last executing test programs: 7m14.062409875s ago: executing program 32 (id=273): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32=0xee00, @ANYBLOB="20010000000000000000000000000002000004d632000000e0000002000000000000000000000000000200000000000039e800000000000000000000000000000900000000000000fdfffffffeffffff0300000000000000010000800000000007000000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000700000000000000060001200726663343130362867636d28616573292900000000000000b8000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a4c14d13981d41bea1d1ac981d91c5e69d341ef698cdbd33c3599b40899f6ef5cb2d5adee2c7e5a1e003bbc69ea9e666c411136dbaa59b3198572b3954dca71b7c174f38d8289"], 0x150}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x10, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m2.618075424s ago: executing program 33 (id=321): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 6m48.476939516s ago: executing program 0 (id=384): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x82, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000180)={0x8, r2}) 6m47.49755944s ago: executing program 0 (id=396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000800)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x8, 0x2f, 0xff, @private0, @loopback, {[], {0x4e23, 0x883e, 0x8}}}}}}, 0x0) 6m47.223798228s ago: executing program 0 (id=388): syz_clone3(&(0x7f0000000080)={0xa610b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 6m45.778585015s ago: executing program 0 (id=407): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000900)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000001fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r1, &(0x7f00000000c0)=0x8, 0x12) pwrite64(r0, &(0x7f0000000140)='\"', 0x1, 0xe7c) 6m44.482597681s ago: executing program 0 (id=399): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6m43.173607884s ago: executing program 0 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x200}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 6m42.630478394s ago: executing program 34 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x200}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 3m8.138845355s ago: executing program 8 (id=2132): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) 3m7.910461145s ago: executing program 8 (id=2134): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x800, 0x0, 0xe7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) signalfd4(r0, &(0x7f0000000080)={[0x14e104c]}, 0x8, 0x80800) 3m6.744777532s ago: executing program 8 (id=2145): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3m6.441954517s ago: executing program 8 (id=2147): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x3000004, &(0x7f0000000100), 0x2, 0x524, &(0x7f0000000c00)="$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") unshare(0x62020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0fc5:1', 0x6) 3m5.49386904s ago: executing program 8 (id=2158): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r1) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) 3m3.512318345s ago: executing program 8 (id=2179): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close_range(r0, r2, 0x0) 3m3.029624586s ago: executing program 35 (id=2179): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close_range(r0, r2, 0x0) 2m55.56900692s ago: executing program 9 (id=2194): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x400, 0x3, 0x259, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e35, 0x1000, 0x20, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x436d, 0x4, 0x1, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x3, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) 2m54.408740115s ago: executing program 9 (id=2205): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000080)="44f9b1", 0x3, 0x4000, 0x0, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2m54.116950378s ago: executing program 9 (id=2215): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) iopl(0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m53.534007946s ago: executing program 9 (id=2224): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x3000004, &(0x7f0000000100), 0x2, 0x524, &(0x7f0000000c00)="$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") unshare(0x62020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0fc5:1', 0x6) 2m52.42506104s ago: executing program 9 (id=2229): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4004800) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2m51.33929395s ago: executing program 9 (id=2234): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x35}) socket$inet6_udp(0xa, 0x2, 0x0) 2m50.083913254s ago: executing program 36 (id=2234): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x35}) socket$inet6_udp(0xa, 0x2, 0x0) 1m57.732117303s ago: executing program 3 (id=2577): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x141900, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f00000000c0)={'some', 0x20, 0x17b, 0x20, 0x800000000104002}, 0x2f) close_range(r0, 0xffffffffffffffff, 0x0) 1m57.157143673s ago: executing program 3 (id=2581): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027840000000000000080000008000100", @ANYRES32=r3, @ANYBLOB="0c00030003000000000000000800020000000000060006000000000005000d"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 1m56.572414145s ago: executing program 3 (id=2587): setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m55.869354406s ago: executing program 3 (id=2596): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x3a) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 1m55.585940974s ago: executing program 3 (id=2599): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) 1m53.794892257s ago: executing program 3 (id=2613): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x40000000000007b, 0x4004) 1m53.331229671s ago: executing program 37 (id=2613): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x40000000000007b, 0x4004) 11.28715963s ago: executing program 7 (id=3071): ioperm(0x4, 0x8, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(0x0, 0x6, 0x1, 0x0, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 10.867164908s ago: executing program 7 (id=3076): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r0, 0x402, 0x8000002d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r2, r3, 0x1, 0x0) 10.421140932s ago: executing program 7 (id=3080): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.303909371s ago: executing program 7 (id=3085): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r1}, 0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9.303791145s ago: executing program 2 (id=3086): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x11f7, &(0x7f00000012c0)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, &(0x7f0000001240), &(0x7f0000001180), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 8.72769954s ago: executing program 5 (id=3087): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0xf2ff}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 7.046818922s ago: executing program 6 (id=3090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x18, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r1, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 6.700170334s ago: executing program 1 (id=3092): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x8a, &(0x7f00000002c0)=ANY=[], 0x0) 6.329889727s ago: executing program 4 (id=3093): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r0, 0x402, 0x8000002d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r2, r3, 0x1, 0x0) 6.18206451s ago: executing program 1 (id=3094): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x2) clock_gettime(0x0, &(0x7f0000000180)) 6.17788136s ago: executing program 5 (id=3095): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x124}) readv(r0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.823203901s ago: executing program 4 (id=3096): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 5.644100447s ago: executing program 1 (id=3097): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000340)=""/190, 0xbe}], 0x1}, 0x1}], 0x1, 0x20, 0x0) shutdown(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6) 5.506874534s ago: executing program 6 (id=3098): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e"], 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x100) 5.48269526s ago: executing program 2 (id=3099): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 5.255931127s ago: executing program 4 (id=3100): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @loopback, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) 2.828684628s ago: executing program 1 (id=3101): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0xfffffffffffffff5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) fcntl$setownex(r1, 0xf, &(0x7f0000000040)={0x0, r2}) close(r0) 2.802311682s ago: executing program 6 (id=3102): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xe, r2, 0x20000000}, 0x10) 2.756067766s ago: executing program 5 (id=3103): socket$inet(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x800, 0x25, 0x4}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 2.573872325s ago: executing program 4 (id=3104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0x42, 0x1, 0x70bd2d, 0x0, {0x3, 0x1}}, 0x14}}, 0x4000000) 2.550359123s ago: executing program 7 (id=3105): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 2.488733987s ago: executing program 2 (id=3106): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x5}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.31660506s ago: executing program 5 (id=3107): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) 2.298716743s ago: executing program 1 (id=3108): syz_clone(0x88182411, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.199683973s ago: executing program 6 (id=3109): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x4e21, 0x4e20, 0x8}}}}}}, 0x0) 2.046606129s ago: executing program 2 (id=3110): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x35, 0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000280)}, 0x20) 1.8509295s ago: executing program 5 (id=3111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x18, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r1, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 1.850052706s ago: executing program 4 (id=3123): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir0\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./dir0\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dir0/file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="0123456789abcdef", 0x10) syncfs(r0) close(r0) mount(&(0x7f00000001c0)=@filename='mtd0\x00', &(0x7f0000000200)='./dir0\x00', &(0x7f0000000240)='jffs2\x00', 0x20, 0x0) umount2(&(0x7f0000000280)='./dir0\x00', 0x0) 1.154810599s ago: executing program 7 (id=3112): inotify_init() r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1.097604867s ago: executing program 4 (id=3113): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r3, 0x0, r2, 0x0, 0xf3a, 0x8) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000280)={0xffffffffffffffb6, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x2, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 1.03085899s ago: executing program 1 (id=3114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x11f7, &(0x7f00000012c0)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, &(0x7f0000001240), &(0x7f0000001180), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 629.350447ms ago: executing program 2 (id=3115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 571.274964ms ago: executing program 6 (id=3116): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @loopback, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) 154.584888ms ago: executing program 5 (id=3117): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2042, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$FUSE(r0, 0x0, 0x0) 51.747396ms ago: executing program 6 (id=3118): socket$netlink(0x10, 0x3, 0x4) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f0000000340)={0x0, 0xca23, 0x10000, 0x3, 0x212}, &(0x7f0000000100), &(0x7f0000ff4000), 0x0) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x2d45, 0x40, 0x1, 0x34b}, &(0x7f0000ffe000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000002a40)={0x2020}, 0x2020) 0s ago: executing program 2 (id=3119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 95 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.6.2314" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 435.248316][ T31] audit: type=1326 audit(1791566844.076:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.6.2314" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 435.262482][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 435.301551][ T31] audit: type=1326 audit(1791566844.136:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.6.2314" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 435.492018][ T31] audit: type=1326 audit(1791566844.326:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.6.2314" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 435.492106][ T31] audit: type=1326 audit(1791566844.326:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.6.2314" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f010bb9df42 code=0x7ffc0000 [ 435.496404][ T31] audit: type=1326 audit(1791566844.326:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.6.2314" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 435.496658][ T31] audit: type=1326 audit(1791566844.326:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.6.2314" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 435.615451][T13439] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.936810][ T2251] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 436.106632][ T2251] usb 4-1: Using ep0 maxpacket: 32 [ 436.107594][ T2251] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 436.108970][ T2251] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 436.109011][ T2251] usb 4-1: config 0 has no interface number 0 [ 436.109068][ T2251] usb 4-1: config 0 interface 184 has no altsetting 0 [ 436.111778][ T2251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.111818][ T2251] usb 4-1: Product: syz [ 436.111844][ T2251] usb 4-1: Manufacturer: syz [ 436.111872][ T2251] usb 4-1: SerialNumber: syz [ 436.115443][ T2251] usb 4-1: config 0 descriptor?? [ 436.194299][T13439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 436.203619][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.205098][T13439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 436.217348][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.221789][T13439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 436.254134][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.263564][T13439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 436.279023][T13439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.470484][T13439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.534208][T13439] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.544237][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.544370][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.595314][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.595442][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.222650][ T2251] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 437.312661][ T1313] net_ratelimit: 1387 callbacks suppressed [ 437.312690][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.313016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.386881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.387296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.430680][ T2251] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 437.430733][ T2251] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 437.430769][ T2251] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 437.430805][ T2251] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 437.431127][ T2251] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 437.490687][ T2251] usb 4-1: USB disconnect, device number 8 [ 437.728725][T13767] fuse: Bad value for 'fd' [ 438.414615][T13439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.426863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.427294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.454896][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.455147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.924490][T13439] veth0_vlan: entered promiscuous mode [ 438.941239][T13439] veth1_vlan: entered promiscuous mode [ 438.983576][T13439] veth0_macvtap: entered promiscuous mode [ 439.001268][T13439] veth1_macvtap: entered promiscuous mode [ 439.027905][T13439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.045951][T13439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.117175][ T753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.117247][ T753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.117306][ T753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.117364][ T753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.204959][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.204995][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.283829][ T6005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.283870][ T6005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.466721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.467107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.473627][T13805] fuse: fd is not a fuse device [ 439.485880][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.485954][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.561028][T13810] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2341'. [ 439.656199][T13818] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2341'. [ 439.704831][T13810] bond3: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 439.712365][T13818] bond3: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 439.919562][T13827] fuse: fd is not a fuse device [ 441.805343][ T5273] 8021q: adding VLAN 0 to HW filter on device eth19 [ 442.573568][T13908] loop3: detected capacity change from 0 to 8192 [ 442.587154][ C1] net_ratelimit: 24 callbacks suppressed [ 442.587182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.588226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.929532][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.929812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.356365][ T5273] 8021q: adding VLAN 0 to HW filter on device eth20 [ 443.626616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.627340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.038497][ T753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.038765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.666701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.667048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.952368][T13964] ref_ctr_offset mismatch. inode: 0x8cd offset: 0x0 ref_ctr_offset(old): 0x800000000 ref_ctr_offset(new): 0x0 [ 445.109667][T13977] loop3: detected capacity change from 0 to 512 [ 445.130554][T13977] EXT4-fs (loop3): Test dummy encryption mode enabled [ 445.444038][T13977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.826889][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.786721][ C1] net_ratelimit: 10 callbacks suppressed [ 447.786750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.787132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.009548][T14031] overlayfs: failed to clone upperpath [ 448.320559][T14039] ref_ctr_offset mismatch. inode: 0x742 offset: 0x0 ref_ctr_offset(old): 0x800000000 ref_ctr_offset(new): 0x0 [ 448.487613][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.487876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.827542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.828793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.627878][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.631027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.866595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.866991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.466937][ T32] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.467010][ T32] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.467075][ T32] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.467136][ T32] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.376406][T14154] overlayfs: failed to get inode (-116) [ 454.381837][T14154] overlayfs: failed to get inode (-116) [ 454.571968][T14161] loop3: detected capacity change from 0 to 1024 [ 456.545777][T14181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.547820][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.577111][T14180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.577412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.278726][T14203] netlink: 'syz.6.2434': attribute type 4 has an invalid length. [ 458.057491][T14217] ip_tables: iptables: counters copy to user failed while replacing table [ 458.090773][T14217] ip_tables: iptables: counters copy to user failed while replacing table [ 459.689066][T14258] input: syz0 as /devices/virtual/input/input11 [ 460.196117][T14269] FAULT_INJECTION: forcing a failure. [ 460.196117][T14269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 460.196160][T14269] CPU: 1 UID: 0 PID: 14269 Comm: syz.3.2458 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.196204][T14269] Tainted: [L]=SOFTLOCKUP [ 460.196215][T14269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 460.196233][T14269] Call Trace: [ 460.196242][T14269] [ 460.196253][T14269] dump_stack_lvl+0x100/0x190 [ 460.196300][T14269] should_fail_ex.cold+0x5/0xa [ 460.196332][T14269] ? prepare_alloc_pages+0x16d/0x5b0 [ 460.196372][T14269] should_fail_alloc_page+0xeb/0x140 [ 460.196413][T14269] prepare_alloc_pages+0x1f0/0x5b0 [ 460.196470][T14269] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 460.196524][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.196559][T14269] ? prepare_alloc_pages+0x111/0x5b0 [ 460.196594][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.196631][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.196666][T14269] ? rcu_is_watching+0x13/0xc0 [ 460.196706][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.196740][T14269] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 460.196790][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.196838][T14269] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 460.196892][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.196973][T14269] ? mark_held_locks+0x40/0x70 [ 460.197005][T14269] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 460.197051][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.197086][T14269] ? lockdep_hardirqs_on+0x7d/0x110 [ 460.197132][T14269] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 460.197178][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.197222][T14269] ? kasan_save_stack+0x3f/0x50 [ 460.197252][T14269] ? kasan_save_stack+0x30/0x50 [ 460.197280][T14269] ? kasan_save_track+0x14/0x30 [ 460.197309][T14269] ? kasan_save_free_info+0x3b/0x70 [ 460.197351][T14269] ? __kasan_slab_free+0x5f/0x80 [ 460.197382][T14269] ? kmem_cache_free+0x127/0x6c0 [ 460.197425][T14269] ? alloc_vmap_area+0x20fb/0x2bb0 [ 460.197456][T14269] ? __get_vm_area_node+0x1ed/0x350 [ 460.197489][T14269] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 460.197526][T14269] ? __vmalloc_node_noprof+0xad/0xf0 [ 460.197565][T14269] ? kernel_read_file+0x77e/0x9a0 [ 460.197593][T14269] ? init_module_from_file+0x12c/0x170 [ 460.197627][T14269] ? idempotent_init_module+0x228/0x760 [ 460.197661][T14269] ? __x64_sys_finit_module+0xc9/0x160 [ 460.197699][T14269] ? do_syscall_64+0x123/0x790 [ 460.197755][T14269] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 460.197804][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.197845][T14269] ? policy_nodemask+0xed/0x4f0 [ 460.197885][T14269] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 460.197960][T14269] __kasan_populate_vmalloc+0xf0/0x210 [ 460.198018][T14269] alloc_vmap_area+0x95d/0x2bb0 [ 460.198065][T14269] ? __pfx_alloc_vmap_area+0x10/0x10 [ 460.198095][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.198133][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.198168][T14269] ? __get_vm_area_node+0x124/0x350 [ 460.198207][T14269] __get_vm_area_node+0x1ed/0x350 [ 460.198249][T14269] __vmalloc_node_range_noprof+0x268/0x1420 [ 460.198288][T14269] ? kernel_read_file+0x77e/0x9a0 [ 460.198316][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.198351][T14269] ? is_bpf_text_address+0x94/0x1a0 [ 460.198386][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.198421][T14269] ? kernel_text_address+0x8d/0x100 [ 460.198467][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.198502][T14269] ? __kernel_text_address+0xd/0x30 [ 460.198548][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.198582][T14269] ? arch_stack_walk+0xa6/0xf0 [ 460.198620][T14269] ? kernel_read_file+0x77e/0x9a0 [ 460.198657][T14269] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 460.198696][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.198731][T14269] ? stack_trace_save+0x8e/0xc0 [ 460.198759][T14269] ? ima_read_file+0x149/0x1b0 [ 460.198804][T14269] ? __pfx_ima_read_file+0x10/0x10 [ 460.198854][T14269] ? kernel_read_file+0x77e/0x9a0 [ 460.198882][T14269] __vmalloc_node_noprof+0xad/0xf0 [ 460.198918][T14269] ? kernel_read_file+0x77e/0x9a0 [ 460.198956][T14269] kernel_read_file+0x77e/0x9a0 [ 460.198990][T14269] ? __pfx_kernel_read_file+0x10/0x10 [ 460.199031][T14269] init_module_from_file+0x12c/0x170 [ 460.199067][T14269] ? __pfx_init_module_from_file+0x10/0x10 [ 460.199123][T14269] ? find_held_lock+0x2b/0x80 [ 460.199163][T14269] ? idempotent_init_module+0x5e4/0x760 [ 460.199198][T14269] ? idempotent_init_module+0x5e4/0x760 [ 460.199232][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.199270][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.199305][T14269] ? do_raw_spin_unlock+0x145/0x1e0 [ 460.199346][T14269] idempotent_init_module+0x228/0x760 [ 460.199382][T14269] ? __fget_files+0x34/0x3d0 [ 460.199416][T14269] ? __pfx_idempotent_init_module+0x10/0x10 [ 460.199452][T14269] ? find_held_lock+0x2b/0x80 [ 460.199519][T14269] __x64_sys_finit_module+0xc9/0x160 [ 460.199553][T14269] ? do_syscall_64+0xae/0x790 [ 460.199602][T14269] do_syscall_64+0x123/0x790 [ 460.199652][T14269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.199681][T14269] RIP: 0033:0x7f2912d9e1d9 [ 460.199705][T14269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.199733][T14269] RSP: 002b:00007f2913ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 460.199762][T14269] RAX: ffffffffffffffda RBX: 00007f2913025fa0 RCX: 00007f2912d9e1d9 [ 460.199782][T14269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 460.199799][T14269] RBP: 00007f2912e35888 R08: 0000000000000000 R09: 0000000000000000 [ 460.199818][T14269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.199836][T14269] R13: 00007f2913026038 R14: 00007f2913025fa0 R15: 00007ffdd08dd148 [ 460.199876][T14269] [ 460.451994][T14269] syz.3.2458: vmalloc error: size 4194304, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 460.452299][T14269] CPU: 0 UID: 0 PID: 14269 Comm: syz.3.2458 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.452353][T14269] Tainted: [L]=SOFTLOCKUP [ 460.452367][T14269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 460.452390][T14269] Call Trace: [ 460.452403][T14269] [ 460.452417][T14269] dump_stack_lvl+0x100/0x190 [ 460.452486][T14269] warn_alloc.cold+0x9e/0xb2 [ 460.452534][T14269] ? __pfx_warn_alloc+0x10/0x10 [ 460.452590][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.452637][T14269] ? lockdep_hardirqs_on+0x7d/0x110 [ 460.452704][T14269] ? __get_vm_area_node+0x2f0/0x350 [ 460.452762][T14269] ? __get_vm_area_node+0x22b/0x350 [ 460.452818][T14269] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 460.452869][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.452916][T14269] ? is_bpf_text_address+0x94/0x1a0 [ 460.452958][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.453000][T14269] ? kernel_text_address+0x8d/0x100 [ 460.453060][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.453105][T14269] ? __kernel_text_address+0xd/0x30 [ 460.453166][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.453212][T14269] ? arch_stack_walk+0xa6/0xf0 [ 460.453263][T14269] ? kernel_read_file+0x77e/0x9a0 [ 460.453312][T14269] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 460.453366][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.453412][T14269] ? stack_trace_save+0x8e/0xc0 [ 460.453466][T14269] ? ima_read_file+0x149/0x1b0 [ 460.453528][T14269] ? __pfx_ima_read_file+0x10/0x10 [ 460.453594][T14269] ? kernel_read_file+0x77e/0x9a0 [ 460.453631][T14269] __vmalloc_node_noprof+0xad/0xf0 [ 460.453681][T14269] ? kernel_read_file+0x77e/0x9a0 [ 460.453725][T14269] kernel_read_file+0x77e/0x9a0 [ 460.453770][T14269] ? __pfx_kernel_read_file+0x10/0x10 [ 460.453825][T14269] init_module_from_file+0x12c/0x170 [ 460.453874][T14269] ? __pfx_init_module_from_file+0x10/0x10 [ 460.453944][T14269] ? find_held_lock+0x2b/0x80 [ 460.454000][T14269] ? idempotent_init_module+0x5e4/0x760 [ 460.454046][T14269] ? idempotent_init_module+0x5e4/0x760 [ 460.454092][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.454142][T14269] ? srso_alias_return_thunk+0x5/0xfbef5 [ 460.454188][T14269] ? do_raw_spin_unlock+0x145/0x1e0 [ 460.454244][T14269] idempotent_init_module+0x228/0x760 [ 460.454292][T14269] ? __fget_files+0x34/0x3d0 [ 460.454338][T14269] ? __pfx_idempotent_init_module+0x10/0x10 [ 460.454385][T14269] ? find_held_lock+0x2b/0x80 [ 460.454485][T14269] __x64_sys_finit_module+0xc9/0x160 [ 460.454532][T14269] ? do_syscall_64+0xae/0x790 [ 460.454597][T14269] do_syscall_64+0x123/0x790 [ 460.454664][T14269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.454706][T14269] RIP: 0033:0x7f2912d9e1d9 [ 460.454737][T14269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.454775][T14269] RSP: 002b:00007f2913ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 460.454810][T14269] RAX: ffffffffffffffda RBX: 00007f2913025fa0 RCX: 00007f2912d9e1d9 [ 460.454837][T14269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 460.454861][T14269] RBP: 00007f2912e35888 R08: 0000000000000000 R09: 