last executing test programs: 2m31.80142719s ago: executing program 1 (id=114): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x400, 0xfffffffd, 0x32c, 0x0, r7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1006, 0x200033d, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x26a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x885e, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x5, 0x244, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2m29.36953297s ago: executing program 1 (id=125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x1, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x10) shutdown(r1, 0x2) 2m29.23766668s ago: executing program 1 (id=127): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @remote, 0xf66e}}, 0x24) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m29.104727006s ago: executing program 1 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x1c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x217, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2m28.920458483s ago: executing program 1 (id=130): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000010, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002280)="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", 0x2000, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004380)='./file0\x00', 0x26d01, 0x0) write$binfmt_aout(r2, &(0x7f0000004440)={{0x108, 0x1, 0x7f, 0x60, 0x2a9, 0x3, 0x2c8, 0x8}}, 0x20) dup3(r2, r0, 0x80000) 2m28.307458982s ago: executing program 1 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 2m27.824494712s ago: executing program 32 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 1m53.997365569s ago: executing program 0 (id=287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000740), 0x1003, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x5, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1m53.591147551s ago: executing program 0 (id=293): socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x40}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x5, 0x58, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r0}, 0x94) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616ef314000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m53.354472214s ago: executing program 0 (id=296): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x0, 0x3ff}, 0x1c) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000400)={0x0, 0x30b5, 0x400, 0x2, 0x154}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f41, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40000, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1m52.405698223s ago: executing program 0 (id=303): mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2048c4, &(0x7f0000000480)={[{@fat=@debug}, {@uni_xlate}, {@fat=@nfs}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0xe5}}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@rodir}, {@shortname_win95}, {@shortname_mixed}, {@numtail}, {@numtail}]}, 0x0, 0x2c7, &(0x7f0000000540)="$eJzs3E1rE10UwPHTpG3SljZZlAeeBx486EY3Qxs/QZAWxIBSG1EXwtRONGTMhJkYiYjtzq1fwk1x6UpB/QLduHMvbooguOlCHMnLtGM6raFv0zb/H5S5vWfOzB3uTDlzobNx++WjSskzSmZdEmmVhMiqbIpkW62uoe420W6PStiqXJr48fn/m3fuXssXCnMLqvP5xcs5VZ069/7Js9fnP9Ynbr2ZepeS9ey9je+5L+v/rP+78WsxOLojYuqS49TNJdvS5bJXMVRv2JbpWVquepZbV1PdIF6ynVqtqWZ1eXK85lqep2a1qRWrqXVH625TzQdmuaqGYejkuAya5J5R/9XOvuLawoKZP7oR4ZiNRXW6bt5MRgaLa8cxKAAAcLLEVf8/LHta9rTqtOr7Per/hITjf6n/RQa6/t+v2u6hyHoSp0ur/m89DYl0b4T6HwAAAAAAAAAAAAAAAAAAAACA02DT9zO+72eCbfCTEpG0iAS/75KeOObh4pAdcP5xyoX+cS8tYr9oFBvFzrYTz5ekLLZYMjMi8rN9P7SkfL/Tnr9amJvRtqx8sFe6+SuNYlJSQX4gu5Xvh/NnO/kazl+RERkPnz8nGZmOzs9F5DeKo3Lxgp/qntkSQzLy6b44Ysty+77ezn8+q3rleqEnf6y9HwAAAAAAZ4GhW3a8v7fjhgZrfD3xTuf2+oBkQusDfsT6QM/79bD8NxzfdQMAAAAAMEi8UamYtm25XvPpWW8EH7M9lAOKxH056X53HhaRbs/bkzIX/TQSItIbGtnRE91IHmyWv4n8+VxMxz7d+274ya179evjzhPQT3qcf5UAAAAAHIWg6B+KeyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAywfr8iFuy/n4+QBbmp2K4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBl+BwAA//+KNRQm") r0 = syz_open_procfs(0x0, &(0x7f0000000840)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) 1m52.160727704s ago: executing program 0 (id=305): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x2c, {"48c7c10b00010048c7c23000000049c7c0010000000f01c10f01d9"}}], 0x2c}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.834540287s ago: executing program 0 (id=308): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000317c8c53adb1b8cb300000000000001"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m51.084305585s ago: executing program 33 (id=308): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000317c8c53adb1b8cb300000000000001"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m48.349357905s ago: executing program 2 (id=321): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000005040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000050c0)=0x0, &(0x7f0000005100)=0x0, &(0x7f0000005140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000005380)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000005400)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000005440)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000005480)={0x0, 0x1, 0x2, 0x3, 0x10d}, &(0x7f0000005500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x1088, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb26, 0x200, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x40, 0x102, 0x36b}}], 0x1, &(0x7f0000005780)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f00000058c0)=@assoc_value={0x0}, &(0x7f0000005900)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000005940)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 1m46.209280522s ago: executing program 2 (id=326): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004054) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x3}}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1m45.39872634s ago: executing program 2 (id=329): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$PPPIOCSFLAGS(r4, 0x40047459, 0x0) 1m45.098526997s ago: executing program 2 (id=331): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200000, &(0x7f00000006c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000780)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000d00)='./file0/file0\x00', &(0x7f0000000d40), &(0x7f0000000d80)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000e00), &(0x7f0000000e40)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000e80)='./file0/file0\x00', 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x200441d4, &(0x7f0000001480)={0x11, 0x5, 0x0, 0x1, 0x2, 0x6, @random="5e2a184c8387"}, 0x14) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000ec0)='./file0/file0\x00', &(0x7f0000000f00), &(0x7f0000000f40)=ANY=[], 0x835, 0x2) 1m44.799270787s ago: executing program 2 (id=333): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x4692, &(0x7f0000000080)={0x0, 0x5cf0, 0x0, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 1m43.540086531s ago: executing program 2 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m42.826781528s ago: executing program 34 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m12.604486944s ago: executing program 7 (id=477): r0 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x80000000, 0x0) 1m9.185483275s ago: executing program 7 (id=490): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) 1m8.407440096s ago: executing program 7 (id=495): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), 0x0, 0x0) 1m6.397275732s ago: executing program 7 (id=498): mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x8000, &(0x7f0000000640)={0xb, 0x0, 0x100000}, 0x20) 1m5.519827497s ago: executing program 7 (id=499): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000500)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10000, 0x0) 1m2.200158744s ago: executing program 7 (id=503): recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000680)=""/80, 0x50}, 0x5}], 0x1, 0x40010000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.970573265s ago: executing program 6 (id=517): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000080)=""/145, 0x91) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 57.969020995s ago: executing program 3 (id=518): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40280, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) shutdown(r1, 0x1) bind$inet(r1, &(0x7f0000000400)={0x2, 0x801, @loopback}, 0x10) listen(r1, 0x101) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000480)=':27.0.0.1:/export\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049']) 57.968624072s ago: executing program 4 (id=519): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c696f636861727365743d69736f383835392d372c73686f72746e616d653a943ce139352c73686f72746e616d653d77696e39d692646d61736b3d30303030303030303030303031373737373737373737372c756e695f786c6174653d302c757466383d312c757466383d312c73686f72746e616d653d6c6f7765722c636f6465706167653d3836322c696f636861727365743d7aec27c7d190d14ca6b2f5f2362263703933322c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d63703933362c73686f72746e616d653d77696e39352c0500000000000000"], 0x2, 0x289, &(0x7f0000000b40)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00000108000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000080)={0x40, 0x8, 0xd, "00407ec772e55e4ff0388a1d29"}, 0x0, 0x0}) 57.388123327s ago: executing program 5 (id=521): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, 0x7, 0x401, "5debca56de5667430241dbfaf876b2ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 56.747405542s ago: executing program 6 (id=522): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) 56.242284793s ago: executing program 3 (id=523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xd, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 56.19299926s ago: executing program 5 (id=524): sched_setattr(0x0, 0x0, 0x0) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys_mount\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) mount(0x0, &(0x7f000001c380)='./sys_mount\x00', &(0x7f000001c3c0)='sysfs\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f000001c400), 0x400000000a882, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000001c440)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f000001c480)='bfq', 0x3) 55.630950642s ago: executing program 4 (id=525): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x5, 0x5, 0x7f, 0x4, 0x3, 0xf}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORR={0x10, 0x1, {0xba, 0xaadc}}]}}}]}, 0x64}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001ec0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 55.410531285s ago: executing program 3 (id=526): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x4e) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x4}, 0x1c) listen(r1, 0x50) listen(r1, 0x0) 55.051142953s ago: executing program 5 (id=527): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x400000000000284, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000880)='./file0\x00', 0x804818, &(0x7f0000001400)=ANY=[@ANYRES64=r3, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRES16, @ANYBLOB="329aa82b2a7e346e", @ANYRESHEX, @ANYRESDEC=r2, @ANYRESOCT, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x0, 0x56d, &(0x7f00000009c0)="$eJzs3V1v094dwPGfSzuiTOqmMSFUFTiUTSpSCU4CQRFXnnOSHkjsyHZQe4UqmqKKFCbKpLU30Bu2SduLYJd7EXtH6P8S+MsP6WMegD5SfT9VOY59fM7PbuQfp42PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOXWbLtoSdN4nSU1nFsL/Nbey2zvIyvk3oFiRL8iVvwtuZzcSFfd+OPe5uuWyMfdV7OSi4ucbP/2+u+fXJuc6O8/IuDv8t8fbGlza/v1Sq/XfXdSgVxAN68O39bQngl903IaWpnQV9VKxX6wWA9V3TR1uBxGuqXcQDuRH6h5954qVqtlpQvLfsdr1Jym7q98fL9k2xX1tNDWThD63oOnhdBdNM2m8RpJnXhzXOdx/EZ8ZiIVaael1Np6r1sedwBxpeK3VCqNq1SyS6VisVQqVh5VHz227ckjK+xD5EiNk3vT4ud0Ytdu4LgmsvwvTTHiSUeWRA38cqUmgfjSGrI908//f36gR/a7P//Ppqtmb+xtnon/mZNb6atbw/L/kFhO+GuyH9XRbZuyJdvyWlakJz3pyruziejCfDVEiydGQvHFSEucZI3K1iipSkUqYssLWZT6VHwO62KkKVpCWZZQItHJO8qVQLQ4EokvgSiZF1fuiZKiVKUqZVGipSDL4ktHPGlITZyklTVZT857WZQ1LMbdSsWhh5Hv/4S7UhpxtOR/HN8JXbmB4/vaz/8AAAAAAODSspLfvk8l3zeT13XT1PZ5hwUAAAAAAE5Q8pf/2bhIPp11UyzG/wAAAAAAXDZWco+dJSJ5uZ0urYmV3C7FLwEAAAAAALgkkr//34qLZA6U22LtTpfC+B8AAAAAgEvin7uz7w6bYzdsX7X+/4sEwZS10176k7WRzM3rbFxJ97tyuMWoPmNNZ40kRSUtJiddPWvl0kq7k2B+yYq1cXFYewE4uwF8/J4Ark3Kv+VOWufOalquZlt+l/aSr5umLrh+80lRHGd6ItJL0d/erP9dksP/l9eatnKy3usWXr7trSax7MSt7GxkEygemUdxRCzvk/kWknsuBh7xVHIjRtZv3pK19V7Xbi9dzVp2NibShYmDPX6YHtHnJ5lLa81lM97m+1vSPnNxn8XCsKPPoige88g/yd20zt35u2kxIIrSuChK+6MYfC6OH0V5XBTlY0YBAOdlbUwWsuRI3v2Bq9yh7B5f9r4hu8t3ZvdPMp/WmZ9JLqyTMwOu6Pa4K7p9zOz2vyPPQBqWY+N+/3Moq36Od/g8tN+wWbLiU3jl/cZf5frm1vb99Y2VV91X3TelUrliP7TtRyWZSg4jK8g9AIAB9j9jxxqY/0c9hefr1zh3P8xG1TuHR9VZxvvD7kcKCvJS3kpPVmUhudsg+cTBwP935Pd9DGFhzKg1n6TJ9AkvCyNGdb9J7nLot1saWfdgDOWz+FEAAHBm5sbk4dH5Px27L4wZdx/M5aNHx/l9T2sDAACnQwdfrHz0DysITPtFsVotOtGiVkFOnqnA1BpaGS/SgbvoeA2t2oEf+a7fjBeem5oOVdhpt/0gUnU/UG0/NEvJ9IEqe/R7qFuOFxk3bDe1E2rl+l7kuJGqmdBV7c5fmiZc1EGyc9jWrqkb14mM76nQ7wSuLigVar2voqlpLzJ1Ey96qh2YlhPk1HO/2WlpVdOhG5h25KcN9vsyXt0PWkmzhfM+2QAAXBCbW9uvV3q97rtTXBjYce7MDxUAAGTGZGkAAAAAAAAAAAAAAAAAAAAAAHABnMX9fyxc8oX+VNA/3k5OTi9CS877/PyUC2MvHR9O/eIE4FT9GgAA//9t+k3W") ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 54.879822599s ago: executing program 4 (id=528): r0 = timerfd_create(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x1, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x1}) 54.860541502s ago: executing program 3 (id=529): socket$inet6_udp(0xa, 0x2, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fanotify_init(0xf00, 0x1) removexattr(0x0, 0x0) setpgid(0x0, 0x0) setpgid(0x0, 0x0) 54.268312197s ago: executing program 6 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000340)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000400)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.857415786s ago: executing program 3 (id=531): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="3300000008000601010003000001", 0xe) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xa, 0x0, 0x413}}}, 0x7) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="e904a2000000aaaaaaaaaaaa81002400080045000b"], 0x0) 53.850299436s ago: executing program 4 (id=532): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 53.771372665s ago: executing program 5 (id=533): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r1) 53.44941567s ago: executing program 4 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@arm64={0x7, 0x4, 0x7, '\x00', 0xa}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x2, 0xe97, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x3c7, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0xb000, 0x80300}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.433811547s ago: executing program 6 (id=535): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x58, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x18300}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 53.326715188s ago: executing program 5 (id=536): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1001}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) 52.981508318s ago: executing program 3 (id=537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() syz_pidfd_open(0x0, 0x0) r0 = memfd_create(&(0x7f0000001400)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7\xc6yE\xa8\xd6A\xe8*\xedEd\x14m|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6E&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/717, 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$addseals(r0, 0x409, 0x19) 51.746129604s ago: executing program 6 (id=538): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) recvmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x2000) 51.640711249s ago: executing program 4 (id=539): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000004c40)={[], [{@flag='async'}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 51.397489895s ago: executing program 6 (id=540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='hybla', 0x5) shutdown(r1, 0x1) 37.392315307s ago: executing program 5 (id=541): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r0, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) lstat(&(0x7f0000000180)='./proc\x00', 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x9, 0xb, 0x81000000, 0x6, 0x5]}, &(0x7f00000000c0)=0x54) 0s ago: executing program 35 (id=537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() syz_pidfd_open(0x0, 0x0) r0 = memfd_create(&(0x7f0000001400)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7\xc6yE\xa8\xd6A\xe8*\xedEd\x14m|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6E&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00'/717, 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$addseals(r0, 0x409, 0x19) kernel console output (not intermixed with test programs): ta mode: none. [ 110.642130][ T5915] ======================================================= [ 110.642130][ T5915] WARNING: The mand mount option has been deprecated and [ 110.642130][ T5915] and is ignored by this kernel. Remove the mand [ 110.642130][ T5915] option from the mount to silence this warning. [ 110.642130][ T5915] ======================================================= [ 110.746934][ T5921] loop3: detected capacity change from 0 to 512 [ 110.749285][ T5921] vfat: Unknown parameter 'ÿÿÿÿÿÿ' [ 110.753834][ T33] audit: type=1326 audit(1792515894.612:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.31" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 110.754641][ T33] audit: type=1326 audit(1792515894.612:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.31" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 110.758637][ T33] audit: type=1326 audit(1792515894.622:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.31" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 110.758685][ T33] audit: type=1326 audit(1792515894.622:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.31" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 110.760184][ T33] audit: type=1326 audit(1792515894.622:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.31" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 