last executing test programs: 2m59.906138732s ago: executing program 0 (id=582): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/172, 0xac, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) close(0x3) 2m59.753657088s ago: executing program 0 (id=583): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x2e, &(0x7f0000004a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x20, 0xfffd, 0x0, 0xbb, 0x11, 0x0, @remote, @remote}, {0x4e27, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2m59.578010641s ago: executing program 0 (id=586): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x28004044}}], 0x2, 0x4000000) 2m59.486658484s ago: executing program 0 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 2m59.084747558s ago: executing program 0 (id=591): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x82001000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m57.69253286s ago: executing program 0 (id=599): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0\x00') mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0xa05044, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00') 2m57.17179624s ago: executing program 32 (id=599): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0\x00') mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0xa05044, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00') 2m52.456506363s ago: executing program 4 (id=624): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x4, 0x7, 0xed, 0x1}, 0x14) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000400)="008f3e", 0x3}], 0x1}}], 0x1, 0x0) 2m50.896286069s ago: executing program 4 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="522db49c98d3b63ab78fbcfb8f35", 0xe) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) read$rfkill(r0, &(0x7f0000000140), 0x8) 2m50.827127546s ago: executing program 4 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540), &(0x7f0000001580), 0xa7c, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b00)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000001b40)={'wlan0\x00', @random="7cf1e97c9e4f"}) 2m49.516353281s ago: executing program 4 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x88000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1001) 2m49.07572171s ago: executing program 4 (id=638): mknodat(0xffffffffffffff9c, &(0x7f0000002900)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000002940)='./file2\x00', 0x0, 0x0, 0x0) open(&(0x7f0000002a40)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000002980)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f00000029c0)='./file0\x00') mknod$loop(&(0x7f0000002a00)='./file0\x00', 0x2000, 0x0) 2m47.185615307s ago: executing program 4 (id=644): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r0]) 2m47.102650021s ago: executing program 33 (id=644): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r0]) 1m59.746980128s ago: executing program 6 (id=805): r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0xfffffc79}, 0x58) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1m58.738088163s ago: executing program 6 (id=811): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1001, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x40}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000400)={0x0, 0x2710}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000640)=@IORING_OP_CLOSE) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 1m58.361105318s ago: executing program 6 (id=815): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000002c0)=0x3d, 0x4) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x102030405060708, {0x0, 0x1, 0x4}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) getpeername(r0, 0x0, &(0x7f0000000080)) 1m57.999377713s ago: executing program 6 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3c5093, 0x0) umount2(&(0x7f0000000300)='./file0/file0\x00', 0x0) 1m57.468876385s ago: executing program 6 (id=823): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x4, 0xf}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m56.352650577s ago: executing program 6 (id=838): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) 1m55.878429384s ago: executing program 34 (id=838): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) 51.944456082s ago: executing program 7 (id=1225): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000840)={0x5, 0x5, 0x6, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x6, 0x81, 0x8, 0x40, 0x1c}, 0xe) sendto$inet6(r0, &(0x7f0000000b00)="1a", 0x34000, 0x0, &(0x7f0000000b40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) close(r0) 51.654017987s ago: executing program 7 (id=1229): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000300)='X', 0xfee4, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 50.699434744s ago: executing program 7 (id=1233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) 50.504149633s ago: executing program 7 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000001380)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001480)='\x00', 0x89901) move_mount(r0, &(0x7f00000014c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x262) 50.317155871s ago: executing program 7 (id=1237): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x722) syz_genetlink_get_family_id$team(&(0x7f0000000a40), 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000a40)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000a80)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 49.085919705s ago: executing program 7 (id=1242): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xd}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 48.244696713s ago: executing program 35 (id=1242): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xd}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 32.799017857s ago: executing program 3 (id=1326): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x836d9fb164f927b3) io_setup(0x3, &(0x7f0000000600)=0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='./file0\x00', 0x80000a40) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 32.247381325s ago: executing program 3 (id=1333): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 32.020909496s ago: executing program 3 (id=1338): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3418000040000901feffffff00000000017c0000040042800c00018006000600800a000010180280091814802904", @ANYRES16=r0], 0x1834}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 31.764439071s ago: executing program 3 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x3c5093, 0x0) umount2(&(0x7f0000000300)='./file0/file0\x00', 0x0) 31.392179008s ago: executing program 3 (id=1347): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)='100', 0x3) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000740)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)='\x00', 0xffe0}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000880)="96", 0x1}], 0x1}}], 0x2, 0x48000) 29.630329127s ago: executing program 3 (id=1356): r0 = socket(0x10, 0x80003, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2000, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x1000000, &(0x7f00000008c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lsetxattr$system_posix_acl(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)='system.posix_acl_access\x00', &(0x7f0000002b00)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x24, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 29.007694195s ago: executing program 36 (id=1356): r0 = socket(0x10, 0x80003, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2000, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x1000000, &(0x7f00000008c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lsetxattr$system_posix_acl(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)='system.posix_acl_access\x00', &(0x7f0000002b00)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x24, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 8.54854958s ago: executing program 2 (id=1488): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x10000, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000000740)="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", 0x2000, &(0x7f0000002740)={&(0x7f0000002800)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x9, 0x4e93e32f7c580046, 0xdcf, 0x4005, 0xa, 0x32a, 0x0, 0x0, 0x2, 0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002880)="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", 0x2000, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004940)={0x78, 0x0, 0x104, {0x101, 0x7, 0x0, {0x3, 0x2000000000000003, 0x7, 0x0, 0x6, 0x3, 0xfffffffd, 0x80000001, 0x3, 0x8000, 0x5, 0x0, 0xffffffffffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000049c0)='./file0\x00', 0x40042, 0x1) 8.300440467s ago: executing program 2 (id=1492): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x18, 0x110, 0x1, "16"}, {0x10, 0x110, 0xe}], 0x28}, 0x44) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x110, 0x1, "12"}], 0x18}, 0x0) 7.398979851s ago: executing program 2 (id=1506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000070601080000ac00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 2.958797356s ago: executing program 2 (id=1523): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000480)={0x14, 0x0, 0x0}, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x20, 0x16, 0x6, "3f1c15f2511c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x20, 0x5, 0x59, "61957b9d3518cb13065a7a4cf6099a1e329c09ba44ace33010fccb9b43a4a0b6bd4704d319ea3e9d269f2b8f78492299bdd44ead54a744d0e17f1c6e2aeb5829c8e91c1118acd4c38c6671c4c6e7452bc9bc86f3255b236fb2"}, 0x0, 0x0}) 2.957920159s ago: executing program 1 (id=1533): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002fc0)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000003000)="3303", 0x2, 0x48d0, &(0x7f0000003040)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @local}, 0x14) 2.75013434s ago: executing program 5 (id=1525): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) setresuid(0xee00, 0xee00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) 2.725857498s ago: executing program 1 (id=1526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x80000000000000, 0x8, 0x6, 0x101000, 0x2, 0x1002, 0xfbfffffffffffffb, 0x8, 0x81, 0x7, 0x2372, 0x8bda, 0xfffffffffffffeff, 0x7c0, 0x8], 0x25000, 0x216156}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.510074881s ago: executing program 9 (id=1529): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./cgrp\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgrp\x00', 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000001000000000000010400000020"], 0x0, 0x2d}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x20, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000003c0)="03", &(0x7f0000000400)}, 0x20) 2.492724897s ago: executing program 5 (id=1530): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 2.16476664s ago: executing program 9 (id=1534): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x144) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='3', 0x3e) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000140)=0x40049, 0x4) 2.116545104s ago: executing program 5 (id=1535): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000700000/0x1000)=nil, 0x1000}, 0x1}) 2.081666487s ago: executing program 8 (id=1536): mkdir(&(0x7f0000000180)='./sys_mount\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mount(0x0, &(0x7f0000000240)='./sys_mount\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2202, 0x0) write(r0, &(0x7f00000003c0)='1', 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1002) 2.037204032s ago: executing program 5 (id=1537): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x2, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6, @multicast}, 0x10) 1.607174249s ago: executing program 9 (id=1538): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000ac0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.606534111s ago: executing program 5 (id=1539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000500)={0xfff, 0x0, 0x1, r2}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000680)={0xd28e, 0x0, 0x0, r2, 0x15}) 1.513820744s ago: executing program 8 (id=1540): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_sigqueueinfo(0x0, 0x37, 0x0) 1.42947543s ago: executing program 9 (id=1541): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/68, 0x44}, {&(0x7f0000000000)=""/62, 0x3e}], 0x2}, 0x7ffffffe}], 0x1, 0x161, 0x0) 1.409011767s ago: executing program 1 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = io_uring_setup(0x1386, &(0x7f0000000280)={0x0, 0xc2de, 0x10000, 0x1, 0x240}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x101042, 0x5) write(r1, &(0x7f0000000340)='3', 0x4e) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000003c0)={0x9, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x1) 1.052614506s ago: executing program 8 (id=1543): r0 = memfd_create(&(0x7f0000000080)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffBM\xdd\xfe\x8e\xfch\n\xae%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05a ;\xe9', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000300)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) 1.052297585s ago: executing program 1 (id=1544): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0010000006000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) 1.015469011s ago: executing program 8 (id=1545): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='27', 0x2) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ff", 0x1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 765.700933ms ago: executing program 1 (id=1546): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000040)={0xa, 0x4e24, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 651.949458ms ago: executing program 2 (id=1547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x20281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x0) unshare(0x22020600) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000005c0)={0x3, 0x0, 0x2, r2, 0xb}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000780)={0x203, 0x0, 0x2, r2, 0xccd41e735443e56f}) 575.963789ms ago: executing program 8 (id=1548): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd70bbfedbdf2507af"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008800) 435.992191ms ago: executing program 5 (id=1549): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0x8, 0x1, 0x54, 0x7, 0x5, "fb63567b7c9df9d463f44240c3cd027cf19f2e"}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @random="39f0c41c6e18"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x5, 0xffe0}, {0xd, 0x9}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 431.096712ms ago: executing program 9 (id=1550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./proc\x00', 0x777) mount(0x0, &(0x7f0000002b40)='./proc\x00', &(0x7f0000002b80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002bc0)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) 287.648074ms ago: executing program 8 (id=1551): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 179.555724ms ago: executing program 9 (id=1552): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x34d1, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0xae}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0xb38, 0xfffffffd, 0x4b, 0x0, 0x0) 160.335929ms ago: executing program 1 (id=1553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 2 (id=1554): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) r1 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r1, &(0x7f00000004c0)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) kernel console output (not intermixed with test programs): 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 303.499231][ T5759] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.499278][ T5759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.570917][ T9322] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 303.571224][ T9322] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 303.595134][ T5759] pl2303 6-1:1.0: pl2303 converter detected [ 303.626362][ T5759] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 303.752807][ T9343] FAULT_INJECTION: forcing a failure. [ 303.752807][ T9343] name failslab, interval 1, probability 0, space 0, times 0 [ 303.752839][ T9343] CPU: 0 UID: 0 PID: 9343 Comm: syz.3.1091 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 303.752862][ T9343] Tainted: [L]=SOFTLOCKUP [ 303.752869][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 303.752879][ T9343] Call Trace: [ 303.752885][ T9343] [ 303.752893][ T9343] dump_stack_lvl+0xe8/0x150 [ 303.752926][ T9343] should_fail_ex+0x447/0x5e0 [ 303.752955][ T9343] should_failslab+0xa8/0x100 [ 303.752979][ T9343] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 303.752998][ T9343] ? __lock_acquire+0x747/0x2de0 [ 303.753023][ T9343] ? __kernfs_new_node+0xac/0xa70 [ 303.753068][ T9343] ? __kernfs_new_node+0xac/0xa70 [ 303.753106][ T9343] kstrdup+0x42/0x100 [ 303.753139][ T9343] __kernfs_new_node+0xac/0xa70 [ 303.753183][ T9343] ? __pfx___kernfs_new_node+0x10/0x10 [ 303.753205][ T9343] ? kernfs_root+0x1c/0x230 [ 303.753229][ T9343] ? kernfs_root+0x1c/0x230 [ 303.753248][ T9343] ? kernfs_root+0x1c/0x230 [ 303.753265][ T9343] ? kernfs_root+0x1c/0x230 [ 303.753288][ T9343] kernfs_create_dir_ns+0xf7/0x220 [ 303.753314][ T9343] sysfs_create_dir_ns+0x12f/0x2a0 [ 303.753336][ T9343] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 303.753362][ T9343] ? rt_spin_unlock+0x165/0x200 [ 303.753404][ T9343] kobject_add_internal+0x62c/0xce0 [ 303.753444][ T9343] kobject_init_and_add+0x12b/0x1a0 [ 303.753482][ T9343] ? register_netdevice+0x17d5/0x2290 [ 303.753507][ T9343] ? register_netdev+0x40/0x60 [ 303.753533][ T9343] ? gprs_attach+0x182/0x530 [ 303.753559][ T9343] ? pep_setsockopt+0x328/0x4b0 [ 303.753586][ T9343] ? __pfx_kobject_init_and_add+0x10/0x10 [ 303.753628][ T9343] ? dev_uevent_filter+0x43/0xb0 [ 303.753663][ T9343] ? kobject_uevent_env+0x2fd/0x9e0 [ 303.753692][ T9343] net_rx_queue_update_kobjects+0x24d/0x780 [ 303.753748][ T9343] netdev_register_kobject+0x23e/0x350 [ 303.753788][ T9343] register_netdevice+0x17d5/0x2290 [ 303.753834][ T9343] ? __pfx_register_netdevice+0x10/0x10 [ 303.753867][ T9343] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 303.753902][ T9343] ? _mutex_lock_killable+0x14d/0x1c0 [ 303.753939][ T9343] ? register_netdev+0x18/0x60 [ 303.753971][ T9343] register_netdev+0x40/0x60 [ 303.754000][ T9343] gprs_attach+0x182/0x530 [ 303.754030][ T9343] pep_setsockopt+0x328/0x4b0 [ 303.754059][ T9343] ? __pfx_pep_setsockopt+0x10/0x10 [ 303.754088][ T9343] ? sock_common_setsockopt+0x36/0xc0 [ 303.754121][ T9343] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 303.754158][ T9343] do_sock_setsockopt+0x17c/0x1b0 [ 303.754196][ T9343] __x64_sys_setsockopt+0x143/0x1b0 [ 303.754244][ T9343] do_syscall_64+0x166/0x520 [ 303.754281][ T9343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.754307][ T9343] ? clear_bhb_loop+0x70/0xc0 [ 303.754337][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.754361][ T9343] RIP: 0033:0x7f30d7b6fb19 [ 303.754389][ T9343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.754411][ T9343] RSP: 002b:00007f30d5dbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 303.754454][ T9343] RAX: ffffffffffffffda RBX: 00007f30d7df5fa0 RCX: 00007f30d7b6fb19 [ 303.754478][ T9343] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000004 [ 303.754494][ T9343] RBP: 00007f30d7c07b70 R08: 0000000000000004 R09: 0000000000000000 [ 303.754509][ T9343] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.754525][ T9343] R13: 00007f30d7df6038 R14: 00007f30d7df5fa0 R15: 00007ffdf4ebf958 [ 303.754569][ T9343] [ 303.785047][ T9343] kobject: kobject_add_internal failed for rx-0 (error: -12 parent: queues) [ 304.257779][ T9322] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 304.258215][ T9322] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 304.258635][ T9322] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 304.261246][ T9322] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 304.282154][ T9322] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 304.579471][ T9322] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 304.705175][ T9322] pl2303 ttyUSB0: error sending break = -32 [ 304.733628][ T5737] usb 6-1: USB disconnect, device number 4 [ 304.858233][ T5737] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 304.860217][ T5737] pl2303 6-1:1.0: device disconnected [ 305.031356][ T9366] device-mapper: ioctl: Invalid data size in the ioctl structure: 3904946870 [ 305.657957][ T9383] fuse_uring_cmd: 6310 callbacks suppressed [ 305.657984][ T9383] fuse-io-uring is disabled by module parameter [ 305.658036][ T9383] fuse-io-uring is disabled by module parameter [ 305.658079][ T9383] fuse-io-uring is disabled by module parameter [ 305.658120][ T9383] fuse-io-uring is disabled by module parameter [ 305.658161][ T9383] fuse-io-uring is disabled by module parameter [ 305.658203][ T9383] fuse-io-uring is disabled by module parameter [ 305.658242][ T9383] fuse-io-uring is disabled by module parameter [ 305.658293][ T9383] fuse-io-uring is disabled by module parameter [ 305.658334][ T9383] fuse-io-uring is disabled by module parameter [ 305.658373][ T9383] fuse-io-uring is disabled by module parameter [ 305.878441][ T9387] block nbd2: NBD_DISCONNECT [ 305.968716][ T9391] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1092'. [ 306.004732][ T9387] block nbd2: Send disconnect failed -32 [ 306.004778][ T9387] block nbd2: Disconnected due to user request. [ 306.004795][ T9387] block nbd2: shutting down sockets [ 306.700230][ T9414] FAULT_INJECTION: forcing a failure. [ 306.700230][ T9414] name failslab, interval 1, probability 0, space 0, times 0 [ 306.700273][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.1.1098 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.700309][ T9414] Tainted: [L]=SOFTLOCKUP [ 306.700319][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 306.700333][ T9414] Call Trace: [ 306.700342][ T9414] [ 306.700353][ T9414] dump_stack_lvl+0xe8/0x150 [ 306.700405][ T9414] should_fail_ex+0x447/0x5e0 [ 306.700445][ T9414] should_failslab+0xa8/0x100 [ 306.700479][ T9414] __kmalloc_node_track_caller_noprof+0xf6/0x7b0 [ 306.700509][ T9414] ? kobject_set_name_vargs+0x61/0x110 [ 306.700546][ T9414] ? kobject_set_name_vargs+0x61/0x110 [ 306.700591][ T9414] kvasprintf+0xeb/0x1a0 [ 306.700627][ T9414] ? __pfx_kvasprintf+0x10/0x10 [ 306.700661][ T9414] ? rt_spin_unlock+0x159/0x200 [ 306.700702][ T9414] ? kvasprintf_const+0xe1/0x240 [ 306.700739][ T9414] kobject_set_name_vargs+0x61/0x110 [ 306.700779][ T9414] kobject_init_and_add+0xee/0x1a0 [ 306.700816][ T9414] ? register_netdevice+0x17d5/0x2290 [ 306.700844][ T9414] ? register_netdev+0x40/0x60 [ 306.700869][ T9414] ? gprs_attach+0x182/0x530 [ 306.700895][ T9414] ? pep_setsockopt+0x328/0x4b0 [ 306.700922][ T9414] ? __pfx_kobject_init_and_add+0x10/0x10 [ 306.700965][ T9414] ? dev_uevent_filter+0x43/0xb0 [ 306.700998][ T9414] ? kobject_uevent_env+0x2fd/0x9e0 [ 306.701027][ T9414] net_rx_queue_update_kobjects+0x24d/0x780 [ 306.701076][ T9414] netdev_register_kobject+0x23e/0x350 [ 306.701116][ T9414] register_netdevice+0x17d5/0x2290 [ 306.701162][ T9414] ? __pfx_register_netdevice+0x10/0x10 [ 306.701196][ T9414] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 306.701231][ T9414] ? _mutex_lock_killable+0x14d/0x1c0 [ 306.701268][ T9414] ? register_netdev+0x18/0x60 [ 306.701299][ T9414] register_netdev+0x40/0x60 [ 306.701327][ T9414] gprs_attach+0x182/0x530 [ 306.701358][ T9414] pep_setsockopt+0x328/0x4b0 [ 306.701387][ T9414] ? __pfx_pep_setsockopt+0x10/0x10 [ 306.701415][ T9414] ? sock_common_setsockopt+0x36/0xc0 [ 306.701450][ T9414] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 306.701487][ T9414] do_sock_setsockopt+0x17c/0x1b0 [ 306.701518][ T9414] __x64_sys_setsockopt+0x143/0x1b0 [ 306.701549][ T9414] do_syscall_64+0x166/0x520 [ 306.701578][ T9414] ? trace_irq_disable+0x3b/0x140 [ 306.701604][ T9414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.701629][ T9414] ? clear_bhb_loop+0x70/0xc0 [ 306.701659][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.701692][ T9414] RIP: 0033:0x7fad5579fb19 [ 306.701715][ T9414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.701738][ T9414] RSP: 002b:00007fad539f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.701765][ T9414] RAX: ffffffffffffffda RBX: 00007fad55a25fa0 RCX: 00007fad5579fb19 [ 306.701784][ T9414] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000004 [ 306.701805][ T9414] RBP: 00007fad55837b70 R08: 0000000000000004 R09: 0000000000000000 [ 306.701821][ T9414] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.701836][ T9414] R13: 00007fad55a26038 R14: 00007fad55a25fa0 R15: 00007ffc1f505938 [ 306.701876][ T9414] [ 307.026259][ T9414] kobject: can not set name properly! [ 307.364382][ T1005] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 307.525643][ T1005] usb 8-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 307.529702][ T1005] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.529787][ T1005] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 307.529818][ T1005] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.578294][ T1005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 307.578324][ T1005] usb 8-1: Product: syz [ 307.578341][ T1005] usb 8-1: Manufacturer: syz [ 307.632364][ T9419] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 307.648146][ T1005] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 307.861876][ T1005] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 308.167791][ T1005] usb 8-1: USB disconnect, device number 2 [ 308.257800][ T1005] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 308.265690][ T1005] garmin_gps 8-1:1.0: device disconnected [ 308.301005][ T9442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1109'. [ 308.301044][ T9442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1109'. [ 308.985409][ T9457] syzkaller1: entered promiscuous mode [ 308.985440][ T9457] syzkaller1: entered allmulticast mode [ 309.749851][ T37] audit: type=1326 audit(1794029796.089:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9478 comm="syz.7.1124" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05f6bcfb19 code=0x0 [ 310.961446][ T8601] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 311.207881][ T8601] usb 2-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 311.209956][ T8601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 311.209990][ T8601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 311.210030][ T8601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.054325][ T9528] fuse_uring_cmd: 6310 callbacks suppressed [ 312.054350][ T9528] fuse-io-uring is disabled by module parameter [ 312.054418][ T9528] fuse-io-uring is disabled by module parameter [ 312.054459][ T9528] fuse-io-uring is disabled by module parameter [ 312.054501][ T9528] fuse-io-uring is disabled by module parameter [ 312.054542][ T9528] fuse-io-uring is disabled by module parameter [ 312.054581][ T9528] fuse-io-uring is disabled by module parameter [ 312.054621][ T9528] fuse-io-uring is disabled by module parameter [ 312.054663][ T9528] fuse-io-uring is disabled by module parameter [ 312.054704][ T9528] fuse-io-uring is disabled by module parameter [ 312.054743][ T9528] fuse-io-uring is disabled by module parameter [ 312.596621][ T8601] pegasus 2-1:1.0: can't reset MAC [ 312.596991][ T8601] pegasus 2-1:1.0: probe with driver pegasus failed with error -5 [ 312.643794][ T8601] usb 2-1: USB disconnect, device number 20 [ 312.786411][ T9542] FAULT_INJECTION: forcing a failure. [ 312.786411][ T9542] name failslab, interval 1, probability 0, space 0, times 0 [ 312.786453][ T9542] CPU: 1 UID: 0 PID: 9542 Comm: syz.7.1144 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.786493][ T9542] Tainted: [L]=SOFTLOCKUP [ 312.786502][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 312.786517][ T9542] Call Trace: [ 312.786526][ T9542] [ 312.786536][ T9542] dump_stack_lvl+0xe8/0x150 [ 312.786583][ T9542] should_fail_ex+0x447/0x5e0 [ 312.786621][ T9542] ? alloc_inode+0x6a/0x1b0 [ 312.786653][ T9542] should_failslab+0xa8/0x100 [ 312.786687][ T9542] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 312.786710][ T9542] ? start_dirop+0x7b/0x90 [ 312.786743][ T9542] ? alloc_inode+0x6a/0x1b0 [ 312.786774][ T9542] ? __pfx_simple_start_creating+0x10/0x10 [ 312.786802][ T9542] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 312.786836][ T9542] alloc_inode+0x6a/0x1b0 [ 312.786870][ T9542] new_inode+0x1f/0x170 [ 312.786908][ T9542] __debugfs_create_file+0xb8/0x400 [ 312.786946][ T9542] debugfs_create_file_full+0x3f/0x60 [ 312.786983][ T9542] drm_debugfs_clients_add+0xcd/0x1a0 [ 312.787021][ T9542] drm_file_alloc+0x584/0x9e0 [ 312.787054][ T9542] drm_open_helper+0x1c5/0x480 [ 312.787085][ T9542] drm_open+0x1d1/0x350 [ 312.787109][ T9542] ? __pfx_drm_open+0x10/0x10 [ 312.787136][ T9542] drm_stub_open+0x20b/0x260 [ 312.787171][ T9542] chrdev_open+0x4dc/0x600 [ 312.787203][ T9542] ? __pfx_chrdev_open+0x10/0x10 [ 312.787243][ T9542] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 312.787280][ T9542] ? __pfx_chrdev_open+0x10/0x10 [ 312.787319][ T9542] do_dentry_open+0x841/0x1410 [ 312.787361][ T9542] vfs_open_consume+0x4a/0x360 [ 312.787390][ T9542] ? path_openat+0x16e6/0x2100 [ 312.787416][ T9542] path_openat+0x1701/0x2100 [ 312.787462][ T9542] do_file_open+0x23e/0x4a0 [ 312.787484][ T9542] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.787520][ T9542] ? __pfx_do_file_open+0x10/0x10 [ 312.787570][ T9542] ? alloc_fd+0x6b2/0x760 [ 312.787615][ T9542] do_sys_openat2+0x115/0x200 [ 312.787647][ T9542] ? __se_sys_futex+0x3a8/0x450 [ 312.787677][ T9542] ? __pfx_do_sys_openat2+0x10/0x10 [ 312.787719][ T9542] ? rcu_is_watching+0x16/0xb0 [ 312.787753][ T9542] __x64_sys_openat+0x138/0x170 [ 312.787791][ T9542] do_syscall_64+0x166/0x520 [ 312.787819][ T9542] ? trace_irq_disable+0x3b/0x140 [ 312.787844][ T9542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.787868][ T9542] ? clear_bhb_loop+0x70/0xc0 [ 312.787896][ T9542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.787920][ T9542] RIP: 0033:0x7f05f6bcfb19 [ 312.787941][ T9542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.787979][ T9542] RSP: 002b:00007f05f4e1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 312.788005][ T9542] RAX: ffffffffffffffda RBX: 00007f05f6e55fa0 RCX: 00007f05f6bcfb19 [ 312.788023][ T9542] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 312.788040][ T9542] RBP: 00007f05f6c67b70 R08: 0000000000000000 R09: 0000000000000000 [ 312.788056][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.788070][ T9542] R13: 00007f05f6e56038 R14: 00007f05f6e55fa0 R15: 00007fff76806228 [ 312.788109][ T9542] [ 312.788241][ T9542] debugfs: out of free dentries, can not create file 'proc_info' [ 312.914088][ T1005] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 313.244427][ T1005] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 313.248098][ T1005] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.248158][ T1005] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 313.248186][ T1005] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.249974][ T1005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 313.250000][ T1005] usb 3-1: Product: syz [ 313.250016][ T1005] usb 3-1: Manufacturer: syz [ 313.349145][ T9540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.373839][ T1005] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 313.419614][ T1005] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 313.819357][ T2069] usb 3-1: USB disconnect, device number 9 [ 313.877736][ T2069] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 313.878797][ T2069] garmin_gps 3-1:1.0: device disconnected [ 313.957023][ T9560] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 313.975306][ T9560] device-mapper: ioctl: Invalid ioctl structure: name syzf0, dev 4359c02000000 [ 313.994430][ T5737] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 314.168995][ T5737] usb 4-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 314.202767][ T5737] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 314.202806][ T5737] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 314.202847][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.618682][ T2069] kernel write not supported for file [eventfd] (pid: 2069 comm: kworker/1:2) [ 314.812044][ T9568] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 314.812078][ T9568] syzkaller0: ignored: set checksum enabled [ 315.509217][ T5737] pegasus 4-1:1.0: can't reset MAC [ 315.509572][ T5737] pegasus 4-1:1.0: probe with driver pegasus failed with error -5 [ 315.551376][ T9583] FAULT_INJECTION: forcing a failure. [ 315.551376][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 315.551417][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.5.1162 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.551450][ T9583] Tainted: [L]=SOFTLOCKUP [ 315.551460][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 315.551475][ T9583] Call Trace: [ 315.551484][ T9583] [ 315.551505][ T9583] dump_stack_lvl+0xe8/0x150 [ 315.551551][ T9583] should_fail_ex+0x447/0x5e0 [ 315.551589][ T9583] should_failslab+0xa8/0x100 [ 315.551619][ T9583] ? security_inode_alloc+0x39/0x310 [ 315.551648][ T9583] kmem_cache_alloc_noprof+0x99/0x680 [ 315.551689][ T9583] ? security_inode_alloc+0x39/0x310 [ 315.551725][ T9583] security_inode_alloc+0x39/0x310 [ 315.551756][ T9583] inode_init_always_gfp+0x983/0xd40 [ 315.551796][ T9583] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 315.551829][ T9583] alloc_inode+0x82/0x1b0 [ 315.551867][ T9583] new_inode+0x1f/0x170 [ 315.551905][ T9583] __debugfs_create_file+0xb8/0x400 [ 315.551943][ T9583] debugfs_create_file_full+0x3f/0x60 [ 315.551979][ T9583] drm_debugfs_clients_add+0xcd/0x1a0 [ 315.552017][ T9583] drm_file_alloc+0x584/0x9e0 [ 315.552051][ T9583] drm_open_helper+0x1c5/0x480 [ 315.552082][ T9583] drm_open+0x1d1/0x350 [ 315.552106][ T9583] ? __pfx_drm_open+0x10/0x10 [ 315.552133][ T9583] drm_stub_open+0x20b/0x260 [ 315.552167][ T9583] chrdev_open+0x4dc/0x600 [ 315.552216][ T9583] ? __pfx_chrdev_open+0x10/0x10 [ 315.552242][ T9583] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 315.552277][ T9583] ? __pfx_chrdev_open+0x10/0x10 [ 315.552304][ T9583] do_dentry_open+0x841/0x1410 [ 315.552363][ T9583] vfs_open_consume+0x4a/0x360 [ 315.552392][ T9583] ? path_openat+0x16e6/0x2100 [ 315.552420][ T9583] path_openat+0x1701/0x2100 [ 315.552466][ T9583] do_file_open+0x23e/0x4a0 [ 315.552489][ T9583] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 315.552538][ T9583] ? __pfx_do_file_open+0x10/0x10 [ 315.552591][ T9583] ? alloc_fd+0x6b2/0x760 [ 315.552637][ T9583] do_sys_openat2+0x115/0x200 [ 315.552670][ T9583] ? __se_sys_futex+0x3a8/0x450 [ 315.552701][ T9583] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.552738][ T9583] ? rcu_is_watching+0x16/0xb0 [ 315.552770][ T9583] __x64_sys_openat+0x138/0x170 [ 315.552807][ T9583] do_syscall_64+0x166/0x520 [ 315.552835][ T9583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.552859][ T9583] ? clear_bhb_loop+0x70/0xc0 [ 315.552888][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.552911][ T9583] RIP: 0033:0x7f2d3e48fb19 [ 315.552933][ T9583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.552954][ T9583] RSP: 002b:00007f2d3c6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.552980][ T9583] RAX: ffffffffffffffda RBX: 00007f2d3e715fa0 RCX: 00007f2d3e48fb19 [ 315.552998][ T9583] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 315.553015][ T9583] RBP: 00007f2d3e527b70 R08: 0000000000000000 R09: 0000000000000000 [ 315.553031][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.553045][ T9583] R13: 00007f2d3e716038 R14: 00007f2d3e715fa0 R15: 00007fff29e74b08 [ 315.553084][ T9583] [ 315.625087][ T9583] debugfs: out of free dentries, can not create file 'proc_info' [ 315.909595][ T5737] usb 4-1: USB disconnect, device number 16 [ 316.096797][ T9585] FAULT_INJECTION: forcing a failure. [ 316.096797][ T9585] name failslab, interval 1, probability 0, space 0, times 0 [ 316.096826][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.7.1164 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 316.096850][ T9585] Tainted: [L]=SOFTLOCKUP [ 316.096856][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 316.096866][ T9585] Call Trace: [ 316.096872][ T9585] [ 316.096880][ T9585] dump_stack_lvl+0xe8/0x150 [ 316.096912][ T9585] should_fail_ex+0x447/0x5e0 [ 316.096937][ T9585] ? proc_alloc_inode+0x2a/0xc0 [ 316.096959][ T9585] should_failslab+0xa8/0x100 [ 316.096982][ T9585] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 316.097000][ T9585] ? proc_alloc_inode+0x2a/0xc0 [ 316.097024][ T9585] ? __pfx_proc_alloc_inode+0x10/0x10 [ 316.097047][ T9585] proc_alloc_inode+0x2a/0xc0 [ 316.097068][ T9585] alloc_inode+0x6a/0x1b0 [ 316.097092][ T9585] new_inode+0x1f/0x170 [ 316.097114][ T9585] ? proc_get_inode+0x1a/0x6a0 [ 316.097138][ T9585] proc_get_inode+0x22/0x6a0 [ 316.097162][ T9585] proc_lookup_de+0x251/0x390 [ 316.097189][ T9585] __lookup_slow+0x1fb/0x2f0 [ 316.097218][ T9585] lookup_slow+0x59/0x80 [ 316.097243][ T9585] link_path_walk+0xd83/0x19a0 [ 316.097283][ T9585] path_lookupat+0xe4/0x8c0 [ 316.097319][ T9585] filename_lookup+0x265/0x5d0 [ 316.097348][ T9585] ? __pfx_filename_lookup+0x10/0x10 [ 316.097392][ T9585] ? strncpy_from_user+0x150/0x2c0 [ 316.097417][ T9585] ? do_getname+0x151/0x250 [ 316.097440][ T9585] user_path_at+0x40/0x160 [ 316.097468][ T9585] __se_sys_mount+0x2dc/0x420 [ 316.097497][ T9585] ? __pfx___se_sys_mount+0x10/0x10 [ 316.097526][ T9585] ? __x64_sys_mount+0x20/0xc0 [ 316.097560][ T9585] do_syscall_64+0x166/0x520 [ 316.097581][ T9585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.097598][ T9585] ? clear_bhb_loop+0x70/0xc0 [ 316.097619][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.097636][ T9585] RIP: 0033:0x7f05f6bcfb19 [ 316.097651][ T9585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.097665][ T9585] RSP: 002b:00007f05f4e1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 316.097683][ T9585] RAX: ffffffffffffffda RBX: 00007f05f6e55fa0 RCX: 00007f05f6bcfb19 [ 316.097695][ T9585] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 316.097707][ T9585] RBP: 00007f05f6c67b70 R08: 00002000000001c0 R09: 0000000000000000 [ 316.097720][ T9585] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 316.097730][ T9585] R13: 00007f05f6e56038 R14: 00007f05f6e55fa0 R15: 00007fff76806228 [ 316.097756][ T9585] [ 316.660544][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 316.894542][ T31] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 316.895968][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.896014][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 316.896039][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.940427][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 316.940455][ T31] usb 3-1: Product: syz [ 316.940470][ T31] usb 3-1: Manufacturer: syz [ 316.988915][ T9591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.004855][ T31] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 317.101176][ T31] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 317.379737][ T9605] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 317.387471][ T9605] device-mapper: ioctl: Invalid ioctl structure: name syzh0, dev 4359c02000000 [ 317.453200][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.464515][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.649918][ T5759] usb 3-1: USB disconnect, device number 10 [ 317.675263][ T5759] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 317.680542][ T5759] garmin_gps 3-1:1.0: device disconnected [ 317.969605][ T9610] fuse_uring_cmd: 3150 callbacks suppressed [ 317.969628][ T9610] fuse-io-uring is disabled by module parameter [ 317.969679][ T9610] fuse-io-uring is disabled by module parameter [ 317.969715][ T9610] fuse-io-uring is disabled by module parameter [ 317.969750][ T9610] fuse-io-uring is disabled by module parameter [ 317.969784][ T9610] fuse-io-uring is disabled by module parameter [ 317.969818][ T9610] fuse-io-uring is disabled by module parameter [ 317.969852][ T9610] fuse-io-uring is disabled by module parameter [ 317.969885][ T9610] fuse-io-uring is disabled by module parameter [ 317.969918][ T9610] fuse-io-uring is disabled by module parameter [ 317.969970][ T9610] fuse-io-uring is disabled by module parameter [ 318.782447][ T9625] FAULT_INJECTION: forcing a failure. [ 318.782447][ T9625] name failslab, interval 1, probability 0, space 0, times 0 [ 318.782490][ T9625] CPU: 1 UID: 0 PID: 9625 Comm: syz.5.1178 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.782525][ T9625] Tainted: [L]=SOFTLOCKUP [ 318.782533][ T9625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 318.782549][ T9625] Call Trace: [ 318.782559][ T9625] [ 318.782569][ T9625] dump_stack_lvl+0xe8/0x150 [ 318.782629][ T9625] should_fail_ex+0x447/0x5e0 [ 318.782664][ T9625] ? proc_alloc_inode+0x2a/0xc0 [ 318.782695][ T9625] should_failslab+0xa8/0x100 [ 318.782726][ T9625] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 318.782763][ T9625] ? proc_alloc_inode+0x2a/0xc0 [ 318.782797][ T9625] ? __pfx_proc_alloc_inode+0x10/0x10 [ 318.782826][ T9625] proc_alloc_inode+0x2a/0xc0 [ 318.782855][ T9625] alloc_inode+0x6a/0x1b0 [ 318.782889][ T9625] new_inode+0x1f/0x170 [ 318.782922][ T9625] ? proc_get_inode+0x1a/0x6a0 [ 318.782954][ T9625] proc_get_inode+0x22/0x6a0 [ 318.782988][ T9625] proc_lookup_de+0x251/0x390 [ 318.783026][ T9625] __lookup_slow+0x1fb/0x2f0 [ 318.783064][ T9625] lookup_slow+0x59/0x80 [ 318.783098][ T9625] link_path_walk+0xd83/0x19a0 [ 318.783153][ T9625] path_lookupat+0xe4/0x8c0 [ 318.783209][ T9625] filename_lookup+0x265/0x5d0 [ 318.783248][ T9625] ? __pfx_filename_lookup+0x10/0x10 [ 318.783311][ T9625] ? strncpy_from_user+0x150/0x2c0 [ 318.783346][ T9625] ? do_getname+0x151/0x250 [ 318.783380][ T9625] user_path_at+0x40/0x160 [ 318.783418][ T9625] __se_sys_mount+0x2dc/0x420 [ 318.783458][ T9625] ? __pfx___se_sys_mount+0x10/0x10 [ 318.783496][ T9625] ? __x64_sys_mount+0x20/0xc0 [ 318.783530][ T9625] do_syscall_64+0x166/0x520 [ 318.783559][ T9625] ? trace_irq_disable+0x3b/0x140 [ 318.783583][ T9625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.783605][ T9625] ? clear_bhb_loop+0x70/0xc0 [ 318.783632][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.783654][ T9625] RIP: 0033:0x7f2d3e48fb19 [ 318.783674][ T9625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.783693][ T9625] RSP: 002b:00007f2d3c6de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.783717][ T9625] RAX: ffffffffffffffda RBX: 00007f2d3e715fa0 RCX: 00007f2d3e48fb19 [ 318.783734][ T9625] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 318.783760][ T9625] RBP: 00007f2d3e527b70 R08: 00002000000001c0 R09: 0000000000000000 [ 318.783773][ T9625] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 318.783784][ T9625] R13: 00007f2d3e716038 R14: 00007f2d3e715fa0 R15: 00007fff29e74b08 [ 318.783813][ T9625] [ 319.268363][ T9635] EXT4-fs warning (device sda1): ext4_group_extend:1864: can't shrink FS - resize aborted [ 319.953539][ T5737] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 319.973927][ T5759] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 319.983327][ T9660] FAULT_INJECTION: forcing a failure. [ 319.983327][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 319.997190][ T9660] CPU: 0 UID: 0 PID: 9660 Comm: syz.5.1192 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.997274][ T9660] Tainted: [L]=SOFTLOCKUP [ 319.997302][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 319.997337][ T9660] Call Trace: [ 319.997367][ T9660] [ 319.997390][ T9660] dump_stack_lvl+0xe8/0x150 [ 319.997515][ T9660] should_fail_ex+0x447/0x5e0 [ 319.997622][ T9660] should_failslab+0xa8/0x100 [ 319.997696][ T9660] ? do_getname_kernel+0x54/0x230 [ 319.997790][ T9660] kmem_cache_alloc_noprof+0x99/0x680 [ 319.997898][ T9660] ? trace_kmalloc+0x2a/0xf0 [ 319.997964][ T9660] ? do_getname_kernel+0x54/0x230 [ 319.998063][ T9660] do_getname_kernel+0x54/0x230 [ 319.998126][ T9660] ? start_creating_path+0x1d/0x150 [ 319.998169][ T9660] start_creating_path+0x27/0x150 [ 319.998236][ T9660] unix_bind+0x30f/0x1260 [ 319.998333][ T9660] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 319.998408][ T9660] ? __pfx_unix_bind+0x10/0x10 [ 319.998486][ T9660] ? bpf_lsm_socket_bind+0x9/0x20 [ 319.998559][ T9660] __sys_bind+0x2e9/0x410 [ 319.998656][ T9660] ? __pfx___sys_bind+0x10/0x10 [ 319.998759][ T9660] ? rcu_is_watching+0x16/0xb0 [ 319.998855][ T9660] __x64_sys_bind+0x7a/0x90 [ 319.998949][ T9660] do_syscall_64+0x166/0x520 [ 319.999026][ T9660] ? trace_irq_disable+0x3b/0x140 [ 319.999076][ T9660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.999138][ T9660] ? clear_bhb_loop+0x70/0xc0 [ 319.999220][ T9660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.999300][ T9660] RIP: 0033:0x7f2d3e48fb19 [ 319.999347][ T9660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.999401][ T9660] RSP: 002b:00007f2d3c6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 319.999465][ T9660] RAX: ffffffffffffffda RBX: 00007f2d3e715fa0 RCX: 00007f2d3e48fb19 [ 319.999508][ T9660] RDX: 000000000000006e RSI: 0000200000000300 RDI: 0000000000000004 [ 319.999548][ T9660] RBP: 00007f2d3e527b70 R08: 0000000000000000 R09: 0000000000000000 [ 319.999590][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.999624][ T9660] R13: 00007f2d3e716038 R14: 00007f2d3e715fa0 R15: 00007fff29e74b08 [ 319.999675][ T9660] [ 320.197348][ T5737] usb 8-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 320.249858][ T5737] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.251033][ T5737] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 320.251064][ T5737] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.280051][ T5737] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 320.280134][ T5737] usb 8-1: Product: syz [ 320.280184][ T5737] usb 8-1: Manufacturer: syz [ 320.313138][ T9647] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 320.334330][ T5759] usb 4-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 320.335227][ T5737] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 320.336011][ T5759] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.336078][ T5759] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 320.336105][ T5759] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.339904][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 320.339930][ T5759] usb 4-1: Product: syz [ 320.339951][ T5759] usb 4-1: Manufacturer: syz [ 320.423890][ T9650] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 