0000000000000000 [ 460.454886][T14269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.454910][T14269] R13: 00007f2913026038 R14: 00007f2913025fa0 R15: 00007ffdd08dd148 [ 460.454962][T14269] [ 460.549962][T14269] Mem-Info: [ 460.549981][T14269] active_anon:73188 inactive_anon:632 isolated_anon:0 [ 460.549981][T14269] active_file:16 inactive_file:64319 isolated_file:0 [ 460.549981][T14269] unevictable:0 dirty:208 writeback:0 [ 460.549981][T14269] slab_reclaimable:7653 slab_unreclaimable:105667 [ 460.549981][T14269] mapped:45457 shmem:65993 pagetables:1893 [ 460.549981][T14269] sec_pagetables:0 bounce:0 [ 460.549981][T14269] kernel_misc_reclaimable:0 [ 460.549981][T14269] free:1182169 free_pcp:21452 free_cma:0 [ 460.550082][T14269] Node 0 active_anon:292752kB inactive_anon:2528kB active_file:64kB inactive_file:257080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181828kB dirty:832kB writeback:0kB shmem:263972kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14300kB pagetables:7452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 460.550190][T14269] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 460.550291][T14269] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 460.550431][T14269] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 460.550499][T14269] Node 0 DMA32 free:774032kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:292752kB inactive_anon:2528kB active_file:64kB inactive_file:257080kB unevictable:0kB writepending:832kB zspages:0kB present:3129332kB managed:2511060kB mlocked:0kB bounce:0kB free_pcp:85808kB local_pcp:59952kB free_cma:0kB [ 460.550616][T14269] lowmem_reserve[]: 0 0 0 0 0 [ 460.550681][T14269] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 460.564168][T14269] lowmem_reserve[]: 0 0 0 0 0 [ 460.564238][T14269] Node 1 Normal free:3939284kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 460.565605][T14269] lowmem_reserve[]: 0 0 0 0 0 [ 460.565687][T14269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 460.565907][T14269] Node 0 DMA32: 2327*4kB (UME) 555*8kB (UME) 298*16kB (UME) 181*32kB (UME) 104*64kB (ME) 49*128kB (UME) 30*256kB (UME) 16*512kB (UE) 10*1024kB (UE) 7*2048kB (UM) 170*4096kB (UM) = 774004kB [ 460.589600][T14269] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 460.589795][T14269] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 5*16kB (UM) 5*32kB (UM) 9*64kB (UM) 5*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939284kB [ 460.597269][T14269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 460.597301][T14269] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 460.597332][T14269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 460.597363][T14269] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 460.597394][T14269] 130247 total pagecache pages [ 460.597408][T14269] 0 pages in swap cache [ 460.597421][T14269] Free swap = 124996kB [ 460.597441][T14269] Total swap = 124996kB [ 460.597456][T14269] 2097051 pages RAM [ 460.597469][T14269] 0 pages HighMem/MovableOnly [ 460.597483][T14269] 437653 pages reserved [ 460.597496][T14269] 0 pages cma reserved [ 462.601391][T14290] loop3: detected capacity change from 0 to 128 [ 463.716612][T14334] netlink: 'syz.5.2478': attribute type 4 has an invalid length. [ 464.084159][T14350] netlink: 'syz.3.2479': attribute type 2 has an invalid length. [ 464.408420][T14358] overlayfs: failed to clone upperpath [ 465.197599][T14380] ip_tables: iptables: counters copy to user failed while replacing table [ 465.428987][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2500'. [ 465.638754][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 465.642482][T14405] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2502'. [ 465.898831][T14412] ip_tables: iptables: counters copy to user failed while replacing table [ 465.914675][T14412] ip_tables: iptables: counters copy to user failed while replacing table [ 466.080353][T14415] loop3: detected capacity change from 0 to 128 [ 466.545945][T14427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2510'. [ 466.930944][T14445] Invalid ELF header magic: != ELF [ 466.957175][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 467.120725][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 467.122381][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.122463][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 467.122506][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.124561][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 467.124600][ T10] usb 4-1: Product: syz [ 467.124628][ T10] usb 4-1: Manufacturer: syz [ 467.202871][T14437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.229566][ T10] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 467.271301][ T10] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 467.499814][ T10] usb 4-1: USB disconnect, device number 9 [ 467.569634][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 467.586089][ T10] garmin_gps 4-1:1.0: device disconnected [ 467.714486][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2520'. [ 467.865071][T14475] ip_tables: iptables: counters copy to user failed while replacing table [ 467.881556][T14475] ip_tables: iptables: counters copy to user failed while replacing table [ 467.887838][T14475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.888124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.891670][T14475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.891940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.892296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.281803][T14486] overlayfs: failed to clone upperpath [ 468.456041][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2529'. [ 470.387430][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 470.387466][ T31] audit: type=1326 audit(1791566879.226:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.388093][ T31] audit: type=1326 audit(1791566879.226:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.388292][ T31] audit: type=1326 audit(1791566879.226:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.388580][ T31] audit: type=1326 audit(1791566879.226:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.391132][ T31] audit: type=1326 audit(1791566879.226:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.391335][ T31] audit: type=1326 audit(1791566879.226:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.392690][ T31] audit: type=1326 audit(1791566879.226:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.392786][ T31] audit: type=1326 audit(1791566879.226:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.393049][ T31] audit: type=1326 audit(1791566879.226:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.394210][ T31] audit: type=1326 audit(1791566879.226:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14523 comm="syz.1.2540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 470.485912][ T4929] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 471.752539][T14538] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2545'. [ 472.233796][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2551'. [ 473.209923][T14594] tipc: Failed to remove unknown binding: 66,1,1/0:2226474596/2226474598 [ 473.352621][T14603] loop4: detected capacity change from 0 to 128 [ 473.506496][T14608] net_ratelimit: 7 callbacks suppressed [ 473.506526][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.507108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.542382][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.585998][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.586397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.592577][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.708652][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.815159][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.850755][T14608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.277936][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2567'. [ 475.462604][T14651] netlink: 'syz.6.2574': attribute type 1 has an invalid length. [ 475.663265][T14651] bond2: entered promiscuous mode [ 475.663320][T14651] bond2: entered allmulticast mode [ 475.663858][T14651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.779026][T14655] erspan1: entered allmulticast mode [ 475.798735][T14655] bond2: (slave erspan1): making interface the new active one [ 475.798770][T14655] erspan1: entered promiscuous mode [ 475.799819][T14655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.802577][T14655] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 476.131000][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2579'. [ 476.432663][T14674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2581'. [ 476.918792][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2587'. [ 477.273181][T14698] overlayfs: failed to clone upperpath [ 477.310306][T14699] netlink: 'syz.7.2593': attribute type 11 has an invalid length. [ 478.038950][T14718] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2601'. [ 478.669136][ T10] net_ratelimit: 19 callbacks suppressed [ 478.669165][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.669507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.278408][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.278672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.053706][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2626'. [ 480.200413][T14763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.286925][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2617'. [ 480.350279][ T32] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 480.350341][ T32] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 60387 - 0 [ 480.350392][ T32] netdevsim netdevsim1 netdevsim3: unset [0, 2] type 1 family 0 port 8472 - 0 [ 480.350442][ T32] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.350490][ T32] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 480.351900][ T3355] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 480.351953][ T3355] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 60387 - 0 [ 480.352069][ T3355] netdevsim netdevsim1 netdevsim2: unset [0, 2] type 1 family 0 port 8472 - 0 [ 480.352118][ T3355] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.352167][ T3355] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 480.352228][ T3355] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 480.352278][ T3355] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 60387 - 0 [ 480.352327][ T3355] netdevsim netdevsim1 netdevsim1: unset [0, 2] type 1 family 0 port 8472 - 0 [ 480.352377][ T3355] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.352427][ T3355] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 480.352486][ T3355] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 480.352536][ T3355] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 60387 - 0 [ 480.352585][ T3355] netdevsim netdevsim1 netdevsim0: unset [0, 2] type 1 family 0 port 8472 - 0 [ 480.352635][ T3355] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.352684][ T3355] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 480.408419][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.408728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.570943][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.581054][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.590677][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 480.592312][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 480.594731][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.009975][T14795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2638'. [ 481.517591][ T5996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.517858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.546876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.383080][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.383220][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.383362][T14777] bridge_slave_0: entered allmulticast mode [ 482.385555][T14777] bridge_slave_0: entered promiscuous mode [ 482.388767][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.388962][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.389438][T14777] bridge_slave_1: entered allmulticast mode [ 482.391554][T14777] bridge_slave_1: entered promiscuous mode [ 482.466093][T14777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.505002][T14777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.667184][ T4929] Bluetooth: hci3: command tx timeout [ 482.760400][T14777] team0: Port device team_slave_0 added [ 482.783992][T14777] team0: Port device team_slave_1 added [ 482.952898][T14777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.952927][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.952977][T14777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.963956][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.963977][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.964021][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.378646][T14777] hsr_slave_0: entered promiscuous mode [ 483.379847][T14777] hsr_slave_1: entered promiscuous mode [ 483.382263][T14777] debugfs: 'hsr0' already exists in 'hsr' [ 483.382293][T14777] Cannot create hsr debugfs directory [ 483.732133][T14855] netlink: 'syz.5.2645': attribute type 22 has an invalid length. [ 483.732169][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2645'. [ 483.758097][T14827] net_ratelimit: 3 callbacks suppressed [ 483.758124][T14827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.758397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.911767][T14855] netlink: 'syz.5.2645': attribute type 22 has an invalid length. [ 483.911805][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2645'. [ 484.234708][ T3355] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 484.234772][ T3355] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.234823][ T3355] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 484.234873][ T3355] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 484.234923][ T3355] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.235024][ T3355] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.235078][ T3355] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.252259][T14827] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 484.749260][ T4929] Bluetooth: hci3: command tx timeout [ 484.750861][T14777] netdevsim netdevsim2 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.888634][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.888899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.057319][T14777] netdevsim netdevsim2 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.259523][T14777] netdevsim netdevsim2 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.373594][T14777] netdevsim netdevsim2 