110.760229][ T33] audit: type=1326 audit(1792515894.622:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.31" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 110.760265][ T33] audit: type=1326 audit(1792515894.622:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.31" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 110.761718][ T33] audit: type=1326 audit(1792515894.622:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.31" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 110.761762][ T33] audit: type=1326 audit(1792515894.622:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.31" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 111.168916][ T5925] FAULT_INJECTION: forcing a failure. [ 111.168916][ T5925] name failslab, interval 1, probability 0, space 0, times 1 [ 111.168976][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: syz.1.33 Not tainted syzkaller #0 PREEMPT(full) [ 111.168999][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.169015][ T5925] Call Trace: [ 111.169029][ T5925] [ 111.169038][ T5925] dump_stack_lvl+0xe8/0x150 [ 111.169084][ T5925] should_fail_ex+0x3eb/0x540 [ 111.169117][ T5925] should_failslab+0xa8/0x100 [ 111.169146][ T5925] __kmalloc_node_noprof+0xfb/0x720 [ 111.169167][ T5925] ? __kmalloc_node_noprof+0x2eb/0x720 [ 111.169185][ T5925] ? blk_mq_alloc_tag_set+0x4bd/0xfa0 [ 111.169209][ T5925] ? blk_mq_alloc_tag_set+0x4bd/0xfa0 [ 111.169240][ T5925] blk_mq_alloc_tag_set+0x4bd/0xfa0 [ 111.169275][ T5925] loop_add+0x436/0xb40 [ 111.169301][ T5925] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.169332][ T5925] ? __pfx_loop_add+0x10/0x10 [ 111.169387][ T5925] loop_control_ioctl+0x12b/0x5a0 [ 111.169414][ T5925] ? __fget_files+0x2a/0x420 [ 111.169435][ T5925] ? __pfx_loop_control_ioctl+0x10/0x10 [ 111.169465][ T5925] ? bpf_lsm_file_ioctl+0x9/0x20 [ 111.169489][ T5925] ? __pfx_loop_control_ioctl+0x10/0x10 [ 111.169516][ T5925] __se_sys_ioctl+0xfc/0x170 [ 111.169543][ T5925] do_syscall_64+0x166/0x520 [ 111.169565][ T5925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.169584][ T5925] ? clear_bhb_loop+0x70/0xc0 [ 111.169607][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.169626][ T5925] RIP: 0033:0x7f78bcf9f559 [ 111.169664][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.169680][ T5925] RSP: 002b:00007f78bdf52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.169699][ T5925] RAX: ffffffffffffffda RBX: 00007f78bd225fa0 RCX: 00007f78bcf9f559 [ 111.169712][ T5925] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 111.169723][ T5925] RBP: 00007f78bd036b20 R08: 0000000000000000 R09: 0000000000000000 [ 111.169733][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.169745][ T5925] R13: 00007f78bd226038 R14: 00007f78bd225fa0 R15: 00007ffeb574f4e8 [ 111.169776][ T5925] [ 111.328006][ T5610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.540744][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 111.575136][ T5931] macvlan2: entered promiscuous mode [ 111.575160][ T5931] macvlan2: entered allmulticast mode [ 111.879420][ T5944] mmap: syz.0.38 (5944) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.065535][ T5740] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.237440][ T5740] usb 1-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 113.239893][ T5740] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 113.239922][ T5740] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 113.239939][ T5740] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 113.239955][ T5740] usb 1-1: config 220 has no interface number 2 [ 113.240013][ T5740] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.240037][ T5740] usb 1-1: config 220 interface 0 has no altsetting 0 [ 113.240054][ T5740] usb 1-1: config 220 interface 76 has no altsetting 0 [ 113.240070][ T5740] usb 1-1: config 220 interface 1 has no altsetting 0 [ 113.243327][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.243344][ T5740] usb 1-1: Product: syz [ 113.243352][ T5740] usb 1-1: Manufacturer: syz [ 113.243359][ T5740] usb 1-1: SerialNumber: syz [ 113.322302][ T5961] loop3: detected capacity change from 0 to 512 [ 113.466978][ T5961] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.45: iget: bad i_size value: 38620345925642 [ 113.467237][ T5961] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.488166][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 113.488194][ C1] EXT4-fs (loop3): initial error at time 1792515897: ext4_orphan_get:1404: inode 15 [ 113.488224][ C1] EXT4-fs (loop3): last error at time 1792515897: ext4_orphan_get:1404: inode 15 [ 113.533642][ T5961] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.45: couldn't read orphan inode 15 (err -117) [ 113.534384][ T5961] loop3: lost filesystem error report for type 5 error -117 [ 113.553753][ T5961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.633103][ T33] kauditd_printk_skb: 5 callbacks suppressed [ 113.633121][ T33] audit: type=1326 audit(1792515897.492:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.657076][ T33] audit: type=1326 audit(1792515897.502:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.657126][ T33] audit: type=1326 audit(1792515897.522:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.657179][ T33] audit: type=1326 audit(1792515897.522:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.657225][ T33] audit: type=1326 audit(1792515897.522:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.662989][ T33] audit: type=1326 audit(1792515897.522:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.663051][ T33] audit: type=1326 audit(1792515897.522:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.663091][ T33] audit: type=1326 audit(1792515897.522:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.676176][ T33] audit: type=1326 audit(1792515897.532:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.724044][ T33] audit: type=1326 audit(1792515897.582:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.1.46" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 113.958408][ T5740] uvcvideo 1-1:220.0: probe with driver uvcvideo failed with error -22 [ 114.015546][ T5740] usb 1-1: USB disconnect, device number 2 [ 114.183891][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.775925][ T5980] FAULT_INJECTION: forcing a failure. [ 114.775925][ T5980] name failslab, interval 1, probability 0, space 0, times 0 [ 114.775968][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 114.775991][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.776003][ T5980] Call Trace: [ 114.776013][ T5980] [ 114.776021][ T5980] dump_stack_lvl+0xe8/0x150 [ 114.776063][ T5980] should_fail_ex+0x3eb/0x540 [ 114.776098][ T5980] should_failslab+0xa8/0x100 [ 114.776130][ T5980] __kmalloc_cache_noprof+0x9e/0x600 [ 114.776157][ T5980] ? mpi_alloc+0x52/0x140 [ 114.776388][ T5980] ? mpi_alloc+0x52/0x140 [ 114.776413][ T5980] ? public_key_verify_signature+0x2d0/0x9e0 [ 114.776439][ T5980] mpi_alloc+0x52/0x140 [ 114.776467][ T5980] mpi_read_raw_data+0x139/0x970 [ 114.776498][ T5980] rsa_set_pub_key+0x2c3/0x5b0 [ 114.776543][ T5980] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 114.776588][ T5980] ? __kmalloc_noprof+0x387/0x710 [ 114.776615][ T5980] rsassa_pkcs1_set_pub_key+0xba/0x1a0 [ 114.776650][ T5980] public_key_verify_signature+0x57a/0x9e0 [ 114.776688][ T5980] ? __pfx_public_key_verify_signature+0x10/0x10 [ 114.776726][ T5980] ? asymmetric_key_generate_id+0x60/0x170 [ 114.776754][ T5980] ? asymmetric_key_id_same+0x67/0xe0 [ 114.776786][ T5980] x509_check_for_self_signed+0x326/0x430 [ 114.776808][ T5980] x509_cert_parse+0x622/0x7a0 [ 114.776828][ T5980] x509_key_preparse+0x64/0x6d0 [ 114.776844][ T5980] ? down_read+0x2b9/0x320 [ 114.776867][ T5980] asymmetric_key_preparse+0xb9/0x1b0 [ 114.776891][ T5980] __key_create_or_update+0x360/0xa90 [ 114.776933][ T5980] ? __pfx___key_create_or_update+0x10/0x10 [ 114.776950][ T5980] ? lookup_user_key+0x1101/0x1230 [ 114.776990][ T5980] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 114.777008][ T5980] ? __pfx_keyring_search_iterator+0x10/0x10 [ 114.777035][ T5980] key_create_or_update+0x42/0x60 [ 114.777056][ T5980] __se_sys_add_key+0x349/0x420 [ 114.777080][ T5980] ? __pfx___se_sys_add_key+0x10/0x10 [ 114.777110][ T5980] ? __x64_sys_add_key+0x20/0xc0 [ 114.777135][ T5980] do_syscall_64+0x166/0x520 [ 114.777154][ T5980] ? trace_irq_disable+0x3b/0x140 [ 114.777173][ T5980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.777192][ T5980] ? clear_bhb_loop+0x70/0xc0 [ 114.777213][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.777231][ T5980] RIP: 0033:0x7f78bcf9f559 [ 114.777248][ T5980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.777264][ T5980] RSP: 002b:00007f78bdf52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 114.777282][ T5980] RAX: ffffffffffffffda RBX: 00007f78bd225fa0 RCX: 00007f78bcf9f559 [ 114.777294][ T5980] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 114.777305][ T5980] RBP: 00007f78bd036b20 R08: 000000002e4ac646 R09: 0000000000000000 [ 114.777315][ T5980] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 114.777324][ T5980] R13: 00007f78bd226038 R14: 00007f78bd225fa0 R15: 00007ffeb574f4e8 [ 114.777351][ T5980] [ 115.444727][ T5984] netlink: 'syz.0.54': attribute type 4 has an invalid length. [ 115.453795][ T5988] loop1: detected capacity change from 0 to 128 [ 115.481393][ T5984] netlink: 'syz.0.54': attribute type 4 has an invalid length. [ 115.481521][ T5988] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.483375][ T5988] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.533689][ T5991] input: syz0 as /devices/virtual/input/input5 [ 115.858835][ T5611] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.053561][ T5999] loop3: detected capacity change from 0 to 8192 [ 116.326204][ T6008] loop0: detected capacity change from 0 to 256 [ 116.330548][ T6008] vfat: Unknown parameter 'nnonumtail' [ 116.695666][ T5599] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.714689][ T6021] kvm: faulting far call emulation tainted memory [ 116.720066][ T6021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.733859][ T5726] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.734506][ T6024] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 116.845823][ T5599] usb 4-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 116.846920][ T5599] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.846978][ T5599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.898964][ T5599] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 116.899230][ T5599] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 116.899300][ T5599] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 116.935403][ T5726] usb 2-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 116.939910][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 116.939946][ T5726] usb 2-1: Product: syz [ 116.939959][ T5726] usb 2-1: SerialNumber: syz [ 116.972878][ T5726] usb 2-1: config 0 descriptor?? [ 116.975053][ T5599] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 116.975198][ T5599] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 117.005451][ T5599] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 117.033099][ T5599] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 117.033189][ T5599] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 117.057191][ T5599] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 117.231655][ T5726] hso 2-1:0.0: Failed to find BULK eps [ 117.413752][ T5726] usb 4-1: USB disconnect, device number 2 [ 117.484707][ T5726] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 117.531846][ T5599] usb 2-1: USB disconnect, device number 2 [ 117.566491][ T5726] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 117.573136][ T5726] keyspan 4-1:1.0: device disconnected [ 117.786968][ T6027] loop4: detected capacity change from 0 to 131072 [ 117.792376][ T6027] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 117.792401][ T6027] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 117.826620][ T6027] F2FS-fs (loop4): invalid crc value [ 117.881988][ T6027] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.902615][ T6027] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 117.902796][ T6027] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 118.131577][ T6048] overlay: filesystem on ./file1 not supported [ 118.307958][ T6059] loop0: detected capacity change from 0 to 164 [ 118.360324][ T6054] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 118.766357][ T6070] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.833024][ T6077] netlink: 'syz.0.88': attribute type 4 has an invalid length. [ 119.189161][ T33] kauditd_printk_skb: 76 callbacks suppressed [ 119.189179][ T33] audit: type=1326 audit(1792515903.052:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 119.189221][ T33] audit: type=1326 audit(1792515903.052:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 119.199484][ T33] audit: type=1326 audit(1792515903.062:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 119.199760][ T33] audit: type=1326 audit(1792515903.062:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 119.199969][ T33] audit: type=1326 audit(1792515903.062:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 119.200900][ T33] audit: type=1326 audit(1792515903.062:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 119.210880][ T33] audit: type=1326 audit(1792515903.062:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 119.213703][ T33] audit: type=1326 audit(1792515903.062:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78bcf9f559 code=0x7ffc0000 [ 119.223947][ T33] audit: type=1326 audit(1792515903.062:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78bcf5fd8e code=0x7ffc0000 [ 119.223999][ T33] audit: type=1326 audit(1792515903.062:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.90" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78bcf9f1eb code=0x7ffc0000 [ 119.239464][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.296670][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.446553][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.513426][ T6082] erspan0: entered promiscuous mode [ 119.522668][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 119.602202][ T32] usb 2-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 119.632611][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.632629][ T32] usb 2-1: Product: syz [ 119.632637][ T32] usb 2-1: Manufacturer: syz [ 119.632644][ T32] usb 2-1: SerialNumber: syz [ 119.671096][ T32] usb 2-1: USB2VGA dongle found at address 3 [ 119.672340][ T6088] ip_tables: iptables: counters copy to user failed while replacing table [ 119.771238][ T32] usb 2-1: Allocated 8 output buffers [ 119.794014][ T6090] futex_wake_op: syz.2.91 tries to shift op by 144; fix this program [ 119.899328][ T6092] loop4: detected capacity change from 0 to 128 [ 120.000637][ T32] usb 2-1: Failed to early initialize device [ 120.071000][ T32] usb 2-1: USB disconnect, device number 3 [ 120.166162][ T6090] futex_wake_op: syz.2.91 tries to shift op by 144; fix this program [ 120.245999][ T5613] bridge0: port 3(syz_tun) entered disabled state [ 120.305195][ T5613] syz_tun (unregistering): left allmulticast mode [ 120.305222][ T5613] syz_tun (unregistering): left promiscuous mode [ 120.305311][ T5613] bridge0: port 3(syz_tun) entered disabled state [ 120.419145][ T6102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.552865][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 120.643728][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 120.653572][ T4332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.795739][ T6106] Zero length message leads to an empty skb [ 120.796672][ T52] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.805996][ T1029] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.806954][ T1029] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.806994][ T1029] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.914734][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.916580][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.917459][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.927754][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.928347][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.971683][ T4332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.142001][ T4332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.372384][ T6117] loop3: detected capacity change from 0 to 40427 [ 121.376635][ T6117] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 121.376656][ T6117] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.393874][ T4332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.488754][ T6117] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 121.510023][ T6117] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.510050][ T6117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.696918][ T6117] syz.3.103: attempt to access beyond end of device [ 121.696918][ T6117] loop3: rw=2049, sector=45096, nr_sectors = 2160 limit=40427 [ 122.138387][ T4332] bridge_slave_1: left allmulticast mode [ 122.138440][ T4332] bridge_slave_1: left promiscuous mode [ 122.140178][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.229031][ T4332] bridge_slave_0: left allmulticast mode [ 122.229058][ T4332] bridge_slave_0: left promiscuous mode [ 122.229277][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.330135][ T64] kworker/u8:4: attempt to access beyond end of device [ 122.330135][ T64] loop3: rw=1, sector=47256, nr_sectors = 16 limit=40427 [ 122.557579][ T5614] syz-executor: attempt to access beyond end of device [ 122.557579][ T5614] loop3: rw=8390659, sector=45096, nr_sectors = 2160 limit=40427 [ 122.572529][ T5614] F2FS-fs (loop3): Issue discard(5637, 5637, 270) failed, ret: -5 [ 122.955560][ T4926] Bluetooth: hci3: command tx timeout [ 123.256520][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.284522][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.300603][ T4332] bond0 (unregistering): Released all slaves [ 123.467190][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 123.773504][ T6183] loop3: detected capacity change from 0 to 512 [ 123.837936][ T6183] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 123.909910][ T6183] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.110: iget: bad i_size value: 360287970189639680 [ 123.909946][ T6183] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.912737][ T6183] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.110: couldn't read orphan inode 15 (err -117) [ 123.912769][ T6183] loop3: lost filesystem error report for type 5 error -117 [ 123.915218][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 123.915240][ C0] EXT4-fs (loop3): initial error at time 1792515907: ext4_orphan_get:1404: inode 15 [ 123.915269][ C0] EXT4-fs (loop3): last error at time 1792515907: ext4_orphan_get:1409 [ 123.997328][ T6183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.023320][ T6112] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.442387][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.045364][ T4926] Bluetooth: hci3: command tx timeout [ 125.356972][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 125.439661][ T4332] hsr_slave_0: left promiscuous mode [ 125.442722][ T4332] hsr_slave_1: left promiscuous mode [ 125.443629][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.443663][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.478031][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.478052][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.517146][ T4332] veth1_macvtap: left promiscuous mode [ 125.517200][ T4332] veth0_macvtap: left promiscuous mode [ 125.517349][ T4332] veth1_vlan: left promiscuous mode [ 125.517424][ T4332] veth0_vlan: left promiscuous mode [ 125.898309][ T41] IPVS: starting estimator thread 0... [ 125.985164][ T6233] IPVS: using max 34 ests per chain, 81600 per kthread [ 126.023996][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 126.064617][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 126.143547][ T6239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.129'. [ 127.115744][ T4926] Bluetooth: hci3: command tx timeout [ 127.490410][ T4332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.598259][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.598366][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.598526][ T6112] bridge_slave_0: entered allmulticast mode [ 127.607662][ T6112] bridge_slave_0: entered promiscuous mode [ 127.625805][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.625905][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.626107][ T6112] bridge_slave_1: entered allmulticast mode [ 127.632882][ T6112] bridge_slave_1: entered promiscuous mode [ 127.796720][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.799092][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.799765][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.800814][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.801922][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.863691][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.883121][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 127.931754][ T4332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.972632][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.104739][ T6112] team0: Port device team_slave_0 added [ 128.114568][ T33] kauditd_printk_skb: 50 callbacks suppressed [ 128.114585][ T33] audit: type=1326 audit(1792515911.972:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.121019][ T33] audit: type=1326 audit(1792515911.982:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.121068][ T33] audit: type=1326 audit(1792515911.982:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.121103][ T33] audit: type=1326 audit(1792515911.982:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.121139][ T33] audit: type=1326 audit(1792515911.982:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.121175][ T33] audit: type=1326 audit(1792515911.982:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.145429][ T33] audit: type=1326 audit(1792515911.982:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.145478][ T33] audit: type=1326 audit(1792515911.982:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.145514][ T33] audit: type=1326 audit(1792515911.982:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.145550][ T33] audit: type=1326 audit(1792515911.982:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.137" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7ff9f559 code=0x7ffc0000 [ 128.306062][ T4332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.342281][ T6112] team0: Port device team_slave_1 added [ 128.469709][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.469727][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.469750][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.473632][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.473647][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.473669][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.570253][ T4332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.780399][ T6112] hsr_slave_0: entered promiscuous mode [ 128.783351][ T6112] hsr_slave_1: entered promiscuous mode [ 128.787663][ T6112] debugfs: 'hsr0' already exists in 'hsr' [ 128.787686][ T6112] Cannot create hsr debugfs directory [ 129.064674][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 129.064715][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 129.195391][ T4926] Bluetooth: hci3: command tx timeout [ 129.231441][ T6276] rxe_eth0 speed is unknown, defaulting to 1000 [ 129.262518][ T4332] bridge_slave_1: left allmulticast mode [ 129.262546][ T4332] bridge_slave_1: left promiscuous mode [ 129.262766][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.297701][ T4332] bridge_slave_0: left allmulticast mode [ 129.297727][ T4332] bridge_slave_0: left promiscuous mode [ 129.297905][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.726660][ T4332] bond0 (unregistering): (slave 30): Releasing backup interface [ 129.732026][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.733655][ T4332] bond0 (unregistering): Released all slaves [ 129.789422][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 129.852848][ T6320] bond1: entered allmulticast mode [ 129.863219][ T6323] macvlan2: entered promiscuous mode [ 129.863238][ T6323] macvlan2: entered allmulticast mode [ 129.864194][ T6323] bond1: (slave macvlan2): Opening slave failed [ 129.915347][ T4926] Bluetooth: hci1: command tx timeout [ 130.169640][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 130.394123][ T6337] team0: Port device team_slave_0 removed [ 131.072098][ T6351] netlink: 168 bytes leftover after parsing attributes in process `syz.2.151'. [ 131.334312][ T6361] loop2: detected capacity change from 0 to 2048 [ 131.397313][ T6364] FAULT_INJECTION: forcing a failure. [ 131.397313][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 131.397349][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.0.154 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.397375][ T6364] Tainted: [L]=SOFTLOCKUP [ 131.397382][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.397393][ T6364] Call Trace: [ 131.397401][ T6364] [ 131.397410][ T6364] dump_stack_lvl+0xe8/0x150 [ 131.397447][ T6364] should_fail_ex+0x3eb/0x540 [ 131.397482][ T6364] should_failslab+0xa8/0x100 [ 131.397509][ T6364] ? alloc_vfsmnt+0x23/0x510 [ 131.397535][ T6364] kmem_cache_alloc_noprof+0x9c/0x600 [ 131.397570][ T6364] ? __pfx___mutex_lock+0x10/0x10 [ 131.397593][ T6364] ? alloc_vfsmnt+0x23/0x510 [ 131.397626][ T6364] alloc_vfsmnt+0x23/0x510 [ 131.397664][ T6364] vfs_create_mount+0x68/0x310 [ 131.397694][ T6364] __se_sys_fsmount+0x5e3/0xbf0 [ 131.397726][ T6364] ? __pfx___se_sys_fsmount+0x10/0x10 [ 131.397759][ T6364] do_syscall_64+0x166/0x520 [ 131.397779][ T6364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.397798][ T6364] ? clear_bhb_loop+0x70/0xc0 [ 131.397822][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.397840][ T6364] RIP: 0033:0x7f6d7ff9f559 [ 131.397858][ T6364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.397873][ T6364] RSP: 002b:00007f6d80eeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 131.397893][ T6364] RAX: ffffffffffffffda RBX: 00007f6d80225fa0 RCX: 00007f6d7ff9f559 [ 131.397908][ T6364] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 131.397919][ T6364] RBP: 00007f6d80036b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.397931][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.397942][ T6364] R13: 00007f6d80226038 R14: 00007f6d80225fa0 R15: 00007ffc2e921a28 [ 131.397975][ T6364] [ 131.451507][ T6361] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.590995][ T4332] hsr_slave_0: left promiscuous mode [ 131.601122][ T4332] hsr_slave_1: left promiscuous mode [ 131.602041][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.602063][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.611258][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.611280][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.669602][ T4332] veth1_macvtap: left promiscuous mode [ 131.669640][ T4332] veth0_macvtap: left promiscuous mode [ 131.669740][ T4332] veth1_vlan: left promiscuous mode [ 131.669812][ T4332] veth0_vlan: left promiscuous mode [ 131.724859][ T6370] FAULT_INJECTION: forcing a failure. [ 131.724859][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 131.724891][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.0.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.724917][ T6370] Tainted: [L]=SOFTLOCKUP [ 131.724923][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.724934][ T6370] Call Trace: [ 131.724942][ T6370] [ 131.724950][ T6370] dump_stack_lvl+0xe8/0x150 [ 131.724983][ T6370] should_fail_ex+0x3eb/0x540 [ 131.725013][ T6370] should_failslab+0xa8/0x100 [ 131.725039][ T6370] __kmalloc_cache_noprof+0x9e/0x600 [ 131.725059][ T6370] ? __rdma_create_id+0x65/0x7b0 [ 131.725078][ T6370] ? __rdma_create_id+0x65/0x7b0 [ 131.725099][ T6370] ? __pfx_p9_cm_event_handler+0x10/0x10 [ 131.725122][ T6370] __rdma_create_id+0x65/0x7b0 [ 131.725145][ T6370] ? __pfx_p9_cm_event_handler+0x10/0x10 [ 131.725167][ T6370] __rdma_create_kernel_id+0x3c/0x80 [ 131.725191][ T6370] rdma_create_trans+0x757/0x1350 [ 131.725225][ T6370] ? __pfx_rdma_create_trans+0x10/0x10 [ 131.725265][ T6370] ? __kmalloc_cache_noprof+0x31c/0x600 [ 131.725281][ T6370] ? __kmalloc_cache_noprof+0x148/0x600 [ 131.725315][ T6370] p9_client_create+0x3e5/0xc60 [ 131.725345][ T6370] ? __pfx_p9_client_create+0x10/0x10 [ 131.725387][ T6370] v9fs_session_init+0x46/0xd40 [ 131.725410][ T6370] ? __kmalloc_cache_noprof+0x148/0x600 [ 131.725429][ T6370] ? v9fs_get_tree+0xaa/0xac0 [ 131.725451][ T6370] ? v9fs_get_tree+0xaa/0xac0 [ 131.725481][ T6370] v9fs_get_tree+0xbd/0xac0 [ 131.725505][ T6370] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 131.725532][ T6370] ? __pfx_v9fs_get_tree+0x10/0x10 [ 131.725565][ T6370] vfs_get_tree+0x92/0x2a0 [ 131.725590][ T6370] do_new_mount+0x325/0xb00 [ 131.725613][ T6370] ? __pfx_do_new_mount+0x10/0x10 [ 131.725634][ T6370] ? ns_capable+0x84/0xe0 [ 131.725660][ T6370] ? path_mount+0x647/0x1050 [ 131.725679][ T6370] ? user_path_at+0xd4/0x160 [ 131.725702][ T6370] __se_sys_mount+0x31d/0x420 [ 131.725727][ T6370] ? __pfx___se_sys_mount+0x10/0x10 [ 131.725749][ T6370] ? __x64_sys_mount+0x20/0xc0 [ 131.725767][ T6370] do_syscall_64+0x166/0x520 [ 131.725787][ T6370] ? trace_irq_disable+0x3b/0x140 [ 131.725813][ T6370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.725830][ T6370] ? clear_bhb_loop+0x70/0xc0 [ 131.725849][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.725864][ T6370] RIP: 0033:0x7f6d7ff9f559 [ 131.725882][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.725896][ T6370] RSP: 002b:00007f6d80eeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.725916][ T6370] RAX: ffffffffffffffda RBX: 00007f6d80225fa0 RCX: 00007f6d7ff9f559 [ 131.725929][ T6370] RDX: 0000200000000780 RSI: 00002000000001c0 RDI: 0000200000000180 [ 131.725941][ T6370] RBP: 00007f6d80036b20 R08: 0000200000000840 R09: 0000000000000000 [ 131.725952][ T6370] R10: 0000000001000040 R11: 0000000000000246 R12: 0000000000000000 [ 131.725963][ T6370] R13: 00007f6d80226038 R14: 00007f6d80225fa0 R15: 00007ffc2e921a28 [ 131.725993][ T6370] [ 132.001221][ T4926] Bluetooth: hci1: command tx timeout [ 132.755571][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 132.815895][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 133.275403][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 133.930621][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.930700][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.074887][ T4926] Bluetooth: hci1: command tx timeout [ 134.100297][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.100607][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.100735][ T6276] bridge_slave_0: entered allmulticast mode [ 134.102628][ T6276] bridge_slave_0: entered promiscuous mode [ 134.266145][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.266209][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.266316][ T6276] bridge_slave_1: entered allmulticast mode [ 134.269118][ T6276] bridge_slave_1: entered promiscuous mode [ 134.419456][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.460848][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.648087][ T6276] team0: Port device team_slave_0 added [ 134.654487][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 134.656075][ T4332] IPVS: stop unused estimator thread 0... [ 134.710339][ T6112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.752547][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.763964][ T6276] team0: Port device team_slave_1 added [ 134.817388][ T6112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.854430][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.927054][ T6112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.952431][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.954469][ T6112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.979081][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.983019][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.983036][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.983057][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.993381][ T6443] process 'syz.3.171' launched '/dev/fd/7' with NULL argv: empty string added [ 135.066405][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.066421][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.066443][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.342582][ T6276] hsr_slave_0: entered promiscuous mode [ 135.360392][ T6276] hsr_slave_1: entered promiscuous mode [ 135.364748][ T6276] debugfs: 'hsr0' already exists in 'hsr' [ 135.364771][ T6276] Cannot create hsr debugfs directory [ 135.400875][ T6453] kvm: pic: non byte write [ 136.155693][ T4926] Bluetooth: hci1: command tx timeout [ 136.282365][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.514296][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.666717][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.666822][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.696485][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 136.799612][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.799832][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.958571][ T6276] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.995634][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.013857][ T6276] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.058849][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.098997][ T6276] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.135705][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.207046][ T6276] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.257569][ T6276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.781358][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.895303][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.936468][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.936577][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.993588][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.993705][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.759973][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 139.044519][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.145122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 139.960090][ T6112] veth0_vlan: entered promiscuous mode [ 140.021583][ T6112] veth1_vlan: entered promiscuous mode [ 140.274524][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.312253][ T6112] veth0_macvtap: entered promiscuous mode [ 140.373713][ T6112] veth1_macvtap: entered promiscuous mode [ 140.511618][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.632172][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.716886][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.719782][ T86] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.720400][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.720434][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.184952][ T5599] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 141.289502][ T6602] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.360849][ T5599] usb 3-1: Using ep0 maxpacket: 32 [ 141.380106][ T5599] usb 3-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 141.383072][ T5599] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 141.383110][ T5599] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 141.383154][ T5599] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 141.383177][ T5599] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 141.383201][ T5599] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.454720][ T5599] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 141.454749][ T5599] usb 3-1: Product: syz [ 141.454763][ T5599] usb 3-1: Manufacturer: syz [ 141.454777][ T5599] usb 3-1: SerialNumber: syz [ 141.557704][ T5599] usb 3-1: config 0 descriptor?? [ 141.634137][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.634164][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.666930][ T5599] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 141.692971][ T5599] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 141.840018][ T5740] usb 3-1: USB disconnect, device number 2 [ 141.863981][ T5740] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 142.329109][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.329130][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.494132][ T6276] veth0_vlan: entered promiscuous mode [ 142.594145][ T6276] veth1_vlan: entered promiscuous mode [ 143.051950][ T6276] veth0_macvtap: entered promiscuous mode [ 143.092257][ T6276] veth1_macvtap: entered promiscuous mode [ 143.166217][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.173565][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.375011][ T64] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.375179][ T64] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.375456][ T64] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.469338][ T145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.621308][ T6654] af_packet: packet size is too long (4294901760 > 1504) [ 143.642813][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.642832][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.977889][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.977905][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.290357][ T6700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.293943][ T6700] FAULT_INJECTION: forcing a failure. [ 145.293943][ T6700] name failslab, interval 1, probability 0, space 0, times 0 [ 145.293965][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.4.