: (slave syz_tun): interface is now down [ 247.033829][ T174] bond0: (slave bond_slave_0): interface is now down [ 247.034034][ T174] bond0: (slave bond_slave_1): interface is now down [ 247.034252][ T174] bond0: (slave bridge0): interface is now down [ 247.034377][ T174] bond0: (slave syz_tun): interface is now down [ 247.052609][ T2926] bond0: (slave bond_slave_0): interface is now down [ 247.052829][ T2926] bond0: (slave bond_slave_1): interface is now down [ 247.052987][ T2926] bond0: (slave bridge0): interface is now down [ 247.053111][ T2926] bond0: (slave syz_tun): interface is now down [ 247.072666][ T2926] bond0: (slave bond_slave_0): interface is now down [ 247.072893][ T2926] bond0: (slave bond_slave_1): interface is now down [ 247.073050][ T2926] bond0: (slave bridge0): interface is now down [ 247.073172][ T2926] bond0: (slave syz_tun): interface is now down [ 247.095350][ T174] bond0: (slave bond_slave_0): interface is now down [ 247.095569][ T174] bond0: (slave bond_slave_1): interface is now down [ 247.095728][ T174] bond0: (slave bridge0): interface is now down [ 247.095853][ T174] bond0: (slave syz_tun): interface is now down [ 247.112741][ T2926] bond0: (slave bond_slave_0): interface is now down [ 247.112960][ T2926] bond0: (slave bond_slave_1): interface is now down [ 247.113118][ T2926] bond0: (slave bridge0): interface is now down [ 247.113239][ T2926] bond0: (slave syz_tun): interface is now down [ 247.133093][ T174] bond0: (slave bond_slave_0): interface is now down [ 247.133314][ T174] bond0: (slave bond_slave_1): interface is now down [ 247.133478][ T174] bond0: (slave bridge0): interface is now down [ 247.133612][ T174] bond0: (slave syz_tun): interface is now down [ 247.156013][ T2926] bond0: (slave bond_slave_0): interface is now down [ 247.156208][ T2926] bond0: (slave bond_slave_1): interface is now down [ 247.156371][ T2926] bond0: (slave bridge0): interface is now down [ 247.156493][ T2926] bond0: (slave syz_tun): interface is now down [ 247.172754][ T174] bond0: (slave bond_slave_0): interface is now down [ 247.172951][ T174] bond0: (slave bond_slave_1): interface is now down [ 247.173109][ T174] bond0: (slave bridge0): interface is now down [ 247.173232][ T174] bond0: (slave syz_tun): interface is now down [ 247.192800][ T2926] bond0: (slave bond_slave_0): interface is now down [ 247.192996][ T2926] bond0: (slave bond_slave_1): interface is now down [ 247.193193][ T2926] bond0: (slave bridge0): interface is now down [ 247.193596][ T2926] bond0: (slave syz_tun): interface is now down [ 247.219495][ T174] bond0: (slave bond_slave_0): interface is now down [ 247.219994][ T174] bond0: (slave bond_slave_1): interface is now down [ 247.220155][ T174] bond0: (slave bridge0): interface is now down [ 247.220389][ T174] bond0: (slave syz_tun): interface is now down [ 247.237190][ T2926] bond0: (slave bond_slave_0): interface is now down [ 247.237644][ T2926] bond0: (slave bond_slave_1): interface is now down [ 247.237804][ T2926] bond0: (slave bridge0): interface is now down [ 247.238030][ T2926] bond0: (slave syz_tun): interface is now down [ 247.252613][ T2926] bond0: (slave bond_slave_0): interface is now down [ 247.252816][ T2926] bond0: (slave bond_slave_1): interface is now down [ 247.252970][ T2926] bond0: (slave bridge0): interface is now down [ 247.253193][ T2926] bond0: (slave syz_tun): interface is now down [ 247.272749][ T2926] bond0: (slave bond_slave_0): interface is now down [ 247.272953][ T2926] bond0: (slave bond_slave_1): interface is now down [ 247.273111][ T2926] bond0: (slave bridge0): interface is now down [ 247.273337][ T2926] bond0: (slave syz_tun): interface is now down [ 247.294180][ T174] bond0: (slave bond_slave_0): interface is now down [ 247.294389][ T174] bond0: (slave bond_slave_1): interface is now down [ 247.294551][ T174] bond0: (slave bridge0): interface is now down [ 247.294778][ T174] bond0: (slave syz_tun): interface is now down [ 247.313608][ T7874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.313649][ T7874] bond0: (slave bond_slave_0): interface is now down [ 247.313846][ T7874] bond0: (slave bond_slave_1): interface is now down [ 247.321021][ T174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.321216][ T174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.321400][ T174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.346109][ T7874] bond0: (slave bridge0): interface is now down [ 247.346353][ T7874] bond0: (slave syz_tun): interface is now down [ 247.400444][ T7874] bond0: now running without any active interface! [ 247.419980][ T8593] nvme nvme0: rdma connection establishment failed (-512) [ 247.620556][ T8573] net_ratelimit: 94 callbacks suppressed [ 248.115204][ T30] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 248.343077][ T30] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 248.345983][ T30] ti_usb_3410_5052 1-1:2.0: device disconnected [ 248.746628][ T8621] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.959'. [ 248.746879][ T8615] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.959'. [ 248.747107][ T8617] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.959'. [ 248.955828][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 248.960664][ T8629] netlink: 'syz.4.961': attribute type 10 has an invalid length. [ 248.983081][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.983492][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.065646][ T7874] nvme nvme0: rdma_resolve_route failed (-110). [ 249.117945][ T8623] nvme nvme0: rdma connection establishment failed (-19) [ 249.162844][ T30] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 249.323348][ T30] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 249.324737][ T30] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.326176][ T30] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.328841][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.328852][ T30] usb 1-1: Product: syz [ 249.328860][ T30] usb 1-1: Manufacturer: syz [ 249.328868][ T30] usb 1-1: SerialNumber: syz [ 249.414951][ T30] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 249.473893][ T30] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 249.480087][ T30] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 249.861994][ T8631] ceph: No mds server is up or the cluster is laggy [ 250.193192][ T30] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.312622][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 250.352613][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 250.353415][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 250.358140][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.358162][ T30] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.361436][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.361510][ T30] usb 2-1: Product: syz [ 250.361525][ T30] usb 2-1: Manufacturer: syz [ 250.361540][ T30] usb 2-1: SerialNumber: syz [ 250.420677][ T8662] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.975'. [ 250.427720][ T8658] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.975'. [ 250.431908][ T8661] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.975'. [ 250.436718][ T7874] nvme nvme0: rdma_resolve_route failed (-110). [ 250.440556][ T8654] nvme nvme0: rdma connection establishment failed (-19) [ 250.500848][ T30] usb 2-1: config 0 descriptor?? [ 251.268432][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 251.285313][ T8679] netlink: 'syz.2.980': attribute type 10 has an invalid length. [ 251.552580][ T7865] nvme nvme0: rdma_resolve_route failed (-110). [ 251.555548][ T8675] nvme nvme0: rdma connection establishment failed (-19) [ 252.432741][ T5592] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 252.572650][ T5592] usb 5-1: device descriptor read/64, error -71 [ 252.759086][ T8691] ceph: No mds server is up or the cluster is laggy [ 252.823239][ T8627] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 252.850145][ T8627] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 252.850703][ T8627] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 252.874171][ T5732] usb 1-1: USB disconnect, device number 16 [ 252.880903][ T5592] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 252.911272][ C0] net_ratelimit: 127 callbacks suppressed [ 253.070508][ T5732] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 253.078278][ T5592] usb 5-1: device descriptor read/64, error -71 [ 253.095134][ T30] usb 2-1: USB disconnect, device number 11 [ 253.168844][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 253.170785][ T8720] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 253.171226][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.171647][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.205131][ T5592] usb usb5-port1: attempt power cycle [ 253.270630][ T5732] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 253.272119][ T5732] ti_usb_3410_5052 1-1:2.0: device disconnected [ 253.401342][ T174] nvme nvme0: rdma_resolve_route failed (-110). [ 253.413737][ T8718] nvme nvme0: rdma connection establishment failed (-19) [ 253.562689][ T5592] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 253.593677][ T5592] usb 5-1: device descriptor read/8, error -71 [ 253.833211][ T5592] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 253.853136][ T5592] usb 5-1: device descriptor read/8, error -71 [ 253.963091][ T5592] usb usb5-port1: unable to enumerate USB device [ 254.064065][ T30] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 254.164090][ T6048] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 254.255421][ T30] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 254.257994][ T30] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.259811][ T30] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.267748][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.267769][ T30] usb 2-1: Product: syz [ 254.267784][ T30] usb 2-1: Manufacturer: syz [ 254.267798][ T30] usb 2-1: SerialNumber: syz [ 254.332472][ T6048] usb 4-1: Using ep0 maxpacket: 16 [ 254.335440][ T6048] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 254.336785][ T6048] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.336807][ T6048] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.339468][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.339489][ T6048] usb 4-1: Product: syz [ 254.339504][ T6048] usb 4-1: Manufacturer: syz [ 254.339520][ T6048] usb 4-1: SerialNumber: syz [ 254.393815][ T30] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 254.433635][ T6048] usb 4-1: config 0 descriptor?? [ 254.449297][ T30] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 254.471214][ T30] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 254.856637][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 255.804635][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804770][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.204457][ T8765] rxe_eth0 speed is unknown, defaulting to 1000 [ 256.335865][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 256.340611][ T8772] netlink: 'syz.0.1012': attribute type 10 has an invalid length. [ 256.416268][ T2926] nvme nvme0: rdma_resolve_route failed (-110). [ 256.489893][ T8770] nvme nvme0: rdma connection establishment failed (-19) [ 256.766977][ T8774] binder: 8773:8774 ioctl 4018620d 0 returned -22 [ 256.767684][ T8774] binder: 8773:8774 ioctl c0306201 200000000680 returned -14 [ 256.770269][ T8774] binder: 8773:8774 ioctl c0306201 200000000780 returned -14 [ 257.317215][ T1001] usb 4-1: USB disconnect, device number 12 [ 258.026628][ T8740] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 258.027358][ T8740] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 258.051029][ T30] usb 2-1: USB disconnect, device number 12 [ 258.117101][ T30] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 258.140099][ T30] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 258.141169][ T30] ti_usb_3410_5052 2-1:2.0: device disconnected [ 258.312705][ T1001] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 258.442704][ T1001] usb 3-1: device descriptor read/64, error -71 [ 258.494468][ T8801] binder: 8800:8801 ioctl 4018620d 0 returned -22 [ 258.496949][ T8801] binder: 8800:8801 ioctl c0306201 200000000680 returned -14 [ 258.502282][ T8801] binder: 8800:8801 ioctl c0306201 200000000780 returned -14 [ 258.695202][ T1001] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 258.741950][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 258.742543][ C1] net_ratelimit: 635 callbacks suppressed [ 258.781495][ T8810] netlink: 'syz.1.1024': attribute type 10 has an invalid length. [ 258.828952][ T7865] nvme nvme0: rdma_resolve_route failed (-110). [ 258.831996][ T8806] nvme nvme0: rdma connection establishment failed (-19) [ 258.832526][ T1001] usb 3-1: device descriptor read/64, error -71 [ 258.943057][ T1001] usb usb3-port1: attempt power cycle [ 258.992827][ T5732] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 259.143004][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 259.143764][ T5732] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 259.145100][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.145122][ T5732] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.147945][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.147967][ T5732] usb 4-1: Product: syz [ 259.147983][ T5732] usb 4-1: Manufacturer: syz [ 259.147998][ T5732] usb 4-1: SerialNumber: syz [ 259.236555][ T5732] usb 4-1: config 