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.581233][T14777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.594473][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.595715][T14777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.613972][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.615175][T14777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.636065][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.644635][T14777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.655616][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.759304][T14777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.794741][T14777] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.815469][T14871] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.815601][T14871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.844965][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.845060][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.075759][T14871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.076037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.525016][T14777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.616663][T14777] veth0_vlan: entered promiscuous mode [ 486.628917][T14777] veth1_vlan: entered promiscuous mode [ 486.690668][T14777] veth0_macvtap: entered promiscuous mode [ 486.700653][T14777] veth1_macvtap: entered promiscuous mode [ 486.728644][T14777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.745256][T14777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.830464][ T5620] Bluetooth: hci3: command tx timeout [ 486.892874][T14872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.892905][T14872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.897975][ T32] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.901992][ T6005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.907720][T14871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.909033][T14871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.008086][T14871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.008120][T14871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.206016][T14925] netlink: zone id is out of range [ 487.206034][T14925] netlink: zone id is out of range [ 487.234427][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.234664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.633078][T14936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.640948][T14936] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.692599][T14936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.473084][T14936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 488.473125][T14936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.523014][T14936] veth1_vlan: left promiscuous mode [ 488.533378][T14936] veth0_vlan: left promiscuous mode [ 488.546330][T14936] veth0_vlan: entered promiscuous mode [ 488.561416][T14936] veth1_vlan: entered promiscuous mode [ 488.611161][T14936] veth1_macvtap: left promiscuous mode [ 488.622034][T14936] veth0_macvtap: left promiscuous mode [ 488.642311][T14936] veth0_macvtap: entered promiscuous mode [ 488.643725][T14936] veth1_macvtap: entered promiscuous mode [ 488.731818][T14936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.781675][T14936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.813597][T14936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.815141][T14936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.865462][T14936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.910402][ T4929] Bluetooth: hci3: command tx timeout [ 488.924362][T14936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.965044][T14936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 489.015276][T14936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 489.073547][T14936] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.587949][T14960] net_ratelimit: 2 callbacks suppressed [ 489.587984][T14960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.588242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.026847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.030836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.165755][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.166508][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.456797][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2676'. [ 490.609751][T14986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.640974][T14986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.710317][T14876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.710585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.958646][T15017] netlink: 'syz.1.2659': attribute type 1 has an invalid length. [ 491.131260][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.134371][ T6005] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.134448][ T6005] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.134512][ T6005] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 491.134563][ T6005] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 491.134612][ T6005] netdevsim netdevsim1 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0 [ 491.134662][ T6005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.134712][ T6005] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 491.134775][ T6005] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 491.134825][ T6005] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 491.134907][ T6005] netdevsim netdevsim1 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0 [ 491.134957][ T6005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.135007][ T6005] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 491.135069][ T6005] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 491.135118][ T6005] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 491.135166][ T6005] netdevsim netdevsim1 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0 [ 491.135210][ T6005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.135256][ T6005] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 491.135315][ T6005] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 491.135360][ T6005] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 491.135406][ T6005] netdevsim netdevsim1 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0 [ 491.135458][ T6005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.135502][ T6005] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 491.135561][ T6005] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.321945][ T12] wlan1: Trigger new scan to find an IBSS to join [ 491.383637][T15017] bond6: entered promiscuous mode [ 491.383714][T15017] bond6: entered allmulticast mode [ 491.384099][T15017] 8021q: adding VLAN 0 to HW filter on device bond6 [ 491.497698][T15018] erspan1: entered allmulticast mode [ 491.541792][T15018] bond6: (slave erspan1): making interface the new active one [ 491.541832][T15018] erspan1: entered promiscuous mode [ 491.569655][T15018] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 491.848663][T14960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.848920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.148825][T15041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2678'. [ 492.594330][T15055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2680'. [ 492.676801][T15060] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2682'. [ 492.960619][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.960892][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.366712][ T5344] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 493.521751][ T5344] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 493.526506][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.526577][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.584719][ T5344] usb 3-1: config 0 descriptor?? [ 493.851404][ T5344] usbhid 3-1:0.0: can't add hid device: -71 [ 493.851539][ T5344] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 493.880289][ T5344] usb 3-1: USB disconnect, device number 3 [ 494.129204][T15085] loop4: detected capacity change from 0 to 512 [ 494.283365][T14872] wlan1: Trigger new scan to find an IBSS to join [ 494.352665][T15085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.374252][T15085] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.406582][ T5344] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 494.557919][ T5344] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 494.559287][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.559356][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.564011][ T5344] usb 3-1: config 0 descriptor?? [ 494.613681][T13439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.138661][T14876] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.138730][T14876] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.138806][T14876] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.138863][T14876] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.401851][ T5344] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 495.420556][ T5344] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 495.618100][T15122] fuse: Bad value for 'fd' [ 495.841338][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2694'. [ 495.887190][ T5344] usb 3-1: USB disconnect, device number 4 [ 495.887310][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 495.978061][T15120] net_ratelimit: 2 callbacks suppressed [ 495.978097][T15120] Set syz1 is full, maxelem 6117 reached [ 496.073252][T15132] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2696'. [ 496.376390][T15139] loop4: detected capacity change from 0 to 512 [ 496.385315][T15139] ext4: Unknown parameter 'subj_user' [ 496.555866][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2702'. [ 496.673257][T15150] FAULT_INJECTION: forcing a failure. [ 496.673257][T15150] name failslab, interval 1, probability 0, space 0, times 0 [ 496.673312][T15150] CPU: 1 UID: 0 PID: 15150 Comm: syz.2.2705 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.673368][T15150] Tainted: [L]=SOFTLOCKUP [ 496.673382][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 496.673406][T15150] Call Trace: [ 496.673418][T15150] [ 496.673433][T15150] dump_stack_lvl+0x100/0x190 [ 496.673495][T15150] should_fail_ex.cold+0x5/0xa [ 496.673539][T15150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.673592][T15150] should_failslab+0xc2/0x120 [ 496.673641][T15150] __kmalloc_cache_noprof+0x91/0x6d0 [ 496.673705][T15150] ? snd_seq_oss_writeq_new+0xb5/0x2b0 [ 496.673778][T15150] snd_seq_oss_writeq_new+0xb5/0x2b0 [ 496.673844][T15150] ? __pfx_snd_seq_oss_writeq_new+0x10/0x10 [ 496.673909][T15150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.673970][T15150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.674017][T15150] ? lockdep_init_map_type+0x5c/0x250 [ 496.674071][T15150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.674119][T15150] ? __raw_spin_lock_init+0x3a/0x110 [ 496.674179][T15150] snd_seq_oss_open+0x7bc/0xa10 [ 496.674238][T15150] odev_open+0x6f/0x90 [ 496.674278][T15150] ? __pfx_odev_open+0x10/0x10 [ 496.674320][T15150] soundcore_open+0x2e3/0x5a0 [ 496.674370][T15150] ? __pfx_soundcore_open+0x10/0x10 [ 496.674416][T15150] chrdev_open+0x234/0x6a0 [ 496.674463][T15150] ? __pfx_chrdev_open+0x10/0x10 [ 496.674511][T15150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.674557][T15150] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 496.674627][T15150] do_dentry_open+0x6ab/0x14d0 [ 496.674664][T15150] ? __pfx_chrdev_open+0x10/0x10 [ 496.674714][T15150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.674769][T15150] vfs_open+0x82/0x3f0 [ 496.674818][T15150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.674872][T15150] path_openat+0x19fa/0x2440 [ 496.674929][T15150] ? __pfx_path_openat+0x10/0x10 [ 496.674991][T15150] do_file_open+0x20e/0x430 [ 496.675042][T15150] ? __pfx_do_file_open+0x10/0x10 [ 496.675132][T15150] ? _raw_spin_unlock+0x28/0x50 [ 496.675186][T15150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.675232][T15150] ? alloc_fd+0x471/0x7a0 [ 496.675296][T15150] do_sys_openat2+0x10f/0x1e0 [ 496.675347][T15150] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.675420][T15150] __x64_sys_openat+0x12d/0x210 [ 496.675474][T15150] ? __pfx___x64_sys_openat+0x10/0x10 [ 496.675536][T15150] ? srso_alias_return_thunk+0x5/0xfbef5 [ 496.675592][T15150] do_syscall_64+0x123/0x790 [ 496.675659][T15150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.675700][T15150] RIP: 0033:0x7f298139e1d9 [ 496.675730][T15150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.675769][T15150] RSP: 002b:00007f298218e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.675808][T15150] RAX: ffffffffffffffda RBX: 00007f2981625fa0 RCX: 00007f298139e1d9 [ 496.675835][T15150] RDX: 0000000000181603 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 496.675862][T15150] RBP: 00007f2981435888 R08: 0000000000000000 R09: 0000000000000000 [ 496.675887][T15150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.675912][T15150] R13: 00007f2981626038 R14: 00007f2981625fa0 R15: 00007ffc81131bf8 [ 496.675966][T15150] [ 496.960204][T15148] ovs-system: entered promiscuous mode [ 497.318326][ T12] wlan1: Trigger new scan to find an IBSS to join [ 497.512904][T15164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2707'. [ 498.044269][T15171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.270877][ T6005] wlan1: Creating new IBSS network, BSSID 26:46:4d:ad:54:a6 [ 498.342574][T15139] loop4: detected capacity change from 0 to 40427 [ 498.346319][T15139] F2FS-fs (loop4): build fault injection rate: 690 [ 498.374456][T15139] F2FS-fs (loop4): invalid crc value [ 498.505419][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 498.662781][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'. [ 498.932504][T15139] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 498.947611][T15139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 499.494219][T13439] syz-executor: attempt to access beyond end of device [ 499.494219][T13439] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 499.543291][T13439] CPU: 0 UID: 0 PID: 13439 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 499.543354][T13439] Tainted: [L]=SOFTLOCKUP [ 499.543368][T13439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 499.543392][T13439] Call Trace: [ 499.543404][T13439] [ 499.543418][T13439] dump_stack_lvl+0x100/0x190 [ 499.543485][T13439] f2fs_stop_checkpoint+0x5e6/0xb30 [ 499.543541][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.543589][T13439] ? errseq_set+0xe3/0x150 [ 499.543652][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.543706][T13439] f2fs_write_end_bio+0xef9/0x12d0 [ 499.543769][T13439] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 499.543825][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.543876][T13439] ? find_held_lock+0x2b/0x80 [ 499.543931][T13439] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 499.543979][T13439] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 499.544021][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.544077][T13439] f2fs_write_end_io+0xc8/0x240 [ 499.544134][T13439] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 499.544192][T13439] bio_endio+0x7ba/0x9c0 [ 499.544240][T13439] submit_bio_noacct+0x22a/0x2130 [ 499.544312][T13439] f2fs_submit_write_bio+0x133/0x330 [ 499.544370][T13439] __submit_merged_bio+0x330/0x7b0 [ 499.544429][T13439] ? rcu_is_watching+0x13/0xc0 [ 499.544496][T13439] __submit_merged_write_cond+0x3fe/0x510 [ 499.544568][T13439] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 499.544643][T13439] ? __pfx___might_resched+0x10/0x10 [ 