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.293981][ T6700] Tainted: [L]=SOFTLOCKUP [ 145.293985][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.293992][ T6700] Call Trace: [ 145.293998][ T6700] [ 145.294002][ T6700] dump_stack_lvl+0xe8/0x150 [ 145.294024][ T6700] should_fail_ex+0x3eb/0x540 [ 145.294042][ T6700] should_failslab+0xa8/0x100 [ 145.294057][ T6700] ? skb_clone+0x212/0x3a0 [ 145.294071][ T6700] kmem_cache_alloc_noprof+0x9c/0x600 [ 145.294091][ T6700] ? skb_clone+0x212/0x3a0 [ 145.294107][ T6700] skb_clone+0x212/0x3a0 [ 145.294120][ T6700] ? netlink_broadcast_filtered+0x5a0/0x1070 [ 145.294136][ T6700] netlink_broadcast_filtered+0x5ae/0x1070 [ 145.294169][ T6700] netlink_broadcast+0x37/0x50 [ 145.294185][ T6700] kobject_uevent_net_broadcast+0x378/0x560 [ 145.294207][ T6700] kobject_uevent_env+0x566/0x9e0 [ 145.294228][ T6700] device_add+0x544/0xb80 [ 145.294242][ T6700] iommu_mock_device_add+0x83/0x1e0 [ 145.294256][ T6700] iommufd_test+0x38d1/0x6360 [ 145.294276][ T6700] ? __lock_acquire+0x747/0x2de0 [ 145.294289][ T6700] ? __pfx_iommufd_test+0x10/0x10 [ 145.294309][ T6700] ? tomoyo_path_number_perm+0x219/0x5f0 [ 145.294328][ T6700] ? tomoyo_path_number_perm+0x219/0x5f0 [ 145.294347][ T6700] ? lock_acquire+0x115/0x350 [ 145.294367][ T6700] ? __might_fault+0xaf/0x130 [ 145.294386][ T6700] iommufd_fops_ioctl+0x465/0x600 [ 145.294405][ T6700] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 145.294430][ T6700] ? __fget_files+0x2a/0x420 [ 145.294449][ T6700] ? bpf_lsm_file_ioctl+0x9/0x20 [ 145.294463][ T6700] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 145.294481][ T6700] __se_sys_ioctl+0xfc/0x170 [ 145.294497][ T6700] do_syscall_64+0x166/0x520 [ 145.294509][ T6700] ? trace_irq_disable+0x3b/0x140 [ 145.294522][ T6700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.294533][ T6700] ? clear_bhb_loop+0x70/0xc0 [ 145.294546][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.294556][ T6700] RIP: 0033:0x7fcc89f9f559 [ 145.294568][ T6700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.294577][ T6700] RSP: 002b:00007fcc8aec8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.294589][ T6700] RAX: ffffffffffffffda RBX: 00007fcc8a225fa0 RCX: 00007fcc89f9f559 [ 145.294596][ T6700] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 145.294603][ T6700] RBP: 00007fcc8a036b20 R08: 0000000000000000 R09: 0000000000000000 [ 145.294610][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.294617][ T6700] R13: 00007fcc8a226038 R14: 00007fcc8a225fa0 R15: 00007ffedf768588 [ 145.294634][ T6700] [ 146.154614][ T6721] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.171732][ T6730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.322318][ T6729] TC_ACT_REPEAT abuse ? [ 147.262486][ T6754] FAULT_INJECTION: forcing a failure. [ 147.262486][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 147.262522][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.5.220 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.262549][ T6754] Tainted: [L]=SOFTLOCKUP [ 147.262557][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.262568][ T6754] Call Trace: [ 147.262576][ T6754] [ 147.262584][ T6754] dump_stack_lvl+0xe8/0x150 [ 147.262633][ T6754] should_fail_ex+0x3eb/0x540 [ 147.262671][ T6754] should_failslab+0xa8/0x100 [ 147.262729][ T6754] __kmalloc_noprof+0xf9/0x710 [ 147.262798][ T6754] ? io_cache_alloc_new+0x40/0x100 [ 147.262819][ T6754] ? io_cache_alloc_new+0x40/0x100 [ 147.262890][ T6754] io_cache_alloc_new+0x40/0x100 [ 147.262919][ T6754] io_uring_alloc_async_data+0x1b6/0x2e0 [ 147.262948][ T6754] io_send_zc_prep+0x3f7/0x9e0 [ 147.263229][ T6754] io_submit_sqes+0xd6e/0x2500 [ 147.263286][ T6754] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 147.263321][ T6754] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 147.263353][ T6754] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 147.263384][ T6754] ? rcu_is_watching+0x16/0xb0 [ 147.263425][ T6754] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 147.263454][ T6754] do_syscall_64+0x166/0x520 [ 147.263477][ T6754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.263498][ T6754] ? clear_bhb_loop+0x70/0xc0 [ 147.263523][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.263542][ T6754] RIP: 0033:0x7ff69ed9f559 [ 147.263565][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.263581][ T6754] RSP: 002b:00007ff69fbddf38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 147.263611][ T6754] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff69ed9f559 [ 147.263625][ T6754] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 147.263637][ T6754] RBP: 00000000000001b7 R08: 0000000000000000 R09: 0000000000000008 [ 147.263648][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000005c0 [ 147.263660][ T6754] R13: 00002000000005c8 R14: 00000000000003f7 R15: 0000000000000000 [ 147.263687][ T6754] [ 147.947412][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 148.610184][ T6767] loop0: detected capacity change from 0 to 32768 [ 148.843470][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.226'. [ 148.914381][ T6767] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 149.443228][ T6769] loop4: detected capacity change from 0 to 32768 [ 149.502976][ T6769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.225 (6769) [ 149.623246][ T6769] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.623297][ T6769] BTRFS info (device loop4): using crc32c checksum algorithm [ 150.184904][ T6769] BTRFS info (device loop4): enabling ssd optimizations [ 150.184938][ T6769] BTRFS info (device loop4): turning on async discard [ 150.184958][ T6769] BTRFS info (device loop4): enabling free space tree [ 150.353791][ T33] kauditd_printk_skb: 82 callbacks suppressed [ 150.353812][ T33] audit: type=1800 audit(1792515934.212:255): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.225" name="file1" dev="loop4" ino=260 res=0 errno=-22 [ 150.386046][ T6814] netlink: 48 bytes leftover after parsing attributes in process `syz.2.231'. [ 150.480057][ T5610] ocfs2: Unmounting device (7,0) on (node local) [ 150.618714][ T6816] ip_tables: iptables: counters copy to user failed while replacing table [ 152.287417][ T6112] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.236974][ T6864] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.322955][ T6862] kexec: Could not allocate control_code_buffer [ 154.612279][ T6876] loop3: detected capacity change from 0 to 512 [ 154.614434][ T6876] msdos: Unknown parameter '–/Îc›‰fÜ>dD¹Bu_œœ×SrI rÙÙt;#*ä‚(FFÔLí/^:“/ýg«võV­Ïm‡sâ' [ 154.843898][ T6882] loop4: detected capacity change from 0 to 512 [ 156.127937][ T6902] syz.0.251 uses obsolete (PF_INET,SOCK_PACKET) [ 156.766694][ T6911] loop0: detected capacity change from 0 to 256 [ 156.842420][ T6911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'. [ 157.170080][ T6906] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 157.218084][ T6919] rxe_eth0 speed is unknown, defaulting to 1000 [ 157.452670][ T6923] loop5: detected capacity change from 0 to 256 [ 158.067246][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.068753][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.229368][ T6930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.256439][ T6930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.766121][ T4332] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.777876][ T4332] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.777925][ T4332] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.777957][ T4332] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.734686][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 159.734711][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 160.052801][ T33] audit: type=1400 audit(1792515943.912:256): apparmor="STATUS" operation="profile_load" profile="unconfined" name=":" pid=6969 comm="syz.0.272" [ 160.178140][ T6983] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 160.299537][ T6983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.318659][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 160.353249][ T6983] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 160.353272][ T6983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.276'. [ 160.390561][ T6986] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 160.468428][ T6989] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 160.474183][ T6977] kvm: pic: non byte write [ 160.495116][ T145] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 160.520346][ T6983] dummy0: entered promiscuous mode [ 160.525058][ T6983] bond1: (slave dummy0): Removing an active aggregator [ 160.550893][ T6983] bond1: (slave dummy0): Releasing backup interface [ 160.723156][ T6999] lo: entered allmulticast mode [ 160.766164][ T6996] lo: left allmulticast mode [ 160.963452][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 161.409019][ T7023] kvm: pic: level sensitive irq not supported [ 161.409248][ T7023] kvm: pic: non byte read [ 161.409411][ T7023] kvm: pic: level sensitive irq not supported [ 161.409463][ T7023] kvm: pic: non byte read [ 162.432398][ T7056] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 162.432436][ T7056] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 162.432480][ T7056] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 162.747713][ T7063] loop0: detected capacity change from 0 to 128 [ 162.780221][ T52] smbdirect: ib_dev[s`z1] removed [ 162.817423][ T7056] siw: device registration error -19 [ 163.331764][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.490786][ T7068] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.596627][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.781984][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.052602][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.222954][ T7058] loop2: detected capacity change from 0 to 65536 [ 164.310706][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.330428][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.331346][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.353280][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.371318][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.458379][ T7085] kvm: pic: non byte write [ 164.507809][ T7058] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 164.628587][ T52] bridge_slave_1: left allmulticast mode [ 164.628615][ T52] bridge_slave_1: left promiscuous mode [ 164.628841][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.639328][ T7058] XFS (loop2): Ending clean mount [ 164.672390][ T52] bridge_slave_0: left allmulticast mode [ 164.672417][ T52] bridge_slave_0: left promiscuous mode [ 164.672631][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.888384][ T5612] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 165.609997][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.640119][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.660032][ T52] bond0 (unregistering): Released all slaves [ 165.734714][ T52] bond1 (unregistering): (slave veth3): Releasing backup interface [ 165.803339][ T52] bond1 (unregistering): Released all slaves [ 165.854265][ T7115] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 166.245447][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.316'. [ 166.475750][ T4926] Bluetooth: hci0: command tx timeout getty: ttyS0: read error: Resource temporarily unavailable [ 167.082053][ T7082] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.478894][ T33] audit: type=1326 audit(1792515951.342:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 167.480494][ T33] audit: type=1326 audit(1792515951.342:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 167.515116][ T33] audit: type=1326 audit(1792515951.372:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 167.515163][ T33] audit: type=1326 audit(1792515951.372:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 167.515199][ T33] audit: type=1326 audit(1792515951.382:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 167.525403][ T33] audit: type=1326 audit(1792515951.392:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 167.781544][ T33] audit: type=1326 audit(1792515951.642:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 167.789097][ T33] audit: type=1326 audit(1792515951.652:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 167.832804][ T33] audit: type=1326 audit(1792515951.692:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 167.871956][ T33] audit: type=1326 audit(1792515951.732:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.5.324" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff69ed9f559 code=0x7ffc0000 [ 168.352684][ T52] hsr_slave_0: left promiscuous mode [ 168.381704][ T52] hsr_slave_1: left promiscuous mode [ 168.391445][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.391467][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.496474][ T52] veth1_macvtap: left promiscuous mode [ 168.496513][ T52] veth0_macvtap: left promiscuous mode [ 168.496635][ T52] veth1_vlan: left promiscuous mode [ 168.496701][ T52] veth0_vlan: left promiscuous mode [ 168.554887][ T4926] Bluetooth: hci0: command tx timeout [ 169.258796][ T7300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.300895][ T7300] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 169.786996][ T7306] loop4: detected capacity change from 0 to 256 [ 169.814325][ T7306] exfat: Unknown parameter '000000000000000000000001844674407370955161501777777777777777777777ùî~æa`Ry«Öhêã‚àÈ' [ 169.841352][ T7309] loop5: detected capacity change from 0 to 512 [ 169.856531][ T7309] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 169.856551][ T7309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.893699][ T7309] EXT4-fs (loop5): 1 truncate cleaned up [ 169.926711][ T7309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.047989][ T7315] loop2: detected capacity change from 0 to 1024 [ 170.051044][ T7315] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.052069][ T7315] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 170.098631][ T7315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.225410][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.635152][ T4926] Bluetooth: hci0: command tx timeout [ 170.637977][ T52] team0 (unregistering): Port device team_slave_1 removed [ 170.677301][ T52] team0 (unregistering): Port device team_slave_0 removed [ 170.692677][ T7327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.712394][ T7327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.961666][ T4926] Bluetooth: hci3: Unknown advertising packet type: 0x19 [ 170.961684][ T4926] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 171.353650][ T7319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.452392][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.452567][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.453057][ T7082] bridge_slave_0: entered allmulticast mode [ 172.455680][ T7082] bridge_slave_0: entered promiscuous mode [ 172.458397][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.458572][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.458689][ T7082] bridge_slave_1: entered allmulticast mode [ 172.460475][ T7082] bridge_slave_1: entered promiscuous mode [ 172.495192][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.498451][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.551268][ T7082] team0: Port device team_slave_0 added [ 172.565944][ T7082] team0: Port device team_slave_1 added [ 172.716362][ T5621] Bluetooth: hci0: command tx timeout [ 172.734383][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.734400][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.734422][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.747480][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.747497][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.747520][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.816543][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.821960][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.824443][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.833522][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.834088][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.961859][ T7082] hsr_slave_0: entered promiscuous mode [ 172.967781][ T7082] hsr_slave_1: entered promiscuous mode [ 172.968474][ T7082] debugfs: 'hsr0' already exists in 'hsr' [ 172.968491][ T7082] Cannot create hsr debugfs directory [ 173.006892][ T5726] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 173.177849][ T5726] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 173.179361][ T5726] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 173.179386][ T5726] usb 4-1: config 0 has no interface number 0 [ 173.179416][ T5726] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 173.179451][ T5726] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 173.179475][ T5726] usb 4-1: config 0 interface 255 has no altsetting 0 [ 173.179506][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.188022][ T5726] usb 4-1: config 0 descriptor?? [ 173.191134][ T5726] cp210x 4-1:0.255: cp210x converter detected [ 173.422186][ T5726] usb 4-1: cp210x converter now attached to ttyUSB0 [ 173.635345][ T10] usb 4-1: USB disconnect, device number 3 [ 173.667760][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.671694][ T10] cp210x 4-1:0.255: device disconnected [ 173.916774][ T4926] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 173.916855][ T4926] Bluetooth: hci3: Injecting HCI hardware error event [ 173.918631][ T5621] Bluetooth: hci3: hardware error 0x00 [ 174.019227][ T7082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.033263][ T7082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.034182][ T7082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.074981][ T7082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.077744][ T7082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.111649][ T7082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.123939][ T7082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.134772][ T7082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.226836][ T7369] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.437975][ T32] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 174.518436][ T32] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.520741][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.593390][ T7082] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.619154][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.619280][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.653324][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.653428][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.875095][ T4926] Bluetooth: hci2: command tx timeout [ 174.957390][ T7402] FAULT_INJECTION: forcing a failure. [ 174.957390][ T7402] name failslab, interval 1, probability 0, space 0, times 0 [ 174.957424][ T7402] CPU: 0 UID: 0 PID: 7402 Comm: syz.5.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.957450][ T7402] Tainted: [L]=SOFTLOCKUP [ 174.957456][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.957468][ T7402] Call Trace: [ 174.957476][ T7402] [ 174.957485][ T7402] dump_stack_lvl+0xe8/0x150 [ 174.957521][ T7402] should_fail_ex+0x3eb/0x540 [ 174.957553][ T7402] should_failslab+0xa8/0x100 [ 174.957580][ T7402] ? inet_bind2_bucket_create+0x34/0x510 [ 174.957608][ T7402] kmem_cache_alloc_noprof+0x9c/0x600 [ 174.957637][ T7402] ? do_raw_spin_lock+0x12b/0x2f0 [ 174.957672][ T7402] ? inet_bind2_bucket_create+0x34/0x510 [ 174.957710][ T7402] inet_bind2_bucket_create+0x34/0x510 [ 174.957742][ T7402] inet_csk_get_port+0xf53/0x1730 [ 174.957777][ T7402] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 174.957810][ T7402] ? __inet_bind+0x3b0/0xaa0 [ 174.957832][ T7402] ? __local_bh_enable_ip+0xd6/0x140 [ 174.957869][ T7402] __inet_bind+0x5e0/0xaa0 [ 174.957899][ T7402] __sys_bind+0x2e3/0x410 [ 174.957931][ T7402] ? __pfx___sys_bind+0x10/0x10 [ 174.957971][ T7402] ? rcu_is_watching+0x16/0xb0 [ 174.958006][ T7402] __x64_sys_bind+0x7a/0x90 [ 174.958035][ T7402] do_syscall_64+0x166/0x520 [ 174.958055][ T7402] ? trace_irq_disable+0x3b/0x140 [ 174.958077][ T7402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.958095][ T7402] ? clear_bhb_loop+0x70/0xc0 [ 174.958119][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.958138][ T7402] RIP: 0033:0x7ff69ed9f559 [ 174.958157][ T7402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.958170][ T7402] RSP: 002b:00007ff69fbde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 174.958190][ T7402] RAX: ffffffffffffffda RBX: 00007ff69f025fa0 RCX: 00007ff69ed9f559 [ 174.958204][ T7402] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000004 [ 174.958216][ T7402] RBP: 00007ff69ee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 174.958228][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.958239][ T7402] R13: 00007ff69f026038 R14: 00007ff69f025fa0 R15: 00007ffe62ac78b8 [ 174.958277][ T7402] [ 175.995152][ T5621] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 176.060083][ T7406] loop5: detected capacity change from 0 to 32768 [ 176.072005][ T7406] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.353 (7406) [ 176.162655][ T7406] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 176.162689][ T7406] BTRFS info (device loop5): using blake2b checksum algorithm [ 176.423451][ T7406] BTRFS info (device loop5): enabling ssd optimizations [ 176.423476][ T7406] BTRFS info (device loop5): turning on async discard [ 176.423491][ T7406] BTRFS info (device loop5): enabling free space tree [ 176.699765][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.703275][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.707813][ T7369] bridge_slave_0: entered allmulticast mode [ 176.718912][ T7369] bridge_slave_0: entered promiscuous mode [ 176.746315][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.746419][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.746581][ T7369] bridge_slave_1: entered allmulticast mode [ 176.752461][ T7369] bridge_slave_1: entered promiscuous mode [ 176.854387][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.870727][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.923899][ T7443] FAULT_INJECTION: forcing a failure. [ 176.923899][ T7443] name fail_futex, interval 1, probability 0, space 0, times 1 [ 176.923934][ T7443] CPU: 0 UID: 0 PID: 7443 Comm: syz.4.356 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.923959][ T7443] Tainted: [L]=SOFTLOCKUP [ 176.923965][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.923976][ T7443] Call Trace: [ 176.923984][ T7443] [ 176.923992][ T7443] dump_stack_lvl+0xe8/0x150 [ 176.924027][ T7443] should_fail_ex+0x3eb/0x540 [ 176.924059][ T7443] get_futex_key+0x1ab/0x1410 [ 176.924092][ T7443] ? kasan_save_track+0x4f/0x80 [ 176.924116][ T7443] ? __kasan_slab_free+0x5c/0x80 [ 176.924138][ T7443] ? __x64_sys_openat+0x138/0x170 [ 176.924173][ T7443] ? __pfx_get_futex_key+0x10/0x10 [ 176.924208][ T7443] futex_wake+0x119/0x5f0 [ 176.924235][ T7443] ? __pfx_futex_wake+0x10/0x10 [ 176.924273][ T7443] do_futex+0x458/0x4e0 [ 176.924306][ T7443] ? __pfx_do_futex+0x10/0x10 [ 176.924331][ T7443] ? kmem_cache_free+0x182/0x650 [ 176.924363][ T7443] __se_sys_futex+0x3a8/0x450 [ 176.924397][ T7443] ? __pfx___se_sys_futex+0x10/0x10 [ 176.924427][ T7443] ? do_user_addr_fault+0xd3f/0x1480 [ 176.924455][ T7443] ? __x64_sys_futex+0x21/0xf0 [ 176.924487][ T7443] do_syscall_64+0x166/0x520 [ 176.924508][ T7443] ? trace_irq_disable+0x3b/0x140 [ 176.924531][ T7443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.924551][ T7443] ? clear_bhb_loop+0x70/0xc0 [ 176.924576][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.924595][ T7443] RIP: 0033:0x7fcc89f9f559 [ 176.924613][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.924629][ T7443] RSP: 002b:00007fcc8aec80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 176.924650][ T7443] RAX: ffffffffffffffda RBX: 00007fcc8a225fa8 RCX: 00007fcc89f9f559 [ 176.924664][ T7443] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcc8a225fac [ 176.924677][ T7443] RBP: 00007fcc8a225fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 176.924689][ T7443] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 176.924701][ T7443] R13: 00007fcc8a226038 R14: 00007ffedf7684a0 R15: 00007ffedf768588 [ 176.924733][ T7443] [ 176.930102][ T7369] team0: Port device team_slave_0 added [ 176.942186][ T7369] team0: Port device team_slave_1 added [ 176.955162][ T5621] Bluetooth: hci2: command tx timeout [ 176.984031][ T7443] program syz.4.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.985774][ T7082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.098670][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.098687][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.098709][ T7369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.125493][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.125509][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.125532][ T7369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.404989][ T7369] hsr_slave_0: entered promiscuous mode [ 177.406012][ T7369] hsr_slave_1: entered promiscuous mode [ 177.412354][ T7369] debugfs: 'hsr0' already exists in 'hsr' [ 177.412375][ T7369] Cannot create hsr debugfs directory [ 177.821016][ T7406] BTRFS info (device loop5): balance: start -d -m [ 177.837872][ T7406] BTRFS info (device loop5): balance: canceled [ 178.012847][ T6276] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 178.238422][ T7082] veth0_vlan: entered promiscuous mode [ 178.467112][ T7082] veth1_vlan: entered promiscuous mode [ 179.064880][ T5621] Bluetooth: hci2: command tx timeout [ 179.132662][ T7369] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 179.188938][ T7474] loop5: detected capacity change from 0 to 256 [ 179.192095][ T7472] netlink: 'syz.4.363': attribute type 11 has an invalid length. [ 179.336102][ T7369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.403165][ T7369] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 179.429376][ T7369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.726784][ T7369] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 180.107380][ T7369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.147925][ T7369] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 180.166345][ T7369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.216057][ T7082] veth0_macvtap: entered promiscuous mode [ 180.251384][ T7082] veth1_macvtap: entered promiscuous mode [ 180.374203][ T7496] netlink: 'syz.4.368': attribute type 4 has an invalid length. [ 180.501874][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.550798][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.721848][ T7499] FAULT_INJECTION: forcing a failure. [ 180.721848][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 180.721883][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.3.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.721910][ T7499] Tainted: [L]=SOFTLOCKUP [ 180.721918][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.721930][ T7499] Call Trace: [ 180.721937][ T7499] [ 180.721946][ T7499] dump_stack_lvl+0xe8/0x150 [ 180.721981][ T7499] should_fail_ex+0x3eb/0x540 [ 180.722012][ T7499] should_failslab+0xa8/0x100 [ 180.722039][ T7499] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 180.722063][ T7499] ? kasprintf+0xe2/0x140 [ 180.722087][ T7499] ? kasprintf+0xe2/0x140 [ 180.722119][ T7499] kvasprintf+0xeb/0x1a0 [ 180.722148][ T7499] ? __pfx_kvasprintf+0x10/0x10 [ 180.722182][ T7499] ? lockdep_hardirqs_on+0x7b/0x110 [ 180.722208][ T7499] ? kern_path+0xd1/0x150 [ 180.722236][ T7499] kasprintf+0xe2/0x140 [ 180.722260][ T7499] ? kern_path+0xd1/0x150 [ 180.722284][ T7499] ? __pfx_kasprintf+0x10/0x10 [ 180.722323][ T7499] logfc+0x15b/0x520 [ 180.722366][ T7499] ? __pfx_logfc+0x10/0x10 [ 180.722393][ T7499] ? __pfx___futex_wait+0x10/0x10 [ 180.722420][ T7499] ? ubi_open_volume_path+0x98/0x1b0 [ 180.722451][ T7499] ubifs_get_tree+0xf69/0x7450 [ 180.722481][ T7499] ? __mutex_trylock_common+0x15f/0x270 [ 180.722512][ T7499] ? __pfx___mutex_trylock_common+0x10/0x10 [ 180.722545][ T7499] ? rcu_is_watching+0x16/0xb0 [ 180.722569][ T7499] ? hook_capable+0x1c3/0x5e0 [ 180.722589][ T7499] ? trace_contention_end+0x3d/0x140 [ 180.722617][ T7499] ? __mutex_lock+0x305/0x15a0 [ 180.722639][ T7499] ? __pfx_hook_capable+0x10/0x10 [ 180.722664][ T7499] ? lock_acquire+0x115/0x350 [ 180.722691][ T7499] ? __pfx_ubifs_get_tree+0x10/0x10 [ 180.722720][ T7499] ? apparmor_capable+0x126/0x170 [ 180.722754][ T7499] vfs_get_tree+0x92/0x2a0 [ 180.722781][ T7499] vfs_cmd_create+0xa2/0x200 [ 180.722811][ T7499] __se_sys_fsconfig+0x6b9/0x810 [ 180.722844][ T7499] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 180.722874][ T7499] ? rcu_is_watching+0x16/0xb0 [ 180.722907][ T7499] ? __x64_sys_fsconfig+0x20/0xc0 [ 180.722936][ T7499] do_syscall_64+0x166/0x520 [ 180.722957][ T7499] ? trace_irq_disable+0x3b/0x140 [ 180.722980][ T7499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.723000][ T7499] ? clear_bhb_loop+0x70/0xc0 [ 180.723024][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.723043][ T7499] RIP: 0033:0x7f21ee99f559 [ 180.723062][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.723077][ T7499] RSP: 002b:00007f21ef90b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 180.723097][ T7499] RAX: ffffffffffffffda RBX: 00007f21eec25fa0 RCX: 00007f21ee99f559 [ 180.723112][ T7499] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 180.723123][ T7499] RBP: 00007f21eea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 180.723135][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.723147][ T7499] R13: 00007f21eec26038 R14: 00007f21eec25fa0 R15: 00007ffd65bda088 [ 180.723179][ T7499] [ 180.736138][ T7292] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.736187][ T7292] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.736219][ T7292] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.736251][ T7292] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.824784][ T7499] UBIFS error (pid: 7499): cannot open "c:::", error -22 [ 181.094437][ T7266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.094459][ T7266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.125976][ T5621] Bluetooth: hci2: command tx timeout [ 181.178436][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.178457][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.243136][ T7505] FAULT_INJECTION: forcing a failure. [ 181.243136][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 181.243171][ T7505] CPU: 1 UID: 0 PID: 7505 Comm: syz.3.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.243199][ T7505] Tainted: [L]=SOFTLOCKUP [ 181.243209][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.243220][ T7505] Call Trace: [ 181.243228][ T7505] [ 181.243236][ T7505] dump_stack_lvl+0xe8/0x150 [ 181.243272][ T7505] should_fail_ex+0x3eb/0x540 [ 181.243302][ T7505] should_failslab+0xa8/0x100 [ 181.243331][ T7505] __kmalloc_cache_noprof+0x9e/0x600 [ 181.243353][ T7505] ? lock_acquire+0x115/0x350 [ 181.243374][ T7505] ? subflow_ulp_init+0xd0/0x650 [ 181.243401][ T7505] ? subflow_ulp_init+0xd0/0x650 [ 181.243446][ T7505] subflow_ulp_init+0xd0/0x650 [ 181.243481][ T7505] tcp_set_ulp+0x557/0x610 [ 181.243512][ T7505] mptcp_subflow_create_socket+0x35d/0x810 [ 181.243543][ T7505] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 181.243570][ T7505] ? rcu_is_watching+0x16/0xb0 [ 181.243595][ T7505] ? begin_current_label_crit_section+0x299/0x830 [ 181.243626][ T7505] __mptcp_nmpc_sk+0x155/0x770 [ 181.243653][ T7505] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.243681][ T7505] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 181.243708][ T7505] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 181.243743][ T7505] mptcp_sendmsg_fastopen+0xce/0x540 [ 181.243766][ T7505] ? mptcp_rps_record_subflows+0x1d/0x400 [ 181.243797][ T7505] mptcp_sendmsg+0x1a4a/0x1cf0 [ 181.243847][ T7505] ? __lock_acquire+0x747/0x2de0 [ 181.243874][ T7505] ? __lock_acquire+0x747/0x2de0 [ 181.243899][ T7505] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 181.243922][ T7505] ? aa_sock_msg_perm+0xfc/0x210 [ 181.243949][ T7505] ? inet_sendmsg+0x298/0x320 [ 181.243972][ T7505] ? __pfx_inet_sendmsg+0x10/0x10 [ 181.243990][ T7505] sock_sendmsg_nosec+0x10f/0x190 [ 181.244019][ T7505] ____sys_sendmsg+0x54e/0x850 [ 181.244047][ T7505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.244080][ T7505] ? import_iovec+0x73/0xa0 [ 181.244111][ T7505] ___sys_sendmsg+0x2a5/0x360 [ 181.244137][ T7505] ? __lock_acquire+0x747/0x2de0 [ 181.244164][ T7505] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.244191][ T7505] ? futex_wait+0x2a2/0x390 [ 181.244246][ T7505] ? __fget_files+0x3a2/0x420 [ 181.244266][ T7505] ? __fget_files+0x2a/0x420 [ 181.244296][ T7505] __x64_sys_sendmsg+0x1b1/0x290 [ 181.244322][ T7505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.244365][ T7505] do_syscall_64+0x166/0x520 [ 181.244387][ T7505] ? trace_irq_disable+0x3b/0x140 [ 181.244410][ T7505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.244430][ T7505] ? clear_bhb_loop+0x70/0xc0 [ 181.244454][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.244473][ T7505] RIP: 0033:0x7f21ee99f559 [ 181.244492][ T7505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.244514][ T7505] RSP: 002b:00007f21ef90b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.244535][ T7505] RAX: ffffffffffffffda RBX: 00007f21eec25fa0 RCX: 00007f21ee99f559 [ 181.244549][ T7505] RDX: 0000000030000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 181.244562][ T7505] RBP: 00007f21eea36b20 R08: 0000000000000000 R09: 0000000000000000 [ 181.244574][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.244586][ T7505] R13: 00007f21eec26038 R14: 00007f21eec25fa0 R15: 00007ffd65bda088 [ 181.244618][ T7505] [ 181.295665][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.370050][ T33] kauditd_printk_skb: 74 callbacks suppressed [ 181.370068][ T33] audit: type=1326 audit(1792515965.222:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc89f9f559 code=0x7ffc0000 [ 181.370108][ T33] audit: type=1326 