last executing test programs: 3m44.911861044s ago: executing program 4 (id=121): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3m44.566032554s ago: executing program 4 (id=124): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x103) 3m43.46610293s ago: executing program 4 (id=129): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffc, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 3m42.274114031s ago: executing program 4 (id=135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 3m41.156647251s ago: executing program 4 (id=141): bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x1}) 3m40.86859183s ago: executing program 4 (id=144): syz_usb_connect(0x2, 0xa4, &(0x7f0000004100)={{0x12, 0x1, 0x110, 0x70, 0x26, 0x5, 0x20, 0x8086, 0x1155, 0xa072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x1, 0x9, 0x2, 0x60, 0x3, "", [{{0x9, 0x4, 0xf5, 0x0, 0x0, 0xe, 0x1, 0x0, 0xbe, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x27}, [@mixer_unit={0xb, 0x24, 0x4, 0x3, 0x70, "79b427c2c33e"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x6, 0x3, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x2, 0x3, 0x3}]}, @generic={0x59, 0xe, "e9ea18c9035d21df899f42cb1abb52a1d2bddf61bbd7c79fdae0064b5596b10d10da0a084af18ebdb23d22a7cc757ca05df4003802baa63af3a4b015601ba5490298a8a1db6ed50810a59987ca2ebdb35d446c8d0e729e"}]}}]}}]}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xed, &(0x7f00000004c0)=ANY=[@ANYBLOB="010200e5bd4e617726ca2969c9afe94036a3cbc57a30cd83f7ca0911e8bb7a2f69ae36f26fed2b1928b57289f2274d55e3a790dfb272236d0f5dbf14d325369c4f7ca4c729da33dae66e044a3ba500367434e17d5947a3407ad71066e88482c355049e8c94bcd28bbb36deafdb87cb3f587ffebabc786c35edc743254c90c6a630945eae928454532e0a4da3f8afd828af1851fb8b15404baf3996c79166c92c0bb4d193f2a7860926fabe17cae5e0a041ed3859c1f6da8b0dfc54aaba5d0f0d4245ae67006942fd41032d3313eb2161b24910ce49be62b0402d9adbe1625e"]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0xbc1, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6eeaa6", 0xb8b, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493"}}}}}, 0x0) 3m25.787752711s ago: executing program 32 (id=144): syz_usb_connect(0x2, 0xa4, &(0x7f0000004100)={{0x12, 0x1, 0x110, 0x70, 0x26, 0x5, 0x20, 0x8086, 0x1155, 0xa072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x1, 0x9, 0x2, 0x60, 0x3, "", [{{0x9, 0x4, 0xf5, 0x0, 0x0, 0xe, 0x1, 0x0, 0xbe, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x27}, [@mixer_unit={0xb, 0x24, 0x4, 0x3, 0x70, "79b427c2c33e"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x6, 0x3, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x2, 0x3, 0x3}]}, @generic={0x59, 0xe, "e9ea18c9035d21df899f42cb1abb52a1d2bddf61bbd7c79fdae0064b5596b10d10da0a084af18ebdb23d22a7cc757ca05df4003802baa63af3a4b015601ba5490298a8a1db6ed50810a59987ca2ebdb35d446c8d0e729e"}]}}]}}]}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xed, &(0x7f00000004c0)=ANY=[@ANYBLOB="010200e5bd4e617726ca2969c9afe94036a3cbc57a30cd83f7ca0911e8bb7a2f69ae36f26fed2b1928b57289f2274d55e3a790dfb272236d0f5dbf14d325369c4f7ca4c729da33dae66e044a3ba500367434e17d5947a3407ad71066e88482c355049e8c94bcd28bbb36deafdb87cb3f587ffebabc786c35edc743254c90c6a630945eae928454532e0a4da3f8afd828af1851fb8b15404baf3996c79166c92c0bb4d193f2a7860926fabe17cae5e0a041ed3859c1f6da8b0dfc54aaba5d0f0d4245ae67006942fd41032d3313eb2161b24910ce49be62b0402d9adbe1625e"]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0xbc1, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6eeaa6", 0xb8b, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0) 1m32.813126349s ago: executing program 0 (id=548): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) 1m31.985882887s ago: executing program 0 (id=550): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x3328}], 0x1, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1003, r1, 0x0}]) close(r0) 1m30.333494424s ago: executing program 0 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f001000000000000030000000000000004000000000000000300000000000000ffffff7f00000000030000000000000009000000010001000600000000000000090000000000000004000000000000000b000000000000000600000000000000000000000000000006000000010000000600000000100000de000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0180000000000080000000000100000000000000010000000000000001"], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 1m29.182358527s ago: executing program 0 (id=561): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) 1m28.303529519s ago: executing program 0 (id=564): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1m24.613766984s ago: executing program 0 (id=575): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m23.432062285s ago: executing program 33 (id=575): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 15.104738081s ago: executing program 5 (id=821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x42, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x4, 0x3, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.83700965s ago: executing program 5 (id=832): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) listen(r0, 0x0) 12.618162576s ago: executing program 5 (id=835): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') 9.048510949s ago: executing program 5 (id=850): mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001, 0x0, 0x2}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2001, r1}, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 8.778519203s ago: executing program 1 (id=852): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) futex(0x0, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x3) add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 8.566820179s ago: executing program 1 (id=864): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 8.491730521s ago: executing program 5 (id=855): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x60000600) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x200}) 4.887997444s ago: executing program 6 (id=869): timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4a781000) prctl$PR_SET_SECUREBITS(0x1c, 0x5e) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x66) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 3.627751494s ago: executing program 2 (id=871): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12015002d20fa710490b4f06"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x8d, 0x8f, 0x33, 0x10, 0x5ac, 0x247, 0xc91e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x20, 0x7, "", [{{0x9, 0x4, 0x19, 0xfe, 0x0, 0x3, 0x4b, 0x2, 0xe}}]}}]}}, 0x0) 3.528111175s ago: executing program 1 (id=872): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x11c, 0x4) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="f77d2b5dd5f7d74f0748cf3d2cf2fbd644566aea48c78d151d61ed3a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb104600190d8bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0af490958ba3211eb99dfc8dbbc0f9c941aaa1495893d0b000000000000005afd7476413f322c8f79de769deb0200000000000000e3ed6641e50fe595e1e0dbe84ed0f7", 0xc5}], 0x1}}], 0x1, 0x240068c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x221, 0x10008095, 0x0, 0x0) 3.472337255s ago: executing program 3 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) connect$inet(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 3.38331949s ago: executing program 6 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.280528192s ago: executing program 1 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0102030405"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/ieee80211/phy0/keys/0/tx_spec\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='12345\n\x00', 0x6) 3.065653519s ago: executing program 3 (id=876): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x7, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb7, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.940370965s ago: executing program 2 (id=877): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r4}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 2.818989706s ago: executing program 2 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x2040851}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept$inet(r0, 0x0, 0x0) nanosleep(0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 2.665446648s ago: executing program 6 (id=879): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.631456574s ago: executing program 1 (id=880): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1389, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, 0x0) 2.394561494s ago: executing program 6 (id=881): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x4b9, &(0x7f0000000340)={0x0, 0x683a, 0x1, 0x1, 0x212}, &(0x7f0000ff0000), 0x0, 0x0) 2.321698151s ago: executing program 2 (id=882): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="05000000010001", 0x7) write(r0, &(0x7f0000000140)="0d000000010001", 0x7) write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe) write(r0, &(0x7f0000000200)="34000000070001020304050601", 0xd) write(r0, &(0x7f0000000280)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.327890736s ago: executing program 1 (id=883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x80, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x400000000, 0x4}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@remote, @in6=@loopback, 0x0, 0x8, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.327772743s ago: executing program 3 (id=884): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x13, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002180)=0x3) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) 1.320471362s ago: executing program 5 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='0', 0x1) 1.12496626s ago: executing program 3 (id=886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000fc0)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 888.531169ms ago: executing program 3 (id=887): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x188) getdents64(r2, &(0x7f0000001b00)=""/4132, 0x1024) 688.044785ms ago: executing program 6 (id=888): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0xffe0, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) 626.936682ms ago: executing program 2 (id=889): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 487.399855ms ago: executing program 3 (id=890): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 239.369425ms ago: executing program 2 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x1008000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 0s ago: executing program 6 (id=892): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 217.113574][ T5605] Bluetooth: hci0: command 0x0c3a tx timeout [ 217.113600][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 217.113738][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 217.144692][ T1333] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.753237][ T7189] fuse: Bad value for 'fd' [ 217.907032][ T5609] Bluetooth: hci1: command tx timeout [ 218.413870][ T1333] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.476865][ T5609] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 218.476897][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 218.476928][ T5609] Tainted: [L]=SOFTLOCKUP [ 218.476936][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.476951][ T5609] Workqueue: hci3 hci_rx_work [ 218.476984][ T5609] Call Trace: [ 218.476993][ T5609] [ 218.477003][ T5609] dump_stack_lvl+0xe8/0x150 [ 218.477037][ T5609] sysfs_create_dir_ns+0x271/0x2a0 [ 218.477067][ T5609] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 218.477102][ T5609] ? rt_spin_unlock+0x165/0x200 [ 218.477134][ T5609] kobject_add_internal+0x62c/0xce0 [ 218.477171][ T5609] kobject_add+0x163/0x240 [ 218.477196][ T5609] ? rt_spin_unlock+0x159/0x200 [ 218.477233][ T5609] ? __pfx_kobject_add+0x10/0x10 [ 218.477269][ T5609] ? get_device_parent+0x370/0x3a0 [ 218.477319][ T5609] device_add+0x3fa/0xb80 [ 218.477357][ T5609] hci_conn_add_sysfs+0xd5/0x210 [ 218.477390][ T5609] le_conn_complete_evt+0xfe3/0x16d0 [ 218.477421][ T5609] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 218.477447][ T5609] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 218.477474][ T5609] ? rt_mutex_slowunlock+0x219/0x460 [ 218.477505][ T5609] ? skb_pull_data+0xf0/0x200 [ 218.477541][ T5609] hci_le_conn_complete_evt+0x187/0x470 [ 218.477585][ T5609] hci_event_packet+0x67a/0xf10 [ 218.477615][ T5609] ? reacquire_held_locks+0x117/0x1a0 [ 218.477659][ T5609] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 218.477690][ T5609] ? __pfx_hci_event_packet+0x10/0x10 [ 218.477719][ T5609] ? rt_spin_unlock+0x159/0x200 [ 218.477761][ T5609] ? hci_send_to_monitor+0xe2/0x590 [ 218.477789][ T5609] hci_rx_work+0x3ee/0x1020 [ 218.477826][ T5609] ? process_scheduled_works+0x97a/0x1630 [ 218.477858][ T5609] process_scheduled_works+0xc3d/0x1630 [ 218.477925][ T5609] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.477963][ T5609] ? assign_work+0x3cf/0x5d0 [ 218.478026][ T5609] worker_thread+0xa47/0xfb0 [ 218.478092][ T5609] kthread+0x38b/0x470 [ 218.478117][ T5609] ? __pfx_worker_thread+0x10/0x10 [ 218.478146][ T5609] ? __pfx_kthread+0x10/0x10 [ 218.478172][ T5609] ret_from_fork+0x514/0xb70 [ 218.478200][ T5609] ? __pfx_ret_from_fork+0x10/0x10 [ 218.478223][ T5609] ? __switch_to+0xc89/0x1420 [ 218.478259][ T5609] ? __pfx_kthread+0x10/0x10 [ 218.478284][ T5609] ret_from_fork_asm+0x1a/0x30 [ 218.478339][ T5609] [ 218.478462][ T5609] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 218.478508][ T5609] Bluetooth: hci3: failed to register connection device [ 219.847217][ T1333] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.985139][ T5601] Bluetooth: hci1: command tx timeout [ 222.467515][ T7285] FAULT_INJECTION: forcing a failure. [ 222.467515][ T7285] name failslab, interval 1, probability 0, space 0, times 0 [ 222.467561][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.3.425 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 222.467595][ T7285] Tainted: [L]=SOFTLOCKUP [ 222.467604][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.467619][ T7285] Call Trace: [ 222.467628][ T7285] [ 222.467639][ T7285] dump_stack_lvl+0xe8/0x150 [ 222.467689][ T7285] should_fail_ex+0x46b/0x600 [ 222.467728][ T7285] should_failslab+0xa8/0x100 [ 222.467754][ T7285] __kmalloc_cache_noprof+0xa1/0x680 [ 222.467786][ T7285] ? get_mountpoint+0x2cc/0x510 [ 222.467815][ T7285] ? get_mountpoint+0x2cc/0x510 [ 222.467854][ T7285] get_mountpoint+0x2cc/0x510 [ 222.467882][ T7285] ? rt_spin_unlock+0x165/0x200 [ 222.467914][ T7285] do_lock_mount+0x570/0x970 [ 222.467951][ T7285] do_new_mount+0x478/0xdc0 [ 222.467973][ T7285] ? cap_capable+0x123/0x460 [ 222.468004][ T7285] ? __pfx_do_new_mount+0x10/0x10 [ 222.468029][ T7285] ? ns_capable+0x89/0xe0 [ 222.468059][ T7285] ? path_mount+0x647/0x1050 [ 222.468087][ T7285] ? user_path_at+0xd4/0x160 [ 222.468117][ T7285] __se_sys_mount+0x31d/0x420 [ 222.468148][ T7285] ? __pfx___se_sys_mount+0x10/0x10 [ 222.468178][ T7285] ? __x64_sys_mount+0x20/0xc0 [ 222.468203][ T7285] do_syscall_64+0x166/0x520 [ 222.468225][ T7285] ? trace_irq_disable+0x3b/0x140 [ 222.468252][ T7285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.468273][ T7285] ? clear_bhb_loop+0x70/0xc0 [ 222.468299][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.468320][ T7285] RIP: 0033:0x7f561a59e159 [ 222.468340][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.468358][ T7285] RSP: 002b:00007f56187f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 222.468379][ T7285] RAX: ffffffffffffffda RBX: 00007f561a825fa0 RCX: 00007f561a59e159 [ 222.468395][ T7285] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 222.468410][ T7285] RBP: 00007f561a63506b R08: 0000000000000000 R09: 0000000000000000 [ 222.468423][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.468446][ T7285] R13: 00007f561a826038 R14: 00007f561a825fa0 R15: 00007ffc55a04948 [ 222.468483][ T7285] [ 224.092502][ T1333] bridge_slave_1: left allmulticast mode [ 224.092542][ T1333] bridge_slave_1: left promiscuous mode [ 224.092861][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.333909][ T1333] bridge_slave_0: left allmulticast mode [ 224.333952][ T1333] bridge_slave_0: left promiscuous mode [ 224.334235][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.441995][ T7312] FAULT_INJECTION: forcing a failure. [ 224.441995][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 224.442039][ T7312] CPU: 1 UID: 0 PID: 7312 Comm: syz.0.431 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 224.442071][ T7312] Tainted: [L]=SOFTLOCKUP [ 224.442080][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 224.442093][ T7312] Call Trace: [ 224.442102][ T7312] [ 224.442112][ T7312] dump_stack_lvl+0xe8/0x150 [ 224.442152][ T7312] should_fail_ex+0x46b/0x600 [ 224.442192][ T7312] should_failslab+0xa8/0x100 [ 224.442214][ T7312] ? __kernfs_new_node+0xe7/0xa70 [ 224.442244][ T7312] kmem_cache_alloc_noprof+0x9e/0x690 [ 224.442276][ T7312] ? __kernfs_new_node+0xe7/0xa70 [ 224.442311][ T7312] __kernfs_new_node+0xe7/0xa70 [ 224.442352][ T7312] ? __pfx___kernfs_new_node+0x10/0x10 [ 224.442379][ T7312] ? lock_acquire+0x115/0x350 [ 224.442409][ T7312] ? kernfs_root+0x1c/0x230 [ 224.442444][ T7312] ? kernfs_root+0x1c/0x230 [ 224.442472][ T7312] ? kernfs_root+0x1c/0x230 [ 224.442501][ T7312] ? kernfs_root+0x1c/0x230 [ 224.442533][ T7312] kernfs_new_node+0xea/0x140 [ 224.442567][ T7312] kernfs_create_link+0xa7/0x200 [ 224.442594][ T7312] sysfs_do_create_link_sd+0x83/0x110 [ 224.442625][ T7312] device_add_class_symlinks+0x1d2/0x240 [ 224.442664][ T7312] device_add+0x467/0xb80 [ 224.442697][ T7312] device_create+0x269/0x300 [ 224.442725][ T7312] ? timer_init_key+0x161/0x2c0 [ 224.442753][ T7312] ? __pfx_device_create+0x10/0x10 [ 224.442777][ T7312] ? ieee80211_roc_setup+0x119/0x1d0 [ 224.442817][ T7312] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 224.442853][ T7312] mac80211_hwsim_new_radio+0x419/0x5810 [ 224.442892][ T7312] ? mac80211_hwsim_new_radio+0xf6/0x5810 [ 224.442932][ T7312] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 224.442953][ T7312] ? rcu_is_watching+0x16/0xb0 [ 224.442986][ T7312] ? trace_kmalloc+0x2a/0xf0 [ 224.443024][ T7312] hwsim_new_radio_nl+0xd8b/0xf90 [ 224.443076][ T7312] genl_family_rcv_msg_doit+0x233/0x340 [ 224.443107][ T7312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 224.443145][ T7312] ? bpf_lsm_capable+0x9/0x20 [ 224.443170][ T7312] ? security_capable+0x7e/0x2c0 [ 224.443211][ T7312] genl_rcv_msg+0x614/0x7a0 [ 224.443241][ T7312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.443260][ T7312] ? ref_tracker_free+0x668/0x820 [ 224.443291][ T7312] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 224.443324][ T7312] ? __pfx_ref_tracker_free+0x10/0x10 [ 224.443353][ T7312] ? __asan_memcpy+0x40/0x70 [ 224.443380][ T7312] ? __skb_clone+0x5c/0x6c0 [ 224.443411][ T7312] netlink_rcv_skb+0x226/0x4a0 [ 224.443441][ T7312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.443464][ T7312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.443507][ T7312] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.443533][ T7312] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.443566][ T7312] genl_rcv+0x28/0x40 [ 224.443596][ T7312] netlink_unicast+0x7f5/0x990 [ 224.443633][ T7312] netlink_sendmsg+0x813/0xb40 [ 224.443662][ T7312] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 224.443702][ T7312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.443733][ T7312] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 224.443778][ T7312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.443815][ T7312] sock_sendmsg_nosec+0x13a/0x180 [ 224.443850][ T7312] ____sys_sendmsg+0x565/0x870 [ 224.443887][ T7312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.443923][ T7312] ? import_iovec+0x73/0xa0 [ 224.443960][ T7312] ___sys_sendmsg+0x2a5/0x360 [ 224.443984][ T7312] ? __lock_acquire+0x747/0x2de0 [ 224.444017][ T7312] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.444048][ T7312] ? futex_wait+0x2a2/0x390 [ 224.444110][ T7312] ? __fget_files+0x2a/0x420 [ 224.444134][ T7312] ? __fget_files+0x3a8/0x420 [ 224.444171][ T7312] __x64_sys_sendmsg+0x1b7/0x290 [ 224.444200][ T7312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.444253][ T7312] do_syscall_64+0x166/0x520 [ 224.444277][ T7312] ? trace_irq_disable+0x3b/0x140 [ 224.444303][ T7312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.444325][ T7312] ? clear_bhb_loop+0x70/0xc0 [ 224.444352][ T7312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.444374][ T7312] RIP: 0033:0x7fe9bc56e159 [ 224.444397][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.444416][ T7312] RSP: 002b:00007fe9ba7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.444441][ T7312] RAX: ffffffffffffffda RBX: 00007fe9bc7f5fa0 RCX: 00007fe9bc56e159 [ 224.444457][ T7312] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 224.444471][ T7312] RBP: 00007fe9bc60506b R08: 0000000000000000 R09: 0000000000000000 [ 224.444484][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.444497][ T7312] R13: 00007fe9bc7f6038 R14: 00007fe9bc7f5fa0 R15: 00007ffd3169e8c8 [ 224.444534][ T7312] [ 224.570768][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 224.764478][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 224.785111][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 225.438735][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 225.532718][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 225.558169][ T36] audit: type=1326 audit(1790533204.231:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 225.558344][ T36] audit: type=1326 audit(1790533204.231:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 225.581927][ T36] audit: type=1326 audit(1790533204.251:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 225.582049][ T36] audit: type=1326 audit(1790533204.251:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 225.594455][ T36] audit: type=1326 audit(1790533204.251:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 225.604704][ T36] audit: type=1326 audit(1790533204.271:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 225.604766][ T36] audit: type=1326 audit(1790533204.271:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 225.604818][ T36] audit: type=1326 audit(1790533204.271:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 225.604867][ T36] audit: type=1326 audit(1790533204.271:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 225.604915][ T36] audit: type=1326 audit(1790533204.271:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bc56e159 code=0x7ffc0000 [ 228.201800][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.451715][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.545415][ T1333] bond0 (unregistering): Released all slaves [ 229.072857][ T7335] syz_tun: entered allmulticast mode [ 229.188394][ T5249] 8021q: adding VLAN 0 to HW filter on device eth5 [ 229.509537][ T7406] fuse: Bad value for 'fd' [ 229.555209][ T5868] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.708756][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 229.709775][ T5868] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 229.711535][ T5868] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 229.711563][ T5868] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 229.711583][ T5868] usb 2-1: config 179 has no interface number 0 [ 229.711633][ T5868] usb 2-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 229.711678][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.061717][ T7404] kvm: faulting far call emulation tainted memory [ 230.076184][ T5868] usb 2-1: USB disconnect, device number 6 [ 230.237025][ T7427] fuse: Bad value for 'fd' [ 230.427247][ T6277] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.427300][ T6277] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.427338][ T6277] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.427442][ T6277] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.568521][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.568729][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.568948][ T7082] bridge_slave_0: entered allmulticast mode [ 230.585175][ T7082] bridge_slave_0: entered promiscuous mode [ 230.606254][ T6277] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 231.033833][ T7442] FAULT_INJECTION: forcing a failure. [ 231.033833][ T7442] name failslab, interval 1, probability 0, space 0, times 0 [ 231.033876][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: syz.3.457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 231.033906][ T7442] Tainted: [L]=SOFTLOCKUP [ 231.033915][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.033927][ T7442] Call Trace: [ 231.033937][ T7442] [ 231.033947][ T7442] dump_stack_lvl+0xe8/0x150 [ 231.033984][ T7442] should_fail_ex+0x46b/0x600 [ 231.034020][ T7442] ? alloc_slab_obj_exts+0x5c/0x180 [ 231.034049][ T7442] should_failslab+0xa8/0x100 [ 231.034073][ T7442] ? alloc_slab_obj_exts+0x5c/0x180 [ 231.034099][ T7442] __kmalloc_flags_noprof+0x128/0x810 [ 231.034134][ T7442] ? alloc_slab_obj_exts+0x5c/0x180 [ 231.034167][ T7442] alloc_slab_obj_exts+0x5c/0x180 [ 231.034197][ T7442] __memcg_slab_post_alloc_hook+0x62d/0xde0 [ 231.034263][ T7442] __kvmalloc_node_noprof+0x6a5/0x890 [ 231.034301][ T7442] ? seq_read_iter+0x1eb/0xcb0 [ 231.034332][ T7442] ? seq_read_iter+0x1eb/0xcb0 [ 231.034372][ T7442] seq_read_iter+0x1eb/0xcb0 [ 231.034423][ T7442] copy_splice_read+0x605/0xab0 [ 231.034464][ T7442] ? __pfx_copy_splice_read+0x10/0x10 [ 231.034495][ T7442] ? look_up_lock_class+0x57/0x110 [ 231.034520][ T7442] ? register_lock_class+0x31/0x2e0 [ 231.034560][ T7442] ? alloc_pipe_info+0x35d/0x4c0 [ 231.034594][ T7442] ? __pfx_copy_splice_read+0x10/0x10 [ 231.034619][ T7442] splice_direct_to_actor+0x496/0xcc0 [ 231.034671][ T7442] ? __pfx_direct_splice_actor+0x10/0x10 [ 231.034698][ T7442] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 231.034737][ T7442] do_splice_direct+0x19b/0x2a0 [ 231.034768][ T7442] ? __pfx_do_splice_direct+0x10/0x10 [ 231.034797][ T7442] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 231.034829][ T7442] ? bpf_lsm_file_permission+0x9/0x20 [ 231.034854][ T7442] ? security_file_permission+0x75/0x260 [ 231.034886][ T7442] ? rw_verify_area+0x209/0x4d0 [ 231.034918][ T7442] do_sendfile+0x540/0x7e0 [ 231.034949][ T7442] ? __asan_memcpy+0x40/0x70 [ 231.034988][ T7442] ? __pfx_do_sendfile+0x10/0x10 [ 231.035024][ T7442] ? __se_sys_futex+0x3a8/0x450 [ 231.035053][ T7442] __se_sys_sendfile64+0x144/0x1a0 [ 231.035087][ T7442] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 231.035130][ T7442] do_syscall_64+0x166/0x520 [ 231.035152][ T7442] ? trace_irq_disable+0x3b/0x140 [ 231.035179][ T7442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.035210][ T7442] ? clear_bhb_loop+0x70/0xc0 [ 231.035238][ T7442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.035260][ T7442] RIP: 0033:0x7f561a59e159 [ 231.035282][ T7442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.035300][ T7442] RSP: 002b:00007f56187f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 231.035326][ T7442] RAX: ffffffffffffffda RBX: 00007f561a825fa0 RCX: 00007f561a59e159 [ 231.035343][ T7442] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 231.035357][ T7442] RBP: 00007f561a63506b R08: 0000000000000000 R09: 0000000000000000 [ 231.035371][ T7442] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 231.035386][ T7442] R13: 00007f561a826038 R14: 00007f561a825fa0 R15: 00007ffc55a04948 [ 231.035423][ T7442] [ 231.921911][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.922143][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.922373][ T7082] bridge_slave_1: entered allmulticast mode [ 231.936534][ T7082] bridge_slave_1: entered promiscuous mode [ 231.945863][ T7451] FAULT_INJECTION: forcing a failure. [ 231.945863][ T7451] name failslab, interval 1, probability 0, space 0, times 0 [ 231.945902][ T7451] CPU: 1 UID: 0 PID: 7451 Comm: syz.3.459 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 231.945929][ T7451] Tainted: [L]=SOFTLOCKUP [ 231.945937][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.945949][ T7451] Call Trace: [ 231.945957][ T7451] [ 231.945967][ T7451] dump_stack_lvl+0xe8/0x150 [ 231.946000][ T7451] should_fail_ex+0x46b/0x600 [ 231.946034][ T7451] should_failslab+0xa8/0x100 [ 231.946056][ T7451] __kmalloc_node_noprof+0xfd/0x7b0 [ 231.946082][ T7451] ? fifo_init+0x3ed/0x6d0 [ 231.946106][ T7451] ? qdisc_alloc+0x92/0x9e0 [ 231.946126][ T7451] ? qdisc_alloc+0x92/0x9e0 [ 231.946147][ T7451] ? __pfx_fifo_init+0x10/0x10 [ 231.946173][ T7451] qdisc_alloc+0x92/0x9e0 [ 231.946201][ T7451] qdisc_create_dflt+0x8e/0x4e0 [ 231.946238][ T7451] prio_tune+0x5c3/0x15d0 [ 231.946276][ T7451] ? __pfx_prio_tune+0x10/0x10 [ 231.946299][ T7451] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.946323][ T7451] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 231.946345][ T7451] ? up_write+0x5a/0x190 [ 231.946381][ T7451] ? __pfx_prio_init+0x10/0x10 [ 231.946401][ T7451] ? tcf_block_get+0x67/0xa0 [ 231.946432][ T7451] ? __pfx_prio_init+0x10/0x10 [ 231.946453][ T7451] qdisc_create+0x7b5/0xf00 [ 231.946473][ T7451] ? lockdep_rtnl_is_held+0x26/0x40 [ 231.946502][ T7451] tc_modify_qdisc+0x17af/0x2390 [ 231.946546][ T7451] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 231.946590][ T7451] ? rtnetlink_rcv_msg+0x767/0xc00 [ 231.946625][ T7451] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 231.946656][ T7451] rtnetlink_rcv_msg+0x7b9/0xc00 [ 231.946682][ T7451] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 231.946703][ T7451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.946722][ T7451] ? ref_tracker_free+0x668/0x820 [ 231.946752][ T7451] ? __pfx_ref_tracker_free+0x10/0x10 [ 231.946779][ T7451] ? __asan_memcpy+0x40/0x70 [ 231.946802][ T7451] ? __skb_clone+0x5c/0x6c0 [ 231.946830][ T7451] netlink_rcv_skb+0x226/0x4a0 [ 231.946855][ T7451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.946876][ T7451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.946914][ T7451] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.946938][ T7451] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.946968][ T7451] netlink_unicast+0x7f5/0x990 [ 231.947002][ T7451] netlink_sendmsg+0x813/0xb40 [ 231.947027][ T7451] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 231.947061][ T7451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.947088][ T7451] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 231.947127][ T7451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.947151][ T7451] sock_sendmsg_nosec+0x13a/0x180 [ 231.947181][ T7451] ____sys_sendmsg+0x565/0x870 [ 231.947212][ T7451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.947255][ T7451] ? import_iovec+0x73/0xa0 [ 231.947287][ T7451] ___sys_sendmsg+0x2a5/0x360 [ 231.947309][ T7451] ? __lock_acquire+0x747/0x2de0 [ 231.947339][ T7451] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.947367][ T7451] ? futex_wait+0x2a2/0x390 [ 231.947421][ T7451] ? __fget_files+0x2a/0x420 [ 231.947445][ T7451] ? __fget_files+0x3a8/0x420 [ 231.947477][ T7451] __x64_sys_sendmsg+0x1b7/0x290 [ 231.947504][ T7451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.947548][ T7451] do_syscall_64+0x166/0x520 [ 231.947568][ T7451] ? trace_irq_disable+0x3b/0x140 [ 231.947592][ T7451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.947612][ T7451] ? clear_bhb_loop+0x70/0xc0 [ 231.947636][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.947661][ T7451] RIP: 0033:0x7f561a59e159 [ 231.947681][ T7451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.947697][ T7451] RSP: 002b:00007f56187f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.947719][ T7451] RAX: ffffffffffffffda RBX: 00007f561a825fa0 RCX: 00007f561a59e159 [ 231.947734][ T7451] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 231.947746][ T7451] RBP: 00007f561a63506b R08: 0000000000000000 R09: 0000000000000000 [ 231.947760][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.947772][ T7451] R13: 