499.544705][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.544752][T13439] ? folio_clear_dirty_for_io+0x178/0x960 [ 499.544821][T13439] f2fs_write_cache_pages+0x20e9/0x2630 [ 499.544885][T13439] ? is_bpf_text_address+0x8a/0x1a0 [ 499.544934][T13439] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 499.544977][T13439] ? __kasan_check_byte+0x13/0x50 [ 499.545025][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.545074][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.545121][T13439] ? rcu_is_watching+0x13/0xc0 [ 499.545177][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.545224][T13439] ? __kasan_check_byte+0x13/0x50 [ 499.545270][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.545318][T13439] ? is_bpf_text_address+0x8a/0x1a0 [ 499.545362][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.545409][T13439] ? rcu_is_watching+0x13/0xc0 [ 499.545483][T13439] ? kernel_text_address+0x8d/0x100 [ 499.545543][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.545590][T13439] ? __kernel_text_address+0xd/0x30 [ 499.545712][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.545758][T13439] ? check_prev_add+0x354/0xe60 [ 499.545802][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.545848][T13439] ? rcu_is_watching+0x13/0xc0 [ 499.545909][T13439] f2fs_write_data_pages+0x799/0x16d0 [ 499.545965][T13439] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 499.546004][T13439] ? lock_acquire+0x1d1/0x380 [ 499.546052][T13439] ? do_writepages+0x4b5/0x600 [ 499.546112][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.546165][T13439] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 499.546211][T13439] do_writepages+0x278/0x600 [ 499.546278][T13439] ? __pfx_do_writepages+0x10/0x10 [ 499.546337][T13439] ? do_raw_spin_unlock+0x145/0x1e0 [ 499.546389][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.546435][T13439] ? _raw_spin_unlock+0x28/0x50 [ 499.546503][T13439] filemap_writeback+0x22d/0x2e0 [ 499.546565][T13439] ? __pfx_filemap_writeback+0x10/0x10 [ 499.546681][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.546728][T13439] ? find_held_lock+0x2b/0x80 [ 499.546780][T13439] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 499.546821][T13439] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 499.546861][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.546919][T13439] f2fs_sync_dirty_inodes+0x452/0x960 [ 499.546978][T13439] block_operations+0x2a6/0xfc0 [ 499.547031][T13439] ? __pfx_block_operations+0x10/0x10 [ 499.547130][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.547180][T13439] ? ktime_get+0x22c/0x320 [ 499.547224][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.547270][T13439] ? rcu_is_watching+0x13/0xc0 [ 499.547330][T13439] f2fs_write_checkpoint+0x58b/0x53e0 [ 499.547375][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.547424][T13439] ? _raw_spin_unlock_irq+0x2e/0x50 [ 499.547483][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.547538][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.547584][T13439] ? do_raw_spin_lock+0x128/0x260 [ 499.547635][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.547686][T13439] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 499.547728][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.547774][T13439] ? mark_held_locks+0x40/0x70 [ 499.547820][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.547866][T13439] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 499.547923][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.547969][T13439] ? __wake_up+0x3f/0x60 [ 499.548035][T13439] kill_f2fs_super+0x3f1/0x4a0 [ 499.548077][T13439] ? __pfx_kill_f2fs_super+0x10/0x10 [ 499.548138][T13439] ? lockdep_hardirqs_on+0x7d/0x110 [ 499.548197][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.548243][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.548302][T13439] deactivate_locked_super+0xbd/0x130 [ 499.548366][T13439] deactivate_super+0xea/0x110 [ 499.548426][T13439] cleanup_mnt+0x21f/0x450 [ 499.548472][T13439] task_work_run+0x150/0x240 [ 499.548536][T13439] ? __pfx_task_work_run+0x10/0x10 [ 499.548599][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.548656][T13439] exit_to_user_mode_loop+0x1d8/0x700 [ 499.548704][T13439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 499.548750][T13439] ? rcu_is_watching+0x13/0xc0 [ 499.548809][T13439] do_syscall_64+0x661/0x790 [ 499.548876][T13439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.548917][T13439] RIP: 0033:0x7fc989d9f417 [ 499.548947][T13439] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 499.548985][T13439] RSP: 002b:00007ffdc0cbd1a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 499.549023][T13439] RAX: 0000000000000000 RBX: 00007fc989e34ccb RCX: 00007fc989d9f417 [ 499.549049][T13439] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc0cbd260 [ 499.549074][T13439] RBP: 00007ffdc0cbd260 R08: 00007ffdc0cbe260 R09: 00000000ffffffff [ 499.549100][T13439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc0cbe2f0 [ 499.549124][T13439] R13: 00007fc989e34ccb R14: 0000000000079e8d R15: 00007ffdc0cbe330 [ 499.549177][T13439] [ 499.698731][T13439] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 500.706967][T15240] FAULT_INJECTION: forcing a failure. [ 500.706967][T15240] name failslab, interval 1, probability 0, space 0, times 0 [ 500.707026][T15240] CPU: 0 UID: 0 PID: 15240 Comm: syz.2.2727 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.707083][T15240] Tainted: [L]=SOFTLOCKUP [ 500.707098][T15240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 500.707122][T15240] Call Trace: [ 500.707136][T15240] [ 500.707150][T15240] dump_stack_lvl+0x100/0x190 [ 500.707212][T15240] should_fail_ex.cold+0x5/0xa [ 500.707259][T15240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.707315][T15240] should_failslab+0xc2/0x120 [ 500.707364][T15240] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 500.707409][T15240] ? __alloc_skb+0x140/0x710 [ 500.707471][T15240] __alloc_skb+0x140/0x710 [ 500.707508][T15240] ? __alloc_skb+0x5b7/0x710 [ 500.707546][T15240] ? __pfx___alloc_skb+0x10/0x10 [ 500.707584][T15240] ? __lock_acquire+0x5c0/0x1f40 [ 500.707642][T15240] qrtr_alloc_ctrl_packet+0x21/0xf0 [ 500.707713][T15240] qrtr_port_remove+0xdb/0x3e0 [ 500.707752][T15240] ? lock_acquire+0x1d1/0x380 [ 500.707794][T15240] ? __pfx_qrtr_port_remove+0x10/0x10 [ 500.707833][T15240] ? do_raw_write_lock+0x11e/0x260 [ 500.707891][T15240] ? srso_alias_return_thunk+0x5/0xfbef5 [ 500.707943][T15240] ? __local_bh_enable_ip+0xa5/0x120 [ 500.707985][T15240] qrtr_release+0x2c1/0x380 [ 500.708027][T15240] __sock_release+0xb3/0x260 [ 500.708074][T15240] ? __pfx_sock_close+0x10/0x10 [ 500.708119][T15240] sock_close+0x1c/0x30 [ 500.708163][T15240] __fput+0x3ff/0xb50 [ 500.708224][T15240] fput_close_sync+0x118/0x250 [ 500.708280][T15240] ? __pfx_fput_close_sync+0x10/0x10 [ 500.708351][T15240] __x64_sys_close+0x8b/0x120 [ 500.708408][T15240] do_syscall_64+0x123/0x790 [ 500.708484][T15240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.708529][T15240] RIP: 0033:0x7f298139e1d9 [ 500.708565][T15240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.708611][T15240] RSP: 002b:00007f298218e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 500.708656][T15240] RAX: ffffffffffffffda RBX: 00007f2981625fa0 RCX: 00007f298139e1d9 [ 500.708689][T15240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 500.708718][T15240] RBP: 00007f2981435888 R08: 0000000000000000 R09: 0000000000000000 [ 500.708748][T15240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.708777][T15240] R13: 00007f2981626038 R14: 00007f2981625fa0 R15: 00007ffc81131bf8 [ 500.708842][T15240] [ 500.849884][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2728'. [ 500.912237][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.912313][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.229573][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2742'. [ 501.898384][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2732'. [ 502.607342][T15282] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2733'. [ 502.779294][T15280] smpboot: CPU 1 is now offline [ 505.370912][ T5754] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 505.446214][T15320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.471684][T15320] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.518260][ T5754] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 505.523610][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.523727][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.581018][ T5754] usb 5-1: config 0 descriptor?? [ 505.651256][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2748'. [ 505.863670][ T5754] usbhid 5-1:0.0: can't add hid device: -71 [ 505.863787][ T5754] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 505.933958][ T5754] usb 5-1: USB disconnect, device number 4 [ 506.162809][T15320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 506.162840][T15320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 506.219114][T15320] veth1_vlan: left promiscuous mode [ 506.225617][T15320] veth0_vlan: left promiscuous mode [ 506.273113][T15320] veth0_vlan: entered promiscuous mode [ 506.298847][T15320] veth1_vlan: entered promiscuous mode [ 506.336680][T15320] veth1_macvtap: left promiscuous mode [ 506.337832][T15320] veth0_macvtap: left promiscuous mode [ 506.345402][T15320] veth0_macvtap: entered promiscuous mode [ 506.378332][T15320] veth1_macvtap: entered promiscuous mode [ 506.415120][T15320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.429342][ T5754] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 506.446663][T15320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.452986][T15320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.511527][T15320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.540621][T15320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.568785][T15320] gretap0: entered promiscuous mode [ 506.582864][ T5754] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 506.600307][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.600372][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.639835][ T5754] usb 5-1: config 0 descriptor?? [ 506.702993][T15320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.803822][T15320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.804709][T15320] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 507.289004][T14959] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.289050][T14959] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 507.289117][T14959] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.289155][T14959] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 507.289201][T14959] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.289237][T14959] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 507.289283][T14959] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.289320][T14959] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 507.568691][ T5754] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 507.587054][ T5754] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 507.594596][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2750'. [ 508.497569][T13741] usb 5-1: USB disconnect, device number 5 [ 508.497662][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 512.811129][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 512.811151][ T31] audit: type=1326 audit(1791566921.646:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 512.811212][ T31] audit: type=1326 audit(1791566921.646:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 512.892296][ T31] audit: type=1326 audit(1791566921.726:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 512.892362][ T31] audit: type=1326 audit(1791566921.726:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 512.973986][ T31] audit: type=1326 audit(1791566921.806:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 512.974052][ T31] audit: type=1326 audit(1791566921.806:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 512.974106][ T31] audit: type=1326 audit(1791566921.806:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 513.064841][ T31] audit: type=1326 audit(1791566921.906:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 513.064904][ T31] audit: type=1326 audit(1791566921.906:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 513.136105][ T31] audit: type=1326 audit(1791566921.966:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2763" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe325f9e1d9 code=0x7ffc0000 [ 513.210081][T15388] ptrace attach of ""[15389] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[15388] [ 513.306660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.307263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.352630][T15383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.385321][T15383] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.614609][ T758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.614814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.615311][ T758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.615439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.677345][ T758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.678072][T14996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.678539][T15009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.684226][T14996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.969214][T15383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.969246][T15383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.023386][T15383] veth0_vlan: left promiscuous mode [ 514.047873][T15383] veth0_vlan: entered promiscuous mode [ 514.113001][T15383] veth1_macvtap: left promiscuous mode [ 514.132588][T15383] veth0_macvtap: left promiscuous mode [ 514.133789][T15383] veth0_macvtap: entered promiscuous mode [ 514.152387][T15383] veth1_macvtap: entered promiscuous mode [ 514.240841][T15383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.262989][T15383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.281769][T15383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.311231][T15383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.337716][T15383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.497298][T15009] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 514.567911][T15391] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 514.680305][T15009] usb 5-1: not running at top speed; connect to a high speed hub [ 514.680343][T15009] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 514.681425][T15009] usb 5-1: config 10 has an invalid interface number: 8 but max is 0 [ 514.681456][T15009] usb 5-1: config 10 has an invalid descriptor of length 1, skipping remainder of the config [ 514.681483][T15009] usb 5-1: config 10 has no interface number 0 [ 514.681525][T15009] usb 5-1: config 10 interface 8 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.681564][T15009] usb 5-1: config 10 interface 8 has no altsetting 0 [ 514.728439][T15009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.728472][T15009] usb 5-1: Product: syz [ 514.728492][T15009] usb 5-1: Manufacturer: syz [ 514.728513][T15009] usb 5-1: SerialNumber: syz [ 