audit(1792515965.222:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc89f9f559 code=0x7ffc0000 [ 181.403626][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.413934][ T33] audit: type=1326 audit(1792515965.272:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcc89f9f559 code=0x7ffc0000 [ 181.413988][ T33] audit: type=1326 audit(1792515965.272:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc89f9f559 code=0x7ffc0000 [ 181.414026][ T33] audit: type=1326 audit(1792515965.272:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc89f9f559 code=0x7ffc0000 [ 181.460746][ T33] audit: type=1326 audit(1792515965.322:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcc89f9f559 code=0x7ffc0000 [ 181.460809][ T33] audit: type=1326 audit(1792515965.322:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc89f9f559 code=0x7ffc0000 [ 181.471536][ T33] audit: type=1326 audit(1792515965.332:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc89f9f559 code=0x7ffc0000 [ 181.487203][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.487301][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.504983][ T33] audit: type=1326 audit(1792515965.362:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc89f5fd8e code=0x7ffc0000 [ 181.505031][ T33] audit: type=1326 audit(1792515965.362:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7509 comm="syz.4.373" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc89f9f1eb code=0x7ffc0000 [ 181.524681][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.524850][ T7266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.831376][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 181.978135][ T31] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 182.000208][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.000235][ T31] usb 5-1: Product: syz [ 182.000248][ T31] usb 5-1: Manufacturer: syz [ 182.000261][ T31] usb 5-1: SerialNumber: syz [ 182.033817][ T31] usb 5-1: USB2VGA dongle found at address 2 [ 182.067098][ T31] usb 5-1: Allocated 8 output buffers [ 182.297447][ T31] usb 5-1: Failed to early initialize device [ 182.350653][ T31] usb 5-1: USB disconnect, device number 2 [ 182.710444][ T7515] loop5: detected capacity change from 0 to 32768 [ 182.713657][ T7515] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.375 (7515) [ 182.746419][ T5726] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.782329][ T7515] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.782371][ T7515] BTRFS info (device loop5): using crc32c checksum algorithm [ 182.871172][ T7515] BTRFS info (device loop5): enabling ssd optimizations [ 182.871233][ T7515] BTRFS info (device loop5): turning on flush-on-commit [ 182.871260][ T7515] BTRFS info (device loop5): enabling free space tree [ 182.871301][ T7515] BTRFS info (device loop5): enabling auto defrag [ 182.871333][ T7515] BTRFS info (device loop5): use lzo compression, level 1 [ 182.871350][ T7515] BTRFS info (device loop5): max_inline set to 4096 [ 182.936088][ T5726] usb 4-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 182.937067][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.937104][ T5726] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 182.937124][ T5726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.937143][ T5726] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.937162][ T5726] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 182.937197][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.023019][ T7530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.034215][ T5726] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 183.044228][ T5726] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 183.044313][ T5726] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 183.066379][ T5726] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 183.068170][ T5726] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 183.068257][ T5726] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 183.100041][ T5726] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 183.160574][ T7369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.532469][ T5342] usb 4-1: USB disconnect, device number 4 [ 183.558459][ T6276] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.562654][ T5342] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 183.638406][ T5342] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 183.640394][ T5342] keyspan 4-1:1.0: device disconnected [ 184.388288][ T7369] veth0_vlan: entered promiscuous mode [ 184.427694][ T7369] veth1_vlan: entered promiscuous mode [ 184.557952][ T7369] veth0_macvtap: entered promiscuous mode [ 184.583561][ T7369] veth1_macvtap: entered promiscuous mode [ 184.677945][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.723554][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.938495][ T7292] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.024929][ T7292] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.169010][ T7292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.169032][ T7292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.234958][ T7292] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.235002][ T7292] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.382697][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.382722][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.693786][ T7598] loop3: detected capacity change from 0 to 256 [ 185.823025][ T7598] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 186.043749][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.7.341'. [ 186.043789][ T7606] netlink: 32 bytes leftover after parsing attributes in process `syz.7.341'. [ 186.043804][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.7.341'. [ 186.044724][ T7606] netlink: 32 bytes leftover after parsing attributes in process `syz.7.341'. [ 186.627870][ T5726] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 186.710059][ T7627] FAULT_INJECTION: forcing a failure. [ 186.710059][ T7627] name failslab, interval 1, probability 0, space 0, times 0 [ 186.710097][ T7627] CPU: 1 UID: 0 PID: 7627 Comm: syz.4.408 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.710125][ T7627] Tainted: [L]=SOFTLOCKUP [ 186.710133][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.710145][ T7627] Call Trace: [ 186.710153][ T7627] [ 186.710162][ T7627] dump_stack_lvl+0xe8/0x150 [ 186.710198][ T7627] should_fail_ex+0x3eb/0x540 [ 186.710231][ T7627] should_failslab+0xa8/0x100 [ 186.710257][ T7627] ? alloc_empty_file+0x5b/0x1d0 [ 186.710288][ T7627] kmem_cache_alloc_noprof+0x9c/0x600 [ 186.710321][ T7627] ? alloc_empty_file+0x5b/0x1d0 [ 186.710357][ T7627] alloc_empty_file+0x5b/0x1d0 [ 186.710387][ T7627] dentry_open+0x44/0xa0 [ 186.710414][ T7627] ovl_dir_read+0x85/0x4a0 [ 186.710447][ T7627] ? __pfx_ovl_dir_read+0x10/0x10 [ 186.710473][ T7627] ? ovl_check_d_type_supported+0xba/0x150 [ 186.710504][ T7627] ovl_check_d_type_supported+0xc5/0x150 [ 186.710536][ T7627] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 186.710559][ T7627] ? __pfx_ovl_check_d_type+0x10/0x10 [ 186.710594][ T7627] ? do_raw_spin_unlock+0xf5/0x200 [ 186.710628][ T7627] ? _raw_spin_unlock+0x28/0x50 [ 186.710650][ T7627] ovl_get_workdir+0x4c4/0x1980 [ 186.710675][ T7627] ? __lock_acquire+0x747/0x2de0 [ 186.710705][ T7627] ? __pfx_ovl_get_workdir+0x10/0x10 [ 186.710736][ T7627] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 186.710762][ T7627] ? pcpu_alloc_noprof+0x100f/0x1900 [ 186.710795][ T7627] ? rcu_is_watching+0x16/0xb0 [ 186.710829][ T7627] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.710867][ T7627] ? do_raw_spin_unlock+0xf5/0x200 [ 186.710898][ T7627] ? _raw_spin_unlock+0x28/0x50 [ 186.710916][ T7627] ? ovl_inuse_trylock+0x177/0x230 [ 186.710943][ T7627] ovl_fill_super+0x1671/0x4370 [ 186.710983][ T7627] ? __mutex_unlock_slowpath+0x731/0x900 [ 186.711010][ T7627] ? super_dev_insert+0x2a/0xe00 [ 186.711036][ T7627] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.711074][ T7627] ? __pfx_ovl_fill_super+0x10/0x10 [ 186.711095][ T7627] ? shrinker_register+0x158/0x210 [ 186.711127][ T7627] ? sget_fc+0x195c/0x1a60 [ 186.711169][ T7627] ? __pfx_ovl_next_opt+0x10/0x10 [ 186.711205][ T7627] ? __pfx_ovl_fill_super+0x10/0x10 [ 186.711230][ T7627] get_tree_nodev+0xbb/0x150 [ 186.711256][ T7627] vfs_get_tree+0x92/0x2a0 [ 186.711283][ T7627] do_new_mount+0x325/0xb00 [ 186.711309][ T7627] ? __pfx_do_new_mount+0x10/0x10 [ 186.711332][ T7627] ? ns_capable+0x84/0xe0 [ 186.711359][ T7627] ? path_mount+0x647/0x1050 [ 186.711384][ T7627] ? user_path_at+0xd4/0x160 [ 186.711409][ T7627] __se_sys_mount+0x31d/0x420 [ 186.711435][ T7627] ? __pfx___se_sys_mount+0x10/0x10 [ 186.711463][ T7627] ? __x64_sys_mount+0x20/0xc0 [ 186.711485][ T7627] do_syscall_64+0x166/0x520 [ 186.711505][ T7627] ? trace_irq_disable+0x3b/0x140 [ 186.711536][ T7627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.711557][ T7627] ? clear_bhb_loop+0x70/0xc0 [ 186.711583][ T7627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.711607][ T7627] RIP: 0033:0x7fcc89f9f559 [ 186.711627][ T7627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.711649][ T7627] RSP: 002b:00007fcc8aec8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 186.711670][ T7627] RAX: ffffffffffffffda RBX: 00007fcc8a225fa0 RCX: 00007fcc89f9f559 [ 186.711685][ T7627] RDX: 0000200000000bc0 RSI: 0000200000000b80 RDI: 0000000000000000 [ 186.711698][ T7627] RBP: 00007fcc8a036b20 R08: 0000200000000c00 R09: 0000000000000000 [ 186.711711][ T7627] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 186.711723][ T7627] R13: 00007fcc8a226038 R14: 00007fcc8a225fa0 R15: 00007ffedf768588 [ 186.711757][ T7627] [ 186.903771][ T5726] usb 7-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 186.936346][ T5726] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 186.936372][ T5726] usb 7-1: config 0 has no interface number 0 [ 186.936409][ T5726] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 186.936432][ T5726] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.936453][ T5726] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 187.209384][ T5726] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 187.209411][ T5726] usb 7-1: Product: syz [ 187.209425][ T5726] usb 7-1: SerialNumber: syz [ 187.213410][ T5726] usb 7-1: config 0 descriptor?? [ 187.241453][ T5726] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 187.254411][ T5726] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input9 [ 187.582781][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.584644][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.584905][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.590611][ T31] usb 7-1: USB disconnect, device number 2 [ 187.592242][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.592268][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 187.704034][ T31] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 187.879091][ T7649] loop4: detected capacity change from 0 to 128 [ 187.900814][ T7649] EXT4-fs (loop4): Test dummy encryption mode enabled [ 187.920330][ T7649] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.922975][ T7649] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.970196][ T7649] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 187.990095][ T7653] ip_tables: iptables: counters copy to user failed while replacing table [ 188.006431][ T33] kauditd_printk_skb: 51 callbacks suppressed [ 188.006446][ T33] audit: type=1326 audit(1792515971.872:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.3.418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x0 [ 188.266858][ T6112] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.381377][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 188.573291][ T7673] FAULT_INJECTION: forcing a failure. [ 188.573291][ T7673] name failslab, interval 1, probability 0, space 0, times 0 [ 188.573329][ T7673] CPU: 0 UID: 0 PID: 7673 Comm: syz.5.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.573357][ T7673] Tainted: [L]=SOFTLOCKUP [ 188.573364][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.573376][ T7673] Call Trace: [ 188.573385][ T7673] [ 188.573395][ T7673] dump_stack_lvl+0xe8/0x150 [ 188.573432][ T7673] should_fail_ex+0x3eb/0x540 [ 188.573473][ T7673] should_failslab+0xa8/0x100 [ 188.573499][ T7673] ? alloc_vfsmnt+0x23/0x510 [ 188.573532][ T7673] kmem_cache_alloc_noprof+0x9c/0x600 [ 188.573569][ T7673] ? __pfx___mutex_lock+0x10/0x10 [ 188.573593][ T7673] ? alloc_vfsmnt+0x23/0x510 [ 188.573626][ T7673] alloc_vfsmnt+0x23/0x510 [ 188.573656][ T7673] vfs_create_mount+0x68/0x310 [ 188.573686][ T7673] __se_sys_fsmount+0x5e3/0xbf0 [ 188.573715][ T7673] ? __pfx___se_sys_fsmount+0x10/0x10 [ 188.573755][ T7673] do_syscall_64+0x166/0x520 [ 188.573776][ T7673] ? trace_irq_disable+0x3b/0x140 [ 188.573800][ T7673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.573820][ T7673] ? clear_bhb_loop+0x70/0xc0 [ 188.573843][ T7673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.573862][ T7673] RIP: 0033:0x7ff69ed9f559 [ 188.573889][ T7673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.573907][ T7673] RSP: 002b:00007ff69fbde028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 188.573928][ T7673] RAX: ffffffffffffffda RBX: 00007ff69f025fa0 RCX: 00007ff69ed9f559 [ 188.573942][ T7673] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 188.573954][ T7673] RBP: 00007ff69ee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 188.573966][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.573976][ T7673] R13: 00007ff69f026038 R14: 00007ff69f025fa0 R15: 00007ffe62ac78b8 [ 188.574006][ T7673] [ 188.923062][ T7679] loop4: detected capacity change from 0 to 512 [ 188.978894][ T7679] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 188.978923][ T7679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.009703][ T7679] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #11: comm syz.4.424: invalid indirect mapped block 9 (level 0) [ 189.009739][ T7679] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.014856][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 189.014880][ C0] EXT4-fs (loop4): initial error at time 1792515972: ext4_free_branches:1040: inode 11 [ 189.014917][ C0] EXT4-fs (loop4): last error at time 1792515972: ext4_free_branches:1040: inode 11 [ 189.121213][ T7679] EXT4-fs (loop4): 1 truncate cleaned up [ 189.135631][ T7679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.331881][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.427'. [ 189.331907][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.427'. [ 189.458932][ T6112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.647652][ T7694] loop7: detected capacity change from 0 to 256 [ 189.651842][ T7694] exfat: Deprecated parameter 'utf8' [ 189.707988][ T7694] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 190.445148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 191.265033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 192.195238][ T7700] loop6: detected capacity change from 0 to 2048 [ 192.219202][ T7700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.542509][ T7712] netlink: 'syz.7.435': attribute type 1 has an invalid length. [ 193.667295][ T33] audit: type=1326 audit(1792515977.532:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 193.667536][ T33] audit: type=1326 audit(1792515977.532:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 193.671881][ T33] audit: type=1326 audit(1792515977.532:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 193.672991][ T33] audit: type=1326 audit(1792515977.532:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 193.673235][ T33] audit: type=1326 audit(1792515977.532:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 193.678842][ T33] audit: type=1326 audit(1792515977.542:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 193.678975][ T33] audit: type=1326 audit(1792515977.542:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 193.685281][ T33] audit: type=1326 audit(1792515977.542:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 193.685329][ T33] audit: type=1326 audit(1792515977.542:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 193.688787][ T33] audit: type=1326 audit(1792515977.542:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.3.444" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 194.323472][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 194.688549][ T7762] input: syz0 as /devices/virtual/input/input10 [ 194.756213][ T7768] Bluetooth: MGMT ver 1.23 [ 195.475772][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.490566][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.902760][ T7787] IPVS: Scheduler module ip_vs_sip not found [ 199.571338][ T7794] loop7: detected capacity change from 0 to 40427 [ 199.634250][ T7794] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 199.634281][ T7794] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 199.681885][ T7794] F2FS-fs (loop7): invalid crc value [ 199.682442][ T7794] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 200.689449][ T7837] netlink: 'syz.6.470': attribute type 1 has an invalid length. [ 200.862197][ T7841] netlink: 'syz.6.470': attribute type 10 has an invalid length. [ 200.862221][ T7841] netlink: 40 bytes leftover after parsing attributes in process `syz.6.470'. [ 201.091016][ T7794] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 201.731110][ T7841] dummy0: entered promiscuous mode [ 203.134094][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.479'. [ 203.640221][ T7858] bond1: entered promiscuous mode [ 203.680831][ T7858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.815399][ T7869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.888388][ T7869] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 204.007784][ T7869] bond1: (slave sit1): Error -95 calling set_mac_address [ 206.156135][ T7902] netlink: 32 bytes leftover after parsing attributes in process `syz.7.490'. [ 206.783385][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.784068][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.316322][ T7923] loop5: detected capacity change from 0 to 2048 [ 207.510900][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.578093][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.608503][ T7923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.047866][ T7930] fuse: Bad value for 'fd' [ 210.096317][ T7276] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.096352][ T7276] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.097269][ T7276] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.097298][ T7276] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.649812][ T7253] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.649847][ T7253] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.649885][ T7253] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.649908][ T7253] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.885951][ T7923] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 210.942890][ T7923] EXT4-fs (loop5): Remounting filesystem read-only [ 210.943052][ T7923] overlayfs: failed to verify upper root origin [ 211.086258][ T7937] netlink: 64 bytes leftover after parsing attributes in process `syz.6.501'. [ 211.138588][ T7937] syzkaller1: entered promiscuous mode [ 211.138614][ T7937] syzkaller1: entered allmulticast mode [ 213.142297][ T6276] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.384505][ T7288] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.680667][ T7952] input: syz1 as /devices/virtual/input/input11 [ 214.942368][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.508'. [ 214.987037][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'. [ 215.001511][ T7288] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.108230][ T4926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.191794][ T4926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.207494][ T4926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.255086][ T4926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.283567][ T4926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.493471][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.508'. [ 215.632669][ T7288] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.032389][ T7976] loop6: detected capacity change from 0 to 512 [ 216.046753][ T7976] EXT4-fs (loop6): Test dummy encryption mode enabled [ 216.118476][ T7976] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.514: inode has both inline data and extents flags [ 216.118512][ T7976] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 216.119440][ T7976] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.514: couldn't read orphan inode 15 (err -117) [ 216.119472][ T7976] loop6: lost filesystem error report for type 5 error -117 [ 216.124988][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 216.125015][ C1] EXT4-fs (loop6): initial error at time 1792515999: ext4_orphan_get:1404: inode 15 [ 216.125043][ C1] EXT4-fs (loop6): last error at time 1792515999: ext4_orphan_get:1409 [ 216.209399][ T7976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.508224][ T7976] fscrypt: AES-256-XTS using blk-crypto-fallback [ 216.582031][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 216.582060][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 216.777720][ T7082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.003909][ T7288] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.435066][ T4926] Bluetooth: hci2: command tx timeout [ 217.504967][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 217.659389][ T31] usb 5-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.660812][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.697794][ T31] usb 5-1: config 0 descriptor?? [ 217.802693][ T31] cp210x 5-1:0.0: cp210x converter detected [ 217.923034][ T7288] bridge_slave_1: left allmulticast mode [ 217.923064][ T7288] bridge_slave_1: left promiscuous mode [ 217.923359][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.974490][ T7288] bridge_slave_0: left allmulticast mode [ 217.974554][ T7288] bridge_slave_0: left promiscuous mode [ 217.974871][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.005018][ T7992] loop4: detected capacity change from 0 to 256 [ 218.006567][ T7992] vfat: Unknown parameter 'shortname:”<á95' [ 218.352282][ T31] usb 5-1: cp210x converter now attached to ttyUSB0 [ 218.762676][ T1225] usb 5-1: USB disconnect, device number 3 [ 218.918197][ T1225] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.949870][ T1225] cp210x 5-1:0.0: device disconnected [ 219.515204][ T4926] Bluetooth: hci2: command tx timeout [ 219.732521][ T7288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.752381][ T7288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.779998][ T7288] bond0 (unregistering): Released all slaves [ 220.440426][ T33] kauditd_printk_skb: 33 callbacks suppressed [ 220.440446][ T33] audit: type=1326 audit(1792516004.302:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 220.440487][ T33] audit: type=1326 audit(1792516004.302:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 220.441459][ T33] audit: type=1326 audit(1792516004.302:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 220.441961][ T33] audit: type=1326 audit(1792516004.302:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 220.593747][ T33] audit: type=1326 audit(1792516004.452:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 220.593802][ T33] audit: type=1326 audit(1792516004.452:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 220.593840][ T33] audit: type=1326 audit(1792516004.452:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 220.712048][ T8025] loop5: detected capacity change from 0 to 164 [ 220.756470][ T33] audit: type=1326 audit(1792516004.622:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ee99f559 code=0x7ffc0000 [ 220.855263][ T8025] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 220.931209][ T33] audit: type=1326 audit(1792516260.785:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21ee99f2c2 code=0x7ffc0000 [ 220.931259][ T33] audit: type=1326 audit(1792516260.785:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.3.529" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f21ee99f357 code=0x7ffc0000 [ 221.414875][ T7955] rxe_eth0 speed is unknown, defaulting to 1000 [ 221.595091][ T4926] Bluetooth: hci2: command tx timeout [ 221.731552][ T8038] netlink: 'syz.6.535': attribute type 1 has an invalid length. [ 221.802292][ T8038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.349480][ T8051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.043448][ T8041] bond1: (slave geneve2): making interface the new active one [ 223.065490][ T8041] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 223.572019][ T7288] hsr_slave_0: left promiscuous mode [ 223.588785][ T7288] hsr_slave_1: left promiscuous mode [ 223.625619][ T8058] loop4: detected capacity change from 0 to 256 [ 223.629416][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.629440][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.670527][ T7288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.671142][ T7288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.675076][ T5621] Bluetooth: hci2: command tx timeout [ 223.740403][ T8060] ip_tables: iptables: counters copy to user failed while replacing table [ 225.693645][ T5621] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 225.709066][ T5621] Bluetooth: hci4: Injecting HCI hardware error event [ 225.792709][ T5621] Bluetooth: hci4: hardware error 0x00 [ 226.903610][ C1] sched: DL replenish lagged too much [ 257.524621][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.544317][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.246707][ T7288] veth1_macvtap: left promiscuous mode [ 274.289842][ T7288] veth0_macvtap: left promiscuous mode [ 274.380911][ T7288] veth1_vlan: left promiscuous mode [ 274.505557][ T7288] veth0_vlan: left promiscuous mode [ 290.030991][ T5621] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 293.148782][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 307.939730][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 318.449239][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.462900][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.144003][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 376.142926][ T35] INFO: task kworker/u8:8:1029 blocked for more than 143 seconds. [ 376.142957][ T35] Tainted: G L syzkaller #0 [ 376.142968][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.142996][ T35] task:kworker/u8:8 state:D stack:23912 pid:1029 tgid:1029 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 376.143050][ T35] Workqueue: ipv6_addrconf addrconf_dad_work [ 376.143085][ T35] Call Trace: [ 376.143092][ T35] [ 376.143115][ T35] __schedule+0x17dd/0x5820 [ 376.143152][ T35] ? trace_irq_disable+0x3b/0x140 [ 376.143188][ T35] ? __pfx___schedule+0x10/0x10 [ 376.143218][ T35] ? schedule+0x90/0x2b0 [ 376.143240][ T35] schedule+0x164/0x2b0 [ 376.143262][ T35] schedule_preempt_disabled+0x13/0x30 [ 376.143282][ T35] __mutex_lock+0x7c4/0x15a0 [ 376.143308][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 376.143335][ T35] ? addrconf_dad_work+0x116/0x15c0 [ 376.143358][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 376.143401][ T35] addrconf_dad_work+0x116/0x15c0 [ 376.143433][ T35] ? __pfx_addrconf_dad_work+0x10/0x10 [ 376.143464][ T35] ? rcu_is_watching+0x16/0xb0 [ 376.143492][ T35] ? process_scheduled_works+0x97a/0x1630 [ 376.143519][ T35] process_scheduled_works+0xc3d/0x1630 [ 376.143577][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.143608][ T35] ? assign_work+0x3cf/0x5d0 [ 376.143640][ T35] worker_thread+0xa47/0xfb0 [ 376.143681][ T35] ? __kthread_parkme+0x71/0x1f0 [ 376.143718][ T35] kthread+0x38b/0x480 [ 376.143739][ T35] ? __ ** replaying previous printk message ** [ 376.143739][ T35] ? __pfx_worker_thread+0x10/0x10 [ 376.143763][ T35] ? __pfx_kthread+0x10/0x10 [ 376.143784][ T35] ret_from_fork+0x514/0xb70 [ 376.143808][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 376.143828][ T35] ? __switch_to+0xc78/0x1410 [ 376.143857][ T35] ? __pfx_kthread+0x10/0x10 [ 376.143879][ T35] ret_from_fork_asm+0x1a/0x30 [ 376.143915][ T35] [ 376.144057][ T35] INFO: task kworker/u8:45:7276 blocked for more than 143 seconds. [ 376.144074][ T35] Tainted: G L syzkaller #0 [ 376.144084][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.144093][ T35] task:kworker/u8:45 state:D stack:25128 pid:7276 tgid:7276 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 376.144174][ T35] Workqueue: events_unbound linkwatch_event [ 376.144200][ T35] Call Trace: [ 376.144206][ T35] [ 376.144218][ T35] __schedule+0x17dd/0x5820 [ 376.144259][ T35] ? __lock_acquire+0x747/0x2de0 [ 376.144287][ T35] ? __pfx___schedule+0x10/0x10 [ 376.144317][ T35] ? schedule+0x90/0x2b0 [ 376.144340][ T35] schedule+0x164/0x2b0 [ 376.144362][ T35] schedule_preempt_disabled+0x13/0x30 [ 376.144381][ T35] __mutex_lock+0x7c4/0x15a0 [ 376.144407][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 376.144433][ T35] ? linkwatch_event+0xe/0x60 [ 376.144460][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 376.144479][ T35] ? lock_acquire+0x115/0x350 [ 376.144504][ T35] ? rcu_is_watching+0x16/0xb0 [ 376.144528][ T35] ? process_scheduled_works+0x97a/0x1630 [ 376.144555][ T35] linkwatch_event+0xe/0x60 [ 376.144579][ T35] process_scheduled_works+0xc3d/0x1630 [ 376.144634][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.144676][ T35] ? assign_work+0x3cf/0x5d0 [ 376.144707][ T35] worker_thread+0xa47/0xfb0 [ 376.144760][ T35] kthread+0x38b/0x480 [ 376.162229][ T35] ? __pfx_worker_thread+0x10/0x10 [ 376.162271][ T35] ? __pfx_kthread+0x10/0x10 [ 376.162294][ T35] ret_from_fork+0x514/0xb70 [ 376.162318][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 376.162338][ T35] ? __switch_to+0xc78/0x1410 [ 376.162368][ T35] ? __pfx_kthread+0x10/0x10 [ 376.162390][ T35] ret_from_fork_asm+0x1a/0x30 [ 376.162425][ T35] [ 376.162458][ T35] INFO: task syz-executor:7955 blocked for more than 143 seconds. [ 376.162476][ T35] Tainted: G L syzkaller #0 [ 376.162487][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.162495][ T35] task:syz-executor state:D stack:25432 pid:7955 tgid:7955 ppid:7943 task_flags:0x400140 flags:0x00080000 [ 376.162550][ T35] Call Trace: [ 376.162556][ T35] [ 376.162568][ T35] __schedule+0x17dd/0x5820 [ 376.162603][ T35] ? __kernel_text_address+0xd/0x30 [ 376.162628][ T35] ? arch_stack_walk+0xfb/0x150 [ 376.162656][ T35] ? __pfx___schedule+0x10/0x10 [ 376.162685][ T35] ? schedule+0x90/0x2b0 [ 376.162708][ T35] schedule+0x164/0x2b0 [ 376.162730][ T35] schedule_preempt_disabled+0x13/0x30 [ 376.162749][ T35] __mutex_lock+0x7c4/0x15a0 [ 376.162775][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 376.162801][ T35] ? ip_tunnel_init_net+0x2ee/0x870 [ 376.162824][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 376.162867][ T35] ip_tunnel_init_net+0x2ee/0x870 [ 376.162894][ T35] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 376.162921][ T35] ? __kmalloc_noprof+0x387/0x710 [ 376.162941][ T35] ? __kmalloc_noprof+0x1a6/0x710 [ 376.162958][ T35] ? ops_init+0x7b/0x5d0 [ 376.162985][ T35] ops_init+0x35d/0x5d0 [ 376.163014][ T35] setup_net+0x118/0x350 [ 376.163045][ T35] ? __pfx_setup_net+0x10/0x10 [ 376.163074][ T35] ? down_read_killable+0x1b6/0x3b0 [ 376.163107][ T35] ? __ns_common_init+0x384/0x590 [ 376.163138][ T35] copy_net_ns+0x536/0x770 [ 376.163187][ T35] create_new_namespaces+0x3f0/0x6b0 [ 376.163217][ T35] ? security_capable+0x7e/0x2c0 [ 376.163246][ T35] unshare_nsproxy_namespaces+0x144/0x190 [ 376.163276][ T35] ksys_unshare+0x532/0x890 [ 376.163307][ T35] ? __pfx_ksys_unshare+0x10/0x10 [ 376.163331][ T35] ? fput_close_sync+0x11f/0x240 [ 376.163351][ T35] ? __pfx_do_faccessat+0x10/0x10 [ 376.163371][ T35] ? do_raw_spin_unlock+0xf5/0x200 [ 376.163410][ T35] __x64_sys_unshare+0x38/0x50 [ 376.163436][ T35] do_syscall_64+0x166/0x520 [ 376.163457][ T35] ? trace_irq_disable+0x3b/0x140 [ 376.163480][ T35] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.163499][ T35] ? clear_bhb_loop+0x70/0xc0 [ 376.163523][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.163542][ T35] RIP: 0033:0x7f103dba0827 [ 376.163560][ T35] RSP: 002b:00007ffcbfe9e6c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 376.163580][ T35] RAX: ffffffffffffffda RBX: 00007f103de25f40 RCX: 00007f103dba0827 [ 376.163594][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 376.163606][ T35] RBP: 00007f103de267b8 R08: 0000000000000000 R09: 0000000000000000 [ 376.163618][ T35] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 376.163630][ T35] R13: 0000000000000003 R14: 00007ffcbfe9e908 R15: 0000000000000000 [ 376.163661][ T35] [ 376.163688][ T35] [ 376.163688][ T35] Showing all locks held in the system: [ 376.163698][ T35] locks held by kworker/0:1/10: 3, last CPU#0: [ 376.163712][ T35] #0: ffff888058d0a548 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.163771][ T35] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.163835][ T35] #2: ffff88806a379440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 376.163886][ T35] locks held by kworker/u8:1/13: 4, last CPU#1: [ 376.163899][ T35] #0: ffff8880552a8948 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.163954][ T35] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.164005][ T35] #2: ffff88806a379440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 376.164052][ T35] #3: ffff8880348c4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 376.164110][ T35] locks held by kworker/1:0/26: 4, last CPU#1: [ 376.164123][ T35] #0: ffff888057675948 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.164178][ T35] #1: ffffc90000a0fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.164241][ T35] #2: ffff88807ecad440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 376.164288][ T35] #3: ffff888076b6aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 376.164336][ T35] locks held by kworker/1:1/31: 2, last CPU#1: [ 376.164350][ T35] #0: ffff888069172148 ((wq_completion)wg-crypt-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.164403][ T35] #1: ffffc90000a67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.164468][ T35] locks held by kworker/1:2/32: 3, last CPU#1: [ 376.164481][ T35] #0: ffff88807bb56148 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.164535][ T35] #1: ffffc90000a87c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.164598][ T35] #2: ffff88806a30aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 376.164646][ T35] locks held by khungtaskd/35: 1, last CPU#0: [ 376.164659][ T35] #0: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 376.164704][ T35] locks held by kworker/u8:2/41: 2, last CPU#1: [ 376.164717][ T35] #0: ffff8880337b4148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.164767][ T35] #1: ffffc90000b17c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.182990][ T35] locks held by kworker/u8:3/52: 3, last CPU#1: [ 376.183007][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.183058][ T35] #1: ffffc90000bc7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.183117][ T35] #2: ffff888035901258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 376.183170][ T35] locks held by kworker/u9:0/55: 6, on CPU#0: [ 376.183184][ T35] #0: ffff888034d15148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.183238][ T35] #1: ffffc9000120fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.183289][ T35] #2: ffff8880404bcf28 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 376.183337][ T35] #3: ffff8880404bc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 376.183390][ T35] #4: ffffffff913e52e0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 376.183441][ T35] #5: ffff88801330e2f8 (_T->lock#5){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630 [ 376.183491][ T35] locks held by kswapd0/92: 2, last CPU#0: [ 376.183504][ T35] #0: ffffffff8fe94a00 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa53/0x3a20 [ 376.183548][ T35] #1: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 376.183601][ T35] locks held by kworker/0:2/196: 4, on CPU#0: [ 376.183614][ T35] #0: ffff88807bb56148 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.183669][ T35] #1: ffffc90002f67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.183732][ T35] #2: ffff888076acd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 376.183781][ T35] #3: ffff88806a30aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 376.183828][ T35] locks held by kworker/u8:8/1029: 3, on CPU#0: [ 376.183842][ T35] #0: ffff88801cbfe948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.183892][ T35] #1: ffffc9000514fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.183943][ T35] #2: ffffffff9126ae20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 376.184008][ T35] locks held by kworker/u9:1/4926: 5, on CPU#0: [ 376.184021][ T35] #0: ffff8880553e2148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.184072][ T35] #1: ffffc9000fdb7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.184130][ T35] #2: ffff888056918f28 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 376.184177][ T35] #3: ffff8880569180b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 376.184229][ T35] #4: ffffffff8fd60b28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 376.184283][ T35] locks held by udevd/4976: 2, last CPU#0: [ 376.184296][ T35] #0: ffffffff90504bb8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 376.184339][ T35] #1: ffffffff8feb1630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.184386][ T35] locks held by dhcpcd/5271: 1, last CPU#0: [ 376.184399][ T35] #0: ffffffff8feb1630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.184446][ T35] locks held by syz-executor/5597: 2, last CPU#0: [ 376.184460][ T35] #0: ffffffff8feb1630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.184504][ T35] #1: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 376.184551][ T35] locks held by kworker/0:4/5599: 4, last CPU#0: [ 376.184564][ T35] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.184614][ T35] #1: ffffc90003847c40 ((work_completion)(&ht->run_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.184664][ T35] #2: ffff88801377d830 (&ht->mutex#12){+.