0 descriptor?? [ 259.293609][ T1001] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 259.323947][ T1001] usb 3-1: device descriptor read/8, error -71 [ 259.572536][ T1001] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 259.593337][ T1001] usb 3-1: device descriptor read/8, error -71 [ 259.703234][ T1001] usb usb3-port1: unable to enumerate USB device [ 260.234775][ T5732] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 260.383165][ T5732] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 260.388773][ T5732] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.389988][ T5732] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.392645][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.392663][ T5732] usb 5-1: Product: syz [ 260.392678][ T5732] usb 5-1: Manufacturer: syz [ 260.392693][ T5732] usb 5-1: SerialNumber: syz [ 260.453914][ T5732] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 260.470034][ T5732] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 260.480792][ T5732] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 261.090543][ T8837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1036'. [ 261.252896][ T8837] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 261.433130][ T8837] bond3 (unregistering): Released all slaves [ 261.874639][ T5802] usb 4-1: USB disconnect, device number 13 [ 262.056577][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 262.076788][ T8862] netlink: 'syz.0.1041': attribute type 10 has an invalid length. [ 262.223508][ T7865] nvme nvme0: rdma_resolve_route failed (-110). [ 262.241519][ T8857] nvme nvme0: rdma connection establishment failed (-19) [ 262.512564][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 262.642561][ T9] usb 3-1: device descriptor read/64, error -71 [ 262.782014][ T2947] nvme nvme0: rdma_resolve_route failed (-110). [ 262.788219][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 262.800984][ T8874] nvme nvme0: rdma connection establishment failed (-19) [ 262.912564][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 262.950415][ T8881] FAULT_INJECTION: forcing a failure. [ 262.950415][ T8881] name failslab, interval 1, probability 0, space 0, times 0 [ 262.950441][ T8881] CPU: 1 UID: 0 PID: 8881 Comm: syz.1.1051 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.950469][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 262.950498][ T8881] Call Trace: [ 262.950507][ T8881] [ 262.950516][ T8881] dump_stack_lvl+0xe8/0x150 [ 262.950554][ T8881] should_fail_ex+0x46b/0x600 [ 262.950583][ T8881] should_failslab+0xa8/0x100 [ 262.950602][ T8881] __kmalloc_cache_noprof+0x9c/0x670 [ 262.950613][ T8881] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 262.950624][ T8881] ? shrinker_alloc+0x59/0xbc0 [ 262.950637][ T8881] ? shrinker_alloc+0x59/0xbc0 [ 262.950654][ T8881] shrinker_alloc+0x59/0xbc0 [ 262.950669][ T8881] ? __rt_spin_lock_init+0x3e/0x50 [ 262.950689][ T8881] sget_fc+0xe8d/0x1a70 [ 262.950708][ T8881] ? __pfx_set_anon_super_fc+0x10/0x10 [ 262.950725][ T8881] ? __pfx_sget_fc+0x10/0x10 [ 262.950739][ T8881] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 262.950752][ T8881] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 262.950768][ T8881] ? __pfx_mqueue_fill_super+0x10/0x10 [ 262.950781][ T8881] get_tree_nodev+0x2a/0x150 [ 262.950798][ T8881] vfs_get_tree+0x92/0x2a0 [ 262.950816][ T8881] fc_mount_longterm+0x1c/0x100 [ 262.950829][ T8881] mq_init_ns+0x508/0x770 [ 262.950848][ T8881] copy_ipcs+0x45c/0x6c0 [ 262.950862][ T8881] create_new_namespaces+0x210/0x6b0 [ 262.950880][ T8881] ? security_capable+0x7e/0x2c0 [ 262.950897][ T8881] unshare_nsproxy_namespaces+0x149/0x190 [ 262.950915][ T8881] ksys_unshare+0x532/0x890 [ 262.950927][ T8881] ? __pfx_ksys_unshare+0x10/0x10 [ 262.950946][ T8881] ? rcu_is_watching+0x16/0xb0 [ 262.950963][ T8881] __x64_sys_unshare+0x38/0x50 [ 262.950975][ T8881] do_syscall_64+0x166/0x520 [ 262.950986][ T8881] ? trace_irq_disable+0x3b/0x140 [ 262.951002][ T8881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.951014][ T8881] ? clear_bhb_loop+0x70/0xc0 [ 262.951029][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.951040][ T8881] RIP: 0033:0x7f78106af559 [ 262.951052][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.951062][ T8881] RSP: 002b:00007f780e8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 262.951076][ T8881] RAX: ffffffffffffffda RBX: 00007f7810935fa0 RCX: 00007f78106af559 [ 262.951084][ T8881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 262.951095][ T8881] RBP: 00007f7810746b20 R08: 0000000000000000 R09: 0000000000000000 [ 262.951109][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.951121][ T8881] R13: 00007f7810936038 R14: 00007f7810935fa0 R15: 00007ffd85d6a8a8 [ 262.951154][ T8881] [ 263.085100][ T9] usb 3-1: device descriptor read/64, error -71 [ 263.193103][ T9] usb usb3-port1: attempt power cycle [ 263.510418][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1056'. [ 263.565876][ T8891] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 263.582532][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 263.590935][ T8891] bond1 (unregistering): Released all slaves [ 263.603401][ T9] usb 3-1: device descriptor read/8, error -71 [ 263.692542][ T5732] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 263.790121][ T8824] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 263.793534][ T8824] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 263.867444][ T5320] usb 5-1: USB disconnect, device number 25 [ 263.872489][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 263.873260][ T5732] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 263.874533][ T5732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.874561][ T5732] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.877229][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.877250][ T5732] usb 1-1: Product: syz [ 263.877266][ T5732] usb 1-1: Manufacturer: syz [ 263.877281][ T5732] usb 1-1: SerialNumber: syz [ 263.991948][ T5732] usb 1-1: config 0 descriptor?? [ 264.011104][ T5320] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 264.023823][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 264.048868][ T9] usb 3-1: device descriptor read/8, error -71 [ 264.050767][ T5320] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 264.084136][ T5320] ti_usb_3410_5052 5-1:2.0: device disconnected [ 264.153012][ T9] usb usb3-port1: unable to enumerate USB device [ 264.181917][ T8901] bond0: ARP target 192.168.1.12 is already present [ 264.181938][ T8901] bond0: option arp_ip_target: invalid value (+192.168.1.12ք) [ 264.185593][ C1] net_ratelimit: 597 callbacks suppressed [ 264.529315][ T7874] nvme nvme0: rdma_resolve_route failed (-110). [ 264.532080][ T8906] nvme nvme0: rdma connection establishment failed (-19) [ 264.567400][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 264.568480][ T8908] netlink: 'syz.1.1058': attribute type 10 has an invalid length. [ 265.258435][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 265.288831][ T2947] nvme nvme0: rdma_resolve_route failed (-110). [ 265.300478][ T8922] nvme nvme0: rdma connection establishment failed (-19) [ 265.635370][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 265.710041][ T8934] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 265.735085][ T8934] bond3 (unregistering): Released all slaves [ 266.049762][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1074'. [ 266.298644][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1074'. [ 266.492895][ T8943] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 267.206349][ T8943] bond2 (unregistering): Released all slaves [ 267.355774][ T5320] usb 1-1: USB disconnect, device number 17 [ 267.382870][ T8950] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 267.597327][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1078'. [ 268.102217][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 268.188322][ T7865] nvme nvme0: rdma_resolve_route failed (-110). [ 268.201920][ T8979] nvme nvme0: rdma connection establishment failed (-19) [ 268.249520][ T8972] rxe_eth0 speed is unknown, defaulting to 1000 [ 268.362707][ T5320] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 268.512606][ T5320] usb 3-1: Using ep0 maxpacket: 16 [ 268.513329][ T5320] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 268.515583][ T5320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.515606][ T5320] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.530179][ T5320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.530199][ T5320] usb 3-1: Product: syz [ 268.530214][ T5320] usb 3-1: Manufacturer: syz [ 268.530229][ T5320] usb 3-1: SerialNumber: syz [ 268.554206][ T5320] usb 3-1: config 0 descriptor?? [ 268.820913][ T8993] binder: 8992:8993 ioctl c0306201 0 returned -14 [ 268.950445][ T8993] binder: 8992:8993 ioctl c0306201 200000000780 returned -14 [ 268.982288][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1093'. [ 269.038953][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1093'. [ 269.269861][ T8997] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 269.302529][ C0] net_ratelimit: 128 callbacks suppressed [ 269.358662][ T8997] bond1 (unregistering): Released all slaves [ 269.531095][ T9002] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 269.588076][ T9002] bond1 (unregistering): Released all slaves [ 270.337666][ T9011] ceph: No mds server is up or the cluster is laggy [ 270.353027][ T30] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 270.764303][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1102'. [ 271.325817][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 271.326907][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 271.326964][ T30] usb 1-1: too many configurations: 216, using maximum allowed: 8 [ 271.329337][ T30] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 271.329370][ T30] usb 1-1: can't read configurations, error -61 [ 271.471653][ T5592] usb 3-1: USB disconnect, device number 18 [ 271.520489][ T30] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 271.692499][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 271.693240][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 271.693293][ T30] usb 1-1: too many configurations: 216, using maximum allowed: 8 [ 271.695448][ T30] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 271.695480][ T30] usb 1-1: can't read configurations, error -61 [ 271.696444][ T30] usb usb1-port1: attempt power cycle [ 272.052528][ T30] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 272.073197][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 272.073898][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 272.073953][ T30] usb 1-1: too many configurations: 216, using maximum allowed: 8 [ 272.075820][ T30] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 272.075851][ T30] usb 1-1: can't read configurations, error -61 [ 272.182694][ T5320] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 272.212604][ T30] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 272.233977][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 272.234694][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 272.234749][ T30] usb 1-1: too many configurations: 216, using maximum allowed: 8 [ 272.243948][ T30] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 272.243980][ T30] usb 1-1: can't read configurations, error -61 [ 272.245335][ T30] usb usb1-port1: unable to enumerate USB device [ 272.342704][ T5320] usb 2-1: device descriptor read/64, error -71 [ 272.582754][ T5320] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 272.712545][ T5320] usb 2-1: device descriptor read/64, error -71 [ 273.054447][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'. [ 273.476373][ T5320] usb usb2-port1: attempt power cycle [ 273.822593][ T5320] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 273.843169][ T5320] usb 2-1: device descriptor read/8, error -71 [ 274.085068][ T5320] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 274.104363][ T5320] usb 2-1: device descriptor read/8, error -71 [ 274.213093][ T5320] usb usb2-port1: unable to enumerate USB device [ 274.752667][ C1] net_ratelimit: 87 callbacks suppressed [ 274.927684][ T30] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 275.082575][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 275.083310][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 275.083362][ T30] usb 4-1: too many configurations: 216, using maximum allowed: 8 [ 275.086342][ T30] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 275.086374][ T30] usb 4-1: can't read configurations, error -61 [ 275.222733][ T30] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 275.372600][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 275.373362][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 275.373419][ T30] usb 4-1: too many configurations: 216, using maximum allowed: 8 [ 275.375662][ T30] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 275.375694][ T30] usb 4-1: can't read configurations, error -61 [ 275.419440][ T30] usb usb4-port1: attempt power cycle [ 275.774700][ T30] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 275.794433][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 275.795132][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 275.795195][ T30] usb 4-1: too many configurations: 216, using maximum allowed: 8 [ 275.797152][ T30] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 275.797191][ T30] usb 4-1: can't read configurations, error -61 [ 275.922539][ T30] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 275.943769][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 275.944493][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 275.944559][ T30] usb 4-1: too many configurations: 216, using maximum allowed: 8 [ 275.946481][ T30] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 275.946522][ T30] usb 4-1: can't read configurations, error -61 [ 275.947573][ T30] usb usb4-port1: unable to enumerate USB device [ 276.053473][ T5320] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 276.182572][ T5320] usb 5-1: device descriptor read/64, error -71 [ 276.422719][ T5320] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 276.554135][ T5320] usb 5-1: device descriptor read/64, error -71 [ 276.663747][ T5320] usb usb5-port1: attempt power cycle [ 277.002691][ T5320] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 277.023339][ T5320] usb 5-1: device descriptor read/8, error -71 [ 277.272568][ T5320] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 277.293207][ T5320] usb 5-1: device descriptor read/8, error -71 [ 277.403601][ T5320] usb usb5-port1: unable to enumerate USB device [ 277.672507][ T30] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 277.812006][ T9188] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 277.822503][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 277.823267][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 277.824654][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.824676][ T30] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.827407][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.827427][ T30] usb 2-1: Product: syz [ 277.827442][ T30] usb 2-1: Manufacturer: syz [ 277.827456][ T30] usb 2-1: SerialNumber: syz [ 277.892249][ T30] usb 2-1: config 0 descriptor?? [ 278.021358][ T9194] binder: 9191:9194 ioctl c0306201 200000000780 returned -14 [ 278.287125][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1171'. [ 278.359854][ T9201] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 278.361856][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1171'. [ 278.399477][ T9201] bond1 (unregistering): Released all slaves [ 278.628139][ T9204] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 278.666617][ T9204] bond1 (unregistering): Released all slaves [ 279.403906][ T9239] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1186'. [ 279.403926][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1186'. [ 279.479914][ T9241] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 279.495823][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 279.549371][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 279.576436][ T9243] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 279.626169][ T9243] bond1 (unregistering): Released all slaves [ 279.820375][ T9246] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 279.860530][ T9246] bond1 (unregistering): Released all slaves [ 280.112456][ C1] net_ratelimit: 95 callbacks suppressed [ 281.067515][ T5320] usb 2-1: USB disconnect, device number 17 [ 281.250516][ T9278] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1201'. [ 281.250530][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1201'. [ 281.373993][ T9276] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 281.868661][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 282.073094][ T30] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 282.257329][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 282.258814][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 282.260026][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.260039][ T30] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.292915][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.292934][ T30] usb 3-1: Product: syz [ 282.292948][ T30] usb 3-1: Manufacturer: syz [ 282.292963][ T30] usb 3-1: SerialNumber: syz [ 282.340046][ T30] usb 3-1: config 0 descriptor?? [ 282.410589][ T9317] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1218'. [ 282.484718][ T9319] binder: 9318:9319 ioctl c0306201 200000000680 returned -14 [ 282.485678][ T9319] binder: 9318:9319 ioctl c0306201 200000000780 returned -14 [ 282.683333][ T5320] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 282.710061][ T9323] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 282.854949][ T5320] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.857677][ T5320] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 282.860304][ T5320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.860315][ T5320] usb 1-1: SerialNumber: syz [ 283.299301][ T5591] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 283.600492][ T5320] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 283.808137][ T5320] usb 1-1: USB disconnect, device number 22 [ 283.829043][ T5320] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 283.934288][ T9351] __nla_validate_parse: 2 callbacks suppressed [ 283.934305][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'. [ 283.939178][ T9352] binder: 9349:9352 ioctl c0306201 200000000680 returned -14 [ 283.940509][ T9352] binder: 9349:9352 ioctl c0306201 200000000780 returned -14 [ 284.673379][ T5591] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 284.984531][ T9] usb 3-1: USB disconnect, device number 19 [ 285.131413][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 285.152533][ T5320] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 285.256946][ T9403] net_ratelimit: 91 callbacks suppressed [ 285.302589][ T5320] usb 5-1: device descriptor read/64, error -71 [ 285.456228][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 285.473314][ T9412] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 285.542610][ T5320] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 285.561538][ T7874] nvme nvme0: rdma_resolve_route failed (-110). [ 285.578307][ T9405] nvme nvme0: rdma connection establishment failed (-19) [ 285.654322][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 285.672623][ T5320] usb 5-1: device descriptor read/64, error -71 [ 285.784845][ T5320] usb usb5-port1: attempt power cycle [ 285.803592][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.806903][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 285.812036][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 285.812057][ T9] usb 2-1: SerialNumber: syz [ 285.862637][ T5591] Bluetooth: hci4: command 0x0406 tx timeout [ 286.152616][ T5320] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 286.173837][ T5320] usb 5-1: device descriptor read/8, error -71 [ 286.203146][ T5732] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 286.352514][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 286.353304][ T5732] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 286.362075][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.362097][ T5732] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.368998][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.369020][ T5732] usb 4-1: Product: syz [ 286.369034][ T5732] usb 4-1: Manufacturer: syz [ 286.369049][ T5732] usb 4-1: SerialNumber: syz [ 286.394924][ T5732] usb 4-1: config 0 descriptor?? [ 286.412536][ T5320] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 286.437815][ T5320] usb 5-1: device descriptor read/8, error -71 [ 286.471611][ T9] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 286.543766][ T5320] usb usb5-port1: unable to enumerate USB device [ 286.679726][ T5320] usb 2-1: USB disconnect, device number 18 [ 286.728720][ T5320] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 287.762581][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 288.218467][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'. [ 289.476531][ T5592] usb 4-1: USB disconnect, device number 18 [ 289.771983][ T9488] FAULT_INJECTION: forcing a failure. [ 289.771983][ T9488] name failslab, interval 1, probability 0, space 0, times 0 [ 289.772012][ T9488] CPU: 0 UID: 0 PID: 9488 Comm: syz.4.1270 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 289.772038][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 289.772051][ T9488] Call Trace: [ 289.772059][ T9488] [ 289.772073][ T9488] dump_stack_lvl+0xe8/0x150 [ 289.772111][ T9488] should_fail_ex+0x46b/0x600 [ 289.772142][ T9488] should_failslab+0xa8/0x100 [ 289.772166][ T9488] ? __kernfs_new_node+0xe7/0xa70 [ 289.772200][ T9488] kmem_cache_alloc_noprof+0x99/0x680 [ 289.772233][ T9488] ? __kernfs_new_node+0xe7/0xa70 [ 289.772273][ T9488] __kernfs_new_node+0xe7/0xa70 [ 289.772303][ T9488] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.772342][ T9488] ? __pfx___kernfs_new_node+0x10/0x10 [ 289.772370][ T9488] ? lock_acquire+0x115/0x350 [ 289.772397][ T9488] ? kernfs_root+0x1c/0x230 [ 289.772433][ T9488] ? kernfs_root+0x1c/0x230 [ 289.772460][ T9488] ? kernfs_root+0x1c/0x230 [ 289.772484][ T9488] ? kernfs_root+0x1c/0x230 [ 289.772508][ T9488] kernfs_new_node+0xeb/0x140 [ 289.772533][ T9488] __kernfs_create_file+0x4b/0x2e0 [ 289.772562][ T9488] sysfs_add_file_mode_ns+0x237/0x300 [ 289.772588][ T9488] internal_create_group+0x679/0x1180 [ 289.772620][ T9488] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 289.772637][ T9488] ? __pfx_internal_create_group+0x10/0x10 [ 289.772668][ T9488] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.772696][ T9488] ? up_write+0x5a/0x190 [ 289.772717][ T9488] sysfs_create_groups+0x59/0x120 [ 289.772751][ T9488] device_add_attrs+0xde/0x600 [ 289.772774][ T9488] ? __pfx_device_add_attrs+0x10/0x10 [ 289.772805][ T9488] ? device_add_class_symlinks+0x222/0x240 [ 289.772840][ T9488] device_add+0x488/0xb80 [ 289.772870][ T9488] device_create+0x269/0x300 [ 289.772905][ T9488] ? __pfx_device_create+0x10/0x10 [ 289.772945][ T9488] bdi_register_va+0x9c/0x7d0 [ 289.772977][ T9488] super_setup_bdi_name+0xf8/0x210 [ 289.773013][ T9488] ? ceph_get_tree+0xa23/0x1a40 [ 289.773037][ T9488] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 289.773074][ T9488] ? ceph_mdsc_init+0xd22/0xe20 [ 289.773097][ T9488] ceph_get_tree+0xa43/0x1a40 [ 289.773119][ T9488] ? safesetid_security_capable+0xa9/0x1a0 [ 289.773148][ T9488] vfs_get_tree+0x92/0x2a0 [ 289.773181][ T9488] do_new_mount+0x325/0xb00 [ 289.773202][ T9488] ? cap_capable+0x123/0x460 [ 289.773223][ T9488] ? __pfx_do_new_mount+0x10/0x10 [ 289.773249][ T9488] ? ns_capable+0x89/0xe0 [ 289.773281][ T9488] ? path_mount+0x647/0x1050 [ 289.773310][ T9488] ? user_path_at+0xd4/0x160 [ 289.773341][ T9488] __se_sys_mount+0x31d/0x420 [ 289.773375][ T9488] ? __pfx___se_sys_mount+0x10/0x10 [ 289.773445][ T9488] ? __x64_sys_mount+0x20/0xc0 [ 289.773476][ T9488] do_syscall_64+0x166/0x520 [ 289.773497][ T9488] ? trace_irq_disable+0x3b/0x140 [ 289.773526][ T9488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.773557][ T9488] ? clear_bhb_loop+0x70/0xc0 [ 289.773584][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.773606][ T9488] RIP: 0033:0x7ffa065af559 [ 289.773627][ T9488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.773648][ T9488] RSP: 002b:00007ffa047fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 289.773671][ T9488] RAX: ffffffffffffffda RBX: 00007ffa06835fa0 RCX: 00007ffa065af559 [ 289.773688][ T9488] RDX: 0000200000001bc0 RSI: 0000200000001b80 RDI: 0000200000001b40 [ 289.773704][ T9488] RBP: 00007ffa06646b20 R08: 0000000000000000 R09: 0000000000000000 [ 289.773717][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.773730][ T9488] R13: 00007ffa06836038 R14: 00007ffa06835fa0 R15: 00007ffd7c4193c8 [ 289.773763][ T9488] [ 289.914735][ T1001] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 289.926699][ T9488] ceph: No mds server is up or the cluster is laggy [ 290.072483][ T1001] usb 1-1: Using ep0 maxpacket: 16 [ 290.073215][ T1001] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 290.074691][ T1001] usb 1-1: config index 0 descriptor too short (expected 12872, got 72) [ 290.074715][ T1001] usb 1-1: config 60 has too many interfaces: 211, using maximum allowed: 32 [ 290.074736][ T1001] usb 1-1: config 60 has an invalid descriptor of length 0, skipping remainder of the config [ 290.074756][ T1001] usb 1-1: config 60 has 0 interfaces, different from the descriptor's value: 211 [ 290.078051][ T1001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.078072][ T1001] usb 1-1: Product: syz [ 290.078087][ T1001] usb 1-1: Manufacturer: syz [ 290.078102][ T1001] usb 1-1: SerialNumber: syz [ 290.189982][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 290.192730][ T9500] netlink: 'syz.3.1269': attribute type 10 has an invalid length. [ 290.344008][ T2947] net_ratelimit: 571 callbacks suppressed [ 290.428547][ T9509] process 'syz.2.1274' launched '/dev/fd/4' with NULL argv: empty string added [ 290.488742][ T9496] nvme nvme0: rdma connection establishment failed (-512) [ 291.155054][ T5320] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 291.601805][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1276'. [ 291.918813][ T5320] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.920781][ T5320] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 291.923152][ T5320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 291.923174][ T5320] usb 5-1: SerialNumber: syz [ 292.624175][ T1001] usb 1-1: USB disconnect, device number 23 [ 292.777906][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1282'. [ 292.782584][ T30] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 292.793418][ T5320] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 292.933005][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 292.933771][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 292.947613][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.947638][ T30] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 292.968462][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.968482][ T30] usb 3-1: Product: syz [ 292.968496][ T30] usb 3-1: Manufacturer: syz [ 292.968510][ T30] usb 3-1: SerialNumber: syz [ 293.008143][ T1001] usb 5-1: USB disconnect, device number 34 [ 293.029266][ T1001] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 293.031204][ T30] usb 3-1: config 0 descriptor?? [ 293.202846][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 293.517447][ T9556] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 295.693100][ C1] net_ratelimit: 44 callbacks suppressed [ 295.899715][ T9556] bond1 (unregistering): Released all slaves [ 296.017958][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 296.131282][ T9584] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 296.296502][ T9576] nvme nvme0: rdma connection establishment failed (-512) [ 296.433735][ T9586] syzkaller0: entered promiscuous mode [ 296.433758][ T9586] syzkaller0: entered allmulticast mode [ 296.885837][ T5320] usb 3-1: USB disconnect, device number 20 [ 297.021302][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1298'. [ 297.482561][ T30] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 297.651613][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.655830][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 297.657206][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 297.657226][ T30] usb 4-1: SerialNumber: syz [ 298.259440][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 299.243840][ T6048] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 299.376592][ T6048] usb 3-1: device descriptor read/64, error -71 [ 299.381832][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 299.397022][ T7865] nvme nvme0: rdma_resolve_route failed (-110). [ 299.399824][ T9654] nvme nvme0: rdma connection establishment failed (-19) [ 299.419760][ T9656] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 299.454022][ T30] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 299.492639][ T5320] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 299.612540][ T6048] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 299.662489][ T5320] usb 1-1: Using ep0 maxpacket: 16 [ 299.663867][ T5320] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 299.665195][ T5320] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.665217][ T5320] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 299.670650][ T5320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.670670][ T5320] usb 1-1: Product: syz [ 299.670685][ T5320] usb 1-1: Manufacturer: syz [ 299.670699][ T5320] usb 1-1: SerialNumber: syz [ 299.681256][ T5732] usb 4-1: USB disconnect, device number 19 [ 299.689043][ T5320] usb 1-1: config 0 descriptor?? [ 299.714303][ T5732] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 299.762598][ T6048] usb 3-1: device descriptor read/64, error -71 [ 299.883016][ T6048] usb usb3-port1: attempt power cycle [ 300.816900][ T5706] net_ratelimit: 91 callbacks suppressed [ 300.992564][ T6048] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 301.015385][ T6048] usb 3-1: device descriptor read/8, error -71 [ 301.278828][ T6048] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 301.294392][ T6048] usb 3-1: device descriptor read/8, error -71 [ 301.403795][ T6048] usb usb3-port1: unable to enumerate USB device [ 302.320227][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1316'. [ 302.907286][ T5592] usb 1-1: USB disconnect, device number 24 [ 303.361707][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 303.379670][ T9738] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 303.403377][ T68] nvme nvme0: rdma_resolve_route failed (-110). [ 303.407989][ T9734] nvme nvme0: rdma connection establishment failed (-19) [ 303.502510][ T5592] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 303.632548][ T5592] usb 5-1: device descriptor read/64, error -71 [ 303.872587][ T5592] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 304.127921][ T5592] usb 5-1: device descriptor read/64, error -71 [ 304.172685][ T5320] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 304.509022][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 304.962204][ T5592] usb usb5-port1: attempt power cycle [ 305.113948][ T5320] usb 3-1: Using ep0 maxpacket: 16 [ 305.114691][ T5320] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 305.115975][ T5320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.115997][ T5320] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.120253][ T5320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.120274][ T5320] usb 3-1: Product: syz [ 305.120290][ T5320] usb 3-1: Manufacturer: syz [ 305.120304][ T5320] usb 3-1: SerialNumber: syz [ 305.151441][ T5320] usb 3-1: config 0 descriptor?? [ 305.332595][ T5592] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 305.353104][ T5592] usb 5-1: device descriptor read/8, error -71 [ 305.748596][ T5592] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 305.814980][ T5592] usb 5-1: device descriptor read/8, error -71 [ 306.324130][ T174] net_ratelimit: 85 callbacks suppressed [ 306.414763][ T5592] usb usb5-port1: unable to enumerate USB device [ 306.600301][ T9769] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 307.058147][ T272] nvme nvme0: rdma_resolve_route failed (-110). [ 307.061636][ T9788] nvme nvme0: rdma connection establishment failed (-19) [ 307.168641][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 307.170008][ T9793] netlink: 'syz.3.1340': attribute type 10 has an invalid length. [ 307.532875][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1343'. [ 308.192630][ T1001] usb 3-1: USB disconnect, device number 25 [ 308.501596][ T9807] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 308.668500][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'. [ 309.413276][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'. [ 310.352124][ T325] nvme nvme0: rdma_resolve_route failed (-110). [ 310.352537][ T5320] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 310.364886][ T9856] nvme nvme0: rdma connection establishment failed (-19) [ 310.382784][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 310.384287][ T9858] netlink: 'syz.3.1358': attribute type 10 has an invalid length. [ 310.498071][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 310.504257][ T5320] usb 3-1: Using ep0 maxpacket: 16 [ 310.506212][ T5320] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 310.507783][ T5320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.507805][ T5320] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.510371][ T5320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.510392][ T5320] usb 3-1: Product: syz [ 310.510407][ T5320] usb 3-1: Manufacturer: syz [ 310.510419][ T5320] usb 3-1: SerialNumber: syz [ 310.514995][ T68] nvme nvme0: rdma_resolve_route failed (-110). [ 310.527509][ T9859] nvme nvme0: rdma connection establishment failed (-19) [ 310.586211][ T5320] usb 3-1: config 0 descriptor?? [ 310.629640][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1364'. [ 311.722451][ C1] net_ratelimit: 90 callbacks suppressed [ 311.843429][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'. [ 313.481760][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.526719][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.541333][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.554622][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.577052][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.044436][ T6048] usb 3-1: USB disconnect, device number 26 [ 314.400630][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 314.469358][ T7874] nvme nvme0: rdma_resolve_route failed (-110). [ 314.479206][ T9916] nvme nvme0: rdma connection establishment failed (-19) [ 314.699102][ T9898] ceph: No mds server is up or the cluster is laggy [ 315.031079][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'. [ 315.619400][ T9887] rxe_eth0 speed is unknown, defaulting to 1000 [ 315.782496][ T5591] Bluetooth: hci5: command tx timeout [ 316.402509][ T5320] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 316.552532][ T5320] usb 3-1: Using ep0 maxpacket: 16 [ 316.553336][ T5320] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 316.556510][ T5320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.556531][ T5320] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.562924][ T5320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.562944][ T5320] usb 3-1: Product: syz [ 316.562977][ T5320] usb 3-1: Manufacturer: syz [ 316.562992][ T5320] usb 3-1: SerialNumber: syz [ 316.582855][ T5320] usb 3-1: config 0 descriptor?? [ 318.632531][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 318.902663][ C1] net_ratelimit: 123 callbacks suppressed [ 319.051603][ T5591] Bluetooth: hci5: command tx timeout [ 319.178620][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.178682][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.579388][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 319.591597][ T9982] netlink: 'syz.3.1391': attribute type 10 has an invalid length. [ 319.613755][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 319.667398][ T68] nvme nvme0: rdma_resolve_route failed (-110). [ 319.669946][ T9976] nvme nvme0: rdma connection establishment failed (-19) [ 319.876512][ T9978] nvme nvme0: rdma connection establishment failed (-512) [ 320.212092][ T5732] usb 3-1: USB disconnect, device number 27 [ 320.389362][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.390346][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.390601][ T9887] bridge_slave_0: entered allmulticast mode [ 320.393086][ T9887] bridge_slave_0: entered promiscuous mode [ 320.396477][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.396664][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.396860][ T9887] bridge_slave_1: entered allmulticast mode [ 320.399131][ T9887] bridge_slave_1: entered promiscuous mode [ 320.518798][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.540925][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.750108][ T9887] team0: Port device team_slave_0 added [ 320.766793][ T9887] team0: Port device team_slave_1 added [ 321.062589][ T60] Bluetooth: hci5: command tx timeout [ 321.523781][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 322.021395][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 322.021453][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 322.262828][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.262840][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.262863][ T9887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.269207][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.269218][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.269244][ T9887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.541418][ T9887] hsr_slave_0: entered promiscuous mode [ 322.552649][ T9887] hsr_slave_1: entered promiscuous mode [ 322.553593][ T9887] debugfs: 'hsr0' already exists in 'hsr' [ 322.553614][ T9887] Cannot create hsr debugfs directory [ 322.665810][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'. [ 322.718848][T10035] netlink: 'syz.2.1405': attribute type 10 has an invalid length. [ 322.765918][ T272] nvme nvme0: rdma_resolve_route failed (-110). [ 322.789619][T10031] nvme nvme0: rdma connection establishment failed (-19) [ 322.822932][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 322.972620][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 322.973430][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 322.974711][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.974732][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.977496][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.977516][ T9] usb 1-1: Product: syz [ 322.977725][ T9] usb 1-1: Manufacturer: syz [ 322.977741][ T9] usb 1-1: SerialNumber: syz [ 323.030170][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 323.052151][ T9] usb 1-1: config 0 descriptor?? [ 323.144604][ T60] Bluetooth: hci5: command tx timeout [ 323.229362][ T68] nvme nvme0: rdma_resolve_route failed (-110). [ 323.247930][T10038] nvme nvme0: rdma connection establishment failed (-19) [ 324.294042][ C1] net_ratelimit: 90 callbacks suppressed [ 324.849814][T10062] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1413'. [ 324.924530][T10056] bond2: entered allmulticast mode [ 324.955593][T10056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.032460][T10061] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 325.035479][T10061] macvlan2: entered allmulticast mode [ 325.035494][T10061] bond0: entered allmulticast mode [ 325.035509][T10061] bond_slave_0: entered allmulticast mode [ 325.035535][T10061] bond_slave_1: entered allmulticast mode [ 325.035567][T10061] bridge0: entered allmulticast mode [ 325.035590][T10061] syz_tun: entered allmulticast mode [ 325.035871][T10061] bond_slave_0: entered promiscuous mode [ 325.035963][T10061] bond_slave_1: entered promiscuous mode [ 325.101269][T10061] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 325.181875][T10066] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 325.236975][T10062] bond_slave_0: left promiscuous