515.224098][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.224152][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.224197][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.224240][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.341420][T15009] usb 5-1: USB disconnect, device number 6 [ 515.528896][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2774'. [ 515.528928][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2774'. [ 515.914942][T15425] netlink: 'syz.7.2776': attribute type 1 has an invalid length. [ 515.914975][T15425] netlink: 'syz.7.2776': attribute type 4 has an invalid length. [ 515.914993][T15425] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2776'. [ 515.960479][T15425] netlink: 'syz.7.2776': attribute type 1 has an invalid length. [ 515.960503][T15425] netlink: 'syz.7.2776': attribute type 4 has an invalid length. [ 515.960520][T15425] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2776'. [ 516.732585][T15433] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 516.732624][T15433] bond1: entered allmulticast mode [ 516.783044][T15440] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 517.028363][T14996] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 517.187389][T14996] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 517.188495][T14996] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 517.188532][T14996] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 517.188566][T14996] usb 3-1: config 1 interface 0 has no altsetting 0 [ 517.196155][T14996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.196310][T14996] usb 3-1: Product: syz [ 517.196331][T14996] usb 3-1: Manufacturer: syz [ 517.196351][T14996] usb 3-1: SerialNumber: syz [ 517.298013][T15443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.298155][T15443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 518.506527][ C0] net_ratelimit: 18 callbacks suppressed [ 518.506550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.507049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.971794][T14874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.972048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.973597][ T758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.973758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.477294][T14874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.507530][T15008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.546582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.547080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.227861][T15464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.247310][T15464] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.399347][T15464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.875364][T15464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 520.875397][T15464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.955285][T15464] veth1_vlan: left promiscuous mode [ 520.974316][T15464] veth0_vlan: left promiscuous mode [ 520.989614][T15464] veth0_vlan: entered promiscuous mode [ 521.019484][T15464] veth1_vlan: entered promiscuous mode [ 521.064011][T15464] veth1_macvtap: left promiscuous mode [ 521.087707][T15464] veth0_macvtap: left promiscuous mode [ 521.088801][T15464] veth0_macvtap: entered promiscuous mode [ 521.114212][T15464] veth1_macvtap: entered promiscuous mode [ 521.224276][T15486] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 521.224302][T15486] netlink: 'syz.2.2792': attribute type 4 has an invalid length. [ 521.224319][T15486] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2792'. [ 521.244339][T15486] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 521.244360][T15486] netlink: 'syz.2.2792': attribute type 4 has an invalid length. [ 521.244377][T15486] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2792'. [ 521.273839][T15464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.308142][T15464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.353783][T15464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.374563][T15464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.394123][T15464] gretap0: entered promiscuous mode [ 521.399659][T15464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.460961][T15464] veth0_to_team: entered promiscuous mode [ 521.522328][T15464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.566568][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.566612][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.643044][T14996] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 521.722298][T14996] usb 3-1: USB disconnect, device number 5 [ 522.213248][ T753] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.213293][ T753] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.213340][ T753] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.213377][ T753] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.289357][T14959] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.289404][T14959] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.497137][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 522.497159][ T31] audit: type=1326 audit(1791566931.336:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 522.497455][ T31] audit: type=1326 audit(1791566931.336:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 522.499300][ T31] audit: type=1326 audit(1791566931.336:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 522.500794][ T31] audit: type=1326 audit(1791566931.336:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 522.513472][ T31] audit: type=1326 audit(1791566931.346:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 522.577939][ T31] audit: type=1326 audit(1791566931.416:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 522.744347][ T31] audit: type=1326 audit(1791566931.576:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 522.854586][ T31] audit: type=1326 audit(1791566931.686:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 522.893155][ T31] audit: type=1326 audit(1791566931.726:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 522.893425][ T31] audit: type=1326 audit(1791566931.726:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15498 comm="syz.2.2796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298139e1d9 code=0x7ffc0000 [ 523.032319][T15499] ptrace attach of ""[15500] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[15499] [ 523.707736][ C0] net_ratelimit: 9 callbacks suppressed [ 523.707763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.709367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.760341][T15514] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 524.113851][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.114066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.594210][ T753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.594398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.746790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.747262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.506132][T15538] li: renamed from lo (while UP) [ 525.786713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.787289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.425830][T15560] fuse: fd is not a fuse device [ 527.963095][T15564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.984083][T15564] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.061568][T15564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.831879][ T5754] net_ratelimit: 6 callbacks suppressed [ 528.831903][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.878957][T15564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.906735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.907776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.912138][T15564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.013359][T15564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 529.013391][T15564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 529.092822][T15564] veth1_vlan: left promiscuous mode [ 529.108987][T15564] veth0_vlan: left promiscuous mode [ 529.113729][T15564] veth0_vlan: entered promiscuous mode [ 529.155146][T15564] veth1_vlan: entered promiscuous mode [ 529.165240][T15588] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 529.211925][T15564] veth1_macvtap: left promiscuous mode [ 529.225013][T15564] veth0_macvtap: left promiscuous mode [ 529.236807][ T753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.237035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.267441][T15564] veth0_macvtap: entered promiscuous mode [ 529.273441][T15564] veth1_macvtap: entered promiscuous mode [ 529.361544][T15564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 529.376155][T15564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.396276][T15564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.464495][T15564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.534501][T15564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.565845][T14959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.566102][T15571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 529.781428][T14872] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.781529][T14872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.825832][T14872] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.825930][T14872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.893355][T15593] Invalid ELF header magic: != ELF [ 530.239941][ T1313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.351340][ T1313] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 530.410900][T14872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.411455][ T758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.001430][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2852'. [ 537.819414][T15717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2855'. [ 539.273731][T15748] netlink: 'syz.6.2860': attribute type 2 has an invalid length. [ 539.968616][T15766] loop4: detected capacity change from 0 to 512 [ 539.969669][T15766] EXT4-fs: Ignoring removed oldalloc option [ 540.016117][T15766] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 540.016137][T15766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 540.154858][T15766] EXT4-fs (loop4): 1 truncate cleaned up [ 540.172230][T15766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.642364][T13439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.885272][T15783] FAULT_INJECTION: forcing a failure. [ 540.885272][T15783] name failslab, interval 1, probability 0, space 0, times 0 [ 540.885318][T15783] CPU: 0 UID: 0 PID: 15783 Comm: syz.2.2871 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.885363][T15783] Tainted: [L]=SOFTLOCKUP [ 540.885374][T15783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 540.885394][T15783] Call Trace: [ 540.885403][T15783] [ 540.885415][T15783] dump_stack_lvl+0x100/0x190 [ 540.885465][T15783] should_fail_ex.cold+0x5/0xa [ 540.885503][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.885548][T15783] should_failslab+0xc2/0x120 [ 540.885587][T15783] kmem_cache_alloc_noprof+0x92/0x6a0 [ 540.885618][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.885656][T15783] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 540.885687][T15783] ? sk_prot_alloc+0x60/0x2a0 [ 540.885737][T15783] sk_prot_alloc+0x60/0x2a0 [ 540.885787][T15783] sk_clone+0x7b/0x16f0 [ 540.885825][T15783] sctp_clone_sock+0x34/0x1970 [ 540.885857][T15783] ? security_socket_post_create+0x85/0x270 [ 540.885913][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.885951][T15783] ? sock_create_lite+0x48/0x120 [ 540.885998][T15783] sctp_getsockopt_peeloff_common.constprop.0+0x237/0x640 [ 540.886042][T15783] ? __pfx_sctp_getsockopt_peeloff_common.constprop.0+0x10/0x10 [ 540.886097][T15783] sctp_getsockopt+0x2fb2/0x7160 [ 540.886138][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.886176][T15783] ? aa_inet_opt_perm+0x30d/0x970 [ 540.886229][T15783] ? __pfx_sctp_getsockopt+0x10/0x10 [ 540.886267][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.886312][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.886361][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.886399][T15783] ? futex_unqueue+0x13d/0x2c0 [ 540.886445][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.886483][T15783] ? lock_acquire+0x1d1/0x380 [ 540.886517][T15783] ? __might_fault+0xc5/0x140 [ 540.886562][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.886600][T15783] ? find_held_lock+0x2b/0x80 [ 540.886644][T15783] ? __might_fault+0xc5/0x140 [ 540.886688][T15783] ? __might_fault+0xc5/0x140 [ 540.886730][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.886780][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.886818][T15783] ? _copy_from_user+0x59/0xd0 [ 540.886869][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.886907][T15783] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 540.886955][T15783] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 540.887006][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.887051][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.887090][T15783] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 540.887137][T15783] do_sock_getsockopt+0x50a/0x6e0 [ 540.887188][T15783] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 540.887237][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.887277][T15783] ? __fget_files+0x34/0x3d0 [ 540.887315][T15783] ? find_held_lock+0x2b/0x80 [ 540.887370][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.887408][T15783] ? __fget_files+0x21f/0x3d0 [ 540.887454][T15783] __sys_getsockopt+0x148/0x260 [ 540.887488][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.887537][T15783] ? __x64_sys_getsockopt+0xbd/0x160 [ 540.887570][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.887608][T15783] __x64_sys_getsockopt+0xbd/0x160 [ 540.887641][T15783] ? do_syscall_64+0xae/0x790 [ 540.887690][T15783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 540.887728][T15783] ? lockdep_hardirqs_on+0x7d/0x110 [ 540.887779][T15783] do_syscall_64+0x123/0x790 [ 540.887833][T15783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.887865][T15783] RIP: 0033:0x7f298139e1d9 [ 540.887889][T15783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.887921][T15783] RSP: 002b:00007f298218e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 540.887951][T15783] RAX: ffffffffffffffda RBX: 00007f2981625fa0 RCX: 00007f298139e1d9 [ 540.887977][T15783] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 540.887996][T15783] RBP: 00007f2981435888 R08: 0000200000000040 R09: 0000000000000000 [ 540.888016][T15783] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 540.888037][T15783] R13: 00007f2981626038 R14: 00007f2981625fa0 R15: 00007ffc81131bf8 [ 540.888079][T15783] [ 543.918726][T15788] smc: net device ip6erspan0 applied user defined pnetid SYZ2 [ 544.380604][T15802] tipc: Started in network mode [ 544.380639][T15802] tipc: Node identity ac1414aa, cluster identity 4711 [ 544.380902][T15802] tipc: New replicast peer: 172.20.20.187 [ 544.381304][T15802] tipc: Enabled bearer , priority 10 [ 544.721624][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2880'. [ 