+.}-{4:4}, at: rht_deferred_worker+0x43/0x2090 [ 376.184716][ T35] #3: ffffffff8feb1630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.184761][ T35] locks held by kworker/u9:4/5618: 4, on CPU#0: [ 376.184774][ T35] #0: ffff888013308948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203004][ T35] #1: ffffc90004547c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203058][ T35] #2: ffff888056078f28 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 376.203107][ T35] #3: ffff8880560780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 376.203168][ T35] locks held by kworker/0:5/5726: 3, on CPU#0: [ 376.203182][ T35] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203233][ T35] #1: ffffc90004de7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203282][ T35] #2: ffffffff9126ae20 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 376.203332][ T35] locks held by kworker/1:4/5733: 2, last CPU#1: [ 376.203345][ T35] #0: ffff88801c069d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203396][ T35] #1: ffffc90004e97c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203447][ T35] locks held by kworker/1:5/5740: 3, last CPU#1: [ 376.203460][ T35] #0: ffff888058d0a548 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203515][ T35] #1: ffffc90004f07c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203578][ T35] #2: ffff88806a379440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 376.203635][ T35] locks held by kworker/1:6/5741: 3, last CPU#1: [ 376.203648][ T35] #0: ffff888032a55148 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203702][ T35] #1: ffffc90004f17c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203764][ T35] #2: ffff8880348c20e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 376.203813][ T35] locks held by kworker/0:7/5804: 3, on CPU#0: [ 376.203827][ T35] #0: ffff888032a55148 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203881][ T35] #1: ffffc9000506fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.203944][ T35] #2: ffff8880348c20e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 376.203993][ T35] locks held by syz-executor/6276: 2, last CPU#1: [ 376.204006][ T35] #0: ffff888033088ce0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 376.204058][ T35] #1: ffffffff8feb1630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.204108][ T35] locks held by syz-executor/7082: 3, last CPU#0: [ 376.204122][ T35] #0: ffffffff90504bb8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 376.204166][ T35] #1: ffffffff8feb1630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.204210][ T35] #2: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 376.204261][ T35] locks held by kworker/u8:22/7249: 3, last CPU#0: [ 376.204274][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.204325][ T35] #1: ffffc90003187c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.204375][ T35] #2: ffff888055600800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 376.204423][ T35] locks held by kworker/u8:24/7251: 4, last CPU#0: [ 376.204436][ T35] #0: ffff88807a3b4948 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.204491][ T35] #1: ffffc900030f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.204542][ T35] #2: ffff888036451440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 376.204597][ T35] #3: ffff888076b6b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 376.204644][ T35] locks held by kworker/u8:25/7252: 4, last CPU#1: [ 376.204658][ T35] #0: ffff888032224148 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.204711][ T35] #1: ffffc90002e77c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.204761][ T35] #2: ffff8880358fd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 376.222785][ T35] #3: ffff8880348c2ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 376.222838][ T35] locks held by kworker/u8:26/7253: 3, last CPU#0: [ 376.222853][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.222905][ T35] #1: ffffc90002e67c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.222957][ T35] #2: ffff88807cf78258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 376.223018][ T35] locks held by kworker/u8:36/7266: 2, last CPU#1: [ 376.223031][ T35] #0: ffff88801c0ab948 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223082][ T35] #1: ffffc900024efc40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223133][ T35] locks held by kworker/u8:38/7269: 3, last CPU#1: [ 376.223146][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223197][ T35] #1: ffffc90003cd7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223247][ T35] #2: ffff8880138e0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 376.223297][ T35] locks held by kworker/u8:42/7273: 3, last CPU#1: [ 376.223310][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223359][ T35] #1: ffffc90002fd7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223409][ T35] #2: ffff8880538a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 376.223457][ T35] locks held by kworker/u8:45/7276: 3, on CPU#0: [ 376.223470][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223520][ T35] #1: ffffc90002f97c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223569][ T35] #2: ffffffff9126ae20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 376.223619][ T35] locks held by kworker/u8:47/7279: 6, last CPU#1: [ 376.223633][ T35] #0: ffff88801c113948 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223688][ T35] #1: ffffc90002f17c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223739][ T35] #2: ffff88806981d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 376.223787][ T35] #3: ffff888069ddbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 376.223834][ T35] #4: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 376.223878][ T35] #5: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 376.223927][ T35] locks held by kworker/u8:49/7281: 3, last CPU#0: [ 376.223941][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.223997][ T35] #1: ffffc90002ef7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.224047][ T35] #2: ffff888023300800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 376.224096][ T35] locks held by kworker/u8:50/7282: 2, last CPU#1: [ 376.224109][ T35] #0: ffff88801c0ab948 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.224159][ T35] #1: ffffc90002ed7c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.224209][ T35] locks held by kworker/u8:51/7283: 4, last CPU#1: [ 376.224223][ T35] #0: ffff88801c114948 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.224278][ T35] #1: ffffc90002ec7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.224345][ T35] #2: ffff8880344cd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 376.224393][ T35] #3: ffff88807889dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 376.224441][ T35] locks held by kworker/u8:53/7285: 4, last CPU#0: [ 376.224455][ T35] #0: ffff888078a89948 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.224509][ T35] #1: ffffc90003d27c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.224560][ T35] #2: ffff888069819440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 376.224608][ T35] #3: ffff888069dda0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 376.224656][ T35] locks held by kworker/u8:54/7286: 3, last CPU#0: [ 376.224669][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.224725][ T35] #1: ffffc90003577c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.224776][ T35] #2: ffff88807d492258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 378.579890][ T35] locks held by kworker/u8:55/7287: 4, last CPU#1: [ 378.579906][ T35] #0: ffff888032222948 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.579964][ T35] #1: ffffc90002eb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580024][ T35] #2: ffff88807d65d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 378.580071][ T35] #3: ffff8880348c3ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 378.580118][ T35] locks held by kworker/u8:56/7288: 4, on CPU#0: [ 378.580132][ T35] #0: ffff88801d2de148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580180][ T35] #1: ffffc90002597c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580221][ T35] #2: ffffffff9125c448 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 378.580257][ T35] #3: ffffffff9126ae20 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760 [ 378.580302][ T35] locks held by kworker/u8:58/7291: 3, last CPU#1: [ 378.580315][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580364][ T35] #1: ffffc90002e97c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580413][ T35] #2: ffff888055400800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 378.580462][ T35] locks held by kworker/u8:59/7292: 3, last CPU#1: [ 378.580476][ T35] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580528][ T35] #1: ffffc90002e87c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580576][ T35] #2: ffff8880138f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 378.580620][ T35] locks held by kworker/u8:60/7293: 4, last CPU#0: [ 378.580634][ T35] #0: ffff88801c114948 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580687][ T35] #1: ffffc90002e17c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580746][ T35] #2: ffff8880344cd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 378.580792][ T35] #3: ffff888069ddc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 378.580838][ T35] locks held by kworker/u8:61/7294: 4, on CPU#1: [ 378.580851][ T35] #0: ffff888032224148 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580903][ T35] #1: ffffc900020bfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.580969][ T35] #2: ffff8880358fd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 378.581016][ T35] #3: ffff8880348c20e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 378.581060][ T35] locks held by kworker/u8:62/7295: 4, last CPU#1: [ 378.581074][ T35] #0: ffff88801c113948 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.581127][ T35] #1: ffffc900020afc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.581176][ T35] #2: ffff88806981d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 378.581341][ T35] #3: ffff888069ddb4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 378.581501][ T35] locks held by syz-executor/7955: 2, on CPU#1: [ 378.581518][ T35] #0: ffffffff9125c448 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 378.581573][ T35] #1: ffffffff9126ae20 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ee/0x870 [ 378.581619][ T35] locks held by syz.4.539/8058: 1, last CPU#1: [ 378.581633][ T35] #0: ffff88803596e0e8 (&type->s_umount_key#80/1){+.+.}-{4:4}, at: sget_fc+0x9cf/0x1a60 [ 378.581687][ T35] locks held by init/8063: 3, last CPU#0: [ 378.581699][ T35] #0: ffffffff90504bb8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 378.581769][ T35] #1: ffffffff8feb1630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 378.581819][ T35] #2: ffffffff8fd5a4a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 378.581870][ T35] [ 378.581875][ T35] ============================================= [ 378.581875][ T35] [ 378.581913][ T35] NMI backtrace for cpu 1 [ 378.581933][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 378.581957][ T35] Tainted: [L]=SOFTLOCKUP [ 378.581964][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 378.581975][ T35] Call Trace: [ 378.581986][ T35] [ 378.581997][ T35] dump_stack_lvl+0xe8/0x150 [ 378.582023][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 378.582052][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.582073][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 378.582104][ T35] sys_info+0x135/0x170 [ 378.582127][ T35] watchdog+0x1073/0x10f0 [ 378.582157][ T35] ? watchdog+0x209/0x10f0 [ 378.582186][ T35] kthread+0x38b/0x480 [ 378.582206][ T35] ? __pfx_watchdog+0x10/0x10 [ 378.582235][ T35] ? __pfx_kthread+0x10/0x10 [ 378.582262][ T35] ret_from_fork+0x514/0xb70 [ 378.582285][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 378.582304][ T35] ? __switch_to+0xc78/0x1410 [ 378.582338][ T35] ? __pfx_kthread+0x10/0x10 [ 378.582364][ T35] ret_from_fork_asm+0x1a/0x30 [ 378.582394][ T35] [ 378.582402][ T35] Sending NMI from CPU 1 to CPUs 0: [ 378.582445][ C0] NMI backtrace for cpu 0 [ 378.582461][ C0] CPU: 0 UID: 0 PID: 34 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.582485][ C0] Tainted: [L]=SOFTLOCKUP [ 378.582492][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 378.582503][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 378.582524][ C0] Code: e8 8e 83 45 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f fb bb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 9a b5 78 06 cc 44 89 f9 80 e1 07 [ 378.582551][ C0] RSP: 0018:ffffc90000aa78b8 EFLAGS: 00000002 [ 378.582566][ C0] RAX: 1ffffffff37b3e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 378.582579][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 378.582591][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 378.582603][ C0] R10: dffffc0000000000 R11: ffffffff85836340 R12: dffffc0000000000 [ 378.582617][ C0] R13: 0000000000000000 R14: ffffffff9bd9f6e0 R15: 0000000000000000 [ 378.582630][ C0] FS: 0000000000000000(0000) GS:ffff888123a6f000(0000) knlGS:0000000000000000 [ 378.582645][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.582657][ C0] CR2: 00005555624744e8 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 378.582674][ C0] Call Trace: [ 378.582680][ C0] [ 378.582689][ C0] wait_for_lsr+0x184/0x2f0 [ 378.582719][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 378.582747][ C0] serial8250_console_write+0xa7e/0x1200 [ 378.582781][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 378.582808][ C0] ? __schedule+0x17f3/0x5820 [ 378.582834][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 378.582867][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 378.582897][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 378.582927][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 378.582959][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 378.582983][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 378.583003][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 378.583027][ C0] ? __kthread_parkme+0x71/0x1f0 [ 378.583055][ C0] ? __kthread_parkme+0x199/0x1f0 [ 378.583083][ C0] kthread+0x38b/0x480 [ 378.583102][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 378.583121][ C0] ? __pfx_kthread+0x10/0x10 [ 378.583140][ C0] ret_from_fork+0x514/0xb70 [ 378.583160][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 378.583178][ C0] ? __switch_to+0xc78/0x1410 [ 378.583205][ C0] ? __pfx_kthread+0x10/0x10 [ 378.583224][ C0] ret_from_fork_asm+0x1a/0x30 [ 378.583249][ C0] [ 378.583450][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 381.837580][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 381.848457][ T35] Tainted: [L]=SOFTLOCKUP [ 381.852790][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 381.862943][ T35] Call Trace: [ 381.866240][ T35] [ 381.869188][ T35] vpanic+0x26f/0x710 [ 381.873197][ T35] panic+0xc5/0xd0 [ 381.877027][ T35] ? __pfx_panic+0x10/0x10 [ 381.881468][ T35] ? wq_watchdog_touch+0xf9/0x160 [ 381.886576][ T35] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 381.892779][ T35] watchdog+0x10e7/0x10f0 [ 381.897144][ T35] ? watchdog+0x209/0x10f0 [ 381.902724][ T35] kthread+0x38b/0x480 [ 381.906819][ T35] ? __pfx_watchdog+0x10/0x10 [ 381.911511][ T35] ? __pfx_kthread+0x10/0x10 [ 381.916118][ T35] ret_from_fork+0x514/0xb70 [ 381.920727][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 381.926026][ T35] ? __switch_to+0xc78/0x1410 [ 381.930906][ T35] ? __pfx_kthread+0x10/0x10 [ 381.935529][ T35] ret_from_fork_asm+0x1a/0x30 [ 381.940415][ T35] [ 381.943772][ T35] Kernel Offset: disabled [ 381.948105][ T35] Rebooting in 86400 seconds..