mode [ 325.237577][T10062] bond_slave_1: left promiscuous mode [ 325.365830][T10062] bond0 (unregistering): left allmulticast mode [ 325.365852][T10062] bond_slave_0: left allmulticast mode [ 325.365878][T10062] bond_slave_1: left allmulticast mode [ 325.365901][T10062] bridge0: left allmulticast mode [ 325.365922][T10062] syz_tun: left allmulticast mode [ 325.509961][T10062] bond2: (slave macvlan2): Releasing backup interface [ 325.609028][ T6048] usb 1-1: USB disconnect, device number 25 [ 325.621505][T10062] macvlan2 (unregistering): left allmulticast mode [ 325.799996][T10062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.819021][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 325.819212][ T7871] nvme nvme0: rdma_resolve_route failed (-110). [ 325.822051][T10080] nvme nvme0: rdma connection establishment failed (-19) [ 325.890503][T10080] netlink: 'syz.3.1419': attribute type 10 has an invalid length. [ 325.914166][T10062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.993986][T10062] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 326.053337][T10062] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 326.115673][T10062] bond0 (unregistering): Released all slaves [ 326.209312][ T7871] nvme nvme0: rdma_resolve_route failed (-110). [ 326.217666][T10091] nvme nvme0: rdma connection establishment failed (-19) [ 326.220522][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 326.761864][ T9887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.810406][ T9887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.837278][ T9887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.948300][ T9887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.950759][ T9887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.117214][ T9887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.119641][ T9887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.177772][ T9887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.584735][T10133] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 327.888348][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 329.122863][T10147] netlink: 'syz.4.1434': attribute type 10 has an invalid length. [ 329.288314][ T174] nvme nvme0: rdma_resolve_route failed (-110). [ 329.314489][T10138] nvme nvme0: rdma connection establishment failed (-19) [ 329.465000][ T174] net_ratelimit: 93 callbacks suppressed [ 329.574254][ T9887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.764523][ T9887] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.821559][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.825322][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.879161][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.879371][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.995002][T10167] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1445'. [ 330.092729][T10169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1446'. [ 330.144783][T10167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.224626][T10167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.443714][T10167] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 331.566742][T10167] bond0 (unregistering): Released all slaves [ 332.122265][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'. [ 332.193214][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1450'. [ 332.217799][T10206] netlink: 'syz.4.1450': attribute type 10 has an invalid length. [ 332.276995][T10203] FAULT_INJECTION: forcing a failure. [ 332.276995][T10203] name failslab, interval 1, probability 0, space 0, times 0 [ 332.277027][T10203] CPU: 1 UID: 0 PID: 10203 Comm: syz.2.1454 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 332.277052][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 332.277065][T10203] Call Trace: [ 332.277075][T10203] [ 332.277083][T10203] dump_stack_lvl+0xe8/0x150 [ 332.277123][T10203] should_fail_ex+0x46b/0x600 [ 332.277155][T10203] should_failslab+0xa8/0x100 [ 332.277184][T10203] __kmalloc_node_noprof+0xf8/0x7b0 [ 332.277218][T10203] ? __rb_allocate_pages+0x570/0x16c0 [ 332.277241][T10203] ? __rb_allocate_pages+0x570/0x16c0 [ 332.277270][T10203] __rb_allocate_pages+0x570/0x16c0 [ 332.277322][T10203] ring_buffer_resize+0x51d/0x1660 [ 332.277349][T10203] ? __pfx_update_last_data+0x10/0x10 [ 332.277384][T10203] __tracing_resize_ring_buffer+0x9c/0x310 [ 332.277413][T10203] ? tracing_update_buffers+0x2b/0xb0 [ 332.277447][T10203] tracing_update_buffers+0x7b/0xb0 [ 332.277475][T10203] event_enable_write+0x226/0x340 [ 332.277511][T10203] ? __pfx_event_enable_write+0x10/0x10 [ 332.277561][T10203] ? __pfx_event_enable_write+0x10/0x10 [ 332.277593][T10203] vfs_write+0x29f/0xbb0 [ 332.277635][T10203] ? __pfx_vfs_write+0x10/0x10 [ 332.277668][T10203] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 332.277704][T10203] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 332.277737][T10203] ? mutex_lock_nested+0x14d/0x1d0 [ 332.277762][T10203] ? fdget_pos+0x11e/0x160 [ 332.277796][T10203] ksys_write+0x156/0x270 [ 332.277824][T10203] ? __pfx_ksys_write+0x10/0x10 [ 332.277862][T10203] do_syscall_64+0x166/0x520 [ 332.277883][T10203] ? trace_irq_disable+0x3b/0x140 [ 332.277912][T10203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.277934][T10203] ? clear_bhb_loop+0x70/0xc0 [ 332.277959][T10203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.277980][T10203] RIP: 0033:0x7f33bc9cf559 [ 332.278002][T10203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.278021][T10203] RSP: 002b:00007f33bac1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.278044][T10203] RAX: ffffffffffffffda RBX: 00007f33bcc55fa0 RCX: 00007f33bc9cf559 [ 332.278061][T10203] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000008 [ 332.278076][T10203] RBP: 00007f33bca66b20 R08: 0000000000000000 R09: 0000000000000000 [ 332.278090][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.278104][T10203] R13: 00007f33bcc56038 R14: 00007f33bcc55fa0 R15: 00007fff25ff7038 [ 332.278141][T10203] [ 332.282184][ T3004] nvme nvme0: rdma_resolve_route failed (-110). [ 332.321781][T10204] nvme nvme0: rdma connection establishment failed (-19) [ 333.304801][ T9887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.521975][ T5704] net_ratelimit: 81 callbacks suppressed [ 338.365455][ T9887] veth0_vlan: entered promiscuous mode [ 338.617841][ T9887] veth1_vlan: entered promiscuous mode [ 339.231497][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 339.301438][ T9887] veth0_macvtap: entered promiscuous mode [ 339.388485][ T9887] veth1_macvtap: entered promiscuous mode [ 339.690453][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.746151][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.787310][ T174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.793015][ T272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.793568][ T272] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.793702][ T272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.902841][ T5732] net_ratelimit: 87 callbacks suppressed [ 339.934976][T10267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1458'. [ 340.605509][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 340.720801][T10279] netlink: 'syz.4.1468': attribute type 10 has an invalid length. [ 340.841361][ T2926] nvme nvme0: rdma_resolve_route failed (-110). [ 340.866930][T10273] nvme nvme0: rdma connection establishment failed (-19) [ 345.648224][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.648238][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.702830][ C1] net_ratelimit: 195 callbacks suppressed [ 347.389749][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 347.419529][T10315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1478'. [ 347.792157][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.792175][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.807533][ T7874] nvme nvme0: rdma_resolve_route failed (-110). [ 347.836926][T10306] nvme nvme0: rdma connection establishment failed (-19) [ 349.796995][T10334] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 350.833697][T10117] net_ratelimit: 176 callbacks suppressed [ 351.831204][T10345] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1487'. [ 353.609725][T10360] FAULT_INJECTION: forcing a failure. [ 353.609725][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 353.609766][T10360] CPU: 1 UID: 0 PID: 10360 Comm: syz.2.1485 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 353.609793][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 353.609808][T10360] Call Trace: [ 353.609817][T10360] [ 353.609827][T10360] dump_stack_lvl+0xe8/0x150 [ 353.609867][T10360] should_fail_ex+0x46b/0x600 [ 353.609899][T10360] should_failslab+0xa8/0x100 [ 353.609925][T10360] ? dst_alloc+0x105/0x170 [ 353.609949][T10360] kmem_cache_alloc_noprof+0x99/0x680 [ 353.609984][T10360] ? dst_alloc+0x105/0x170 [ 353.610014][T10360] dst_alloc+0x105/0x170 [ 353.610043][T10360] xfrm_lookup_with_ifid+0x7d4/0x1de0 [ 353.610078][T10360] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 353.610120][T10360] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 353.610181][T10360] ? ip6_route_output_flags+0x2e/0x5d0 [ 353.610225][T10360] xfrm_lookup_route+0x3c/0x1c0 [ 353.610262][T10360] vti6_tnl_xmit+0x640/0x1c70 [ 353.610317][T10360] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 353.610369][T10360] dev_hard_start_xmit+0x2df/0x870 [ 353.610421][T10360] __dev_queue_xmit+0x157d/0x3a70 [ 353.610442][T10360] ? bpf_clone_redirect+0x1e9/0x4b0 [ 353.610468][T10360] ? bpf_prog_cbaa716d5e7dde70+0x5f/0x68 [ 353.610493][T10360] ? __dev_queue_xmit+0x2a0/0x3a70 [ 353.610514][T10360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.610562][T10360] ? __pfx___dev_queue_xmit+0x10/0x10 [ 353.610603][T10360] ? rcu_is_watching+0x16/0xb0 [ 353.610626][T10360] ? trace_kmalloc+0x2a/0xf0 [ 353.610661][T10360] ? skb_release_data+0x2f7/0xa80 [ 353.610700][T10360] ? csum_partial+0x239/0x2c0 [ 353.610735][T10360] __bpf_redirect+0xaa0/0x1380 [ 353.610777][T10360] bpf_clone_redirect+0x319/0x4b0 [ 353.610811][T10360] ? bpf_test_run+0x1d1/0x830 [ 353.610834][T10360] bpf_prog_cbaa716d5e7dde70+0x5f/0x68 [ 353.610859][T10360] ? __kernel_text_address+0xd/0x30 [ 353.610888][T10360] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 353.610919][T10360] ? arch_stack_walk+0xfb/0x150 [ 353.610956][T10360] ? lock_acquire+0x115/0x350 [ 353.610992][T10360] ? lock_acquire+0x115/0x350 [ 353.611030][T10360] ? __local_bh_enable+0x1e3/0x2f0 [ 353.611063][T10360] ? __local_bh_disable_ip+0x3d/0x420 [ 353.611094][T10360] ? rcu_is_watching+0x16/0xb0 [ 353.611114][T10360] ? __local_bh_disable_ip+0x3d/0x420 [ 353.611146][T10360] ? bpf_test_timer_continue+0x114/0x390 [ 353.611184][T10360] bpf_test_run+0x354/0x830 [ 353.611236][T10360] ? __pfx_bpf_test_run+0x10/0x10 [ 353.611256][T10360] ? irqentry_exit+0x2a0/0x9b0 [ 353.611299][T10360] ? skb_checksum+0xae2/0xbe0 [ 353.611326][T10360] ? convert___skb_to_skb+0x210/0x5b0 [ 353.611351][T10360] ? __asan_memcpy+0x40/0x70 [ 353.611384][T10360] ? convert___skb_to_skb+0x319/0x5b0 [ 353.611411][T10360] bpf_prog_test_run_skb+0xe35/0x2230 [ 353.611458][T10360] ? __fget_files+0x2a/0x420 [ 353.611484][T10360] ? __fget_files+0x3a8/0x420 [ 353.611511][T10360] ? __fget_files+0x2a/0x420 [ 353.611546][T10360] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 353.611571][T10360] bpf_prog_test_run+0x2cb/0x340 [ 353.611599][T10360] __sys_bpf+0xa22/0xd90 [ 353.611630][T10360] ? __pfx___sys_bpf+0x10/0x10 [ 353.611656][T10360] ? do_futex+0x3e7/0x4e0 [ 353.611715][T10360] ? rcu_is_watching+0x16/0xb0 [ 353.611746][T10360] __x64_sys_bpf+0xba/0xd0 [ 353.611782][T10360] do_syscall_64+0x166/0x520 [ 353.611803][T10360] ? trace_irq_disable+0x3b/0x140 [ 353.611831][T10360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.611855][T10360] ? clear_bhb_loop+0x70/0xc0 [ 353.611882][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.611905][T10360] RIP: 0033:0x7f33bc9cf559 [ 353.611926][T10360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.611945][T10360] RSP: 002b:00007f33bac1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.611970][T10360] RAX: ffffffffffffffda RBX: 00007f33bcc55fa0 RCX: 00007f33bc9cf559 [ 353.611987][T10360] RDX: 0000000000000050 RSI: 00002000000024c0 RDI: 000000000000000a [ 353.612003][T10360] RBP: 00007f33bca66b20 R08: 0000000000000000 R09: 0000000000000000 [ 353.612017][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.612031][T10360] R13: 00007f33bcc56038 R14: 00007f33bcc55fa0 R15: 00007fff25ff7038 [ 353.612069][T10360] [ 353.659634][T10363] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1490'. [ 355.812136][T10378] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 355.942442][ C1] net_ratelimit: 114 callbacks suppressed [ 358.914778][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'. [ 359.155862][T10395] nvme nvme0: rdma connection establishment failed (-512) [ 359.219564][ T272] nvme nvme0: rdma_resolve_route failed (-110). [ 361.083605][ C1] net_ratelimit: 117 callbacks suppressed [ 365.551968][T10414] ceph: No mds server is up or the cluster is laggy [ 365.716205][T10432] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1508'. [ 365.747813][T10425] bond0: entered allmulticast mode [ 365.749959][T10425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.434642][T10121] net_ratelimit: 85 callbacks suppressed [ 366.602574][ T6048] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 367.583179][ T6048] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 