544.882737][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.019371][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.027053][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.052190][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.071931][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.162274][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.182622][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.184004][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.215649][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.239041][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.242337][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.286664][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.287526][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.325255][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.343017][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.437533][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.444197][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.496920][ T5754] tipc: Node number set to 2886997162 [ 545.530570][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.532976][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.640186][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.662357][T15827] ip_tables: iptables: counters copy to user failed while replacing table [ 545.665275][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.741100][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.760522][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.771312][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.816655][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 545.880903][T15819] 9pnet_fd: p9_fd_create_tcp (15819): problem connecting socket to 127.0.0.1 [ 547.155950][T15851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2892'. [ 547.372754][T15857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2892'. [ 549.077059][T15848] Bluetooth: hci2: command 0x0406 tx timeout [ 549.372977][T15908] loop4: detected capacity change from 0 to 128 [ 549.467634][T15908] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 549.472882][T15908] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.928135][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 549.982100][T13439] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 550.104061][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 550.104083][ T31] audit: type=1326 audit(1791566958.926:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 550.104144][ T31] audit: type=1326 audit(1791566958.926:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 550.174337][ T31] audit: type=1326 audit(1791566959.016:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 550.174446][ T31] audit: type=1326 audit(1791566959.016:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 550.258575][ T31] audit: type=1326 audit(1791566959.086:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 550.258643][ T31] audit: type=1326 audit(1791566959.086:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 550.258703][ T31] audit: type=1326 audit(1791566959.096:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 550.355494][ T31] audit: type=1326 audit(1791566959.196:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 550.355559][ T31] audit: type=1326 audit(1791566959.196:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 550.426091][ T31] audit: type=1326 audit(1791566959.266:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15919 comm="syz.6.2927" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f010bb9e1d9 code=0x7ffc0000 [ 551.586514][ T5754] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 551.737358][ T5754] usb 3-1: Using ep0 maxpacket: 8 [ 551.815377][ T5754] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.838677][ T5754] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.838716][ T5754] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.838750][ T5754] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 551.838784][ T5754] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 551.838821][ T5754] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 551.838854][ T5754] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.838904][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.193126][ T5754] usb 3-1: GET_CAPABILITIES returned 0 [ 552.193176][ T5754] usbtmc 3-1:16.0: can't read capabilities [ 552.481884][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.613014][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.613070][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.613114][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.613158][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.613508][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.613559][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.613605][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.613652][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.613698][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.811047][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.811104][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.811148][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.811193][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.811236][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.811477][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 552.840843][T14996] usb 3-1: USB disconnect, device number 6 [ 554.417812][T15989] loop2: detected capacity change from 0 to 512 [ 554.439856][T15989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 554.549643][T15989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.549763][T15989] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.919428][T15993] EXT4-fs error (device loop2): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 400: padding at end of block bitmap is not set [ 556.524829][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2948'. [ 557.259107][T15989] EXT4-fs (loop2): shut down requested (0) [ 557.603892][T16050] ip_tables: iptables: counters copy to user failed while replacing table [ 557.812552][T16051] tipc: New replicast peer: 172.20.20.187 [ 557.812918][T16051] tipc: Enabled bearer , priority 10 [ 558.465915][T16063] vlan3: entered promiscuous mode [ 558.465942][T16063] bridge0: entered promiscuous mode [ 559.406100][T14777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.575042][T16092] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2964'. [ 561.715400][T14829] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.357776][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.357839][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.789580][T16149] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2974'. [ 564.723797][ T758] IPVS: starting estimator thread 0... [ 564.806958][T16167] IPVS: using max 30 ests per chain, 72000 per kthread [ 565.000042][T16169] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2981'. [ 566.604376][T16195] loop4: detected capacity change from 0 to 1024 [ 567.141177][T16206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2996'. [ 567.920244][T16222] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3012'. [ 567.936318][T16195] hfsplus: xattr search failed [ 568.136573][ T5754] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 568.313214][ T5754] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 568.315531][ T5754] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 568.315571][ T5754] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.315601][ T5754] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.315637][ T5754] usb 3-1: config 0 interface 0 has no altsetting 0 [ 568.315672][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.397199][ T5754] usb 3-1: config 0 descriptor?? [ 569.029316][ T5754] input: HID 17ef:6047 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:17EF:6047.0003/input/input14 [ 569.902076][ T5754] lenovo 0003:17EF:6047.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 569.960868][ T5754] usb 3-1: USB disconnect, device number 7 [ 570.243766][T16264] loop2: detected capacity change from 0 to 1024 [ 570.548455][T16261] fido_id[16261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 570.553487][T16264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 570.553587][T16264] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.755020][T16264] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.3008: lblock 3 mapped to illegal pblock 3 (length 3) [ 570.773115][T16264] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 570.773156][T16264] EXT4-fs (loop2): This should not happen!! Data will be lost [ 570.773156][T16264] [ 570.923463][T16267] EXT4-fs error (device loop2): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 571.000913][T16264] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 8: comm syz.2.3008: lblock 8 mapped to illegal pblock 8 (length 8) [ 571.043111][T16264] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 571.043151][T16264] EXT4-fs (loop2): This should not happen!! Data will be lost [ 571.043151][T16264] [ 571.528330][T16281] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3019'. [ 571.761037][T14777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 577.061483][T16349] overlayfs: failed to clone upperpath [ 577.072191][T16346] netlink: 'syz.6.3042': attribute type 4 has an invalid length. [ 577.079190][T16350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3040'. [ 578.585101][T16376] netlink: 'syz.6.3050': attribute type 1 has an invalid length. [ 578.770949][T16376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 579.032103][T16384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 579.032558][T16384] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 579.033580][T16384] bond3: (slave wireguard1): Error -95 calling set_mac_address [ 579.183419][T16385] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 579.212154][T16385] bond3: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 583.055370][T16452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3079'. [ 583.762409][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'. [ 584.078322][T16469] FAULT_INJECTION: forcing a failure. [ 584.078322][T16469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 584.078369][T16469] CPU: 0 UID: 0 PID: 16469 Comm: syz.4.3083 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.078411][T16469] Tainted: [L]=SOFTLOCKUP [ 584.078423][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 584.078441][T16469] Call Trace: [ 584.078451][T16469] [ 584.078462][T16469] dump_stack_lvl+0x100/0x190 [ 584.078509][T16469] should_fail_ex.cold+0x5/0xa [ 584.078543][T16469] ? prepare_alloc_pages+0x16d/0x5b0 [ 584.078583][T16469] should_fail_alloc_page+0xeb/0x140 [ 584.078623][T16469] prepare_alloc_pages+0x1f0/0x5b0 [ 584.078666][T16469] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 584.078717][T16469] ? __pfx_get_page_from_freelist+0x10/0x10 [ 584.078764][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.078800][T16469] ? prepare_alloc_pages+0x1f0/0x5b0 [ 584.078835][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.078874][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.078909][T16469] ? rcu_is_watching+0x13/0xc0 [ 584.078950][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.078986][T16469] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 584.079041][T16469] ? lock_release+0x24d/0x310 [ 584.079071][T16469] ? bpf_ksym_find+0x124/0x1c0 [ 584.079116][T16469] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 584.079161][T16469] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 584.079213][T16469] ? is_bpf_text_address+0x94/0x1a0 [ 584.079248][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.079282][T16469] ? kernel_text_address+0x8d/0x100 [ 584.079327][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.079361][T16469] ? __kernel_text_address+0xd/0x30 [ 584.079404][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.079439][T16469] ? unwind_get_return_address+0x59/0xa0 [ 584.079480][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.079514][T16469] ? arch_stack_walk+0xa6/0xf0 [ 584.079551][T16469] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 584.079616][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.079650][T16469] ? stack_trace_save+0x8e/0xc0 [ 584.079678][T16469] ? __pfx_stack_trace_save+0x10/0x10 [ 584.079722][T16469] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 584.079772][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.079812][T16469] ? policy_nodemask+0xed/0x4f0 [ 584.079853][T16469] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 584.079923][T16469] __kasan_populate_vmalloc+0xf0/0x210 [ 584.079982][T16469] alloc_vmap_area+0x95d/0x2bb0 [ 584.080029][T16469] ? kasan_save_track+0x14/0x30 [ 584.080059][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.080094][T16469] ? __kasan_kmalloc+0xaa/0xb0 [ 584.080125][T16469] ? __pfx_alloc_vmap_area+0x10/0x10 [ 584.080154][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.080191][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.080227][T16469] ? __get_vm_area_node+0x124/0x350 [ 584.080266][T16469] __get_vm_area_node+0x1ed/0x350 [ 584.080308][T16469] __vmalloc_node_range_noprof+0x268/0x1420 [ 584.080347][T16469] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 584.080382][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.080416][T16469] ? rcu_is_watching+0x13/0xc0 [ 584.080457][T16469] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 584.080490][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.080525][T16469] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.080572][T16469] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 584.080605][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.080643][T16469] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 584.080677][T16469] ? trace_sched_exit_tp+0x120/0x160 [ 584.080720][T16469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 584.080758][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.080793][T16469] ? __lock_acquire+0x5c0/0x1f40 [ 584.080826][T16469] ? look_up_lock_class+0x55/0x120 [ 584.080872][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.080907][T16469] ? register_lock_class+0x3f/0x7b0 [ 584.080943][T16469] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 584.080975][T16469] __vmalloc_node_noprof+0xad/0xf0 [ 584.081017][T16469] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 584.081055][T16469] __vmalloc_noprof+0xa3/0x120 [ 584.081091][T16469] ? __pfx___vmalloc_noprof+0x10/0x10 [ 584.081126][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.081176][T16469] bpf_prog_alloc_no_stats+0x58/0x690 [ 584.081209][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.081254][T16469] bpf_prog_alloc+0x3b/0x200 [ 584.081289][T16469] __get_filter+0x112/0x2c0 [ 584.081332][T16469] sk_attach_filter+0x1c/0x150 [ 584.081375][T16469] sk_setsockopt+0x3945/0x5e60 [ 584.081421][T16469] ? __pfx_sk_setsockopt+0x10/0x10 [ 584.081459][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.081493][T16469] ? futex_wait+0x11e/0x370 [ 584.081526][T16469] ? __lock_acquire+0x5c0/0x1f40 [ 584.081570][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.081612][T16469] unix_setsockopt+0xf9/0x340 [ 584.081644][T16469] ? __pfx_unix_setsockopt+0x10/0x10 [ 584.081674][T16469] ? aa_sock_opt_perm+0x114/0x1e0 [ 584.081720][T16469] ? __pfx_unix_setsockopt+0x10/0x10 [ 584.081752][T16469] do_sock_setsockopt+0xf3/0x1d0 [ 584.081795][T16469] __sys_setsockopt+0x195/0x220 [ 584.081839][T16469] __x64_sys_setsockopt+0xbd/0x160 [ 584.081869][T16469] ? do_syscall_64+0xae/0x790 [ 584.081914][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.081948][T16469] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.081994][T16469] do_syscall_64+0x123/0x790 [ 584.082049][T16469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.082079][T16469] RIP: 0033:0x7fc989d9e1d9 [ 584.082103][T16469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.082132][T16469] RSP: 002b:00007fc98abc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 584.082161][T16469] RAX: ffffffffffffffda RBX: 00007fc98a025fa0 RCX: 00007fc989d9e1d9 [ 584.082181][T16469] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 584.082199][T16469] RBP: 00007fc989e35888 R08: 0000000000000010 R09: 0000000000000000 [ 584.082217][T16469] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 584.082235][T16469] R13: 00007fc98a026038 R14: 00007fc98a025fa0 R15: 00007ffdc0cbdf38 [ 584.082276][T16469] [ 584.542308][T16469] syz.4.3083: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 584.542430][T16469] CPU: 0 UID: 0 PID: 16469 Comm: syz.4.3083 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.542482][T16469] Tainted: [L]=SOFTLOCKUP [ 584.542495][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 584.542517][T16469] Call Trace: [ 584.542528][T16469] [ 584.542541][T16469] dump_stack_lvl+0x100/0x190 [ 584.542597][T16469] warn_alloc.cold+0x9e/0xb2 [ 584.542638][T16469] ? __pfx_warn_alloc+0x10/0x10 [ 584.542693][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.542738][T16469] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.542803][T16469] ? __get_vm_area_node+0x2f0/0x350 [ 584.542857][T16469] ? __get_vm_area_node+0x22b/0x350 [ 584.542911][T16469] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 584.542960][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.543013][T16469] ? rcu_is_watching+0x13/0xc0 [ 584.543066][T16469] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 584.543108][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.543152][T16469] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.543211][T16469] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 584.543254][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.543303][T16469] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 584.543346][T16469] ? trace_sched_exit_tp+0x120/0x160 [ 584.543401][T16469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 584.543451][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.543496][T16469] ? __lock_acquire+0x5c0/0x1f40 [ 584.543537][T16469] ? look_up_lock_class+0x55/0x120 [ 584.543600][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.543645][T16469] ? register_lock_class+0x3f/0x7b0 [ 584.543690][T16469] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 584.543731][T16469] __vmalloc_node_noprof+0xad/0xf0 [ 584.543779][T16469] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 584.543826][T16469] __vmalloc_noprof+0xa3/0x120 [ 584.543868][T16469] ? __pfx___vmalloc_noprof+0x10/0x10 [ 584.543906][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.543959][T16469] bpf_prog_alloc_no_stats+0x58/0x690 [ 584.543994][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.544043][T16469] bpf_prog_alloc+0x3b/0x200 [ 584.544081][T16469] __get_filter+0x112/0x2c0 [ 584.544127][T16469] sk_attach_filter+0x1c/0x150 [ 584.544174][T16469] sk_setsockopt+0x3945/0x5e60 [ 584.544223][T16469] ? __pfx_sk_setsockopt+0x10/0x10 [ 584.544263][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.544302][T16469] ? futex_wait+0x11e/0x370 [ 584.544336][T16469] ? __lock_acquire+0x5c0/0x1f40 [ 584.544382][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.544427][T16469] unix_setsockopt+0xf9/0x340 [ 584.544461][T16469] ? __pfx_unix_setsockopt+0x10/0x10 [ 584.544492][T16469] ? aa_sock_opt_perm+0x114/0x1e0 [ 584.544544][T16469] ? __pfx_unix_setsockopt+0x10/0x10 [ 584.544578][T16469] do_sock_setsockopt+0xf3/0x1d0 [ 584.544624][T16469] __sys_setsockopt+0x195/0x220 [ 584.544666][T16469] __x64_sys_setsockopt+0xbd/0x160 [ 584.544698][T16469] ? do_syscall_64+0xae/0x790 [ 584.544747][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.544786][T16469] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.544835][T16469] do_syscall_64+0x123/0x790 [ 584.544890][T16469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.544922][T16469] RIP: 0033:0x7fc989d9e1d9 [ 584.544946][T16469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.544978][T16469] RSP: 002b:00007fc98abc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 584.545011][T16469] RAX: ffffffffffffffda RBX: 00007fc98a025fa0 RCX: 00007fc989d9e1d9 [ 584.545033][T16469] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 584.545053][T16469] RBP: 00007fc989e35888 R08: 0000000000000010 R09: 0000000000000000 [ 584.545073][T16469] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 584.545093][T16469] R13: 00007fc98a026038 R14: 00007fc98a025fa0 R15: 00007ffdc0cbdf38 [ 584.545136][T16469] [ 585.301497][T16469] Mem-Info: [ 585.301518][T16469] active_anon:26496 inactive_anon:632 isolated_anon:0 [ 585.301518][T16469] active_file:16 inactive_file:64443 isolated_file:0 [ 585.301518][T16469] unevictable:0 dirty:472 writeback:0 [ 585.301518][T16469] slab_reclaimable:7632 slab_unreclaimable:111467 [ 585.301518][T16469] mapped:35305 shmem:19605 pagetables:1748 [ 585.301518][T16469] sec_pagetables:0 bounce:0 [ 585.301518][T16469] kernel_misc_reclaimable:0 [ 585.301518][T16469] free:1228324 free_pcp:10330 free_cma:0 [ 585.301618][T16469] Node 0 active_anon:105984kB inactive_anon:2528kB active_file:64kB inactive_file:257564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141208kB dirty:1888kB writeback:0kB shmem:78420kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15264kB pagetables:6872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 585.301725][T16469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 585.301853][T16469] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.301951][T16469] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 585.302004][T16469] Node 0 DMA32 free:958664kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:105984kB inactive_anon:2528kB active_file:64kB inactive_file:257564kB unevictable:0kB writepending:1888kB zspages:0kB present:3129332kB managed:2511060kB mlocked:0kB bounce:0kB free_pcp:41320kB local_pcp:41320kB free_cma:0kB [ 585.302102][T16469] lowmem_reserve[]: 0 0 0 0 0 [ 585.302152][T16469] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:68kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.302243][T16469] lowmem_reserve[]: 0 0 0 0 0 [ 585.302293][T16469] Node 1 Normal free:3939272kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.302387][T16469] lowmem_reserve[]: 0 0 0 0 0 [ 585.302437][T16469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 585.302646][T16469] Node 0 DMA32: 2340*4kB (UME) 2349*8kB (UME) 1543*16kB (UME) 807*32kB (UME) 666*64kB (ME) 286*128kB (UME) 106*256kB (ME) 87*512kB (UME) 24*1024kB (UME) 8*2048kB (M) 168*4096kB (UM) = 958664kB [ 585.302892][T16469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 585.613786][T16469] Node 1 Normal: 2*4kB (UM) 2*8kB (U) 5*16kB (UM) 5*32kB (UM) 9*64kB (UM) 5*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939272kB [ 585.614043][T16469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.614070][T16469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 585.614095][T16469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.614121][T16469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 585.614147][T16469] 84058 total pagecache pages [ 585.614158][T16469] 0 pages in swap cache [ 585.614168][T16469] Free swap = 124996kB [ 585.614179][T16469] Total swap = 124996kB [ 585.614191][T16469] 2097051 pages RAM [ 585.614201][T16469] 0 pages HighMem/MovableOnly [ 585.614211][T16469] 437653 pages reserved [ 585.614221][T16469] 0 pages cma reserved [ 591.610105][T16542] jffs2: notice: (16542) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 593.004286][T16573] binder: 16570:16573 ioctl 7a5 0 returned -22 [ 593.317685][ T6010] ------------[ cut here ]------------ [ 593.317701][ T6010] time_after(jiffies, timeout) [ 593.317712][ T6010] WARNING: io_uring/io_uring.c:2358 at io_ring_exit_work+0x479/0xd63, CPU#0: kworker/u8:18/6010 [ 593.341645][ T6010] Modules linked in: [ 593.346129][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.358522][ T6010] Tainted: [L]=SOFTLOCKUP [ 593.362878][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 593.373067][ T6010] Workqueue: iou_exit io_ring_exit_work [ 593.378932][ T6010] RIP: 0010:io_ring_exit_work+0x479/0xd63 [ 593.384729][ T6010] Code: 8f e8 9b db 49 01 48 8b 05 b4 5b 6b 0e 4c 8b 74 24 38 31 ff 49 29 c6 4c 89 f6 e8 f2 8c d6 00 4d 85 f6 79 12 e8 48 92 d6 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 36 92 d6 00 48 8b 74 24 20 [ 593.405362][ T6010] RSP: 0018:ffffc90004ecfa80 EFLAGS: 00010293 [ 593.412188][ T6010] RAX: 0000000000000000 RBX: ffff88802ad40710 RCX: 0000000000000000 [ 593.420374][ T6010] RDX: ffff888023ba8000 RSI: ffffffff813596e8 RDI: ffff888023ba8000 [ 593.428628][ T6010] RBP: ffffc90004ecfc18 R08: 0000000000000007 R09: 0000000000000000 [ 593.436776][ T6010] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88802ad40000 [ 593.445278][ T6010] R13: dffffc0000000000 R14: fffffffffffffffa R15: 000000002ad40700 [ 593.453736][ T6010] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 593.462798][ T6010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 593.469532][ T6010] CR2: 00007f010bdf0c38 CR3: 00000000461a7000 CR4: 0000000000350ef0 [ 593.477590][ T6010] Call Trace: [ 593.480872][ T6010] [ 593.483796][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.489576][ T6010] ? __pfx_io_ring_exit_work+0x10/0x10 [ 593.495080][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.500826][ T6010] ? reacquire_held_locks+0xdd/0x1f0 [ 593.506230][ T6010] ? process_one_work+0x906/0x1b10 [ 593.511446][ T6010] ? process_one_work+0x906/0x1b10 [ 593.516649][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.522309][ T6010] process_one_work+0xac7/0x1b10 [ 593.527410][ T6010] ? __pfx_process_one_work+0x10/0x10 [ 593.532813][ T6010] ? lock_acquire+0x1d1/0x380 [ 593.537605][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.543259][ T6010] worker_thread+0x5ef/0xe50 [ 593.548463][ T6010] ? __pfx_worker_thread+0x10/0x10 [ 593.553601][ T6010] ? kthread+0x13a/0x450 [ 593.558407][ T6010] ? __pfx_worker_thread+0x10/0x10 [ 593.563553][ T6010] kthread+0x373/0x450 [ 593.568267][ T6010] ? __pfx_kthread+0x10/0x10 [ 593.572899][ T6010] ret_from_fork+0x730/0xd60 [ 593.577567][ T6010] ? __pfx_ret_from_fork+0x10/0x10 [ 593.582690][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.588676][ T6010] ? __switch_to+0x800/0x10f0 [ 593.593391][ T6010] ? __switch_to_asm+0x39/0x70 [ 593.598358][ T6010] ? __pfx_kthread+0x10/0x10 [ 593.602970][ T6010] ret_from_fork_asm+0x1a/0x30 [ 593.607855][ T6010] [ 593.610903][ T6010] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 593.618210][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.629321][ T6010] Tainted: [L]=SOFTLOCKUP [ 593.633628][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 593.643698][ T6010] Workqueue: iou_exit io_ring_exit_work [ 593.649269][ T6010] Call Trace: [ 593.652538][ T6010] [ 593.655458][ T6010] dump_stack_lvl+0x100/0x190 [ 593.660184][ T6010] vpanic+0x553/0x970 [ 593.664169][ T6010] ? __pfx_vpanic+0x10/0x10 [ 593.668682][ T6010] panic+0xd1/0xe0 [ 593.672403][ T6010] ? __pfx_panic+0x10/0x10 [ 593.676834][ T6010] check_panic_on_warn.cold+0x19/0x34 [ 593.682250][ T6010] ? io_ring_exit_work+0x479/0xd63 [ 593.687378][ T6010] __warn.cold+0x191/0x318 [ 593.691803][ T6010] __report_bug+0x30f/0x440 [ 593.696344][ T6010] ? io_ring_exit_work+0x479/0xd63 [ 593.701475][ T6010] ? __pfx___report_bug+0x10/0x10 [ 593.706516][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.712168][ T6010] ? rcu_is_watching+0x13/0xc0 [ 593.716946][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.722591][ T6010] ? trace_contention_end+0x126/0x160 [ 593.727972][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.733635][ T6010] ? __mutex_lock+0x26c/0x1bd0 [ 593.738397][ T6010] ? io_ring_exit_work+0x422/0xd63 [ 593.743532][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.749198][ T6010] ? find_held_lock+0x2b/0x80 [ 593.753913][ T6010] ? io_ring_exit_work+0x434/0xd63 [ 593.759058][ T6010] ? io_ring_exit_work+0x479/0xd63 [ 593.764209][ T6010] report_bug+0xb3/0x220 [ 593.768494][ T6010] ? io_ring_exit_work+0x479/0xd63 [ 593.773650][ T6010] handle_bug+0x16a/0x2a0 [ 593.777989][ T6010] exc_invalid_op+0x17/0x50 [ 593.782510][ T6010] asm_exc_invalid_op+0x1a/0x20 [ 593.787368][ T6010] RIP: 0010:io_ring_exit_work+0x479/0xd63 [ 593.793115][ T6010] Code: 8f e8 9b db 49 01 48 8b 05 b4 5b 6b 0e 4c 8b 74 24 38 31 ff 49 29 c6 4c 89 f6 e8 f2 8c d6 00 4d 85 f6 79 12 e8 48 92 d6 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 36 92 d6 00 48 8b 74 24 20 [ 593.812729][ T6010] RSP: 0018:ffffc90004ecfa80 EFLAGS: 00010293 [ 593.818792][ T6010] RAX: 0000000000000000 RBX: ffff88802ad40710 RCX: 0000000000000000 [ 593.826769][ T6010] RDX: ffff888023ba8000 RSI: ffffffff813596e8 RDI: ffff888023ba8000 [ 593.834733][ T6010] RBP: ffffc90004ecfc18 R08: 0000000000000007 R09: 0000000000000000 [ 593.843128][ T6010] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88802ad40000 [ 593.851188][ T6010] R13: dffffc0000000000 R14: fffffffffffffffa R15: 000000002ad40700 [ 593.859177][ T6010] ? io_ring_exit_work+0x478/0xd63 [ 593.864340][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.870044][ T6010] ? __pfx_io_ring_exit_work+0x10/0x10 [ 593.875567][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.881214][ T6010] ? reacquire_held_locks+0xdd/0x1f0 [ 593.886525][ T6010] ? process_one_work+0x906/0x1b10 [ 593.891657][ T6010] ? process_one_work+0x906/0x1b10 [ 593.896791][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.902446][ T6010] process_one_work+0xac7/0x1b10 [ 593.907435][ T6010] ? __pfx_process_one_work+0x10/0x10 [ 593.912855][ T6010] ? lock_acquire+0x1d1/0x380 [ 593.917576][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.923246][ T6010] worker_thread+0x5ef/0xe50 [ 593.927872][ T6010] ? __pfx_worker_thread+0x10/0x10 [ 593.933004][ T6010] ? kthread+0x13a/0x450 [ 593.937257][ T6010] ? __pfx_worker_thread+0x10/0x10 [ 593.942392][ T6010] kthread+0x373/0x450 [ 593.946482][ T6010] ? __pfx_kthread+0x10/0x10 [ 593.951103][ T6010] ret_from_fork+0x730/0xd60 [ 593.955715][ T6010] ? __pfx_ret_from_fork+0x10/0x10 [ 593.960836][ T6010] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.966479][ T6010] ? __switch_to+0x800/0x10f0 [ 593.971165][ T6010] ? __switch_to_asm+0x39/0x70 [ 593.975936][ T6010] ? __pfx_kthread+0x10/0x10 [ 593.980564][ T6010] ret_from_fork_asm+0x1a/0x30 [ 593.985364][ T6010] [ 593.988421][ T6010] Kernel Offset: disabled [ 593.992745][ T6010] Rebooting in 86400 seconds..