00007f561a826038 R14: 00007f561a825fa0 R15: 00007ffc55a04948 [ 231.947808][ T7451] [ 232.505243][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.725815][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 232.746617][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.748174][ T31] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 232.748243][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.748265][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.748290][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.748314][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.748357][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.823219][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.015764][ T31] usb 2-1: usb_control_msg returned -32 [ 233.015823][ T31] usbtmc 2-1:16.0: can't read capabilities [ 233.042479][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.059561][ T5249] 8021q: adding VLAN 0 to HW filter on device eth6 [ 233.919327][ T7479] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 233.966009][ T5599] usb 2-1: USB disconnect, device number 7 [ 234.719807][ T1333] hsr_slave_0: left promiscuous mode [ 234.758349][ T1333] hsr_slave_1: left promiscuous mode [ 234.763531][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.763561][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.830132][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.830163][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.067974][ T1333] veth1_macvtap: left promiscuous mode [ 235.068098][ T1333] veth0_macvtap: left promiscuous mode [ 235.068490][ T1333] veth1_vlan: left promiscuous mode [ 235.068680][ T1333] veth0_vlan: left promiscuous mode [ 235.259923][ T7504] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 235.931048][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 235.943258][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 235.988686][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 236.207677][ T31] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 236.212680][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.236028][ T31] usb 2-1: config 0 descriptor?? [ 236.294126][ T7504] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 236.313016][ T7507] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 236.389803][ T7509] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 236.410325][ T7082] team0: Port device team_slave_0 added [ 236.528760][ T31] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 236.886822][ T7082] team0: Port device team_slave_1 added [ 237.173553][ T31] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 237.173582][ T31] [drm] Initialized udl on minor 1 [ 237.375452][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.375473][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.375501][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.427489][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.427510][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.427534][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.648288][ T31] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 237.928909][ T31] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 238.151340][ T7082] hsr_slave_0: entered promiscuous mode [ 238.178110][ T7082] hsr_slave_1: entered promiscuous mode [ 238.184318][ T7082] debugfs: 'hsr0' already exists in 'hsr' [ 238.184350][ T7082] Cannot create hsr debugfs directory [ 238.347304][ T5703] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 238.501097][ T31] usb 2-1: USB disconnect, device number 8 [ 238.505411][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 238.520725][ T5703] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 238.523194][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 238.572516][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.572548][ T5703] usb 4-1: Product: syz [ 238.572565][ T5703] usb 4-1: Manufacturer: syz [ 238.572579][ T5703] usb 4-1: SerialNumber: syz [ 238.727656][ T5703] usb 4-1: config 0 descriptor?? [ 238.758601][ T5703] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 238.758642][ T5703] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 239.471636][ T5703] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 241.061404][ T5703] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 241.061443][ T5703] em28xx 4-1:0.0: board has no eeprom [ 241.585258][ T5703] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 241.585293][ T5703] em28xx 4-1:0.0: dvb set to bulk mode. [ 241.592034][ T31] em28xx 4-1:0.0: Binding DVB extension [ 241.644223][ T5703] usb 4-1: USB disconnect, device number 5 [ 241.653540][ T5703] em28xx 4-1:0.0: Disconnecting em28xx [ 241.804544][ T31] em28xx 4-1:0.0: Registering input extension [ 241.811317][ T5703] em28xx 4-1:0.0: Closing input extension [ 242.462896][ T5703] em28xx: Freeing device [ 245.361659][ T5249] 8021q: adding VLAN 0 to HW filter on device eth7 [ 250.526005][ T7638] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 250.743708][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 250.743732][ T36] audit: type=1800 audit(1790533229.281:233): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.510" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 251.549096][ T36] audit: type=1800 audit(1790533230.211:234): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.515" name="file0" dev="overlay" ino=624 res=0 errno=0 [ 251.702167][ T7661] syz.2.516 uses obsolete (PF_INET,SOCK_PACKET) [ 255.869995][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 255.870105][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 256.003486][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.036351][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.350221][ T7743] FAULT_INJECTION: forcing a failure. [ 256.350221][ T7743] name failslab, interval 1, probability 0, space 0, times 0 [ 256.350262][ T7743] CPU: 0 UID: 0 PID: 7743 Comm: syz.0.529 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.350291][ T7743] Tainted: [L]=SOFTLOCKUP [ 256.350298][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 256.350310][ T7743] Call Trace: [ 256.350318][ T7743] [ 256.350326][ T7743] dump_stack_lvl+0xe8/0x150 [ 256.350365][ T7743] should_fail_ex+0x46b/0x600 [ 256.350400][ T7743] should_failslab+0xa8/0x100 [ 256.350423][ T7743] __kmalloc_noprof+0xfb/0x790 [ 256.350451][ T7743] ? bpf_prepare_filter+0x6fb/0x12d0 [ 256.350479][ T7743] ? bpf_prepare_filter+0x6fb/0x12d0 [ 256.350512][ T7743] bpf_prepare_filter+0x6fb/0x12d0 [ 256.350544][ T7743] ? __pfx_seccomp_check_filter+0x10/0x10 [ 256.350564][ T7743] ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0 [ 256.350594][ T7743] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 256.350619][ T7743] ? kmemdup_noprof+0x55/0x70 [ 256.350640][ T7743] ? __asan_memcpy+0x40/0x70 [ 256.350670][ T7743] bpf_prog_create_from_user+0x2c6/0x440 [ 256.350699][ T7743] ? __pfx_seccomp_check_filter+0x10/0x10 [ 256.350724][ T7743] do_seccomp+0x770/0xd30 [ 256.350748][ T7743] ? __se_sys_futex+0x3a8/0x450 [ 256.350768][ T7743] ? __pfx_do_seccomp+0x10/0x10 [ 256.350793][ T7743] ? rcu_is_watching+0x16/0xb0 [ 256.350838][ T7743] do_syscall_64+0x166/0x520 [ 256.350871][ T7743] ? trace_irq_disable+0x3b/0x140 [ 256.350897][ T7743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.350917][ T7743] ? clear_bhb_loop+0x70/0xc0 [ 256.350942][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.350964][ T7743] RIP: 0033:0x7fe9bc56e159 [ 256.350985][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.351003][ T7743] RSP: 002b:00007fe9ba7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 256.351028][ T7743] RAX: ffffffffffffffda RBX: 00007fe9bc7f5fa0 RCX: 00007fe9bc56e159 [ 256.351045][ T7743] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 256.351059][ T7743] RBP: 00007fe9bc60506b R08: 0000000000000000 R09: 0000000000000000 [ 256.351072][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.351085][ T7743] R13: 00007fe9bc7f6038 R14: 00007fe9bc7f5fa0 R15: 00007ffd3169e8c8 [ 256.351118][ T7743] [ 257.649391][ T7082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.693955][ T7082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.702314][ T7082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.060391][ T7082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.093443][ T7082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.267996][ T7082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.294798][ T7082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.300994][ T7775] FAULT_INJECTION: forcing a failure. [ 258.300994][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 258.301033][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.1.536 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 258.301060][ T7775] Tainted: [L]=SOFTLOCKUP [ 258.301068][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 258.301080][ T7775] Call Trace: [ 258.301089][ T7775] [ 258.301097][ T7775] dump_stack_lvl+0xe8/0x150 [ 258.301132][ T7775] should_fail_ex+0x46b/0x600 [ 258.301167][ T7775] should_failslab+0xa8/0x100 [ 258.301188][ T7775] ? sctp_get_port_local+0x749/0x17a0 [ 258.301219][ T7775] kmem_cache_alloc_noprof+0x9e/0x690 [ 258.301246][ T7775] ? sctp_get_port_local+0x749/0x17a0 [ 258.301282][ T7775] sctp_get_port_local+0x749/0x17a0 [ 258.301322][ T7775] ? sctp_get_port_local+0x50c/0x17a0 [ 258.301351][ T7775] ? __pfx_sctp_get_port_local+0x10/0x10 [ 258.301382][ T7775] ? sctp_bind_addr_match+0x30/0x2b0 [ 258.301413][ T7775] ? sctp_bind_addr_match+0x28b/0x2b0 [ 258.301443][ T7775] sctp_do_bind+0x4d9/0x9a0 [ 258.301483][ T7775] sctp_connect_new_asoc+0x270/0x6b0 [ 258.301514][ T7775] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 258.301549][ T7775] ? sctp_get_af_specific+0x29/0x80 [ 258.301581][ T7775] ? sctp_inet6_send_verify+0x80/0x300 [ 258.301603][ T7775] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 258.301635][ T7775] __sctp_connect+0x5cb/0xdc0 [ 258.301671][ T7775] ? __local_bh_enable+0x1e3/0x2f0 [ 258.301700][ T7775] ? __pfx___sctp_connect+0x10/0x10 [ 258.301729][ T7775] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 258.301755][ T7775] ? lockdep_hardirqs_on+0x7b/0x110 [ 258.301783][ T7775] sctp_inet_connect+0x12e/0x210 [ 258.301820][ T7775] __sys_connect+0x32d/0x470 [ 258.301845][ T7775] ? __pfx___sys_connect+0x10/0x10 [ 258.301880][ T7775] ? rcu_is_watching+0x16/0xb0 [ 258.301920][ T7775] __x64_sys_connect+0x7a/0x90 [ 258.301942][ T7775] do_syscall_64+0x166/0x520 [ 258.301964][ T7775] ? trace_irq_disable+0x3b/0x140 [ 258.301989][ T7775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.302010][ T7775] ? clear_bhb_loop+0x70/0xc0 [ 258.302035][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.302055][ T7775] RIP: 0033:0x7f18a036e159 [ 258.302074][ T7775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.302091][ T7775] RSP: 002b:00007f189e5c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 258.302113][ T7775] RAX: ffffffffffffffda RBX: 00007f18a05f5fa0 RCX: 00007f18a036e159 [ 258.302128][ T7775] RDX: 0000000000000010 RSI: 0000200000004cc0 RDI: 0000000000000005 [ 258.302141][ T7775] RBP: 00007f18a040506b R08: 0000000000000000 R09: 0000000000000000 [ 258.302154][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.302166][ T7775] R13: 00007f18a05f6038 R14: 00007f18a05f5fa0 R15: 00007fff5b8552f8 [ 258.302200][ T7775] [ 258.749147][ T7082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.502215][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.700863][ T7082] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.762397][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.762563][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.910786][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.910981][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.619717][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 263.202671][ T7836] netlink: 'syz.1.546': attribute type 2 has an invalid length. [ 265.124721][ T7082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.724297][ T7082] veth0_vlan: entered promiscuous mode [ 266.756740][ T7082] veth1_vlan: entered promiscuous mode [ 267.058367][ T7082] veth0_macvtap: entered promiscuous mode [ 267.092109][ T7082] veth1_macvtap: entered promiscuous mode [ 267.273262][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.434848][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.688508][ T5596] overlayfs: failed lookup in lower (newroot/122, name='file0', err=-40): overlapping layers [ 267.688921][ T5596] overlayfs: failed lookup in lower (newroot/122, name='file0', err=-40): overlapping layers [ 267.751654][ T7907] FAULT_INJECTION: forcing a failure. [ 267.751654][ T7907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.751694][ T7907] CPU: 1 UID: 0 PID: 7907 Comm: syz.2.566 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 267.751725][ T7907] Tainted: [L]=SOFTLOCKUP [ 267.751734][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 267.751748][ T7907] Call Trace: [ 267.751757][ T7907] [ 267.751767][ T7907] dump_stack_lvl+0xe8/0x150 [ 267.751807][ T7907] should_fail_ex+0x46b/0x600 [ 267.751845][ T7907] _copy_to_user+0x31/0xb0 [ 267.751892][ T7907] bpf_verifier_vlog+0x496/0x900 [ 267.751935][ T7907] btf_verifier_log+0x11d/0x1a0 [ 267.751968][ T7907] ? __pfx_btf_verifier_log+0x10/0x10 [ 267.752003][ T7907] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 267.752039][ T7907] btf_enum_check_meta+0xc7e/0xdc0 [ 267.752073][ T7907] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 267.752114][ T7907] btf_parse_type_sec+0x3cf/0x2360 [ 267.752154][ T7907] ? __pfx_btf_check_sec_info+0x10/0x10 [ 267.752192][ T7907] ? btf_parse_str_sec+0x244/0x2f0 [ 267.752228][ T7907] btf_new_fd+0x4ad/0xc70 [ 267.752269][ T7907] __sys_bpf+0xd2e/0xd90 [ 267.752312][ T7907] ? __pfx___sys_bpf+0x10/0x10 [ 267.752349][ T7907] ? do_futex+0x458/0x4e0 [ 267.752405][ T7907] ? rcu_is_watching+0x16/0xb0 [ 267.752446][ T7907] __x64_sys_bpf+0xba/0xd0 [ 267.752480][ T7907] do_syscall_64+0x166/0x520 [ 267.752503][ T7907] ? trace_irq_disable+0x3b/0x140 [ 267.752533][ T7907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.752556][ T7907] ? clear_bhb_loop+0x70/0xc0 [ 267.752584][ T7907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.752606][ T7907] RIP: 0033:0x7fdc6c83e159 [ 267.752628][ T7907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.752647][ T7907] RSP: 002b:00007fdc6aa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.752673][ T7907] RAX: ffffffffffffffda RBX: 00007fdc6cac5fa0 RCX: 00007fdc6c83e159 [ 267.752690][ T7907] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 267.752705][ T7907] RBP: 00007fdc6c8d506b R08: 0000000000000000 R09: 0000000000000000 [ 267.752719][ T7907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.752733][ T7907] R13: 00007fdc6cac6038 R14: 00007fdc6cac5fa0 R15: 00007ffe7697ec38 [ 267.752770][ T7907] [ 268.172338][ T1301] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.196433][ T1301] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.507839][ T1333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.521213][ T89] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.137262][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.137296][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.180891][ T7904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.849685][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.849712][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.905230][ T5867] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 270.112639][ T5867] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 270.114764][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.114806][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.761160][ T5867] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 270.786519][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.787169][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.866805][ T5867] wacom 0003:056A:033B.0006: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 270.887015][ T5867] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0006/input/input9 [ 272.262292][ T5867] usb 4-1: USB disconnect, device number 6 [ 272.414395][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.453509][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.504922][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.590657][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.619501][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.646241][ T7946] netlink: 'syz.3.578': attribute type 2 has an invalid length. [ 273.921453][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.997754][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.018711][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.086048][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.107821][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.868184][ T5601] Bluetooth: hci3: command tx timeout [ 275.196166][ T7973] fuse: Bad value for 'fd' [ 275.800015][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.005125][ T5704] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 276.155229][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 276.155964][ T5704] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 276.160448][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.160467][ T5704] usb 4-1: Product: syz [ 276.160476][ T5704] usb 4-1: Manufacturer: syz [ 276.160485][ T5704] usb 4-1: SerialNumber: syz [ 276.164843][ T5704] usb 4-1: config 0 descriptor?? [ 276.183133][ T5704] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 276.225201][ T5601] Bluetooth: hci1: command tx timeout [ 276.353725][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.823211][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.946044][ T5601] Bluetooth: hci3: command tx timeout [ 277.008640][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.009272][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.110456][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 277.463127][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 277.639551][ T8005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.822321][ T5704] gspca_ov534_9: reg_w failed -71 [ 277.901599][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.055104][ T5704] gspca_ov534_9: Unknown sensor 0000 [ 278.055398][ T5704] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 278.099336][ T5704] usb 4-1: USB disconnect, device number 7 [ 278.315198][ T5601] Bluetooth: hci1: command tx timeout [ 278.942249][ T8016] syz_tun: left allmulticast mode [ 279.026945][ T5601] Bluetooth: hci3: command tx timeout [ 280.330048][ T5868] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 280.385512][ T5601] Bluetooth: hci1: command tx timeout [ 280.388007][ T8023] ceph: No mds server is up or the cluster is laggy [ 280.410713][ T5868] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 280.717155][ T5868] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 281.085598][ T12] bridge_slave_1: left allmulticast mode [ 281.085640][ T12] bridge_slave_1: left promiscuous mode [ 281.086924][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.105731][ T5601] Bluetooth: hci3: command tx timeout [ 281.294930][ T12] bridge_slave_0: left allmulticast mode [ 281.295125][ T12] bridge_slave_0: left promiscuous mode [ 281.295435][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.375235][ T5868] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 281.545128][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 281.546971][ T5868] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.548342][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.548375][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.548415][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.609154][ T5868] usb 2-1: config 0 descriptor?? [ 281.625240][ T5868] hub 2-1:0.0: USB hub found [ 281.827962][ T5868] hub 2-1:0.0: 1 port detected [ 282.042030][ T5868] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 282.150137][ T5868] usbhid 2-1:0.0: can't add hid device: -71 [ 282.150308][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 282.271792][ T5868] usb 2-1: USB disconnect, device number 9 [ 282.465097][ T5601] Bluetooth: hci1: command tx timeout [ 282.987985][ T8071] fuse: Bad value for 'fd' [ 283.054598][ T8070] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 283.141492][ T8067] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 283.336636][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.428867][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.481494][ T12] bond0 (unregistering): Released all slaves [ 284.576216][ T5601] Bluetooth: hci4: unexpected event for opcode 0x080b [ 284.965346][ T5601] Bluetooth: hci0: command 0x0c3a tx timeout [ 284.986068][ T7932] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.986301][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.986511][ T7932] bridge_slave_0: entered allmulticast mode [ 284.994191][ T7932] bridge_slave_0: entered promiscuous mode [ 285.043113][ T7932] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.043273][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.043490][ T7932] bridge_slave_1: entered allmulticast mode [ 285.058075][ T7932] bridge_slave_1: entered promiscuous mode [ 286.205666][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.206680][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.206902][ T7951] bridge_slave_0: entered allmulticast mode [ 286.235216][ T7951] bridge_slave_0: entered promiscuous mode [ 286.310299][ T7932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.310749][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.310914][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.311124][ T7951] bridge_slave_1: entered allmulticast mode [ 286.314153][ T7951] bridge_slave_1: entered promiscuous mode [ 286.380437][ T7932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.813962][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.827341][ T5249] 8021q: adding VLAN 0 to HW filter on device eth5 [ 286.972245][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 287.016594][ T12] hsr_slave_0: left promiscuous mode [ 287.055204][ T12] hsr_slave_1: left promiscuous mode [ 287.058524][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.058558][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.099233][ T8142] FAULT_INJECTION: forcing a failure. [ 287.099233][ T8142] name failslab, interval 1, probability 0, space 0, times 0 [ 287.099262][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.2.630 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 287.099280][ T8142] Tainted: [L]=SOFTLOCKUP [ 287.099285][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 287.099292][ T8142] Call Trace: [ 287.099297][ T8142] [ 287.099304][ T8142] dump_stack_lvl+0xe8/0x150 [ 287.099327][ T8142] should_fail_ex+0x46b/0x600 [ 287.099348][ T8142] should_failslab+0xa8/0x100 [ 287.099362][ T8142] __kmalloc_cache_noprof+0xa1/0x680 [ 287.099379][ T8142] ? pkcs8_key_preparse+0x12d/0x3e0 [ 287.099394][ T8142] ? pkcs8_key_preparse+0x12d/0x3e0 [ 287.099412][ T8142] pkcs8_key_preparse+0x12d/0x3e0 [ 287.099426][ T8142] ? kfree+0x1c5/0x6d0 [ 287.099440][ T8142] ? __pfx_pkcs8_key_preparse+0x10/0x10 [ 287.099455][ T8142] ? x509_cert_parse+0x66f/0x7a0 [ 287.099466][ T8142] ? __pfx_down_read+0x10/0x10 [ 287.099481][ T8142] ? x509_key_preparse+0x74/0x6d0 [ 287.099494][ T8142] ? __pfx_smack_key_permission+0x10/0x10 [ 287.099512][ T8142] asymmetric_key_preparse+0xb9/0x1b0 [ 287.099530][ T8142] __key_create_or_update+0x3a9/0xa80 [ 287.099548][ T8142] ? __pfx___key_create_or_update+0x10/0x10 [ 287.099572][ T8142] ? lookup_user_key+0xb68/0x1150 [ 287.099595][ T8142] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 287.099617][ T8142] key_create_or_update+0x42/0x60 [ 287.099632][ T8142] __se_sys_add_key+0x349/0x420 [ 287.099648][ T8142] ? __pfx___se_sys_add_key+0x10/0x10 [ 287.099668][ T8142] ? __x64_sys_add_key+0x20/0xc0 [ 287.099683][ T8142] do_syscall_64+0x166/0x520 [ 287.099695][ T8142] ? trace_irq_disable+0x3b/0x140 [ 287.099710][ T8142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.099723][ T8142] ? clear_bhb_loop+0x70/0xc0 [ 287.099738][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.099750][ T8142] RIP: 0033:0x7fdc6c83e159 [ 287.099763][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.099774][ T8142] RSP: 002b:00007fdc6aa96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 287.099788][ T8142] RAX: ffffffffffffffda RBX: 00007fdc6cac5fa0 RCX: 00007fdc6c83e159 [ 287.099797][ T8142] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 287.099805][ T8142] RBP: 00007fdc6c8d506b R08: ffffffffffffffff R09: 0000000000000000 [ 287.099813][ T8142] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 287.099820][ T8142] R13: 00007fdc6cac6038 R14: 00007fdc6cac5fa0 R15: 00007ffe7697ec38 [ 287.099839][ T8142] [ 287.146936][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.146964][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.520371][ T5601] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 287.571619][ T12] veth1_macvtap: left promiscuous mode [ 287.571705][ T12] veth0_macvtap: left promiscuous mode [ 287.571866][ T12] veth1_vlan: left promiscuous mode [ 287.571999][ T12] veth0_vlan: left promiscuous mode [ 288.296397][ T12] team0 (unregistering): Port device team_slave_1 removed [ 288.336710][ T12] team0 (unregistering): Port device team_slave_0 removed [ 288.521819][ T7932] team0: Port device team_slave_0 added [ 288.570651][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.761927][ T8148] infiniband syz0: set down [ 288.761945][ T8148] infiniband syz0: added bond0 [ 288.773607][ T8148] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 288.781377][ T8148] infiniband syz0: Couldn't open port 1 [ 288.781782][ T8148] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 288.781811][ T8148] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 288.781833][ T8148] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 288.836786][ T8148] RDS/IB: syz0: added [ 288.837667][ T8148] smc: adding ib device syz0 with port count 1 [ 288.837918][ T8148] smc: ib device syz0 port 1 has no pnetid [ 289.094162][ T7932] team0: Port device team_slave_1 added [ 289.247419][ T7951] team0: Port device team_slave_0 added [ 289.248765][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.248781][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.248810][ T7932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.310613][ T7951] team0: Port device team_slave_1 added [ 289.312309][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.312324][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.312354][ T7932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.057426][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.057447][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.057477][ T7951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.089429][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.089448][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.089477][ T7951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.712716][ T7932] hsr_slave_0: entered promiscuous mode [ 290.717814][ T7932] hsr_slave_1: entered promiscuous mode [ 290.720475][ T7932] debugfs: 'hsr0' already exists in 'hsr' [ 290.720503][ T7932] Cannot create hsr debugfs directory [ 291.640397][ T7951] hsr_slave_0: entered promiscuous mode [ 291.641949][ T7951] hsr_slave_1: entered promiscuous mode [ 291.643083][ T7951] debugfs: 'hsr0' already exists in 'hsr' [ 291.643109][ T7951] Cannot create hsr debugfs directory [ 291.880970][ T5601] Bluetooth: hci0: unexpected event for opcode 0x080b [ 291.896352][ T8183] netlink: 168 bytes leftover after parsing attributes in process `syz.1.641'. [ 292.441801][ T8191] input: syz0 as /devices/virtual/input/input12 [ 292.866713][ T5249] 8021q: adding VLAN 0 to HW filter on device eth6 [ 293.971268][ T8205] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 297.055189][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 297.216166][ T31] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 297.217885][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.264529][ T31] usb 4-1: USB2VGA dongle found at address 8 [ 297.445845][ T31] usb 4-1: Allocated 8 output buffers [ 298.484573][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 298.543639][ T31] usb 4-1: Failed to early initialize device [ 298.640724][ T31] usb 4-1: USB disconnect, device number 8 [ 302.363017][ T8326] ceph: No mds server is up or the cluster is laggy [ 302.363728][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 302.445500][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 302.575855][ T7932] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.719707][ T31] libceph: connect (1)[c::]:6789 error -101 [ 302.719936][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 302.985040][ T7932] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.012322][ T7932] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.179210][ T7932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.197244][ T7932] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.400047][ T7932] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.441485][ T7932] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.542016][ T8351] FAULT_INJECTION: forcing a failure. [ 303.542016][ T8351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.542071][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.3.677 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 303.542102][ T8351] Tainted: [L]=SOFTLOCKUP [ 303.542110][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.542123][ T8351] Call Trace: [ 303.542131][ T8351] [ 303.542140][ T8351] dump_stack_lvl+0xe8/0x150 [ 303.542169][ T8351] should_fail_ex+0x46b/0x600 [ 303.542197][ T8351] _copy_from_user+0x2d/0xb0 [ 303.542221][ T8351] binder_ioctl_write_read+0x164/0xa5d0 [ 303.542252][ T8351] ? __kernel_text_address+0xd/0x30 [ 303.542275][ T8351] ? unwind_get_return_address+0x4d/0x90 [ 303.542300][ T8351] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 303.542326][ T8351] ? arch_stack_walk+0xfb/0x150 [ 303.542362][ T8351] ? try_to_take_rt_mutex+0x842/0xb00 [ 303.542394][ T8351] ? stack_trace_save+0xa9/0x100 [ 303.542426][ T8351] ? __lock_acquire+0x747/0x2de0 [ 303.542466][ T8351] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 303.542509][ T8351] ? do_raw_spin_lock+0x12b/0x2f0 [ 303.542544][ T8351] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 303.542570][ T8351] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 303.542591][ T8351] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 303.542622][ T8351] ? reacquire_held_locks+0x117/0x1a0 [ 303.542652][ T8351] ? rt_spin_lock+0x1e2/0x400 [ 303.542686][ T8351] ? rt_spin_unlock+0x159/0x200 [ 303.542728][ T8351] ? binder_get_thread+0x59b/0x6d0 [ 303.542761][ T8351] binder_ioctl+0x420/0x1b10 [ 303.542790][ T8351] ? tomoyo_path_number_perm+0x219/0x5f0 [ 303.542819][ T8351] ? tomoyo_path_number_perm+0x219/0x5f0 [ 303.542849][ T8351] ? do_vfs_ioctl+0x1184/0x1550 [ 303.542877][ T8351] ? __pfx_binder_ioctl+0x10/0x10 [ 303.542906][ T8351] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 303.542935][ T8351] ? __pfx_smack_log+0x10/0x10 [ 303.542958][ T8351] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 303.542991][ T8351] ? smk_tskacc+0x2fb/0x370 [ 303.543018][ T8351] ? smack_file_ioctl+0x2c4/0x370 [ 303.543056][ T8351] ? __pfx_smack_file_ioctl+0x10/0x10 [ 303.543091][ T8351] ? __fget_files+0x2a/0x420 [ 303.543112][ T8351] ? __fget_files+0x3a8/0x420 [ 303.543132][ T8351] ? __fget_files+0x2a/0x420 [ 303.543157][ T8351] ? bpf_lsm_file_ioctl+0x9/0x20 [ 303.543180][ T8351] ? __pfx_binder_ioctl+0x10/0x10 [ 303.543208][ T8351] __se_sys_ioctl+0xff/0x170 [ 303.543235][ T8351] do_syscall_64+0x166/0x520 [ 303.543256][ T8351] ? trace_irq_disable+0x3b/0x140 [ 303.543283][ T8351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.543303][ T8351] ? clear_bhb_loop+0x70/0xc0 [ 