367.584544][ T6048] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.585828][ T6048] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.588500][ T6048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.588522][ T6048] usb 3-1: Product: syz [ 367.588538][ T6048] usb 3-1: Manufacturer: syz [ 367.588553][ T6048] usb 3-1: SerialNumber: syz [ 367.703144][ T6048] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 367.870313][ T6048] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 367.923519][ T6048] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 371.493318][ T7874] net_ratelimit: 61 callbacks suppressed [ 371.553859][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 372.167793][ T9] usb 3-1: USB disconnect, device number 28 [ 372.220113][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 373.224788][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 373.503538][ T9] ti_usb_3410_5052 3-1:2.0: device disconnected [ 376.752855][ T3004] net_ratelimit: 95 callbacks suppressed [ 377.905186][T10510] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 378.184045][ T57] nvme nvme0: rdma_resolve_route failed (-110). [ 378.218565][T10507] nvme nvme0: rdma connection establishment failed (-19) [ 379.140249][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.140328][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.162979][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 379.816734][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 380.952203][T10523] ceph: No mds server is up or the cluster is laggy [ 382.096679][ T2947] net_ratelimit: 135 callbacks suppressed [ 387.403300][ C1] net_ratelimit: 87 callbacks suppressed [ 388.294964][T10548] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 389.578192][T10574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'. [ 390.615197][T10548] bond3 (unregistering): Released all slaves [ 391.069753][T10586] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 391.253377][T10580] bond0: (slave syz_tun): Releasing backup interface [ 391.842078][T10580] bridge0: port 3(syz_tun) entered blocking state [ 391.850851][T10580] bridge0: port 3(syz_tun) entered disabled state [ 391.851226][T10580] syz_tun: entered allmulticast mode [ 392.494736][ T5706] net_ratelimit: 98 callbacks suppressed [ 396.528815][T10603] netlink: 'syz.4.1553': attribute type 4 has an invalid length. [ 397.932217][ T5320] net_ratelimit: 110 callbacks suppressed [ 397.967669][T10609] ceph: No mds server is up or the cluster is laggy [ 402.092496][ T30] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 402.266366][ T30] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 402.267720][ T30] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 402.269465][ T30] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 402.305718][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.305739][ T30] usb 4-1: Product: syz [ 402.305755][ T30] usb 4-1: Manufacturer: syz [ 402.305771][ T30] usb 4-1: SerialNumber: syz [ 402.424757][ T30] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 402.679587][ T30] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 402.730990][ T30] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 402.993983][ C1] net_ratelimit: 96 callbacks suppressed [ 403.031004][ T5591] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 403.076400][ T5591] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 404.356912][ T5591] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 404.374970][ T5591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 404.376250][ T5591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.604440][ T30] usb 4-1: USB disconnect, device number 20 [ 406.992188][ T30] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 407.101450][ T30] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 407.139686][ T30] ti_usb_3410_5052 4-1:2.0: device disconnected [ 407.625868][T10649] device-mapper: raid: Choosing default region size of 4MiB [ 407.626518][T10649] device-mapper: table: 248:4: raid: RAID10 format 'near' and 'raid10_use_near_sets' are incompatible (-EINVAL) [ 407.626541][T10649] device-mapper: ioctl: error adding target to table [ 408.422380][ C0] net_ratelimit: 91 callbacks suppressed [ 408.872474][ T60] Bluetooth: hci6: command tx timeout [ 410.485849][ T5591] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 410.545436][ T5591] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 410.547337][ T5591] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 410.576705][ T5591] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 410.586868][ T5591] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 410.911834][ T60] Bluetooth: hci6: command tx timeout [ 412.742443][ T60] Bluetooth: hci7: command tx timeout [ 412.982626][ T60] Bluetooth: hci6: command tx timeout [ 413.445619][T10627] net_ratelimit: 127 callbacks suppressed [ 413.547865][T10627] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.915410][ T60] Bluetooth: hci7: command tx timeout [ 415.218533][ T60] Bluetooth: hci6: command tx timeout [ 416.653262][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1577'. [ 417.098533][ T60] Bluetooth: hci7: command tx timeout [ 418.696512][ T2926] net_ratelimit: 125 callbacks suppressed [ 419.223776][ T60] Bluetooth: hci7: command tx timeout [ 419.369520][T10661] rxe_eth0 speed is unknown, defaulting to 1000 [ 420.466803][T10702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1578'. [ 423.414751][ T5591] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 423.460760][ T5591] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 423.471632][ T5591] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 423.583996][ T5591] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 423.585970][ T5591] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 423.964347][ T5704] net_ratelimit: 90 callbacks suppressed [ 424.570933][T10740] FAULT_INJECTION: forcing a failure. [ 424.570933][T10740] name failslab, interval 1, probability 0, space 0, times 0 [ 424.570975][T10740] CPU: 1 UID: 0 PID: 10740 Comm: syz.3.1582 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 424.570999][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 424.571016][T10740] Call Trace: [ 424.571025][T10740] [ 424.571035][T10740] dump_stack_lvl+0xe8/0x150 [ 424.571071][T10740] should_fail_ex+0x46b/0x600 [ 424.571101][T10740] should_failslab+0xa8/0x100 [ 424.571129][T10740] __kmalloc_noprof+0xf6/0x790 [ 424.571163][T10740] ? security_key_alloc+0x51/0x390 [ 424.571186][T10740] ? security_key_alloc+0x51/0x390 [ 424.571211][T10740] security_key_alloc+0x51/0x390 [ 424.571235][T10740] key_alloc+0x7fd/0xfe0 [ 424.571268][T10740] keyring_alloc+0x45/0xb0 [ 424.571297][T10740] join_session_keyring+0x136/0x440 [ 424.571324][T10740] lookup_user_key+0x2b5/0x1150 [ 424.571353][T10740] ? __pfx_lookup_user_key+0x10/0x10 [ 424.571376][T10740] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 424.571408][T10740] ? futex_hash+0x4e/0x2b0 [ 424.571440][T10740] keyctl_get_persistent+0x273/0x820 [ 424.571474][T10740] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 424.571499][T10740] ? futex_wait+0x2a2/0x390 [ 424.571529][T10740] ? __pfx_futex_wait+0x10/0x10 [ 424.571572][T10740] __se_sys_keyctl+0x797/0x9d0 [ 424.571596][T10740] ? __pfx___se_sys_keyctl+0x10/0x10 [ 424.571627][T10740] ? __pfx_do_futex+0x10/0x10 [ 424.571648][T10740] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 424.571686][T10740] ? __se_sys_futex+0x3a8/0x450 [ 424.571715][T10740] ? rcu_is_watching+0x16/0xb0 [ 424.571743][T10740] ? __x64_sys_keyctl+0x20/0xc0 [ 424.571774][T10740] do_syscall_64+0x166/0x520 [ 424.571793][T10740] ? trace_irq_disable+0x3b/0x140 [ 424.571825][T10740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.571848][T10740] ? clear_bhb_loop+0x70/0xc0 [ 424.571873][T10740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.571902][T10740] RIP: 0033:0x7f315139f559 [ 424.571924][T10740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.571942][T10740] RSP: 002b:00007f314f5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 424.571965][T10740] RAX: ffffffffffffffda RBX: 00007f3151625fa0 RCX: 00007f315139f559 [ 424.571981][T10740] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 424.571997][T10740] RBP: 00007f3151436b20 R08: 0000000000000000 R09: 0000000000000000 [ 424.572010][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.572023][T10740] R13: 00007f3151626038 R14: 00007f3151625fa0 R15: 00007fffbd306aa8 [ 424.572054][T10740] [ 425.622455][ T60] Bluetooth: hci8: command tx timeout [ 426.029396][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.091484][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.103293][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.138194][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.157611][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.702510][ T60] Bluetooth: hci8: command tx timeout [ 428.541499][ T60] Bluetooth: hci5: command tx timeout [ 429.076019][ C1] net_ratelimit: 106 callbacks suppressed [ 429.799815][ T60] Bluetooth: hci8: command tx timeout [ 430.747412][ T60] Bluetooth: hci5: command tx timeout [ 431.872536][ T60] Bluetooth: hci8: command tx timeout [ 432.888186][ T60] Bluetooth: hci5: command tx timeout [ 434.281185][ C0] net_ratelimit: 95 callbacks suppressed [ 434.932470][ T60] Bluetooth: hci5: command tx timeout [ 439.409160][ C0] net_ratelimit: 97 callbacks suppressed [ 440.107568][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.107631][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.440491][ C1] net_ratelimit: 62 callbacks suppressed [ 446.290076][ T5591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.327555][ T5591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.329386][ T5591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.374618][ T5591] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.376942][ T5591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.248812][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.248921][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.249148][T10627] bridge_slave_0: entered allmulticast mode [ 447.251299][T10627] bridge_slave_0: entered promiscuous mode [ 447.379361][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.379479][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.379702][T10627] bridge_slave_1: entered allmulticast mode [ 447.439950][T10627] bridge_slave_1: entered promiscuous mode [ 448.952650][T10728] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.028479][T10627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.285876][T10627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.333207][ T60] Bluetooth: hci4: command tx timeout [ 449.624679][ T3004] net_ratelimit: 160 callbacks suppressed [ 450.613523][T10661] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.618909][T10661] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.619159][T10661] bridge_slave_0: entered allmulticast mode [ 450.681387][T10661] bridge_slave_0: entered promiscuous mode [ 451.742666][ T60] Bluetooth: hci4: command tx timeout [ 452.106032][T10661] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.106152][T10661] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.106387][T10661] bridge_slave_1: entered allmulticast mode [ 452.188361][T10661] bridge_slave_1: entered promiscuous mode [ 452.891019][T10756] rxe_eth0 speed is unknown, defaulting to 1000 [ 452.947952][T10661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.074418][T10661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.076995][T10627] team0: Port device team_slave_0 added [ 453.786222][ T5591] Bluetooth: hci4: command tx timeout [ 453.959384][T10627] team0: Port device team_slave_1 added [ 454.791188][T10121] net_ratelimit: 124 callbacks suppressed [ 455.491407][T10661] team0: Port device team_slave_0 added [ 455.892432][ T5591] Bluetooth: hci4: command tx timeout [ 456.670979][T10802] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.821739][T10661] team0: Port device team_slave_1 added [ 457.310392][T10627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.310403][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.310429][T10627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.724455][T10627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.724467][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.724493][T10627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.732069][T10661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.732080][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.732105][T10661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.847600][ T12] net_ratelimit: 102 callbacks suppressed [ 459.950727][T10661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.950738][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.950764][T10661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.701159][T10627] hsr_slave_0: entered promiscuous mode [ 461.712136][T10627] hsr_slave_1: entered promiscuous mode [ 461.722235][T10627] debugfs: 'hsr0' already exists in 'hsr' [ 461.747650][T10627] Cannot create hsr debugfs directory [ 463.051638][ T60] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 463.097538][ T60] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 463.105341][ T60] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 463.108260][ T60] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 463.109584][ T60] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 463.320208][T10661] hsr_slave_0: entered promiscuous mode [ 463.362666][T10661] hsr_slave_1: entered promiscuous mode [ 463.371711][T10661] debugfs: 'hsr0' already exists in 'hsr' [ 463.371733][T10661] Cannot create hsr debugfs directory [ 464.982429][ C0] net_ratelimit: 92 callbacks suppressed [ 465.323441][ T5591] Bluetooth: hci9: command tx timeout [ 467.392573][ T5591] Bluetooth: hci9: command tx timeout [ 469.542672][ T5590] Bluetooth: hci9: command tx timeout [ 469.551211][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 470.244992][ T12] net_ratelimit: 129 callbacks suppressed [ 470.303132][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 470.334164][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 470.338417][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 470.339799][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 471.652531][ T60] Bluetooth: hci9: command tx timeout [ 472.422537][ T60] Bluetooth: hci6: command tx timeout [ 474.506653][ T60] Bluetooth: hci6: command tx timeout [ 475.579952][ T10] net_ratelimit: 77 callbacks suppressed [ 476.712805][ T60] Bluetooth: hci6: command tx timeout [ 478.770041][ T5591] Bluetooth: hci6: command tx timeout [ 480.645718][ T3004] net_ratelimit: 95 callbacks suppressed [ 484.901477][T10728] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 485.307246][ T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 485.376179][ T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 485.378877][ T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 485.381271][ T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 485.383024][ T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 485.510806][T10825] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.780961][ T68] net_ratelimit: 91 callbacks suppressed [ 487.444706][ T5591] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 487.509154][ T5591] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 487.526983][ T5591] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 487.542379][ T5591] Bluetooth: hci7: command tx timeout [ 487.576201][ T5591] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 487.579766][ T5591] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 489.622516][ T60] Bluetooth: hci10: command tx timeout [ 489.622858][ T60] Bluetooth: hci7: command tx timeout [ 491.152619][ C0] net_ratelimit: 121 callbacks suppressed [ 491.702477][ T5591] Bluetooth: hci7: command tx timeout [ 491.702513][ T5591] Bluetooth: hci10: command tx timeout [ 493.782478][ T5591] Bluetooth: hci7: command tx timeout [ 493.782516][ T5591] Bluetooth: hci10: command tx timeout [ 494.259232][T10844] rxe_eth0 speed is unknown, defaulting to 1000 [ 495.862446][ T60] Bluetooth: hci10: command tx timeout [ 497.064234][ T2960] net_ratelimit: 136 callbacks suppressed [ 502.319873][ T3004] net_ratelimit: 139 callbacks suppressed [ 502.348864][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.348938][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.424343][T10802] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.424464][T10802] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.424708][T10802] bridge_slave_0: entered allmulticast mode [ 503.477267][T10802] bridge_slave_0: entered promiscuous mode [ 503.575099][T10852] rxe_eth0 speed is unknown, defaulting to 1000 [ 505.413855][T10802] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.414085][T10802] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.415030][T10802] bridge_slave_1: entered allmulticast mode [ 505.452752][T10802] bridge_slave_1: entered promiscuous mode [ 505.963052][T10866] rxe_eth0 speed is unknown, defaulting to 1000 [ 507.304244][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 507.359214][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.378753][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.423968][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.426437][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 507.564153][ T5704] net_ratelimit: 100 callbacks suppressed [ 509.884074][ T60] Bluetooth: hci5: command tx timeout [ 512.711170][ T60] Bluetooth: hci5: command tx timeout [ 512.729840][ T5704] net_ratelimit: 89 callbacks suppressed [ 514.555132][T10659] syz_tun (unregistering): left allmulticast mode [ 514.555245][T10659] bridge0: port 3(syz_tun) entered disabled state [ 514.743427][ T60] Bluetooth: hci5: command tx timeout [ 516.884391][ T60] Bluetooth: hci5: command tx timeout [ 518.272334][ C1] net_ratelimit: 110 callbacks suppressed [ 523.303924][ T7866] net_ratelimit: 109 callbacks suppressed [ 523.543687][ T5591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 524.253432][ T5591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 524.284158][ T5591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 524.288611][ T5591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 524.294295][ T5591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 524.871475][T10897] rxe_eth0 speed is unknown, defaulting to 1000 [ 526.432928][ T5591] Bluetooth: hci0: command tx timeout [ 528.352712][ T3004] net_ratelimit: 86 callbacks suppressed [ 528.501826][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.509708][T10916] Bluetooth: hci0: command tx timeout [ 528.539500][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.543121][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.577464][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.580456][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.582863][ T60] Bluetooth: hci0: command tx timeout [ 530.662505][ T60] Bluetooth: hci4: command tx timeout [ 532.674048][ T60] Bluetooth: hci0: command tx timeout [ 532.744346][ T5591] Bluetooth: hci4: command tx timeout [ 533.461320][ T5704] net_ratelimit: 73 callbacks suppressed [ 534.286357][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.286581][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.286842][T10852] bridge_slave_0: entered allmulticast mode [ 534.297069][T10852] bridge_slave_0: entered promiscuous mode [ 535.009133][ T5591] Bluetooth: hci4: command tx timeout [ 535.234276][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.234393][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.234654][T10852] bridge_slave_1: entered allmulticast mode [ 535.241463][T10852] bridge_slave_1: entered promiscuous mode [ 535.373372][T10914] rxe_eth0 speed is unknown, defaulting to 1000 [ 536.617269][T10852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.122486][ T5591] Bluetooth: hci4: command tx timeout [ 537.980229][T10852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.265976][T10927] rxe_eth0 speed is unknown, defaulting to 1000 [ 538.672618][ T7866] net_ratelimit: 144 callbacks suppressed [ 543.736664][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 543.747148][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 543.750457][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 543.761851][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 543.799520][ T68] net_ratelimit: 96 callbacks suppressed [ 543.802946][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 545.705586][ C1] wireguard: wg2: Handshake for peer 6 (127.0.0.1:17664) did not complete after 5 seconds, retrying (try 7) [ 545.705668][ C1] wireguard: wg0: Handshake for peer 7 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 545.705741][ C1] wireguard: wg0: Handshake for peer 31 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 545.705810][ C1] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 545.727929][ C0] nf_nat: Already setup manip DST for ct ffff888041a1ce00 (status bits 0x198) [ 545.727966][ C0] nf_nat: Already setup manip SRC for ct ffff888041a1ce00 (status bits 0x198) [ 545.882080][ T209] virtqueue callback for ffff88801fff4600 (ffffffff854f44a0) [ 545.882146][ T209] virtqueue interrupt with no work for ffff88801fff4800 [ 545.882157][ T209] virtqueue interrupt with no work for ffff88801fff4a00 [ 545.882441][ T38] INFO: task syz.4.1553:10601 blocked for more than 143 seconds. [ 545.882504][ T38] Not tainted syzkaller #0 [ 545.882522][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.882533][ T38] task:syz.4.1553 state:D stack:28512 pid:10601 tgid:10600 ppid:5587 task_flags:0x400140 flags:0x00080002 [ 545.882599][ T38] Call Trace: [ 545.882637][ T38] [ 545.978569][ C1] nf_nat: Already setup manip DST for ct ffff888041a1ddc0 (status bits 0x198) [ 545.978603][ C1] nf_nat: Already setup manip SRC for ct ffff888041a1ddc0 (status bits 0x198) [ 546.004921][ T38] __schedule+0x171d/0x56e0 [ 546.005107][ T38] ? __pfx___schedule+0x10/0x10 [ 546.005187][ T38] rt_mutex_schedule+0x76/0xf0 [ 546.005214][ T38] rt_mutex_slowlock_block+0x540/0x6a0 [ 546.005248][ T38] ? rt_mutex_slowlock_block+0x33f/0x6a0 [ 546.005274][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 546.005301][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 546.005327][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 546.005369][ T38] ? write_ports+0xb5/0xd20 [ 546.005399][ T38] ? write_ports+0xb5/0xd20 [ 546.005420][ T38] mutex_lock_nested+0x163/0x1d0 [ 546.005449][ T38] write_ports+0xb5/0xd20 [ 546.005475][ T38] ? __pfx_write_ports+0x10/0x10 [ 546.005520][ T38] ? _copy_from_user+0x94/0xb0 [ 546.005545][ T38] ? simple_transaction_get+0x130/0x170 [ 546.005573][ T38] nfsctl_transaction_write+0x112/0x160 [ 546.005598][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 546.005623][ T38] vfs_write+0x29f/0xbb0 [ 546.005658][ T38] ? __pfx_vfs_write+0x10/0x10 [ 546.005687][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 546.005719][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 546.005749][ T38] ? mutex_lock_nested+0x14d/0x1d0 [ 546.005772][ T38] ? fdget_pos+0x11e/0x160 [ 546.005804][ T38] ksys_write+0x156/0x270 [ 546.005834][ T38] ? __pfx_ksys_write+0x10/0x10 [ 546.005872][ T38] do_syscall_64+0x166/0x520 [ 546.005891][ T38] ? trace_irq_disable+0x3b/0x140 [ 546.005918][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.005939][ T38] ? clear_bhb_loop+0x70/0xc0 [ 546.005964][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.005984][ T38] RIP: 0033:0x7ffa065af559 [ 546.006034][ T38] RSP: 002b:00007ffa047fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.006089][ T38] RAX: ffffffffffffffda RBX: 00007ffa06835fa0 RCX: 00007ffa065af559 [ 546.006104][ T38] RDX: 0000000000000005 RSI: 0000200000001c40 RDI: 0000000000000004 [ 546.006116][ T38] RBP: 00007ffa06646b20 R08: 0000000000000000 R09: 0000000000000000 [ 546.006136][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.006149][ T38] R13: 00007ffa06836038 R14: 00007ffa06835fa0 R15: 00007ffd7c4193c8 [ 546.006181][ T38] [ 546.006229][ T38] [ 546.006229][ T38] Showing all locks held in the system: [ 546.006240][ T38] locks held by ktimers/0/16: 8, last CPU#0: [ 546.006290][ T38] #0: ffffffff8f257820 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 546.006377][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 546.006430][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 546.006478][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 546.006531][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 546.006576][ T38] #5: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x1100 [ 546.006623][ T38] #6: ffffffff8f257820 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 546.006674][ T38] #7: ffffffff8f3c1f60 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2a0/0x3a70 [ 546.006722][ T38] locks held by rcuc/0/19: 4, last CPU#0: [ 546.006736][ T38] #0: ffffffff8f257820 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 546.006785][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 546.006834][ T38] #2: ffffffff8f3c2020 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1700 [ 546.006889][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 546.006940][ T38] locks held by rcuc/1/27: 1, last CPU#1: [ 546.006954][ T38] #0: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 546.007006][ T38] locks held by ktimers/1/28: 7, last CPU#1: [ 546.007020][ T38] #0: ffffffff8f257820 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 546.007071][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 546.007197][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 546.007246][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 546.007295][ T38] #4: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 546.007338][ T38] #5: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 546.007385][ T38] #6: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 546.007438][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 546.007453][ T38] #0: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 546.007524][ T38] locks held by kworker/u8:15/2947: 3, on CPU#0: [ 546.007539][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 546.007592][ T38] #1: ffffc9000dccfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 546.007644][ T38] #2: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 546.007693][ T38] locks held by getty/5343: 2, on CPU#0: [ 546.007707][ T38] #0: ffff8880376d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 546.007760][ T38] #1: ffffc900044f32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 546.007808][ T38] locks held by kworker/1:3/5592: 4, last CPU#1: [ 546.007823][ T38] #0: ffff88813ff6a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 546.007874][ T38] #1: ffffc9000534fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 546.007923][ T38] #2: ffffffff8ff104f8 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 546.007978][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 546.008037][ T38] locks held by kworker/u8:22/7866: 3, on CPU#0: [ 546.008052][ T38] #0: ffff8880337a9138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 546.008105][ T38] #1: ffffc90009eefc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 546.008166][ T38] #2: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 546.008214][ T38] locks held by kworker/u8:32/7876: 2, on CPU#0: [ 546.008228][ T38] #0: ffff88813fe2c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 546.008279][ T38] #1: ffffc90006207c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 546.008333][ T38] locks held by syz.1.1295/9599: 3, on CPU#1: [ 546.008347][ T38] #0: ffff88803d67f128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x11e/0x160 [ 546.008398][ T38] #1: ffff8880698da510 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 546.008502][ T38] #2: ffffffff8f6f6178 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 546.008553][ T38] locks held by syz-executor/9887: 1, on CPU#1: [ 546.008567][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.008619][ T38] locks held by syz.2.1541/10548: 1, on CPU#1: [ 546.008632][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.008680][ T38] locks held by syz.4.1553/10601: 3, on CPU#1: [ 546.008695][ T38] #0: ffff8880349cf128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x11e/0x160 [ 546.008744][ T38] #1: ffff888032332510 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 546.008800][ T38] #2: ffffffff8f6f6178 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 546.008849][ T38] locks held by syz-executor/10627: 1, on CPU#1: [ 546.008863][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.008911][ T38] locks held by syz.0.1574/10659: 1, on CPU#1: [ 546.008925][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.008973][ T38] locks held by syz-executor/10661: 1, on CPU#1: [ 546.008988][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.009036][ T38] locks held by syz-executor/10728: 1, on CPU#1: [ 546.009050][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.009098][ T38] locks held by syz-executor/10756: 1, on CPU#1: [ 546.009112][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.009166][ T38] locks held by syz.3.1585/10780: 1, on CPU#0: [ 546.009179][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.009226][ T38] locks held by syz-executor/10802: 1, on CPU#1: [ 546.009240][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.009288][ T38] locks held by syz-executor/10825: 1, on CPU#0: [ 546.009302][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.009349][ T38] locks held by syz-executor/10844: 1, on CPU#1: [ 546.009363][ T38] #0: ffffffff8f3c8170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 546.009410][ T38] locks held by syz-executor/10852: 2, on CPU#1: [ 546.009424][ T38] #0: ffffffff8ff353c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 546.009483][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 546.009535][ T38] locks held by syz-executor/10866: 1, on CPU#0: [ 546.009550][ T38] #0: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 546.009601][ T38] locks held by syz-executor/10897: 2, on CPU#1: [ 546.009615][ T38] #0: ffffffff90d24eb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 546.009672][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 546.009722][ T38] locks held by syz-executor/10914: 2, on CPU#0: [ 546.009736][ T38] #0: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 546.009782][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 546.009826][ T38] locks held by syz-executor/10927: 2, last CPU#1: [ 546.009840][ T38] #0: ffffffff907c7420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 546.009886][ T38] #1: ffffffff907d5c78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 546.009934][ T38] locks held by udevd/10962: 6, last CPU#1: [ 546.009948][ T38] #0: ffff88805394a808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 546.009994][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12cd/0x28f0 [ 546.010041][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1e3/0x1df0 [ 546.010092][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 546.010151][ T38] #4: ffff888074b7b358 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 546.010208][ T38] #5: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 546.010258][ T38] locks held by modprobe/10963: 6, last CPU#0: [ 546.010273][ T38] #0: ffff88806cf36448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 546.010317][ T38] #1: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12cd/0x28f0 [ 546.010362][ T38] #2: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1e3/0x1df0 [ 546.010412][ T38] #3: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 546.010464][ T38] #4: ffff88803373a418 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 546.010521][ T38] #5: ffffffff8f3c1f00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 546.010569][ T38] [ 546.010575][ T38] ============================================= [ 546.010575][ T38] [ 546.010585][ T38] NMI backtrace for cpu 1 [ 546.010604][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 546.010638][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 546.010649][ T38] Call Trace: [ 546.010657][ T38] [ 546.010665][ T38] dump_stack_lvl+0xe8/0x150 [ 546.010695][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 546.010720][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 546.010743][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 546.010770][ T38] sys_info+0x135/0x170 [ 546.010790][ T38] watchdog+0xfd2/0x1030 [ 546.010823][ T38] ? watchdog+0x1c7/0x1030 [ 546.010855][ T38] kthread+0x38b/0x470 [ 546.010876][ T38] ? __pfx_watchdog+0x10/0x10 [ 546.010900][ T38] ? __pfx_kthread+0x10/0x10 [ 546.010922][ T38] ret_from_fork+0x514/0xb70 [ 546.010945][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 546.010965][ T38] ? __switch_to+0xc78/0x1410 [ 546.010996][ T38] ? __pfx_kthread+0x10/0x10 [ 546.011017][ T38] ret_from_fork_asm+0x1a/0x30 [ 546.011051][ T38] [ 546.011059][ T38] Sending NMI from CPU 1 to CPUs 0: [ 546.011095][ C0] NMI backtrace for cpu 0 [ 546.011110][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 546.011132][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 546.011144][ C0] RIP: 0010:__lock_acquire+0x34b/0x2de0 [ 546.011175][ C0] Code: 83 57 28 00 00 4c 89 74 24 38 4b 8d 04 b6 89 f1 81 e1 ff 1f 00 00 48 c7 c2 00 e0 ff ff 49 23 54 c5 20 48 09 ca 49 89 54 c5 20 <4d> 89 44 c5 08 48 8b 54 24 18 49 89 54 c5 10 48 8b 94 24 20 01 00 [ 546.011192][ C0] RSP: 0000:ffffc90000156518 EFLAGS: 00000082 [ 546.011209][ C0] RAX: 0000000000000032 RBX: 0000000000000000 RCX: 000000000000000b [ 546.011221][ C0] RDX: ed0000000002000b RSI: 000000000000000b RDI: 000000000a4fc0ee [ 546.011235][ C0] RBP: 0000000000000000 R08: ffffffff8178697f R09: 0000000000000000 [ 546.011247][ C0] R10: ffffc900001567f8 R11: ffffffff81b1fb50 R12: 0000000000000000 [ 546.011262][ C0] R13: ffff88801deb8c18 R14: 000000000000000a R15: ffff88801deb8000 [ 546.011276][ C0] FS: 0000000000000000(0000) GS:ffff8881247ad000(0000) knlGS:0000000000000000 [ 546.011292][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.011306][ C0] CR2: 00007f41482c9720 CR3: 000000007742a000 CR4: 00000000003526f0 [ 546.011323][ C0] Call Trace: [ 546.011330][ C0] [ 546.011341][ C0] ? __skb_flow_dissect+0x3416/0x6da0 [ 546.011373][ C0] ? lock_acquire+0x115/0x350 [ 546.011400][ C0] lock_acquire+0x115/0x350 [ 546.011425][ C0] ? unwind_next_frame+0x8f/0x2550 [ 546.011453][ C0] ? unwind_next_frame+0x8f/0x2550 [ 546.011477][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 546.011496][ C0] ? unwind_next_frame+0x8f/0x2550 [ 546.011520][ C0] unwind_next_frame+0xac/0x2550 [ 546.011544][ C0] ? unwind_next_frame+0x8f/0x2550 [ 546.011570][ C0] ? kasan_save_track+0x3e/0x80 [ 546.011587][ C0] ? unwind_next_frame+0x8f/0x2550 [ 546.011611][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 546.011645][ C0] arch_stack_walk+0x11b/0x150 [ 546.011670][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 546.011690][ C0] ? skb_clone+0x212/0x3a0 [ 546.011720][ C0] stack_trace_save+0xa9/0x100 [ 546.011745][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 546.011773][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 546.011791][ C0] kasan_save_track+0x3e/0x80 [ 546.011808][ C0] ? kasan_save_track+0x3e/0x80 [ 546.011824][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 546.011863][ C0] __kasan_slab_alloc+0x6c/0x80 [ 546.011883][ C0] kmem_cache_alloc_noprof+0x35b/0x680 [ 546.011911][ C0] ? skb_clone+0x212/0x3a0 [ 546.011939][ C0] ? skb_clone+0x212/0x3a0 [ 546.011970][ C0] skb_clone+0x212/0x3a0 [ 546.011998][ C0] ? netem_enqueue+0xeb8/0x32b0 [ 546.012028][ C0] netem_enqueue+0xecb/0x32b0 [ 546.012058][ C0] ? rt_spin_lock+0x210/0x400 [ 546.012085][ C0] dev_qdisc_enqueue+0x4e/0x260 [ 546.012105][ C0] ? __dev_queue_xmit+0x1b57/0x3a70 [ 546.012126][ C0] __dev_queue_xmit+0x1b74/0x3a70 [ 546.012146][ C0] ? __dev_queue_xmit+0x2a0/0x3a70 [ 546.012163][ C0] ? synproxy_pernet+0x23/0x240 [ 546.012191][ C0] ? __asan_memset+0x22/0x50 [ 546.012222][ C0] ? __lock_acquire+0x747/0x2de0 [ 546.012248][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 546.012267][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 546.012298][ C0] ? lock_acquire+0x115/0x350 [ 546.012323][ C0] ? ip_output+0x29f/0x450 [ 546.012346][ C0] ip_finish_output2+0xc27/0x1100 [ 546.012368][ C0] ? ip_finish_output2+0x3de/0x1100 [ 546.012394][ C0] ip_output+0x29f/0x450 [ 546.012412][ C0] ? ip_output+0x5a/0x450 [ 546.012430][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 546.012463][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 546.012490][ C0] ? nft_log_eval+0x1e4/0x3b0 [ 546.012512][ C0] ? synproxy_pernet+0x45/0x270 [ 546.012543][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 546.012574][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 546.012605][ C0] ? nf_ip_checksum+0x13c/0x510 [ 546.012639][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 546.012670][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 546.012705][ C0] nft_do_chain+0x48d/0x1b10 [ 546.012741][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 546.012780][ C0] ? __lock_acquire+0x747/0x2de0 [ 546.012810][ C0] nft_do_chain_ipv4+0x195/0x290 [ 546.012840][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 546.012870][ C0] ? lock_acquire+0x115/0x350 [ 546.012897][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 546.012926][ C0] nf_hook_slow+0xc5/0x220 [ 546.012950][ C0] NF_HOOK+0x21f/0x3c0 [ 546.012976][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 546.013002][ C0] ? NF_HOOK+0x9e/0x3c0 [ 546.013027][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 546.013052][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 546.013082][ C0] ? ip_local_deliver+0x113/0x190 [ 546.013109][ C0] NF_HOOK+0x336/0x3c0 [ 546.013134][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 546.013159][ C0] ? NF_HOOK+0x9e/0x3c0 [ 546.013184][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 546.013209][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 546.013237][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 546.013262][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 546.013286][ C0] ? process_backlog+0x261/0xc50 [ 546.013309][ C0] process_backlog+0x564/0xc50 [ 546.013335][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 546.013361][ C0] __napi_poll+0xae/0x550 [ 546.013383][ C0] net_rx_action+0x621/0xd70 [ 546.013411][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 546.013446][ C0] handle_softirqs+0x1da/0x6d0 [ 546.013476][ C0] run_ktimerd+0x6a/0x100 [ 546.013493][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 546.013525][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 546.013558][ C0] kthread+0x38b/0x470 [ 546.013577][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 546.013606][ C0] ? __pfx_kthread+0x10/0x10 [ 546.013631][ C0] ret_from_fork+0x514/0xb70 [ 546.013651][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 546.013671][ C0] ? __switch_to+0xc78/0x1410 [ 546.013699][ C0] ? __pfx_kthread+0x10/0x10 [ 546.013719][ C0] ret_from_fork_asm+0x1a/0x30 [ 546.013743][ C0] [ 546.014105][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 547.966549][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 547.976165][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 547.986202][ T38] Call Trace: [ 547.989472][ T38] [ 547.992390][ T38] vpanic+0x56d/0xa60 [ 547.996366][ T38] ? __pfx_vpanic+0x10/0x10 [ 548.000853][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 548.006395][ T38] panic+0xc5/0xd0 [ 548.010101][ T38] ? __pfx_panic+0x10/0x10 [ 548.014506][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 548.019523][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 548.025686][ T38] watchdog+0x102b/0x1030 [ 548.030020][ T38] ? watchdog+0x1c7/0x1030 [ 548.034434][ T38] kthread+0x38b/0x470 [ 548.038489][ T38] ? __pfx_watchdog+0x10/0x10 [ 548.043157][ T38] ? __pfx_kthread+0x10/0x10 [ 548.047752][ T38] ret_from_fork+0x514/0xb70 [ 548.052331][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 548.057425][ T38] ? __switch_to+0xc78/0x1410 [ 548.062095][ T38] ? __pfx_kthread+0x10/0x10 [ 548.066670][ T38] ret_from_fork_asm+0x1a/0x30 [ 548.071433][ T38] [ 548.074610][ T38] Kernel Offset: disabled [ 548.078927][ T38] Rebooting in 86400 seconds..