303.543328][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.543349][ T8351] RIP: 0033:0x7f561a59e159 [ 303.543371][ T8351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.543389][ T8351] RSP: 002b:00007f56187f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.543415][ T8351] RAX: ffffffffffffffda RBX: 00007f561a825fa0 RCX: 00007f561a59e159 [ 303.543431][ T8351] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 303.543445][ T8351] RBP: 00007f561a63506b R08: 0000000000000000 R09: 0000000000000000 [ 303.543459][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.543474][ T8351] R13: 00007f561a826038 R14: 00007f561a825fa0 R15: 00007ffc55a04948 [ 303.543508][ T8351] [ 303.544773][ T8351] binder: 8349:8351 ioctl c0306201 0 returned -14 [ 303.797757][ T7932] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.028314][ T8357] FAULT_INJECTION: forcing a failure. [ 304.028314][ T8357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.028344][ T8357] CPU: 1 UID: 0 PID: 8357 Comm: syz.1.678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 304.028363][ T8357] Tainted: [L]=SOFTLOCKUP [ 304.028368][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 304.028375][ T8357] Call Trace: [ 304.028381][ T8357] [ 304.028387][ T8357] dump_stack_lvl+0xe8/0x150 [ 304.028409][ T8357] should_fail_ex+0x46b/0x600 [ 304.028429][ T8357] _copy_from_user+0x2d/0xb0 [ 304.028447][ T8357] do_sock_getsockopt+0x200/0x7e0 [ 304.028466][ T8357] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 304.028480][ T8357] ? __pfx_do_futex+0x10/0x10 [ 304.028511][ T8357] __x64_sys_getsockopt+0x1aa/0x250 [ 304.028530][ T8357] do_syscall_64+0x166/0x520 [ 304.028542][ T8357] ? trace_irq_disable+0x3b/0x140 [ 304.028556][ T8357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.028568][ T8357] ? clear_bhb_loop+0x70/0xc0 [ 304.028583][ T8357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.028594][ T8357] RIP: 0033:0x7f18a036e159 [ 304.028607][ T8357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.028617][ T8357] RSP: 002b:00007f189e5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 304.028632][ T8357] RAX: ffffffffffffffda RBX: 00007f18a05f5fa0 RCX: 00007f18a036e159 [ 304.028641][ T8357] RDX: 0000000000000033 RSI: 0000000000000029 RDI: 0000000000000005 [ 304.028649][ T8357] RBP: 00007f18a040506b R08: 0000200000001c00 R09: 0000000000000000 [ 304.028657][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.028664][ T8357] R13: 00007f18a05f6038 R14: 00007f18a05f5fa0 R15: 00007fff5b8552f8 [ 304.028683][ T8357] [ 304.418651][ T5601] Bluetooth: hci4: connection err: -111 [ 307.385004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 307.689499][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 307.790979][ T8381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 308.468350][ T2939] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 308.978498][ T7951] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 309.092232][ T7951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 309.124158][ T7951] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 309.290987][ T7951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.294505][ T7951] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 309.346228][ T7951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.410845][ T7951] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.478571][ T7951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.582050][ T7932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.851315][ T7932] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.889545][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.902972][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.016860][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.017018][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.224284][ T7951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.364771][ T7951] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.390570][ T8425] fuse: Bad value for 'fd' [ 310.492594][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.492750][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.572623][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.574336][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.843367][ T8434] FAULT_INJECTION: forcing a failure. [ 310.843367][ T8434] name failslab, interval 1, probability 0, space 0, times 0 [ 310.843408][ T8434] CPU: 1 UID: 0 PID: 8434 Comm: syz.3.694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 310.843437][ T8434] Tainted: [L]=SOFTLOCKUP [ 310.843445][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 310.843457][ T8434] Call Trace: [ 310.843466][ T8434] [ 310.843475][ T8434] dump_stack_lvl+0xe8/0x150 [ 310.843510][ T8434] should_fail_ex+0x46b/0x600 [ 310.843546][ T8434] should_failslab+0xa8/0x100 [ 310.843567][ T8434] ? sk_prot_alloc+0x57/0x210 [ 310.843589][ T8434] kmem_cache_alloc_noprof+0x9e/0x690 [ 310.843618][ T8434] ? sk_prot_alloc+0x57/0x210 [ 310.843640][ T8434] ? lock_acquire+0x115/0x350 [ 310.843671][ T8434] sk_prot_alloc+0x57/0x210 [ 310.843691][ T8434] ? sk_alloc+0x27/0x390 [ 310.843715][ T8434] sk_alloc+0x3a/0x390 [ 310.843741][ T8434] inet_create+0x7a9/0x1000 [ 310.843768][ T8434] ? inet_create+0x9d/0x1000 [ 310.843799][ T8434] __sock_create+0x4b3/0x9d0 [ 310.843839][ T8434] udp_sock_create4+0xc5/0x480 [ 310.843880][ T8434] ? __pfx_udp_sock_create4+0x10/0x10 [ 310.843921][ T8434] rxrpc_lookup_local+0xd75/0x1640 [ 310.843949][ T8434] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 310.843981][ T8434] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 310.844016][ T8434] ? __local_bh_enable+0x1e3/0x2f0 [ 310.844050][ T8434] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 310.844089][ T8434] rxrpc_sendmsg+0x34b/0x6b0 [ 310.844121][ T8434] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 310.844146][ T8434] sock_sendmsg_nosec+0x13a/0x180 [ 310.844178][ T8434] ____sys_sendmsg+0x565/0x870 [ 310.844212][ T8434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.844247][ T8434] ? import_iovec+0x73/0xa0 [ 310.844283][ T8434] ___sys_sendmsg+0x2a5/0x360 [ 310.844305][ T8434] ? __lock_acquire+0x747/0x2de0 [ 310.844336][ T8434] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.844365][ T8434] ? futex_wait+0x2a2/0x390 [ 310.844423][ T8434] ? __fget_files+0x2a/0x420 [ 310.844446][ T8434] ? __fget_files+0x3a8/0x420 [ 310.844482][ T8434] __x64_sys_sendmsg+0x1b7/0x290 [ 310.844510][ T8434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.844556][ T8434] do_syscall_64+0x166/0x520 [ 310.844577][ T8434] ? trace_irq_disable+0x3b/0x140 [ 310.844604][ T8434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.844625][ T8434] ? clear_bhb_loop+0x70/0xc0 [ 310.844650][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.844671][ T8434] RIP: 0033:0x7f561a59e159 [ 310.844690][ T8434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.844710][ T8434] RSP: 002b:00007f56187f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.844734][ T8434] RAX: ffffffffffffffda RBX: 00007f561a825fa0 RCX: 00007f561a59e159 [ 310.844750][ T8434] RDX: 00000000200008c0 RSI: 0000200000000280 RDI: 0000000000000005 [ 310.844764][ T8434] RBP: 00007f561a63506b R08: 0000000000000000 R09: 0000000000000000 [ 310.844777][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.844790][ T8434] R13: 00007f561a826038 R14: 00007f561a825fa0 R15: 00007ffc55a04948 [ 310.844825][ T8434] [ 311.755703][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 312.106763][ T5601] block nbd0: Receive control failed (result -107) [ 312.868235][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.583311][ T7951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.208445][ T7932] veth0_vlan: entered promiscuous mode [ 314.275516][ T7932] veth1_vlan: entered promiscuous mode [ 314.420130][ T7932] veth0_macvtap: entered promiscuous mode [ 314.508325][ T7932] veth1_macvtap: entered promiscuous mode [ 314.621805][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.770032][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.254823][ T8508] /dev/nbd2: Can't lookup blockdev [ 315.815104][ T8510] fuse: Bad value for 'fd' [ 316.545969][ T7951] veth0_vlan: entered promiscuous mode [ 316.909956][ T7951] veth1_vlan: entered promiscuous mode [ 317.022227][ T1333] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.022642][ T1333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.023436][ T1333] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.455842][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.455935][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.647442][ T8521] FAULT_INJECTION: forcing a failure. [ 317.647442][ T8521] name failslab, interval 1, probability 0, space 0, times 0 [ 317.647487][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: syz.1.715 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 317.647519][ T8521] Tainted: [L]=SOFTLOCKUP [ 317.647528][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 317.647541][ T8521] Call Trace: [ 317.647551][ T8521] [ 317.647561][ T8521] dump_stack_lvl+0xe8/0x150 [ 317.647601][ T8521] should_fail_ex+0x46b/0x600 [ 317.647640][ T8521] should_failslab+0xa8/0x100 [ 317.647665][ T8521] __kmalloc_noprof+0xfb/0x790 [ 317.647704][ T8521] ? group_cpus_evenly+0xcf/0x5e0 [ 317.647729][ T8521] ? group_cpus_evenly+0xcf/0x5e0 [ 317.647766][ T8521] group_cpus_evenly+0xcf/0x5e0 [ 317.647795][ T8521] ? __pfx_group_cpus_evenly+0x10/0x10 [ 317.647836][ T8521] blk_mq_map_queues+0xb1/0x490 [ 317.647866][ T8521] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 317.647886][ T8521] ? __kmalloc_node_noprof+0x58e/0x7b0 [ 317.647914][ T8521] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 317.647936][ T8521] ? blk_mq_update_queue_map+0x383/0x450 [ 317.647965][ T8521] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 317.648004][ T8521] loop_add+0x436/0xb50 [ 317.648029][ T8521] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 317.648064][ T8521] ? __pfx_loop_add+0x10/0x10 [ 317.648113][ T8521] ? __pfx_smack_file_ioctl+0x10/0x10 [ 317.648149][ T8521] loop_control_ioctl+0x12b/0x5b0 [ 317.648177][ T8521] ? __fget_files+0x2a/0x420 [ 317.648202][ T8521] ? __pfx_loop_control_ioctl+0x10/0x10 [ 317.648224][ T8521] ? __fget_files+0x2a/0x420 [ 317.648253][ T8521] ? bpf_lsm_file_ioctl+0x9/0x20 [ 317.648280][ T8521] ? __pfx_loop_control_ioctl+0x10/0x10 [ 317.648306][ T8521] __se_sys_ioctl+0xff/0x170 [ 317.648341][ T8521] do_syscall_64+0x166/0x520 [ 317.648365][ T8521] ? trace_irq_disable+0x3b/0x140 [ 317.648403][ T8521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.648426][ T8521] ? clear_bhb_loop+0x70/0xc0 [ 317.648454][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.648477][ T8521] RIP: 0033:0x7f18a036e159 [ 317.648498][ T8521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.648517][ T8521] RSP: 002b:00007f189e5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.648543][ T8521] RAX: ffffffffffffffda RBX: 00007f18a05f5fa0 RCX: 00007f18a036e159 [ 317.648560][ T8521] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 317.648575][ T8521] RBP: 00007f18a040506b R08: 0000000000000000 R09: 0000000000000000 [ 317.648589][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.648614][ T8521] R13: 00007f18a05f6038 R14: 00007f18a05f5fa0 R15: 00007fff5b8552f8 [ 317.648651][ T8521] [ 317.724976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 318.109734][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.109751][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.215138][ T5868] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 318.399918][ T5868] usb 4-1: not running at top speed; connect to a high speed hub [ 318.399964][ T5868] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 318.460402][ T5868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.460480][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.546654][ T5868] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 318.546729][ T5868] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 318.959956][ T7951] veth0_macvtap: entered promiscuous mode [ 318.971409][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.971432][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.048190][ T7951] veth1_macvtap: entered promiscuous mode [ 319.078174][ T31] usb 4-1: USB disconnect, device number 9 [ 319.210496][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.274242][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.078265][ T1314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.218630][ T8536] binder: 8534:8536 ioctl c0306201 0 returned -14 [ 320.335541][ T8540] binder: 8534:8540 ioctl c0306201 0 returned -14 [ 320.540725][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.576487][ T1314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.951430][ T1314] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.954555][ T1314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.109014][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.109039][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.780547][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.780570][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.839564][ T4969] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 322.006151][ T4969] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 322.007710][ T4969] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 322.007736][ T4969] usb 6-1: config 0 has no interface number 0 [ 322.007782][ T4969] usb 6-1: config 0 interface 41 has no altsetting 0 [ 322.011738][ T4969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.011766][ T4969] usb 6-1: Product: syz [ 322.011781][ T4969] usb 6-1: Manufacturer: syz [ 322.011795][ T4969] usb 6-1: SerialNumber: syz [ 322.027919][ T8562] FAULT_INJECTION: forcing a failure. [ 322.027919][ T8562] name failslab, interval 1, probability 0, space 0, times 0 [ 322.027963][ T8562] CPU: 1 UID: 0 PID: 8562 Comm: syz.3.728 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.027991][ T8562] Tainted: [L]=SOFTLOCKUP [ 322.027999][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 322.028012][ T8562] Call Trace: [ 322.028020][ T8562] [ 322.028030][ T8562] dump_stack_lvl+0xe8/0x150 [ 322.028065][ T8562] should_fail_ex+0x46b/0x600 [ 322.028099][ T8562] should_failslab+0xa8/0x100 [ 322.028121][ T8562] __kmalloc_cache_noprof+0xa1/0x680 [ 322.028151][ T8562] ? sctp_datamsg_from_user+0x88/0xef0 [ 322.028173][ T8562] ? sctp_datamsg_from_user+0x88/0xef0 [ 322.028204][ T8562] sctp_datamsg_from_user+0x88/0xef0 [ 322.028239][ T8562] ? __sk_mem_raise_allocated+0x28d/0x12b0 [ 322.028273][ T8562] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 322.028307][ T8562] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 322.028340][ T8562] ? sctp_assoc_add_peer+0xd57/0x1430 [ 322.028385][ T8562] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 322.028412][ T8562] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 322.028442][ T8562] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 322.028469][ T8562] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 322.028495][ T8562] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 322.028523][ T8562] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 322.028545][ T8562] ? security_sctp_bind_connect+0x7e/0x2c0 [ 322.028574][ T8562] sctp_sendmsg+0x1759/0x2a50 [ 322.028617][ T8562] ? __pfx_sctp_sendmsg+0x10/0x10 [ 322.028640][ T8562] ? smack_socket_sendmsg+0x490/0x5a0 [ 322.028671][ T8562] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 322.028701][ T8562] ? __lock_acquire+0x747/0x2de0 [ 322.028732][ T8562] ? __lock_acquire+0x747/0x2de0 [ 322.028761][ T8562] ? sock_rps_record_flow+0x19/0x350 [ 322.028789][ T8562] ? inet_sendmsg+0x298/0x320 [ 322.028818][ T8562] ? __pfx_inet_sendmsg+0x10/0x10 [ 322.028840][ T8562] sock_sendmsg_nosec+0x10e/0x180 [ 322.028870][ T8562] ____sys_sendmsg+0x565/0x870 [ 322.028902][ T8562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.028934][ T8562] ? import_iovec+0x73/0xa0 [ 322.028966][ T8562] ___sys_sendmsg+0x2a5/0x360 [ 322.028987][ T8562] ? __lock_acquire+0x747/0x2de0 [ 322.029017][ T8562] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.029044][ T8562] ? futex_wait+0x2a2/0x390 [ 322.029099][ T8562] ? __fget_files+0x2a/0x420 [ 322.029119][ T8562] ? __fget_files+0x3a8/0x420 [ 322.029152][ T8562] __x64_sys_sendmsg+0x1b7/0x290 [ 322.029178][ T8562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.029229][ T8562] do_syscall_64+0x166/0x520 [ 322.029249][ T8562] ? trace_irq_disable+0x3b/0x140 [ 322.029274][ T8562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.029294][ T8562] ? clear_bhb_loop+0x70/0xc0 [ 322.029317][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.029337][ T8562] RIP: 0033:0x7f561a59e159 [ 322.029357][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.029374][ T8562] RSP: 002b:00007f56187f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.029399][ T8562] RAX: ffffffffffffffda RBX: 00007f561a825fa0 RCX: 00007f561a59e159 [ 322.029414][ T8562] RDX: 0000000000000801 RSI: 0000200000000640 RDI: 0000000000000003 [ 322.029427][ T8562] RBP: 00007f561a63506b R08: 0000000000000000 R09: 0000000000000000 [ 322.029440][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.029451][ T8562] R13: 00007f561a826038 R14: 00007f561a825fa0 R15: 00007ffc55a04948 [ 322.029484][ T8562] [ 322.469580][ T4969] usb 6-1: config 0 descriptor?? [ 323.414106][ T4969] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 324.696384][ T4969] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 324.696418][ T4969] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 324.697228][ T4969] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 324.770177][ T4969] usb 6-1: USB disconnect, device number 2 [ 326.034497][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.069536][ T8621] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.211592][ T8625] fuse: Bad value for 'fd' [ 328.320012][ T8631] syz_tun: entered allmulticast mode [ 328.413827][ T8628] syz_tun: left allmulticast mode [ 328.456423][ T8636] FAULT_INJECTION: forcing a failure. [ 328.456423][ T8636] name failslab, interval 1, probability 0, space 0, times 0 [ 328.456464][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.6.752 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.456497][ T8636] Tainted: [L]=SOFTLOCKUP [ 328.456505][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 328.456518][ T8636] Call Trace: [ 328.456526][ T8636] [ 328.456535][ T8636] dump_stack_lvl+0xe8/0x150 [ 328.456589][ T8636] should_fail_ex+0x46b/0x600 [ 328.456625][ T8636] should_failslab+0xa8/0x100 [ 328.456650][ T8636] __kmalloc_cache_node_noprof+0xac/0x670 [ 328.456684][ T8636] ? blk_mq_init_tags+0x83/0x2d0 [ 328.456714][ T8636] ? blk_mq_init_tags+0x83/0x2d0 [ 328.456752][ T8636] blk_mq_init_tags+0x83/0x2d0 [ 328.456788][ T8636] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 328.456815][ T8636] ? kfree+0x1c5/0x6d0 [ 328.456841][ T8636] ? blk_mq_map_queues+0x3ea/0x490 [ 328.456870][ T8636] ? blk_mq_map_queues+0x3ea/0x490 [ 328.456899][ T8636] blk_mq_alloc_set_map_and_rqs+0x1a0/0x810 [ 328.456940][ T8636] blk_mq_alloc_tag_set+0x8e5/0x1000 [ 328.456982][ T8636] loop_add+0x436/0xb50 [ 328.457008][ T8636] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 328.457045][ T8636] ? __pfx_loop_add+0x10/0x10 [ 328.457094][ T8636] ? __pfx_smack_file_ioctl+0x10/0x10 [ 328.457131][ T8636] loop_control_ioctl+0x12b/0x5b0 [ 328.457158][ T8636] ? __fget_files+0x2a/0x420 [ 328.457183][ T8636] ? __pfx_loop_control_ioctl+0x10/0x10 [ 328.457207][ T8636] ? __fget_files+0x2a/0x420 [ 328.457236][ T8636] ? bpf_lsm_file_ioctl+0x9/0x20 [ 328.457263][ T8636] ? __pfx_loop_control_ioctl+0x10/0x10 [ 328.457289][ T8636] __se_sys_ioctl+0xff/0x170 [ 328.457324][ T8636] do_syscall_64+0x166/0x520 [ 328.457348][ T8636] ? trace_irq_disable+0x3b/0x140 [ 328.457376][ T8636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.457399][ T8636] ? clear_bhb_loop+0x70/0xc0 [ 328.457428][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.457450][ T8636] RIP: 0033:0x7ff33e1ae159 [ 328.457472][ T8636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.457492][ T8636] RSP: 002b:00007ff33c406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.457518][ T8636] RAX: ffffffffffffffda RBX: 00007ff33e435fa0 RCX: 00007ff33e1ae159 [ 328.457535][ T8636] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 328.457550][ T8636] RBP: 00007ff33e24506b R08: 0000000000000000 R09: 0000000000000000 [ 328.457574][ T8636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.457588][ T8636] R13: 00007ff33e436038 R14: 00007ff33e435fa0 R15: 00007ffc9c9e0d18 [ 328.457625][ T8636] [ 328.459396][ T8636] blk-mq: reduced tag depth (128 -> 64) [ 329.438755][ T8647] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 330.936130][ T5703] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 331.001978][ T8675] FAULT_INJECTION: forcing a failure. [ 331.001978][ T8675] name failslab, interval 1, probability 0, space 0, times 0 [ 331.002020][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: syz.3.766 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.002050][ T8675] Tainted: [L]=SOFTLOCKUP [ 331.002058][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 331.002071][ T8675] Call Trace: [ 331.002081][ T8675] [ 331.002090][ T8675] dump_stack_lvl+0xe8/0x150 [ 331.002129][ T8675] should_fail_ex+0x46b/0x600 [ 331.002176][ T8675] should_failslab+0xa8/0x100 [ 331.002202][ T8675] __kmalloc_noprof+0xfb/0x790 [ 331.002244][ T8675] ? group_cpus_evenly+0x2cf/0x5e0 [ 331.002268][ T8675] ? group_cpus_evenly+0x2cf/0x5e0 [ 331.002302][ T8675] group_cpus_evenly+0x2cf/0x5e0 [ 331.002330][ T8675] ? __pfx_group_cpus_evenly+0x10/0x10 [ 331.002373][ T8675] blk_mq_map_queues+0xb1/0x490 [ 331.002406][ T8675] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 331.002428][ T8675] ? __kmalloc_node_noprof+0x58e/0x7b0 [ 331.002459][ T8675] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 331.002484][ T8675] ? blk_mq_update_queue_map+0x383/0x450 [ 331.002519][ T8675] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 331.002562][ T8675] loop_add+0x436/0xb50 [ 331.002588][ T8675] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 331.002623][ T8675] ? __pfx_loop_add+0x10/0x10 [ 331.002670][ T8675] ? __pfx_smack_file_ioctl+0x10/0x10 [ 331.002715][ T8675] loop_control_ioctl+0x12b/0x5b0 [ 331.002746][ T8675] ? __fget_files+0x2a/0x420 [ 331.002771][ T8675] ? __pfx_loop_control_ioctl+0x10/0x10 [ 331.002795][ T8675] ? __fget_files+0x2a/0x420 [ 331.002822][ T8675] ? bpf_lsm_file_ioctl+0x9/0x20 [ 331.002849][ T8675] ? __pfx_loop_control_ioctl+0x10/0x10 [ 331.002876][ T8675] __se_sys_ioctl+0xff/0x170 [ 331.002911][ T8675] do_syscall_64+0x166/0x520 [ 331.002935][ T8675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.002958][ T8675] ? clear_bhb_loop+0x70/0xc0 [ 331.002985][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.003006][ T8675] RIP: 0033:0x7f561a59e159 [ 331.003028][ T8675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.003048][ T8675] RSP: 002b:00007f56187f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.003075][ T8675] RAX: ffffffffffffffda RBX: 00007f561a825fa0 RCX: 00007f561a59e159 [ 331.003091][ T8675] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 331.003106][ T8675] RBP: 00007f561a63506b R08: 0000000000000000 R09: 0000000000000000 [ 331.003121][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.003134][ T8675] R13: 00007f561a826038 R14: 00007f561a825fa0 R15: 00007ffc55a04948 [ 331.003179][ T8675] [ 334.360549][ T8753] FAULT_INJECTION: forcing a failure. [ 334.360549][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 334.360596][ T8753] CPU: 0 UID: 0 PID: 8753 Comm: syz.5.778 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 334.360626][ T8753] Tainted: [L]=SOFTLOCKUP [ 334.360635][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 334.360647][ T8753] Call Trace: [ 334.360656][ T8753] [ 334.360666][ T8753] dump_stack_lvl+0xe8/0x150 [ 334.360709][ T8753] should_fail_ex+0x46b/0x600 [ 334.360752][ T8753] should_failslab+0xa8/0x100 [ 334.360779][ T8753] __kmalloc_noprof+0xfb/0x790 [ 334.360812][ T8753] ? nsim_fib_event_nb+0x283/0x1200 [ 334.360843][ T8753] ? nsim_fib_event_nb+0x283/0x1200 [ 334.360882][ T8753] nsim_fib_event_nb+0x283/0x1200 [ 334.360929][ T8753] notifier_call_chain+0x1a5/0x3d0 [ 334.360959][ T8753] ? atomic_notifier_call_chain+0x26/0x180 [ 334.360985][ T8753] atomic_notifier_call_chain+0xda/0x180 [ 334.361012][ T8753] call_fib_notifiers+0x31/0x60 [ 334.361039][ T8753] fib6_add_rt2node+0x15f3/0x3940 [ 334.361081][ T8753] ? rcu_is_watching+0x16/0xb0 [ 334.361116][ T8753] ? trace_kmem_cache_alloc+0x29/0xe0 [ 334.361152][ T8753] ? kmem_cache_alloc_noprof+0x3c6/0x690 [ 334.361182][ T8753] ? fib6_add_1+0x9fe/0x13e0 [ 334.361210][ T8753] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 334.361242][ T8753] ? fib6_add_1+0xfb2/0x13e0 [ 334.361289][ T8753] fib6_add+0x9ae/0x1a20 [ 334.361331][ T8753] ? __pfx_fib6_add+0x10/0x10 [ 334.361362][ T8753] ? __local_bh_disable_ip+0x3d/0x420 [ 334.361398][ T8753] ? ip6_ins_rt+0xbf/0x160 [ 334.361420][ T8753] ? ip6_ins_rt+0xbf/0x160 [ 334.361443][ T8753] ip6_ins_rt+0xed/0x160 [ 334.361466][ T8753] ? __pfx_ip6_ins_rt+0x10/0x10 [ 334.361493][ T8753] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 334.361528][ T8753] ? __ipv6_dev_ac_inc+0x36/0xbf0 [ 334.361562][ T8753] __ipv6_dev_ac_inc+0x932/0xbf0 [ 334.361584][ T8753] ? __ipv6_dev_ac_inc+0x36/0xbf0 [ 334.361619][ T8753] ipv6_sock_ac_join+0x665/0x820 [ 334.361654][ T8753] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 334.361680][ T8753] ? _copy_from_user+0x94/0xb0 [ 334.361720][ T8753] do_ipv6_setsockopt+0x20d1/0x3180 [ 334.361761][ T8753] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 334.361795][ T8753] ? futex_wait+0x2a2/0x390 [ 334.361831][ T8753] ? __lock_acquire+0x747/0x2de0 [ 334.361884][ T8753] ? do_futex+0x3e7/0x4e0 [ 334.361906][ T8753] ? __asan_memcpy+0x40/0x70 [ 334.361942][ T8753] ? lock_acquire+0x115/0x350 [ 334.361985][ T8753] ? __fget_files+0x2a/0x420 [ 334.362018][ T8753] ipv6_setsockopt+0x59/0x170 [ 334.362047][ T8753] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 334.362084][ T8753] do_sock_setsockopt+0x17c/0x1b0 [ 334.362117][ T8753] __x64_sys_setsockopt+0x143/0x1b0 [ 334.362150][ T8753] do_syscall_64+0x166/0x520 [ 334.362174][ T8753] ? trace_irq_disable+0x3b/0x140 [ 334.362204][ T8753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.362228][ T8753] ? clear_bhb_loop+0x70/0xc0 [ 334.362257][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.362280][ T8753] RIP: 0033:0x7f52d483e159 [ 334.362302][ T8753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.362320][ T8753] RSP: 002b:00007f52d2a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 334.362346][ T8753] RAX: ffffffffffffffda RBX: 00007f52d4ac5fa0 RCX: 00007f52d483e159 [ 334.362364][ T8753] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 334.362377][ T8753] RBP: 00007f52d48d506b R08: 0000000000000014 R09: 0000000000000000 [ 334.362392][ T8753] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 334.362407][ T8753] R13: 00007f52d4ac6038 R14: 00007f52d4ac5fa0 R15: 00007ffd8717ebc8 [ 334.362447][ T8753] [ 335.019323][ T8764] netlink: 256 bytes leftover after parsing attributes in process `syz.1.783'. [ 335.019921][ T8764] unsupported nlmsg_type 40 [ 335.268410][ T8769] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 335.268952][ T8766] vlan2: entered allmulticast mode [ 335.269409][ T8766] bridge0: port 3(vlan2) entered blocking state [ 335.269615][ T8766] bridge0: port 3(vlan2) entered disabled state [ 335.273379][ T8766] vlan2: entered promiscuous mode [ 336.453346][ T8797] FAULT_INJECTION: forcing a failure. [ 336.453346][ T8797] name failslab, interval 1, probability 0, space 0, times 0 [ 336.453387][ T8797] CPU: 0 UID: 0 PID: 8797 Comm: syz.1.794 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.453416][ T8797] Tainted: [L]=SOFTLOCKUP [ 336.453423][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.453434][ T8797] Call Trace: [ 336.453443][ T8797] [ 336.453452][ T8797] dump_stack_lvl+0xe8/0x150 [ 336.453500][ T8797] should_fail_ex+0x46b/0x600 [ 336.453534][ T8797] should_failslab+0xa8/0x100 [ 336.453558][ T8797] __kmalloc_cache_noprof+0xa1/0x680 [ 336.453588][ T8797] ? sget_fc+0x794/0x1a80 [ 336.453610][ T8797] ? sget_fc+0x794/0x1a80 [ 336.453637][ T8797] sget_fc+0x794/0x1a80 [ 336.453659][ T8797] ? __pfx_kernfs_test_super+0x10/0x10 [ 336.453693][ T8797] ? __pfx_kernfs_set_super+0x10/0x10 [ 336.453719][ T8797] ? __pfx_sget_fc+0x10/0x10 [ 336.453741][ T8797] ? __kasan_kmalloc+0x93/0xb0 [ 336.453777][ T8797] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 336.453805][ T8797] ? kernfs_get_tree+0xc4/0x980 [ 336.453826][ T8797] ? kernfs_get_tree+0xc4/0x980 [ 336.453856][ T8797] kernfs_get_tree+0x1e9/0x980 [ 336.453878][ T8797] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 336.453904][ T8797] ? rt_spin_unlock+0x165/0x200 [ 336.453936][ T8797] ? __pfx_kernfs_get_tree+0x10/0x10 [ 336.453960][ T8797] ? cap_capable+0x123/0x460 [ 336.453989][ T8797] ? bpf_lsm_capable+0x9/0x20 [ 336.454020][ T8797] vfs_get_tree+0x92/0x2a0 [ 336.454050][ T8797] do_new_mount+0x319/0xdc0 [ 336.454071][ T8797] ? cap_capable+0x123/0x460 [ 336.454100][ T8797] ? __pfx_do_new_mount+0x10/0x10 [ 336.454125][ T8797] ? ns_capable+0x89/0xe0 [ 336.454155][ T8797] ? path_mount+0x647/0x1050 [ 336.454181][ T8797] ? user_path_at+0xd4/0x160 [ 336.454207][ T8797] __se_sys_mount+0x31d/0x420 [ 336.454235][ T8797] ? __pfx___se_sys_mount+0x10/0x10 [ 336.454263][ T8797] ? __x64_sys_mount+0x20/0xc0 [ 336.454288][ T8797] do_syscall_64+0x166/0x520 [ 336.454309][ T8797] ? trace_irq_disable+0x3b/0x140 [ 336.454336][ T8797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.454357][ T8797] ? clear_bhb_loop+0x70/0xc0 [ 336.454382][ T8797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.454402][ T8797] RIP: 0033:0x7f18a036e159 [ 336.454421][ T8797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.454440][ T8797] RSP: 002b:00007f189e5c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.454463][ T8797] RAX: ffffffffffffffda RBX: 00007f18a05f5fa0 RCX: 00007f18a036e159 [ 336.454488][ T8797] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 336.454503][ T8797] RBP: 00007f18a040506b R08: 0000000000000000 R09: 0000000000000000 [ 336.454517][ T8797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.454530][ T8797] R13: 00007f18a05f6038 R14: 00007f18a05f5fa0 R15: 00007fff5b8552f8 [ 336.454563][ T8797] [ 336.911616][ T8800] binder: 8799:8800 ioctl c0306201 2000000001c0 returned -14 [ 337.156602][ T8807] FAULT_INJECTION: forcing a failure. [ 337.156602][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 337.156657][ T8807] CPU: 0 UID: 0 PID: 8807 Comm: syz.1.798 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.156688][ T8807] Tainted: [L]=SOFTLOCKUP [ 337.156697][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.156710][ T8807] Call Trace: [ 337.156718][ T8807] [ 337.156733][ T8807] dump_stack_lvl+0xe8/0x150 [ 337.156772][ T8807] should_fail_ex+0x46b/0x600 [ 337.156811][ T8807] should_failslab+0xa8/0x100 [ 337.156839][ T8807] __kmalloc_cache_noprof+0xa1/0x680 [ 337.156872][ T8807] ? bfq_cpd_alloc+0x73/0x120 [ 337.156903][ T8807] ? bfq_cpd_alloc+0x73/0x120 [ 337.156943][ T8807] bfq_cpd_alloc+0x73/0x120 [ 337.156976][ T8807] blkcg_css_alloc+0x519/0xa90 [ 337.157007][ T8807] cgroup_apply_control_enable+0x5b8/0xd40 [ 337.157062][ T8807] cgroup_mkdir+0xd22/0xf70 [ 337.157108][ T8807] ? __pfx_cgroup_mkdir+0x10/0x10 [ 337.157143][ T8807] kernfs_iop_mkdir+0x213/0x360 [ 337.157180][ T8807] vfs_mkdir+0x408/0x620 [ 337.157221][ T8807] filename_mkdirat+0x289/0x520 [ 337.157261][ T8807] ? __pfx_filename_mkdirat+0x10/0x10 [ 337.157295][ T8807] ? do_getname+0x151/0x250 [ 337.157320][ T8807] __se_sys_mkdirat+0x35/0x150 [ 337.157355][ T8807] do_syscall_64+0x166/0x520 [ 337.157379][ T8807] ? trace_irq_disable+0x3b/0x140 [ 337.157409][ T8807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.157432][ T8807] ? clear_bhb_loop+0x70/0xc0 [ 337.157461][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.157484][ T8807] RIP: 0033:0x7f18a036e159 [ 337.157506][ T8807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.157525][ T8807] RSP: 002b:00007f189e5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 337.157551][ T8807] RAX: ffffffffffffffda RBX: 00007f18a05f5fa0 RCX: 00007f18a036e159 [ 337.157568][ T8807] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 337.157584][ T8807] RBP: 00007f18a040506b R08: 0000000000000000 R09: 0000000000000000 [ 337.157599][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.157613][ T8807] R13: 00007f18a05f6038 R14: 00007f18a05f5fa0 R15: 00007fff5b8552f8 [ 337.157661][ T8807] [ 337.468860][ T1581] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 337.697822][ T1581] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 337.700645][ T1581] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.700683][ T1581] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.700725][ T1581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.046803][ T1581] usbhid 2-1:1.0: can't add hid device: -71 [ 338.046938][ T1581] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 338.131760][ T1581] usb 2-1: USB disconnect, device number 10 [ 338.499236][ T8828] FAULT_INJECTION: forcing a failure. [ 338.499236][ T8828] name failslab, interval 1, probability 0, space 0, times 0 [ 338.499275][ T8828] CPU: 0 UID: 0 PID: 8828 Comm: syz.3.807 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.499298][ T8828] Tainted: [L]=SOFTLOCKUP [ 338.499303][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 338.499311][ T8828] Call Trace: [ 338.499317][ T8828] [ 338.499322][ T8828] dump_stack_lvl+0xe8/0x150 [ 338.499345][ T8828] should_fail_ex+0x46b/0x600 [ 338.499366][ T8828] should_failslab+0xa8/0x100 [ 338.499380][ T8828] __kmalloc_cache_noprof+0xa1/0x680 [ 338.499396][ T8828] ? percpu_ref_get_many+0x19/0x140 [ 338.499413][ T8828] ? alloc_mnt_ns+0xb3/0x2c0 [ 338.499425][ T8828] ? alloc_mnt_ns+0xb3/0x2c0 [ 338.499440][ T8828] alloc_mnt_ns+0xb3/0x2c0 [ 338.499454][ T8828] copy_mnt_ns+0x2d4/0xcc0 [ 338.499469][ T8828] ? rcu_is_watching+0x16/0xb0 [ 338.499495][ T8828] ? __pfx_copy_mnt_ns+0x10/0x10 [ 338.499507][ T8828] ? create_new_namespaces+0x33/0x6b0 [ 338.499523][ T8828] ? create_new_namespaces+0x33/0x6b0 [ 338.499542][ T8828] create_new_namespaces+0xcf/0x6b0 [ 338.499559][ T8828] ? bpf_lsm_capable+0x9/0x20 [ 338.499575][ T8828] ? security_capable+0x7e/0x2c0 [ 338.499599][ T8828] unshare_nsproxy_namespaces+0x149/0x190 [ 338.499616][ T8828] ksys_unshare+0x5a7/0x950 [ 338.499636][ T8828] ? __pfx_ksys_unshare+0x10/0x10 [ 338.499652][ T8828] ? rcu_is_watching+0x16/0xb0 [ 338.499674][ T8828] __x64_sys_unshare+0x38/0x50 [ 338.499690][ T8828] do_syscall_64+0x166/0x520 [ 338.499702][ T8828] ? trace_irq_disable+0x3b/0x140 [ 338.499716][ T8828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.499728][ T8828] ? clear_bhb_loop+0x70/0xc0 [ 338.499742][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.499754][ T8828] RIP: 0033:0x7f561a59e159 [ 338.499767][ T8828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.499778][ T8828] RSP: 002b:00007f56187f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 338.499792][ T8828] RAX: ffffffffffffffda RBX: 00007f561a825fa0 RCX: 00007f561a59e159 [ 338.499802][ T8828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 338.499810][ T8828] RBP: 00007f561a63506b R08: 0000000000000000 R09: 0000000000000000 [ 338.499818][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.499826][ T8828] R13: 00007f561a826038 R14: 00007f561a825fa0 R15: 00007ffc55a04948 [ 338.499845][ T8828] [ 338.546231][ T5601] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 338.556723][ T5601] Bluetooth: hci0: command 0x0c3a tx timeout [ 340.469745][ T8685] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.128048][ T8917] FAULT_INJECTION: forcing a failure. [ 344.128048][ T8917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.128095][ T8917] CPU: 1 UID: 0 PID: 8917 Comm: syz.2.837 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 344.128128][ T8917] Tainted: [L]=SOFTLOCKUP [ 344.128137][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 344.128151][ T8917] Call Trace: [ 344.128160][ T8917] [ 344.128171][ T8917] dump_stack_lvl+0xe8/0x150 [ 344.128212][ T8917] should_fail_ex+0x46b/0x600 [ 344.128252][ T8917] prepare_alloc_pages+0x223/0x650 [ 344.128293][ T8917] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 344.128334][ T8917] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 344.128367][ T8917] ? __alloc_frozen_pages_noprof+0x2b7/0x5c0 [ 344.128405][ T8917] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 344.128444][ T8917] ? __pfx_policy_nodemask+0x10/0x10 [ 344.128474][ T8917] __alloc_pages_noprof+0x10/0x100 [ 344.128510][ T8917] alloc_pages_bulk_noprof+0x683/0x890 [ 344.128545][ T8917] ? alloc_pages_mpol+0x11b/0x280 [ 344.128585][ T8917] ? alloc_pages_noprof+0x161/0x2f0 [ 344.128615][ T8917] __kasan_populate_vmalloc+0xb7/0x1c0 [ 344.128645][ T8917] ? rt_spin_unlock+0x165/0x200 [ 344.128680][ T8917] alloc_vmap_area+0xd1a/0x1420 [ 344.128728][ T8917] ? __pfx_alloc_vmap_area+0x10/0x10 [ 344.128758][ T8917] ? __get_vm_area_node+0x155/0x2f0 [ 344.128792][ T8917] __get_vm_area_node+0x200/0x2f0 [ 344.128830][ T8917] __vmalloc_node_range_noprof+0x343/0x1540 [ 344.128861][ T8917] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 344.128921][ T8917] ? lock_acquire+0x115/0x350 [ 344.128954][ T8917] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.128989][ T8917] ? __fget_files+0x2a/0x420 [ 344.129018][ T8917] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 344.129049][ T8917] __vmalloc_noprof+0xd2/0x120 [ 344.129076][ T8917] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 344.129113][ T8917] bpf_prog_alloc_no_stats+0x47/0x560 [ 344.129145][ T8917] ? bpf_prog_alloc+0x2a/0x1a0 [ 344.129181][ T8917] bpf_prog_alloc+0x3c/0x1a0 [ 344.129216][ T8917] bpf_prog_load+0x7f8/0x1c20 [ 344.129261][ T8917] ? __pfx_bpf_prog_load+0x10/0x10 [ 344.129323][ T8917] __sys_bpf+0xd0d/0xd90 [ 344.129371][ T8917] ? __pfx___sys_bpf+0x10/0x10 [ 344.129409][ T8917] ? do_futex+0x3e7/0x4e0 [ 344.129468][ T8917] ? rcu_is_watching+0x16/0xb0 [ 344.129510][ T8917] __x64_sys_bpf+0xba/0xd0 [ 344.129544][ T8917] do_syscall_64+0x166/0x520 [ 344.129578][ T8917] ? trace_irq_disable+0x3b/0x140 [ 344.129609][ T8917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.129632][ T8917] ? clear_bhb_loop+0x70/0xc0 [ 344.129660][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.129684][ T8917] RIP: 0033:0x7fdc6c83e159 [ 344.129707][ T8917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.129727][ T8917] RSP: 002b:00007fdc6aa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.129752][ T8917] RAX: ffffffffffffffda RBX: 00007fdc6cac5fa0 RCX: 00007fdc6c83e159 [ 344.129769][ T8917] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 344.129784][ T8917] RBP: 00007fdc6c8d506b R08: 0000000000000000 R09: 0000000000000000 [ 344.129799][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.129813][ T8917] R13: 00007fdc6cac6038 R14: 00007fdc6cac5fa0 R15: 00007ffe7697ec38 [ 344.129850][ T8917] [ 344.133980][ T8917] syz.2.837: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 344.134072][ T8917] CPU: 1 UID: 0 PID: 8917 Comm: syz.2.837 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 344.134109][ T8917] Tainted: [L]=SOFTLOCKUP [ 344.134117][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 344.134131][ T8917] Call Trace: [ 344.134141][ T8917] [ 344.134151][ T8917] dump_stack_lvl+0xe8/0x150 [ 344.134189][ T8917] warn_alloc+0x24d/0x270 [ 344.134225][ T8917] ? lockdep_hardirqs_on+0x7b/0x110 [ 344.134252][ T8917] ? __pfx_warn_alloc+0x10/0x10 [ 344.134282][ T8917] ? kfree+0x1c5/0x6d0 [ 344.134320][ T8917] ? __get_vm_area_node+0x219/0x2f0 [ 344.134357][ T8917] __vmalloc_node_range_noprof+0x36b/0x1540 [ 344.134415][ T8917] ? lock_acquire+0x115/0x350 [ 344.134448][ T8917] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.134486][ T8917] ? __fget_files+0x2a/0x420 [ 344.134514][ T8917] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 344.134546][ T8917] __vmalloc_noprof+0xd2/0x120 [ 344.134585][ T8917] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 344.134622][ T8917] bpf_prog_alloc_no_stats+0x47/0x560 [ 344.134655][ T8917] ? bpf_prog_alloc+0x2a/0x1a0 [ 344.134691][ T8917] bpf_prog_alloc+0x3c/0x1a0 [ 344.134728][ T8917] bpf_prog_load+0x7f8/0x1c20 [ 344.134777][ T8917] ? __pfx_bpf_prog_load+0x10/0x10 [ 344.134842][ T8917] __sys_bpf+0xd0d/0xd90 [ 344.134886][ T8917] ? __pfx___sys_bpf+0x10/0x10 [ 344.134922][ T8917] ? do_futex+0x3e7/0x4e0 [ 344.134977][ T8917] ? rcu_is_watching+0x16/0xb0 [ 344.135014][ T8917] __x64_sys_bpf+0xba/0xd0 [ 344.135046][ T8917] do_syscall_64+0x166/0x520 [ 344.135068][ T8917] ? trace_irq_disable+0x3b/0x140 [ 344.135094][ T8917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.135116][ T8917] ? clear_bhb_loop+0x70/0xc0 [ 344.135142][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.135163][ T8917] RIP: 0033:0x7fdc6c83e159 [ 344.135184][ T8917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.135203][ T8917] RSP: 002b:00007fdc6aa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.135228][ T8917] RAX: ffffffffffffffda RBX: 00007fdc6cac5fa0 RCX: 00007fdc6c83e159 [ 344.135245][ T8917] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 344.135261][ T8917] RBP: 00007fdc6c8d506b R08: 0000000000000000 R09: 0000000000000000 [ 344.135275][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.135289][ T8917] R13: 00007fdc6cac6038 R14: 00007fdc6cac5fa0 R15: 00007ffe7697ec38 [ 344.135327][ T8917] [ 344.136342][ T8917] Mem-Info: [ 344.136356][ T8917] active_anon:188 inactive_anon:41635 isolated_anon:0 [ 344.136356][ T8917] active_file:21504 inactive_file:41363 isolated_file:0 [ 344.136356][ T8917] unevictable:0 dirty:127 writeback:0 [ 344.136356][ T8917] slab_reclaimable:12350 slab_unreclaimable:108766 [ 344.136356][ T8917] mapped:32764 shmem:35883 pagetables:1428 [ 344.136356][ T8917] sec_pagetables:0 bounce:0 [ 344.136356][ T8917] kernel_misc_reclaimable:0 [ 344.136356][ T8917] free:1259386 free_pcp:3797 free_cma:0 [ 344.136417][ T8917] Node 0 active_anon:752kB inactive_anon:166540kB active_file:85816kB inactive_file:165452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131056kB dirty:508kB writeback:0kB shmem:143532kB kernel_stack:15232kB pagetables:5552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.136475][ T8917] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.136522][ T8917] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.136587][ T8917] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 344.136626][ T8917] Node 0 DMA32 free:1090912kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:752kB inactive_anon:166540kB active_file:85816kB inactive_file:165452kB unevictable:0kB writepending:508kB zspages:0kB present:3129332kB managed:2559032kB mlocked:0kB bounce:0kB free_pcp:15180kB local_pcp:7976kB free_cma:0kB [ 344.136687][ T8917] lowmem_reserve[]: 0 0 1 1 1 [ 344.136723][ T8917] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 344.136778][ T8917] lowmem_reserve[]: 0 0 0 0 0 [ 344.136813][ T8917] Node 1 Normal free:3931272kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.136867][ T8917] lowmem_reserve[]: 0 0 0 0 0 [ 344.136902][ T8917] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 344.137020][ T8917] Node 0 DMA32: 82*4kB (UME) 31*8kB (UM) 1*16kB (M) 4*32kB (UME) 1*64kB (M) 1*128kB (M) 2*256kB (UE) 2*512kB (UE) 11*1024kB (UM) 12*2048kB (ME) 257*4096kB (UM) = 1090960kB [ 344.137180][ T8917] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 344.137296][ T8917] Node 1 Normal: 2*4kB (M) 4*8kB (UM) 6*16kB (UM) 8*32kB (UM) 4*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931272kB [ 344.137455][ T8917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.137471][ T8917] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 344.137486][ T8917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.137501][ T8917] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 344.137516][ T8917] 98744 total pagecache pages [ 344.137524][ T8917] 0 pages in swap cache [ 344.137531][ T8917] Free swap = 124996kB [ 344.137539][ T8917] Total swap = 124996kB [ 344.137546][ T8917] 2097051 pages RAM [ 344.137553][ T8917] 0 pages HighMem/MovableOnly [ 344.137568][ T8917] 425225 pages reserved [ 344.137575][ T8917] 0 pages cma reserved [ 344.965064][ T8924] FAULT_INJECTION: forcing a failure. [ 344.965064][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 344.965105][ T8924] CPU: 1 UID: 0 PID: 8924 Comm: syz.2.839 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 344.965133][ T8924] Tainted: [L]=SOFTLOCKUP [ 344.965141][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 344.965153][ T8924] Call Trace: [ 344.965162][ T8924] [ 344.965171][ T8924] dump_stack_lvl+0xe8/0x150 [ 344.965207][ T8924] should_fail_ex+0x46b/0x600 [ 344.965241][ T8924] should_failslab+0xa8/0x100 [ 344.965265][ T8924] __kmalloc_cache_noprof+0xa1/0x680 [ 344.965293][ T8924] ? ctrl_dumppolicy_start+0x586/0xbc0 [ 344.965322][ T8924] ? ctrl_dumppolicy_start+0x586/0xbc0 [ 344.965351][ T8924] ? radix_tree_lookup+0x243/0x290 [ 344.965384][ T8924] ctrl_dumppolicy_start+0x586/0xbc0 [ 344.965422][ T8924] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 344.965476][ T8924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 344.965501][ T8924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.965524][ T8924] ? genl_start+0x479/0x6d0 [ 344.965547][ T8924] genl_start+0x4c1/0x6d0 [ 344.965575][ T8924] __netlink_dump_start+0x442/0x7b0 [ 344.965608][ T8924] genl_family_rcv_msg_dumpit+0x213/0x310 [ 344.965633][ T8924] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 344.965652][ T8924] ? genl_get_cmd+0x4d6/0x960 [ 344.965687][ T8924] ? __pfx_genl_start+0x10/0x10 [ 344.965704][ T8924] ? __pfx_genl_dumpit+0x10/0x10 [ 344.965721][ T8924] ? __pfx_genl_done+0x10/0x10 [ 344.965746][ T8924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.965775][ T8924] genl_rcv_msg+0x5e1/0x7a0 [ 344.965802][ T8924] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.965819][ T8924] ? ref_tracker_free+0x668/0x820 [ 344.965844][ T8924] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 344.965871][ T8924] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 344.965897][ T8924] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 344.965934][ T8924] ? __pfx_ref_tracker_free+0x10/0x10 [ 344.965962][ T8924] ? __asan_memcpy+0x40/0x70 [ 344.965985][ T8924] ? __skb_clone+0x5c/0x6c0 [ 344.966015][ T8924] netlink_rcv_skb+0x226/0x4a0 [ 344.966041][ T8924] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.966063][ T8924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.966102][ T8924] ? netlink_deliver_tap+0x2e/0x1b0 [ 344.966127][ T8924] ? netlink_deliver_tap+0x2e/0x1b0 [ 344.966156][ T8924] genl_rcv+0x28/0x40 [ 344.966187][ T8924] netlink_unicast+0x7f5/0x990 [ 344.966224][ T8924] netlink_sendmsg+0x813/0xb40 [ 344.966250][ T8924] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 344.966285][ T8924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.966312][ T8924] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 344.966352][ T8924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.966376][ T8924] sock_sendmsg_nosec+0x13a/0x180 [ 344.966407][ T8924] ____sys_sendmsg+0x565/0x870 [ 344.966439][ T8924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.966473][ T8924] ? import_iovec+0x73/0xa0 [ 344.966505][ T8924] ___sys_sendmsg+0x2a5/0x360 [ 344.966527][ T8924] ? __lock_acquire+0x747/0x2de0 [ 344.966558][ T8924] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.966585][ T8924] ? __schedule+0x16ef/0x5700 [ 344.966646][ T8924] ? __fget_files+0x2a/0x420 [ 344.966667][ T8924] ? __fget_files+0x3a8/0x420 [ 344.966700][ T8924] __x64_sys_sendmsg+0x1b7/0x290 [ 344.966726][ T8924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.966772][ T8924] do_syscall_64+0x166/0x520 [ 344.966794][ T8924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.966814][ T8924] ? clear_bhb_loop+0x70/0xc0 [ 344.966839][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.966858][ T8924] RIP: 0033:0x7fdc6c83e159 [ 344.966879][ T8924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.966896][ T8924] RSP: 002b:00007fdc6aa96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.966919][ T8924] RAX: ffffffffffffffda RBX: 00007fdc6cac5fa0 RCX: 00007fdc6c83e159 [ 344.966942][ T8924] RDX: 0000000000000800 RSI: 00002000000029c0 RDI: 0000000000000005 [ 344.966955][ T8924] RBP: 00007fdc6c8d506b R08: 0000000000000000 R09: 0000000000000000 [ 344.966968][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.966980][ T8924] R13: 00007fdc6cac6038 R14: 00007fdc6cac5fa0 R15: 00007ffe7697ec38 [ 344.967014][ T8924] [ 346.922538][ T8957] fuse: Bad value for 'fd' [ 346.927363][ T8956] FAULT_INJECTION: forcing a failure. [ 346.927363][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 346.927410][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.1.852 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.927438][ T8956] Tainted: [L]=SOFTLOCKUP [ 346.927445][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 346.927457][ T8956] Call Trace: [ 346.927465][ T8956] [ 346.927475][ T8956] dump_stack_lvl+0xe8/0x150 [ 346.927509][ T8956] should_fail_ex+0x46b/0x600 [ 346.927542][ T8956] should_failslab+0xa8/0x100 [ 346.927563][ T8956] ? prepare_creds+0x30/0x820 [ 346.927585][ T8956] kmem_cache_alloc_noprof+0x9e/0x690 [ 346.927612][ T8956] ? prepare_creds+0x30/0x820 [ 346.927640][ T8956] prepare_creds+0x30/0x820 [ 346.927667][ T8956] lookup_user_key+0x1f2/0x1150 [ 346.927702][ T8956] ? __pfx_lookup_user_key+0x10/0x10 [ 346.927739][ T8956] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 346.927774][ T8956] ? _copy_from_user+0x94/0xb0 [ 346.927802][ T8956] ? memdup_user+0x99/0xd0 [ 346.927827][ T8956] __se_sys_add_key+0x315/0x420 [ 346.927854][ T8956] ? __pfx___se_sys_add_key+0x10/0x10 [ 346.927888][ T8956] ? __x64_sys_add_key+0x20/0xc0 [ 346.927914][ T8956] do_syscall_64+0x166/0x520 [ 346.927935][ T8956] ? trace_irq_disable+0x3b/0x140 [ 346.927959][ T8956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.927979][ T8956] ? clear_bhb_loop+0x70/0xc0 [ 346.928003][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.928025][ T8956] RIP: 0033:0x7f18a036e159 [ 346.928045][ T8956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.928061][ T8956] RSP: 002b:00007f189e5c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 346.928084][ T8956] RAX: ffffffffffffffda RBX: 00007f18a05f5fa0 RCX: 00007f18a036e159 [ 346.928099][ T8956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000680 [ 346.928113][ T8956] RBP: 00007f18a040506b R08: ffffffffffffffff R09: 0000000000000000 [ 346.928127][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.928139][ T8956] R13: 00007f18a05f6038 R14: 00007f18a05f5fa0 R15: 00007fff5b8552f8 [ 346.928174][ T8956] [ 347.313365][ T36] audit: type=1326 audit(1790533325.981:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8962 comm="syz.3.853" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f561a59e159 code=0x0 [ 347.446118][ T8970] netlink: 48 bytes leftover after parsing attributes in process `syz.6.856'. [ 347.449659][ T8970] netlink: 48 bytes leftover after parsing attributes in process `syz.6.856'. [ 348.782228][ T8986] fuse: Bad value for 'fd' [ 348.921258][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 350.954652][ T9006] Bluetooth: MGMT ver 1.23 [ 350.954697][ T9006] Bluetooth: hci1: too big key_count value 11787 [ 351.204859][ T9011] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 352.311848][ T9017] FAULT_INJECTION: forcing a failure. [ 352.311848][ T9017] name failslab, interval 1, probability 0, space 0, times 0 [ 352.311894][ T9017] CPU: 0 UID: 0 PID: 9017 Comm: syz.3.873 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 352.311927][ T9017] Tainted: [L]=SOFTLOCKUP [ 352.311936][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 352.311950][ T9017] Call Trace: [ 352.311959][ T9017] [ 352.311970][ T9017] dump_stack_lvl+0xe8/0x150 [ 352.312033][ T9017] should_fail_ex+0x46b/0x600 [ 352.312073][ T9017] should_failslab+0xa8/0x100 [ 352.312098][ T9017] __kmalloc_noprof+0xfb/0x790 [ 352.312129][ T9017] ? aesni_skcipher_setkey+0x8a/0xb0 [ 352.312151][ T9017] ? init_skcipher_req+0x83/0x1c0 [ 352.312178][ T9017] ? init_skcipher_req+0x83/0x1c0 [ 352.312214][ T9017] init_skcipher_req+0x83/0x1c0 [ 352.312245][ T9017] encrypted_read+0x34f/0xe80 [ 352.312292][ T9017] ? __pfx_encrypted_read+0x10/0x10 [ 352.312333][ T9017] ? lock_acquire+0x115/0x350 [ 352.312384][ T9017] ? down_read+0x156/0x200 [ 352.312414][ T9017] ? keyctl_read_key+0x1ff/0x490 [ 352.312452][ T9017] keyctl_read_key+0x2a2/0x490 [ 352.312487][ T9017] __se_sys_keyctl+0x38f/0x9d0 [ 352.312522][ T9017] ? __pfx___se_sys_keyctl+0x10/0x10 [ 352.312559][ T9017] ? __pfx_do_futex+0x10/0x10 [ 352.312583][ T9017] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 352.312623][ T9017] ? __se_sys_futex+0x3a8/0x450 [ 352.312658][ T9017] ? rcu_is_watching+0x16/0xb0 [ 352.312703][ T9017] ? __x64_sys_keyctl+0x20/0xc0 [ 352.312734][ T9017] do_syscall_64+0x166/0x520 [ 352.312757][ T9017] ? trace_irq_disable+0x3b/0x140 [ 352.312782][ T9017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.312805][ T9017] ? clear_bhb_loop+0x70/0xc0 [ 352.312833][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.312855][ T9017] RIP: 0033:0x7f561a59e159 [ 352.312877][ T9017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.312896][ T9017] RSP: 002b:00007f56187f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 352.312922][ T9017] RAX: ffffffffffffffda RBX: 00007f561a825fa0 RCX: 00007f561a59e159 [ 352.312939][ T9017] RDX: 0000200000000240 RSI: 000000000fadb522 RDI: 000000000000000b [ 352.312954][ T9017] RBP: 00007f561a63506b R08: 0000000000000000 R09: 0000000000000000 [ 352.312969][ T9017] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 352.312984][ T9017] R13: 00007f561a826038 R14: 00007f561a825fa0 R15: 00007ffc55a04948 [ 352.313022][ T9017] [ 352.445182][ T9017] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 352.488717][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 352.488743][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 352.877495][ T9030] FAULT_INJECTION: forcing a failure. [ 352.877495][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 352.877536][ T9030] CPU: 0 UID: 0 PID: 9030 Comm: syz.2.878 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 352.877568][ T9030] Tainted: [L]=SOFTLOCKUP [ 352.877576][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 352.877588][ T9030] Call Trace: [ 352.877597][ T9030] [ 352.877608][ T9030] dump_stack_lvl+0xe8/0x150 [ 352.877644][ T9030] should_fail_ex+0x46b/0x600 [ 352.877681][ T9030] should_failslab+0xa8/0x100 [ 352.877705][ T9030] __kmalloc_noprof+0xfb/0x790 [ 352.877741][ T9030] ? nsim_fib_event_nb+0x283/0x1200 [ 352.877769][ T9030] ? nsim_fib_event_nb+0x283/0x1200 [ 352.877806][ T9030] nsim_fib_event_nb+0x283/0x1200 [ 352.877846][ T9030] notifier_call_chain+0x1a5/0x3d0 [ 352.877872][ T9030] ? atomic_notifier_call_chain+0x26/0x180 [ 352.877896][ T9030] atomic_notifier_call_chain+0xda/0x180 [ 352.877919][ T9030] call_fib_notifiers+0x31/0x60 [ 352.877945][ T9030] fib6_add_rt2node+0x15f3/0x3940 [ 352.877983][ T9030] ? rcu_is_watching+0x16/0xb0 [ 352.878017][ T9030] ? trace_kmem_cache_alloc+0x29/0xe0 [ 352.878049][ T9030] ? kmem_cache_alloc_noprof+0x3c6/0x690 [ 352.878078][ T9030] ? fib6_add_1+0x9fe/0x13e0 [ 352.878103][ T9030] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 352.878132][ T9030] ? fib6_add_1+0xfb2/0x13e0 [ 352.878172][ T9030] fib6_add+0x9ae/0x1a20 [ 352.878210][ T9030] ? __pfx_fib6_add+0x10/0x10 [ 352.878236][ T9030] ? __local_bh_disable_ip+0x3d/0x420 [ 352.878267][ T9030] ? ip6_ins_rt+0xbf/0x160 [ 352.878288][ T9030] ? ip6_ins_rt+0xbf/0x160 [ 352.878308][ T9030] ip6_ins_rt+0xed/0x160 [ 352.878338][ T9030] ? __pfx_ip6_ins_rt+0x10/0x10 [ 352.878362][ T9030] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 352.878393][ T9030] ? __ipv6_dev_ac_inc+0x36/0xbf0 [ 352.878417][ T9030] __ipv6_dev_ac_inc+0x932/0xbf0 [ 352.878436][ T9030] ? __ipv6_dev_ac_inc+0x36/0xbf0 [ 352.878468][ T9030] ipv6_sock_ac_join+0x665/0x820 [ 352.878500][ T9030] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 352.878525][ T9030] ? _copy_from_user+0x94/0xb0 [ 352.878562][ T9030] do_ipv6_setsockopt+0x20d1/0x3180 [ 352.878602][ T9030] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 352.878633][ T9030] ? futex_wait+0x2a2/0x390 [ 352.878666][ T9030] ? __lock_acquire+0x747/0x2de0 [ 352.878714][ T9030] ? do_futex+0x3e7/0x4e0 [ 352.878734][ T9030] ? __asan_memcpy+0x40/0x70 [ 352.878766][ T9030] ? lock_acquire+0x115/0x350 [ 352.878805][ T9030] ? __fget_files+0x2a/0x420 [ 352.878834][ T9030] ipv6_setsockopt+0x59/0x170 [ 352.878859][ T9030] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 352.878893][ T9030] do_sock_setsockopt+0x17c/0x1b0 [ 352.878921][ T9030] __x64_sys_setsockopt+0x143/0x1b0 [ 352.878951][ T9030] do_syscall_64+0x166/0x520 [ 352.878972][ T9030] ? trace_irq_disable+0x3b/0x140 [ 352.878999][ T9030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.879020][ T9030] ? clear_bhb_loop+0x70/0xc0 [ 352.879047][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.879068][ T9030] RIP: 0033:0x7fdc6c83e159 [ 352.879088][ T9030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.879106][ T9030] RSP: 002b:00007fdc6aa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 352.879130][ T9030] RAX: ffffffffffffffda RBX: 00007fdc6cac5fa0 RCX: 00007fdc6c83e159 [ 352.879146][ T9030] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 352.879159][ T9030] RBP: 00007fdc6c8d506b R08: 0000000000000014 R09: 0000000000000000 [ 352.879174][ T9030] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 352.879188][ T9030] R13: 00007fdc6cac6038 R14: 00007fdc6cac5fa0 R15: 00007ffe7697ec38 [ 352.879226][ T9030] [ 353.548509][ T5601] Bluetooth: hci0: unexpected event for opcode 0x041b [ 355.626345][ T20] ------------[ cut here ]------------ [ 355.626365][ T20] atomic_read(&sk->sk_rmem_alloc) [ 355.626374][ T20] WARNING: net/ipv4/af_inet.c:159 at inet_sock_destruct+0x601/0x740, CPU#0: rcuc/0/20 [ 355.649548][ T20] Modules linked in: [ 355.653471][ T20] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.664407][ T20] Tainted: [L]=SOFTLOCKUP [ 355.668803][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.678977][ T20] RIP: 0010:inet_sock_destruct+0x601/0x740 [ 355.684838][ T20] Code: 00 41 0f b6 74 24 12 48 c7 c7 a0 18 7e 8c 4c 89 e2 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 f7 52 f7 e8 e0 55 f2 f7 90 <0f> 0b 90 e9 58 fe ff ff e8 d2 55 f2 f7 90 0f 0b 90 e9 8b fe ff ff [ 355.704536][ T20] RSP: 0018:ffffc90000197b00 EFLAGS: 00010293 [ 355.710689][ T20] RAX: ffffffff89d46e20 RBX: dffffc0000000000 RCX: ffff88801ceb0000 [ 355.718842][ T20] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.726893][ T20] RBP: 00000000000001dc R08: 0000000000000000 R09: 0000000000000000 [ 355.734951][ T20] R10: dffffc0000000000 R11: ffffed10065c58d9 R12: ffff888032e2c500 [ 355.742973][ T20] R13: ffff888036235538 R14: ffff888032e2c6c0 R15: 1ffff110065c58a2 [ 355.751193][ T20] FS: 0000000000000000(0000) GS:ffff888125bc4000(0000) knlGS:0000000000000000 [ 355.760245][ T20] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.766906][ T20] CR2: 00007f68bad52678 CR3: 0000000040be2000 CR4: 00000000003526f0 [ 355.774977][ T20] Call Trace: [ 355.778299][ T20] [ 355.781355][ T20] ? inet6_cleanup_sock+0x18b/0x220 [ 355.786667][ T20] ? __pfx_sctp_v6_destruct_sock+0x10/0x10 [ 355.792527][ T20] __sk_destruct+0x89/0x9e0 [ 355.797117][ T20] sctp_endpoint_destroy_rcu+0xa1/0xf0 [ 355.802621][ T20] ? __pfx_sctp_endpoint_destroy_rcu+0x10/0x10 [ 355.808836][ T20] ? rcu_cpu_kthread+0x217/0x1740 [ 355.813873][ T20] rcu_cpu_kthread+0xb2c/0x1740 [ 355.818759][ T20] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 355.824070][ T20] ? smpboot_thread_fn+0x4e/0xa70 [ 355.829157][ T20] smpboot_thread_fn+0x565/0xa70 [ 355.834164][ T20] ? smpboot_thread_fn+0x4e/0xa70 [ 355.839294][ T20] kthread+0x38b/0x470 [ 355.843403][ T20] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 355.848923][ T20] ? __pfx_kthread+0x10/0x10 [ 355.853550][ T20] ret_from_fork+0x514/0xb70 [ 355.858228][ T20] ? __pfx_ret_from_fork+0x10/0x10 [ 355.863350][ T20] ? __switch_to+0xc89/0x1420 [ 355.868086][ T20] ? __pfx_kthread+0x10/0x10 [ 355.872789][ T20] ret_from_fork_asm+0x1a/0x30 [ 355.877658][ T20] [ 355.880735][ T20] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.888070][ T20] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 355.899022][ T20] Tainted: [L]=SOFTLOCKUP [ 355.903377][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.913468][ T20] Call Trace: [ 355.916804][ T20] [ 355.919766][ T20] vpanic+0x56d/0xa60 [ 355.923772][ T20] ? __pfx__printk+0x10/0x10 [ 355.928385][ T20] ? __pfx_vpanic+0x10/0x10 [ 355.932919][ T20] ? is_bpf_text_address+0x292/0x2b0 [ 355.938228][ T20] ? is_bpf_text_address+0x26/0x2b0 [ 355.943454][ T20] panic+0xc5/0xd0 [ 355.947189][ T20] ? __pfx_panic+0x10/0x10 [ 355.951624][ T20] ? ret_from_fork_asm+0x1a/0x30 [ 355.956582][ T20] __warn+0x315/0x4c0 [ 355.960570][ T20] ? inet_sock_destruct+0x601/0x740 [ 355.965807][ T20] ? inet_sock_destruct+0x601/0x740 [ 355.971016][ T20] __report_bug+0x276/0x570 [ 355.975532][ T20] ? stack_depot_save_flags+0x33/0x7f0 [ 355.981010][ T20] ? inet_sock_destruct+0x601/0x740 [ 355.986233][ T20] ? __pfx___report_bug+0x10/0x10 [ 355.991293][ T20] ? kasan_save_free_info+0x40/0x50 [ 355.996599][ T20] ? __kasan_slab_free+0x5c/0x80 [ 356.001574][ T20] ? kmem_cache_free+0x187/0x6d0 [ 356.006560][ T20] ? __lock_acquire+0x747/0x2de0 [ 356.011560][ T20] ? inet_sock_destruct+0x601/0x740 [ 356.016787][ T20] report_bug+0x16b/0x220 [ 356.021160][ T20] ? inet_sock_destruct+0x601/0x740 [ 356.026406][ T20] ? inet_sock_destruct+0x603/0x740 [ 356.031649][ T20] handle_bug+0x9c/0x200 [ 356.035918][ T20] exc_invalid_op+0x1a/0x50 [ 356.040614][ T20] asm_exc_invalid_op+0x1a/0x20 [ 356.045501][ T20] RIP: 0010:inet_sock_destruct+0x601/0x740 [ 356.051329][ T20] Code: 00 41 0f b6 74 24 12 48 c7 c7 a0 18 7e 8c 4c 89 e2 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 85 f7 52 f7 e8 e0 55 f2 f7 90 <0f> 0b 90 e9 58 fe ff ff e8 d2 55 f2 f7 90 0f 0b 90 e9 8b fe ff ff [ 356.070947][ T20] RSP: 0018:ffffc90000197b00 EFLAGS: 00010293 [ 356.077033][ T20] RAX: ffffffff89d46e20 RBX: dffffc0000000000 RCX: ffff88801ceb0000 [ 356.085027][ T20] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 356.093023][ T20] RBP: 00000000000001dc R08: 0000000000000000 R09: 0000000000000000 [ 356.101005][ T20] R10: dffffc0000000000 R11: ffffed10065c58d9 R12: ffff888032e2c500 [ 356.108989][ T20] R13: ffff888036235538 R14: ffff888032e2c6c0 R15: 1ffff110065c58a2 [ 356.116981][ T20] ? inet_sock_destruct+0x600/0x740 [ 356.122209][ T20] ? inet6_cleanup_sock+0x18b/0x220 [ 356.127443][ T20] ? __pfx_sctp_v6_destruct_sock+0x10/0x10 [ 356.133298][ T20] __sk_destruct+0x89/0x9e0 [ 356.137821][ T20] sctp_endpoint_destroy_rcu+0xa1/0xf0 [ 356.143312][ T20] ? __pfx_sctp_endpoint_destroy_rcu+0x10/0x10 [ 356.149511][ T20] ? rcu_cpu_kthread+0x217/0x1740 [ 356.154575][ T20] rcu_cpu_kthread+0xb2c/0x1740 [ 356.159466][ T20] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 356.164781][ T20] ? smpboot_thread_fn+0x4e/0xa70 [ 356.169842][ T20] smpboot_thread_fn+0x565/0xa70 [ 356.174814][ T20] ? smpboot_thread_fn+0x4e/0xa70 [ 356.179858][ T20] kthread+0x38b/0x470 [ 356.183936][ T20] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 356.189407][ T20] ? __pfx_kthread+0x10/0x10 [ 356.194010][ T20] ret_from_fork+0x514/0xb70 [ 356.198616][ T20] ? __pfx_ret_from_fork+0x10/0x10 [ 356.203736][ T20] ? __switch_to+0xc89/0x1420 [ 356.208436][ T20] ? __pfx_kthread+0x10/0x10 [ 356.213139][ T20] ret_from_fork_asm+0x1a/0x30 [ 356.217964][ T20] [ 356.221308][ T20] Kernel Offset: disabled [ 356.225634][ T20] Rebooting in 86400 seconds..