320.427227][ T5759] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 320.633231][ T9665] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 320.647633][ T9665] device-mapper: ioctl: Invalid ioctl structure: name syzb0, dev 4359c02000000 [ 320.686101][ T5737] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 320.687597][ T5759] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB1 [ 320.848189][ T5737] usb 8-1: USB disconnect, device number 3 [ 320.851620][ T5759] usb 4-1: USB disconnect, device number 17 [ 320.883613][ T9668] netlink: 'syz.5.1193': attribute type 4 has an invalid length. [ 320.929371][ T5759] garmin_gps ttyUSB1: Garmin GPS usb/tty converter now disconnected from ttyUSB1 [ 320.930233][ T5759] garmin_gps 4-1:1.0: device disconnected [ 321.031986][ T5737] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 321.032680][ T5737] garmin_gps 8-1:1.0: device disconnected [ 321.475383][ T9671] gadgetfs: bound to dummy_udc driver [ 322.559032][ T9691] FAULT_INJECTION: forcing a failure. [ 322.559032][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 322.559073][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.5.1210 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.559106][ T9691] Tainted: [L]=SOFTLOCKUP [ 322.559115][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 322.559129][ T9691] Call Trace: [ 322.559138][ T9691] [ 322.559149][ T9691] dump_stack_lvl+0xe8/0x150 [ 322.559192][ T9691] should_fail_ex+0x447/0x5e0 [ 322.559230][ T9691] should_failslab+0xa8/0x100 [ 322.559260][ T9691] ? mas_dup_build+0x14d/0x1270 [ 322.559294][ T9691] kmem_cache_alloc_noprof+0x99/0x680 [ 322.559331][ T9691] ? mas_start+0x475/0x650 [ 322.559358][ T9691] ? mas_dup_build+0x14d/0x1270 [ 322.559399][ T9691] mas_dup_build+0x14d/0x1270 [ 322.559459][ T9691] __mt_dup+0x197/0x2c0 [ 322.559491][ T9691] ? __pfx___mt_dup+0x10/0x10 [ 322.559521][ T9691] ? do_raw_spin_lock+0x12b/0x2f0 [ 322.559565][ T9691] ? get_mm_exe_file+0x1c/0x170 [ 322.559605][ T9691] ? get_mm_exe_file+0x1c/0x170 [ 322.559632][ T9691] ? get_mm_exe_file+0x1c/0x170 [ 322.559670][ T9691] dup_mmap+0x250/0x1c60 [ 322.559705][ T9691] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 322.559733][ T9691] ? __pfx_dup_mmap+0x10/0x10 [ 322.559752][ T9691] ? reacquire_held_locks+0x117/0x1a0 [ 322.559777][ T9691] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 322.559818][ T9691] ? rt_spin_unlock+0x165/0x200 [ 322.559844][ T9691] ? __percpu_counter_init_many+0x35c/0x380 [ 322.559881][ T9691] ? mm_init+0x969/0xad0 [ 322.559912][ T9691] copy_mm+0x2ae/0x640 [ 322.559957][ T9691] copy_process+0x1ed1/0x4510 [ 322.560005][ T9691] ? copy_process+0xd17/0x4510 [ 322.560058][ T9691] ? __pfx_copy_process+0x10/0x10 [ 322.560095][ T9691] ? futex_wait+0x2a2/0x390 [ 322.560139][ T9691] kernel_clone+0x2d2/0x8d0 [ 322.560177][ T9691] ? __pfx_kernel_clone+0x10/0x10 [ 322.560224][ T9691] ? do_futex+0x3e7/0x4e0 [ 322.560261][ T9691] __x64_sys_clone+0x1b6/0x230 [ 322.560300][ T9691] ? __pfx___x64_sys_clone+0x10/0x10 [ 322.560353][ T9691] ? rcu_is_watching+0x16/0xb0 [ 322.560396][ T9691] do_syscall_64+0x166/0x520 [ 322.560424][ T9691] ? trace_irq_disable+0x3b/0x140 [ 322.560449][ T9691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.560473][ T9691] ? clear_bhb_loop+0x70/0xc0 [ 322.560503][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.560525][ T9691] RIP: 0033:0x7f2d3e48fb19 [ 322.560548][ T9691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.560567][ T9691] RSP: 002b:00007f2d3c6ddfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 322.560592][ T9691] RAX: ffffffffffffffda RBX: 00007f2d3e715fa0 RCX: 00007f2d3e48fb19 [ 322.560609][ T9691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 322.560623][ T9691] RBP: 00007f2d3e527b70 R08: 0000000000000000 R09: 0000000000000000 [ 322.560638][ T9691] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.560651][ T9691] R13: 00007f2d3e716038 R14: 00007f2d3e715fa0 R15: 00007fff29e74b08 [ 322.560690][ T9691] [ 322.750745][ T9692] FAULT_INJECTION: forcing a failure. [ 322.750745][ T9692] name failslab, interval 1, probability 0, space 0, times 0 [ 322.758131][ T9692] CPU: 0 UID: 0 PID: 9692 Comm: syz.1.1198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.758220][ T9692] Tainted: [L]=SOFTLOCKUP [ 322.758239][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 322.758279][ T9692] Call Trace: [ 322.758302][ T9692] [ 322.758332][ T9692] dump_stack_lvl+0xe8/0x150 [ 322.758442][ T9692] should_fail_ex+0x447/0x5e0 [ 322.758536][ T9692] should_failslab+0xa8/0x100 [ 322.758620][ T9692] __kmalloc_cache_noprof+0x9c/0x670 [ 322.758693][ T9692] ? get_mountpoint+0x2cc/0x530 [ 322.758751][ T9692] ? get_mountpoint+0x2cc/0x530 [ 322.758846][ T9692] get_mountpoint+0x2cc/0x530 [ 322.758911][ T9692] ? rt_spin_unlock+0x165/0x200 [ 322.758993][ T9692] do_lock_mount+0x64f/0xd40 [ 322.759110][ T9692] do_move_mount+0x1db/0x7b0 [ 322.759216][ T9692] ? __pfx_do_move_mount+0x10/0x10 [ 322.759306][ T9692] ? do_move_mount_old+0x104/0x180 [ 322.759411][ T9692] do_move_mount_old+0x113/0x180 [ 322.759489][ T9692] ? ns_capable+0x84/0xe0 [ 322.759574][ T9692] ? __pfx_do_move_mount_old+0x10/0x10 [ 322.759613][ T9692] ? path_mount+0x71f/0x1050 [ 322.759712][ T9692] ? user_path_at+0xd4/0x160 [ 322.759812][ T9692] __se_sys_mount+0x31d/0x420 [ 322.759916][ T9692] ? __pfx___se_sys_mount+0x10/0x10 [ 322.760049][ T9692] ? __x64_sys_mount+0x20/0xc0 [ 322.760145][ T9692] do_syscall_64+0x166/0x520 [ 322.760228][ T9692] ? trace_irq_disable+0x3b/0x140 [ 322.760291][ T9692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.760348][ T9692] ? clear_bhb_loop+0x70/0xc0 [ 322.760435][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.760498][ T9692] RIP: 0033:0x7fad5579fb19 [ 322.760569][ T9692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.760628][ T9692] RSP: 002b:00007fad539f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.760701][ T9692] RAX: ffffffffffffffda RBX: 00007fad55a25fa0 RCX: 00007fad5579fb19 [ 322.760747][ T9692] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 322.760791][ T9692] RBP: 00007fad55837b70 R08: 0000000000000000 R09: 0000000000000000 [ 322.760836][ T9692] R10: 0000000000002849 R11: 0000000000000246 R12: 0000000000000000 [ 322.760871][ T9692] R13: 00007fad55a26038 R14: 00007fad55a25fa0 R15: 00007ffc1f505938 [ 322.760973][ T9692] [ 323.526380][ T9706] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4294967295 (only 8 groups) [ 323.533638][ T1005] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 323.693555][ T1005] usb 2-1: Using ep0 maxpacket: 32 [ 323.697530][ T1005] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.697590][ T1005] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b1, bcdDevice=0.40 [ 323.728550][ T1005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.728583][ T1005] usb 2-1: Product: syz [ 323.728600][ T1005] usb 2-1: Manufacturer: syz [ 323.728622][ T1005] usb 2-1: SerialNumber: syz [ 323.933517][ T5737] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 324.130562][ T5737] usb 6-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 324.143896][ T5737] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 324.143929][ T5737] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 324.186516][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.186550][ T5737] usb 6-1: Product: syz [ 324.186567][ T5737] usb 6-1: Manufacturer: syz [ 324.186584][ T5737] usb 6-1: SerialNumber: syz [ 324.226290][ T5737] usb 6-1: config 0 descriptor?? [ 324.303593][ T5737] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 324.550143][ T6730] IPVS: starting estimator thread 0... [ 324.643757][ T9732] IPVS: using max 9 ests per chain, 21600 per kthread [ 324.982308][ T1005] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 325.066154][ T1005] usb 2-1: USB disconnect, device number 21 [ 325.451747][ T5737] gspca_sunplus: reg_r err -71 [ 325.451849][ T5737] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 325.504840][ T5737] usb 6-1: USB disconnect, device number 5 [ 325.843958][ T37] audit: type=1326 audit(1794029812.189:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 325.844018][ T37] audit: type=1326 audit(1794029812.189:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 325.845579][ T37] audit: type=1326 audit(1794029812.189:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 325.845723][ T37] audit: type=1326 audit(1794029812.189:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 325.846034][ T37] audit: type=1326 audit(1794029812.189:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 325.846175][ T37] audit: type=1326 audit(1794029812.189:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 325.846542][ T37] audit: type=1326 audit(1794029812.189:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 325.846683][ T37] audit: type=1326 audit(1794029812.189:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 325.846863][ T37] audit: type=1326 audit(1794029812.189:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 325.847058][ T37] audit: type=1326 audit(1794029812.189:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9745 comm="syz.3.1223" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d7b6fb19 code=0x7ffc0000 [ 326.278692][ T9755] FAULT_INJECTION: forcing a failure. [ 326.278692][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 326.278732][ T9755] CPU: 1 UID: 0 PID: 9755 Comm: syz.5.1226 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 326.278765][ T9755] Tainted: [L]=SOFTLOCKUP [ 326.278773][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 326.278788][ T9755] Call Trace: [ 326.278797][ T9755] [ 326.278808][ T9755] dump_stack_lvl+0xe8/0x150 [ 326.278855][ T9755] should_fail_ex+0x447/0x5e0 [ 326.278895][ T9755] should_failslab+0xa8/0x100 [ 326.278926][ T9755] ? create_new_namespaces+0x33/0x6b0 [ 326.278963][ T9755] kmem_cache_alloc_noprof+0x99/0x680 [ 326.279003][ T9755] ? create_new_namespaces+0x33/0x6b0 [ 326.279058][ T9755] create_new_namespaces+0x33/0x6b0 [ 326.279107][ T9755] __se_sys_setns+0x2ab/0x1dc0 [ 326.279154][ T9755] ? __pfx___se_sys_setns+0x10/0x10 [ 326.279206][ T9755] do_syscall_64+0x166/0x520 [ 326.279234][ T9755] ? trace_irq_disable+0x3b/0x140 [ 326.279260][ T9755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.279283][ T9755] ? clear_bhb_loop+0x70/0xc0 [ 326.279312][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.279335][ T9755] RIP: 0033:0x7f2d3e48fb19 [ 326.279357][ T9755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.279378][ T9755] RSP: 002b:00007f2d3c6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 326.279405][ T9755] RAX: ffffffffffffffda RBX: 00007f2d3e715fa0 RCX: 00007f2d3e48fb19 [ 326.279422][ T9755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 326.279437][ T9755] RBP: 00007f2d3e527b70 R08: 0000000000000000 R09: 0000000000000000 [ 326.279451][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.279466][ T9755] R13: 00007f2d3e716038 R14: 00007f2d3e715fa0 R15: 00007fff29e74b08 [ 326.279503][ T9755] [ 326.543577][ T5737] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 326.667932][ T9761] FAULT_INJECTION: forcing a failure. [ 326.667932][ T9761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.667975][ T9761] CPU: 1 UID: 0 PID: 9761 Comm: syz.3.1232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 326.668010][ T9761] Tainted: [L]=SOFTLOCKUP [ 326.668019][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 326.668036][ T9761] Call Trace: [ 326.668046][ T9761] [ 326.668056][ T9761] dump_stack_lvl+0xe8/0x150 [ 326.668102][ T9761] should_fail_ex+0x447/0x5e0 [ 326.668169][ T9761] strncpy_from_user+0x36/0x2c0 [ 326.668206][ T9761] path_removexattrat+0x130/0x760 [ 326.668240][ T9761] ? __pfx_path_removexattrat+0x10/0x10 [ 326.668265][ T9761] ? do_futex+0x3e7/0x4e0 [ 326.668330][ T9761] ? rcu_is_watching+0x16/0xb0 [ 326.668370][ T9761] __x64_sys_removexattr+0x62/0x70 [ 326.668397][ T9761] do_syscall_64+0x166/0x520 [ 326.668426][ T9761] ? trace_irq_disable+0x3b/0x140 [ 326.668451][ T9761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.668476][ T9761] ? clear_bhb_loop+0x70/0xc0 [ 326.668504][ T9761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.668528][ T9761] RIP: 0033:0x7f30d7b6fb19 [ 326.668549][ T9761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.668571][ T9761] RSP: 002b:00007f30d5dbe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 326.668597][ T9761] RAX: ffffffffffffffda RBX: 00007f30d7df5fa0 RCX: 00007f30d7b6fb19 [ 326.668615][ T9761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.668629][ T9761] RBP: 00007f30d7c07b70 R08: 0000000000000000 R09: 0000000000000000 [ 326.668645][ T9761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.668659][ T9761] R13: 00007f30d7df6038 R14: 00007f30d7df5fa0 R15: 00007ffdf4ebf958 [ 326.668698][ T9761] [ 326.735172][ T5737] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 326.912860][ T5737] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.912914][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.912936][ T5737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.912991][ T5737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.978174][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 326.978208][ T5737] usb 3-1: Product: syz [ 326.978219][ T5737] usb 3-1: Manufacturer: syz [ 327.005746][ T9763] netlink: 'syz.1.1230': attribute type 4 has an invalid length. [ 327.059060][ T5737] cdc_wdm 3-1:1.0: skipping garbage [ 327.059083][ T5737] cdc_wdm 3-1:1.0: skipping garbage [ 327.087416][ T5737] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 327.087437][ T5737] cdc_wdm 3-1:1.0: Unknown control protocol [ 327.132921][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 327.243745][ T8601] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 327.281556][ T5759] usb 3-1: USB disconnect, device number 11 [ 327.395012][ T8601] usb 6-1: Using ep0 maxpacket: 32 [ 327.395752][ T8601] usb 6-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 327.401207][ T8601] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.401238][ T8601] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 327.401266][ T8601] usb 6-1: config 0 interface 0 has no altsetting 0 [ 327.479349][ T8601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.479382][ T8601] usb 6-1: Product: syz [ 327.479399][ T8601] usb 6-1: Manufacturer: syz [ 327.479415][ T8601] usb 6-1: SerialNumber: syz [ 327.599317][ T8601] usb 6-1: config 0 descriptor?? [ 327.863528][ T5737] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 328.050911][ T8601] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 328.098765][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 328.135194][ T11] lwtunnel_output(): recursion limit reached on datapath [ 328.214248][ T5737] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 328.216172][ T5737] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 328.216204][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.216229][ T5737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 328.216344][ T5737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.221152][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 328.221182][ T5737] usb 3-1: Product: syz [ 328.221243][ T5737] usb 3-1: Manufacturer: syz [ 328.368956][ T5737] cdc_wdm 3-1:1.0: skipping garbage [ 328.368974][ T5737] cdc_wdm 3-1:1.0: skipping garbage [ 328.371381][ T9779] netlink: 1355 bytes leftover after parsing attributes in process `syz.1.1238'. [ 328.456345][ T5737] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 328.456390][ T5737] cdc_wdm 3-1:1.0: Unknown control protocol [ 328.497255][ T8601] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 328.500064][ T8601] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 328.529807][ T8601] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 328.727493][ T8601] usb 6-1: USB disconnect, device number 6 [ 328.785805][ T9783] FAULT_INJECTION: forcing a failure. [ 328.785805][ T9783] name failslab, interval 1, probability 0, space 0, times 0 [ 328.785847][ T9783] CPU: 1 UID: 0 PID: 9783 Comm: syz.1.1241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.785880][ T9783] Tainted: [L]=SOFTLOCKUP [ 328.785889][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 328.785903][ T9783] Call Trace: [ 328.785912][ T9783] [ 328.785922][ T9783] dump_stack_lvl+0xe8/0x150 [ 328.785967][ T9783] should_fail_ex+0x447/0x5e0 [ 328.786016][ T9783] should_failslab+0xa8/0x100 [ 328.786053][ T9783] __kmalloc_cache_noprof+0x9c/0x670 [ 328.786079][ T9783] ? __rdma_create_id+0x65/0x7b0 [ 328.786110][ T9783] ? __rdma_create_id+0x65/0x7b0 [ 328.786143][ T9783] ? __pfx_ucma_event_handler+0x10/0x10 [ 328.786169][ T9783] ? __pfx_ucma_event_handler+0x10/0x10 [ 328.786191][ T9783] __rdma_create_id+0x65/0x7b0 [ 328.786227][ T9783] ? __pfx_ucma_event_handler+0x10/0x10 [ 328.786251][ T9783] rdma_create_user_id+0x81/0xc0 [ 328.786286][ T9783] ucma_create_id+0x22e/0x370 [ 328.786325][ T9783] ? __pfx_ucma_create_id+0x10/0x10 [ 328.786380][ T9783] ucma_write+0x252/0x2f0 [ 328.786419][ T9783] ? __pfx_ucma_write+0x10/0x10 [ 328.786454][ T9783] ? security_file_permission+0x75/0x260 [ 328.786491][ T9783] ? rw_verify_area+0x209/0x4d0 [ 328.786529][ T9783] ? __pfx_ucma_write+0x10/0x10 [ 328.786563][ T9783] vfs_write+0x29f/0xbb0 [ 328.786596][ T9783] ? __pfx_vfs_write+0x10/0x10 [ 328.786621][ T9783] ? __fget_files+0x2a/0x420 [ 328.786655][ T9783] ? __fget_files+0x3a8/0x420 [ 328.786688][ T9783] ? __fget_files+0x2a/0x420 [ 328.786727][ T9783] ? fdget+0x1b2/0x250 [ 328.786769][ T9783] ksys_write+0x156/0x270 [ 328.786796][ T9783] ? __pfx_ksys_write+0x10/0x10 [ 328.786832][ T9783] do_syscall_64+0x166/0x520 [ 328.786861][ T9783] ? trace_irq_disable+0x3b/0x140 [ 328.786886][ T9783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.786911][ T9783] ? clear_bhb_loop+0x70/0xc0 [ 328.786940][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.786964][ T9783] RIP: 0033:0x7fad5579fb19 [ 328.786995][ T9783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.787016][ T9783] RSP: 002b:00007fad539f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.787043][ T9783] RAX: ffffffffffffffda RBX: 00007fad55a25fa0 RCX: 00007fad5579fb19 [ 328.787061][ T9783] RDX: 0000000000000020 RSI: 0000200000001000 RDI: 0000000000000003 [ 328.787077][ T9783] RBP: 00007fad55837b70 R08: 0000000000000000 R09: 0000000000000000 [ 328.787092][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.787107][ T9783] R13: 00007fad55a26038 R14: 00007fad55a25fa0 R15: 00007ffc1f505938 [ 328.787145][ T9783] [ 329.089707][ C0] cdc_wdm 3-1:1.0: unknown notification 49 received: index 30746 len 31028 [ 329.089981][ C0] cdc_wdm 3-1:1.0: unknown notification 51 received: index 52247 len 23375 [ 329.090232][ C0] cdc_wdm 3-1:1.0: unknown notification 55 received: index 61224 len 48018 [ 329.090489][ C0] cdc_wdm 3-1:1.0: unknown notification 146 received: index 31508 len 14302 [ 329.090734][ C0] cdc_wdm 3-1:1.0: unknown notification 85 received: index 42123 len 36993 [ 329.090991][ C0] cdc_wdm 3-1:1.0: unknown notification 121 received: index 17370 len 45147 [ 329.091455][ C0] cdc_wdm 3-1:1.0: unknown notification 192 received: index 8260 len 1292 [ 329.091728][ C0] cdc_wdm 3-1:1.0: unknown notification 184 received: index 55684 len 16286 [ 329.091980][ C0] cdc_wdm 3-1:1.0: unknown notification 216 received: index 6033 len 38480 [ 329.114149][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 329.312714][ T5759] usb 3-1: USB disconnect, device number 12 [ 329.504413][ T5613] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 330.030961][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.130714][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.146398][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.164309][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 330.164477][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 330.165200][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.167434][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.398753][ T31] usb 6-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 330.400376][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.088653][ T9825] FAULT_INJECTION: forcing a failure. [ 331.088653][ T9825] name failslab, interval 1, probability 0, space 0, times 0 [ 331.088691][ T9825] CPU: 0 UID: 0 PID: 9825 Comm: syz.2.1254 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 331.088720][ T9825] Tainted: [L]=SOFTLOCKUP [ 331.088728][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 331.088740][ T9825] Call Trace: [ 331.088748][ T9825] [ 331.088757][ T9825] dump_stack_lvl+0xe8/0x150 [ 331.088800][ T9825] should_fail_ex+0x447/0x5e0 [ 331.088838][ T9825] should_failslab+0xa8/0x100 [ 331.088866][ T9825] ? __kernfs_new_node+0xe7/0xa70 [ 331.088894][ T9825] kmem_cache_alloc_noprof+0x99/0x680 [ 331.088933][ T9825] ? __kernfs_new_node+0xe7/0xa70 [ 331.088966][ T9825] __kernfs_new_node+0xe7/0xa70 [ 331.088993][ T9825] ? __lock_acquire+0x747/0x2de0 [ 331.089036][ T9825] ? __pfx___kernfs_new_node+0x10/0x10 [ 331.089060][ T9825] ? lock_acquire+0x115/0x350 [ 331.089089][ T9825] ? kernfs_root+0x1c/0x230 [ 331.089119][ T9825] ? kernfs_root+0x1c/0x230 [ 331.089143][ T9825] ? kernfs_root+0x1c/0x230 [ 331.089166][ T9825] ? kernfs_root+0x1c/0x230 [ 331.089195][ T9825] kernfs_new_node+0xeb/0x140 [ 331.089228][ T9825] __kernfs_create_file+0x4b/0x2e0 [ 331.089264][ T9825] sysfs_add_file_mode_ns+0x237/0x300 [ 331.089308][ T9825] sysfs_merge_group+0x183/0x320 [ 331.089350][ T9825] ? __pfx_sysfs_merge_group+0x10/0x10 [ 331.089375][ T9825] ? device_add_attrs+0x5c3/0x600 [ 331.089402][ T9825] ? __pfx_device_add_attrs+0x10/0x10 [ 331.089430][ T9825] dpm_sysfs_add+0xd2/0x270 [ 331.089464][ T9825] device_add+0x4ca/0xb80 [ 331.089490][ T9825] netdev_register_kobject+0x197/0x350 [ 331.089533][ T9825] register_netdevice+0x17d5/0x2290 [ 331.089577][ T9825] ? __pfx_register_netdevice+0x10/0x10 [ 331.089609][ T9825] ? net_generic+0x1e/0x240 [ 331.089645][ T9825] xfrmi_newlink+0x49d/0x7c0 [ 331.089671][ T9825] ? validate_linkmsg+0x809/0xa50 [ 331.089706][ T9825] ? __pfx_xfrmi_newlink+0x10/0x10 [ 331.089737][ T9825] ? rtnl_create_link+0xa04/0xd70 [ 331.089770][ T9825] ? __pfx_xfrmi_newlink+0x10/0x10 [ 331.089799][ T9825] rtnl_newlink_create+0x305/0x7b0 [ 331.089836][ T9825] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 331.089880][ T9825] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.089916][ T9825] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 331.089953][ T9825] rtnl_newlink+0x167a/0x1c30 [ 331.089995][ T9825] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.090018][ T9825] ? sock_sendmsg_nosec+0x14e/0x190 [ 331.090049][ T9825] ? ____sys_sendmsg+0x565/0x870 [ 331.090072][ T9825] ? ___sys_sendmsg+0x2a5/0x360 [ 331.090096][ T9825] ? __x64_sys_sendmsg+0x1b7/0x290 [ 331.090120][ T9825] ? do_syscall_64+0x166/0x520 [ 331.090148][ T9825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.090205][ T9825] ? __lock_acquire+0x747/0x2de0 [ 331.090268][ T9825] ? kasan_quarantine_put+0xbb/0x1f0 [ 331.090295][ T9825] ? lockdep_hardirqs_on+0x7b/0x110 [ 331.090337][ T9825] ? nlmon_xmit+0xb0/0x100 [ 331.090366][ T9825] ? kmem_cache_free+0x187/0x6d0 [ 331.090392][ T9825] ? nlmon_xmit+0xb0/0x100 [ 331.090431][ T9825] ? __lock_acquire+0x747/0x2de0 [ 331.090475][ T9825] ? __pfx_hook_capable+0x10/0x10 [ 331.090511][ T9825] ? lockdep_hardirqs_on+0x7b/0x110 [ 331.090542][ T9825] ? __pfx_hook_capable+0x10/0x10 [ 331.090574][ T9825] ? __dev_queue_xmit+0x2a0/0x3a70 [ 331.090604][ T9825] ? __dev_queue_xmit+0x1f26/0x3a70 [ 331.090663][ T9825] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.090687][ T9825] rtnetlink_rcv_msg+0x802/0xc00 [ 331.090716][ T9825] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 331.090739][ T9825] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.090767][ T9825] ? __copy_skb_header+0xa3/0x4a0 [ 331.090796][ T9825] ? __asan_memcpy+0x40/0x70 [ 331.090827][ T9825] netlink_rcv_skb+0x226/0x4a0 [ 331.090864][ T9825] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.090891][ T9825] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.090950][ T9825] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.090981][ T9825] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.091022][ T9825] netlink_unicast+0x90c/0xac0 [ 331.091072][ T9825] netlink_sendmsg+0x7f0/0xb20 [ 331.091114][ T9825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.091145][ T9825] ? __lock_acquire+0x747/0x2de0 [ 331.091185][ T9825] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 331.091224][ T9825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.091257][ T9825] sock_sendmsg_nosec+0x14e/0x190 [ 331.091292][ T9825] ____sys_sendmsg+0x565/0x870 [ 331.091337][ T9825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.091374][ T9825] ? import_iovec+0x73/0xa0 [ 331.091410][ T9825] ___sys_sendmsg+0x2a5/0x360 [ 331.091433][ T9825] ? __lock_acquire+0x747/0x2de0 [ 331.091474][ T9825] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.091506][ T9825] ? futex_wait+0x2a2/0x390 [ 331.091576][ T9825] ? __fget_files+0x3a8/0x420 [ 331.091610][ T9825] ? __fget_files+0x2a/0x420 [ 331.091654][ T9825] __x64_sys_sendmsg+0x1b7/0x290 [ 331.091685][ T9825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.091742][ T9825] do_syscall_64+0x166/0x520 [ 331.091771][ T9825] ? trace_irq_disable+0x3b/0x140 [ 331.091795][ T9825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.091819][ T9825] ? clear_bhb_loop+0x70/0xc0 [ 331.091847][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.091871][ T9825] RIP: 0033:0x7f5b68d2fb19 [ 331.091894][ T9825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.091916][ T9825] RSP: 002b:00007f5b66f86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.091941][ T9825] RAX: ffffffffffffffda RBX: 00007f5b68fb5fa0 RCX: 00007f5b68d2fb19 [ 331.091958][ T9825] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 331.091973][ T9825] RBP: 00007f5b68dc7b70 R08: 0000000000000000 R09: 0000000000000000 [ 331.091988][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.092002][ T9825] R13: 00007f5b68fb6038 R14: 00007f5b68fb5fa0 R15: 00007fffdf619668 [ 331.092040][ T9825] [ 331.150637][ T8601] lwtunnel_output(): recursion limit reached on datapath [ 331.222374][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 331.813629][ T31] usb 6-1: Cannot set autoneg [ 331.813880][ T31] MOSCHIP usb-ethernet driver 6-1:7.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 331.866536][ T31] usb 6-1: USB disconnect, device number 7 [ 332.015368][ T9800] rxe_eth0 speed is unknown, defaulting to 1000 [ 332.237510][ T8601] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 332.244164][ T31] lwtunnel_output(): recursion limit reached on datapath [ 332.313536][ T5759] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 332.393525][ T8601] usb 2-1: Using ep0 maxpacket: 32 [ 332.394375][ T8601] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 332.396407][ T8601] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 332.396436][ T8601] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 332.396463][ T8601] usb 2-1: config 0 interface 0 has no altsetting 0 [ 332.473636][ T5613] Bluetooth: hci4: command tx timeout [ 332.489172][ T5759] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 332.507279][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.507320][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1576, setting to 1024 [ 332.507368][ T5759] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 332.515137][ T8601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.515188][ T8601] usb 2-1: Product: syz [ 332.515205][ T8601] usb 2-1: Manufacturer: syz [ 332.515228][ T8601] usb 2-1: SerialNumber: syz [ 332.529451][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.529480][ T5759] usb 3-1: Product: syz [ 332.529497][ T5759] usb 3-1: Manufacturer: syz [ 332.529515][ T5759] usb 3-1: SerialNumber: syz [ 332.620617][ T9833] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 332.632973][ T5759] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 332.633054][ T5759] cdc_ncm 3-1:1.0: bind() failure [ 332.651785][ T8601] usb 2-1: config 0 descriptor?? [ 332.662338][ T5759] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 332.662399][ T5759] cdc_ncm 3-1:1.1: bind() failure [ 332.753623][ T2069] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 332.904532][ T2069] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 332.910791][ T2069] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.910822][ T2069] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.910844][ T2069] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.910913][ T2069] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.973891][ T2069] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.973922][ T2069] usb 6-1: Product: syz [ 332.973940][ T2069] usb 6-1: Manufacturer: syz [ 333.020013][ T2069] cdc_wdm 6-1:1.0: skipping garbage [ 333.020033][ T2069] cdc_wdm 6-1:1.0: skipping garbage [ 333.048854][ T2069] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 333.048881][ T2069] cdc_wdm 6-1:1.0: Unknown control protocol [ 333.092056][ T8601] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 333.237980][ T2069] usb 6-1: USB disconnect, device number 8 [ 333.285713][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 333.450065][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 333.512232][ T8601] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 333.540367][ T8601] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 333.565432][ T8601] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 333.743572][ T11] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 333.751899][ T2069] usb 2-1: USB disconnect, device number 22 [ 333.918351][ T11] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 333.919682][ T11] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.919711][ T11] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.919732][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.919785][ T11] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.954142][ T11] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.954327][ T11] usb 6-1: Product: syz [ 333.954376][ T11] usb 6-1: Manufacturer: syz [ 334.019760][ T11] cdc_wdm 6-1:1.0: skipping garbage [ 334.019781][ T11] cdc_wdm 6-1:1.0: skipping garbage [ 334.061411][ T11] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 334.061436][ T11] cdc_wdm 6-1:1.0: Unknown control protocol [ 334.173884][ T5623] lwtunnel_output(): recursion limit reached on datapath [ 334.275552][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.275710][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.276084][ T9800] bridge_slave_0: entered allmulticast mode [ 334.277953][ T9800] bridge_slave_0: entered promiscuous mode [ 334.280787][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.280931][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.281047][ T9800] bridge_slave_1: entered allmulticast mode [ 334.282926][ T9800] bridge_slave_1: entered promiscuous mode [ 334.357881][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 334.404253][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.408941][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.472527][ T9800] team0: Port device team_slave_0 added [ 334.484208][ T9800] team0: Port device team_slave_1 added [ 334.524226][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.524248][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.524280][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.526436][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.526455][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.526508][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.553572][ T5613] Bluetooth: hci4: command tx timeout [ 334.654198][ C1] cdc_wdm 6-1:1.0: unknown notification 49 received: index 30746 len 31028 [ 334.654464][ C1] cdc_wdm 6-1:1.0: unknown notification 51 received: index 52247 len 23375 [ 334.654730][ C1] cdc_wdm 6-1:1.0: unknown notification 55 received: index 61224 len 48018 [ 334.655019][ C1] cdc_wdm 6-1:1.0: unknown notification 146 received: index 31508 len 14302 [ 334.655306][ C1] cdc_wdm 6-1:1.0: unknown notification 85 received: index 42123 len 36993 [ 334.655587][ C1] cdc_wdm 6-1:1.0: unknown notification 121 received: index 17370 len 45147 [ 334.656125][ C1] cdc_wdm 6-1:1.0: unknown notification 192 received: index 8260 len 1292 [ 334.656445][ C1] cdc_wdm 6-1:1.0: unknown notification 184 received: index 55684 len 16286 [ 334.656762][ C1] cdc_wdm 6-1:1.0: unknown notification 216 received: index 6033 len 38480 [ 334.779474][ T9800] hsr_slave_0: entered promiscuous mode [ 334.781007][ T9800] hsr_slave_1: entered promiscuous mode [ 334.782163][ T9800] debugfs: 'hsr0' already exists in 'hsr' [ 334.782200][ T9800] Cannot create hsr debugfs directory [ 334.872890][ T2069] usb 6-1: USB disconnect, device number 9 [ 335.070748][ T11] usb 3-1: USB disconnect, device number 13 [ 335.401956][ T9800] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 335.434138][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 335.442150][ T9800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.458040][ T9800] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 335.486725][ T9800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.487790][ T9800] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 335.540541][ T9800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.541605][ T9800] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 335.569169][ T9800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.671852][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.704610][ T9800] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.710850][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.711015][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.760145][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.760246][ T6730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.290869][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.478829][ T5730] lwtunnel_output(): recursion limit reached on datapath [ 336.601328][ T9800] veth0_vlan: entered promiscuous mode [ 336.626170][ T9800] veth1_vlan: entered promiscuous mode [ 336.634050][ T5613] Bluetooth: hci4: command tx timeout [ 336.677585][ T9800] veth0_macvtap: entered promiscuous mode [ 336.682142][ T9800] veth1_macvtap: entered promiscuous mode [ 336.724027][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.732240][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.868578][ T6707] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.870065][ T6707] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.870114][ T6707] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.870155][ T6707] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.201231][ T11] lwtunnel_output(): recursion limit reached on datapath [ 337.469754][ T6728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.469779][ T6728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.514411][ T31] lwtunnel_output(): recursion limit reached on datapath [ 337.642463][ T6707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.642489][ T6707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.024360][ T9882] IPv4: Oversized IP packet from 127.202.26.0 [ 338.203557][ T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 338.354839][ T31] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 338.356671][ T31] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 338.356708][ T31] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 338.356727][ T31] usb 3-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 338.356747][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 338.358025][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 338.358051][ T31] usb 3-1: SerialNumber: syz [ 338.366108][ T9881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 338.366615][ T9881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 338.587269][ T9881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 338.587394][ T9881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 338.617550][ T5730] lwtunnel_output(): recursion limit reached on datapath [ 338.713753][ T5613] Bluetooth: hci4: command tx timeout [ 338.981242][ T9889] fuse_uring_cmd: 4699 callbacks suppressed [ 338.981267][ T9889] fuse-io-uring is disabled by module parameter [ 338.981401][ T9889] fuse-io-uring is disabled by module parameter [ 338.981444][ T9889] fuse-io-uring is disabled by module parameter [ 338.981482][ T9889] fuse-io-uring is disabled by module parameter [ 338.981521][ T9889] fuse-io-uring is disabled by module parameter [ 338.981560][ T9889] fuse-io-uring is disabled by module parameter [ 338.981600][ T9889] fuse-io-uring is disabled by module parameter [ 338.981639][ T9889] fuse-io-uring is disabled by module parameter [ 338.981678][ T9889] fuse-io-uring is disabled by module parameter [ 338.981716][ T9889] fuse-io-uring is disabled by module parameter [ 339.198082][ T5730] lwtunnel_output(): recursion limit reached on datapath [ 339.236164][ T31] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 339.685276][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 339.770773][ T5759] usb 3-1: USB disconnect, device number 14 [ 339.814045][ T5759] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 340.234511][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 340.475500][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 340.715335][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 340.783532][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 340.938768][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 340.939629][ T31] usb 4-1: New USB device found: idVendor=1b1c, idProduct=0c10, bcdDevice=0.00 [ 340.941656][ T31] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 340.941689][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.941722][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.994239][ T31] usb 4-1: config 0 descriptor?? [ 341.489306][ T31] corsair-cpro 0003:1B1C:0C10.0009: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 341.829201][ T36] lwtunnel_output(): recursion limit reached on datapath [ 342.050398][ T31] corsair-cpro 0003:1B1C:0C10.0009: probe with driver corsair-cpro failed with error -71 [ 342.111944][ T31] usb 4-1: USB disconnect, device number 18 [ 342.874508][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 342.955219][ T9986] lwtunnel_output(): recursion limit reached on datapath [ 343.274859][ T11] lwtunnel_output(): recursion limit reached on datapath [ 343.623296][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 343.623319][ T37] audit: type=1326 audit(1794029829.959:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.623660][ T37] audit: type=1326 audit(1794029829.959:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.692074][ T37] audit: type=1326 audit(1794029830.009:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.696966][ T37] audit: type=1326 audit(1794029830.029:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.746215][ T37] audit: type=1326 audit(1794029830.089:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.749112][ T37] audit: type=1326 audit(1794029830.089:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.750802][ T37] audit: type=1326 audit(1794029830.089:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.750843][ T37] audit: type=1326 audit(1794029830.089:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.753695][ T37] audit: type=1326 audit(1794029830.089:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.753837][ T37] audit: type=1326 audit(1794029830.089:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10010 comm="syz.5.1307" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e48fb19 code=0x7ffc0000 [ 343.916244][ T31] lwtunnel_output(): recursion limit reached on datapath [ 344.110228][ T5613] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 344.954428][ T31] lwtunnel_output(): recursion limit reached on datapath [ 345.318114][T10061] FAULT_INJECTION: forcing a failure. [ 345.318114][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 345.318168][T10061] CPU: 0 UID: 0 PID: 10061 Comm: syz.1.1329 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 345.318235][T10061] Tainted: [L]=SOFTLOCKUP [ 345.318252][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 345.318281][T10061] Call Trace: [ 345.318299][T10061] [ 345.318317][T10061] dump_stack_lvl+0xe8/0x150 [ 345.318400][T10061] should_fail_ex+0x447/0x5e0 [ 345.318477][T10061] should_failslab+0xa8/0x100 [ 345.318535][T10061] ? __anon_vma_prepare+0xbe/0x4a0 [ 345.318604][T10061] kmem_cache_alloc_noprof+0x99/0x680 [ 345.318645][T10061] ? __anon_vma_prepare+0xbe/0x4a0 [ 345.318688][T10061] __anon_vma_prepare+0xbe/0x4a0 [ 345.318730][T10061] do_wp_page+0x2f0a/0x3e00 [ 345.318783][T10061] ? preempt_count_add+0x6a/0x140 [ 345.318822][T10061] ? __pfx_do_wp_page+0x10/0x10 [ 345.318853][T10061] ? rt_spin_lock+0x2d0/0x400 [ 345.318881][T10061] ? __pfx_rt_spin_lock+0x10/0x10 [ 345.318912][T10061] ? pte_offset_map_rw_nolock+0xea/0x160 [ 345.318949][T10061] handle_mm_fault+0xef9/0x2130 [ 345.318992][T10061] ? handle_mm_fault+0xe8/0x2130 [ 345.319035][T10061] ? lock_vma_under_rcu+0x116/0x500 [ 345.319075][T10061] ? __pfx_handle_mm_fault+0x10/0x10 [ 345.319109][T10061] ? lock_vma_under_rcu+0x45a/0x500 [ 345.319154][T10061] ? irqentry_exit+0x2a0/0x9b0 [ 345.319182][T10061] ? trace_irq_disable+0x3b/0x140 [ 345.319234][T10061] do_user_addr_fault+0xb35/0x1480 [ 345.319278][T10061] ? trace_page_fault_user+0x84/0x1e0 [ 345.319311][T10061] exc_page_fault+0x6a/0xc0 [ 345.319343][T10061] asm_exc_page_fault+0x26/0x30 [ 345.319366][T10061] RIP: 0033:0x7fad55653e27 [ 345.319388][T10061] Code: 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 48 8b 59 38 <48> 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00 [ 345.319409][T10061] RSP: 002b:00007fad539f5fd0 EFLAGS: 00010246 [ 345.319431][T10061] RAX: 00007fad55653de0 RBX: 0000000000000000 RCX: 0000000000000000 [ 345.319452][T10061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.319467][T10061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.319482][T10061] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000000 [ 345.319498][T10061] R13: 00007fad55a26038 R14: 00007fad55a25fa0 R15: 00007ffc1f505938 [ 345.319537][T10061] [ 345.319585][T10061] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 345.994474][ T31] lwtunnel_output(): recursion limit reached on datapath [ 346.030034][T10082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.204460][ T5759] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 346.364002][ T11] lwtunnel_output(): recursion limit reached on datapath [ 346.368626][T10096] FAULT_INJECTION: forcing a failure. [ 346.368626][T10096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.368665][T10096] CPU: 1 UID: 0 PID: 10096 Comm: syz.8.1345 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.368701][T10096] Tainted: [L]=SOFTLOCKUP [ 346.368710][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 346.368726][T10096] Call Trace: [ 346.368736][T10096] [ 346.368746][T10096] dump_stack_lvl+0xe8/0x150 [ 346.368793][T10096] should_fail_ex+0x447/0x5e0 [ 346.368833][T10096] _copy_from_iter+0x4fa/0x1680 [ 346.368877][T10096] ? __pfx__copy_from_iter+0x10/0x10 [ 346.368903][T10096] ? lock_acquire+0x115/0x350 [ 346.368944][T10096] ? futex_unqueue+0x22/0x240 [ 346.368998][T10096] vhost_chr_write_iter+0xe1/0xb50 [ 346.369034][T10096] ? futex_unqueue+0x211/0x240 [ 346.369059][T10096] ? __futex_wait+0x1ff/0x480 [ 346.369095][T10096] ? __futex_wait+0x3c9/0x480 [ 346.369139][T10096] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 346.369181][T10096] ? __pfx___futex_wait+0x10/0x10 [ 346.369245][T10096] do_iter_readv_writev+0x624/0x8d0 [ 346.369276][T10096] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 346.369307][T10096] ? bpf_lsm_file_permission+0x9/0x20 [ 346.369333][T10096] ? security_file_permission+0x75/0x260 [ 346.369381][T10096] ? rw_verify_area+0x209/0x4d0 [ 346.369421][T10096] vfs_writev+0x34c/0x990 [ 346.369478][T10096] ? __pfx_vfs_writev+0x10/0x10 [ 346.369524][T10096] ? __fget_files+0x2a/0x420 [ 346.369557][T10096] ? __fget_files+0x3a8/0x420 [ 346.369599][T10096] ? fdget+0x1b2/0x250 [ 346.369657][T10096] do_writev+0x15a/0x2e0 [ 346.369688][T10096] ? __pfx_do_writev+0x10/0x10 [ 346.369729][T10096] do_syscall_64+0x166/0x520 [ 346.369758][T10096] ? trace_irq_disable+0x3b/0x140 [ 346.369783][T10096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.369806][T10096] ? clear_bhb_loop+0x70/0xc0 [ 346.369834][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.369858][T10096] RIP: 0033:0x7ff73fe7fb19 [ 346.369880][T10096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.369901][T10096] RSP: 002b:00007ff73e0d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 346.369926][T10096] RAX: ffffffffffffffda RBX: 00007ff740105fa0 RCX: 00007ff73fe7fb19 [ 346.369943][T10096] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 346.369959][T10096] RBP: 00007ff73ff17b70 R08: 0000000000000000 R09: 0000000000000000 [ 346.369974][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.369988][T10096] R13: 00007ff740106038 R14: 00007ff740105fa0 R15: 00007ffcc6e03b78 [ 346.370024][T10096] [ 346.381472][ T5759] usb 6-1: Using ep0 maxpacket: 16 [ 346.408957][ T5759] usb 6-1: New USB device found: idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 346.673561][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.673593][ T5759] usb 6-1: Product: syz [ 346.673609][ T5759] usb 6-1: Manufacturer: syz [ 346.673625][ T5759] usb 6-1: SerialNumber: syz [ 346.745327][ T5759] usb 6-1: config 0 descriptor?? [ 346.751862][ T5759] usb 6-1: selecting invalid altsetting 1 [ 346.751886][ T5759] technisat-usb2: could not set alternate setting to 0 [ 346.995738][ T5759] technisat-usb2: firmware version: 0.0 [ 346.995794][ T5759] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 347.127090][ T36] lwtunnel_output(): recursion limit reached on datapath [ 347.145113][ T5609] batman_adv: batadv0: Interface deactivated: syz_tun [ 347.389493][T10107] FAULT_INJECTION: forcing a failure. [ 347.389493][T10107] name failslab, interval 1, probability 0, space 0, times 0 [ 347.389533][T10107] CPU: 1 UID: 0 PID: 10107 Comm: syz.1.1351 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 347.389571][T10107] Tainted: [L]=SOFTLOCKUP [ 347.389579][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 347.389594][T10107] Call Trace: [ 347.389612][T10107] [ 347.389623][T10107] dump_stack_lvl+0xe8/0x150 [ 347.389669][T10107] should_fail_ex+0x447/0x5e0 [ 347.389707][T10107] should_failslab+0xa8/0x100 [ 347.389737][T10107] ? copy_utsname+0x1f2/0x620 [ 347.389772][T10107] kmem_cache_alloc_noprof+0x99/0x680 [ 347.389811][T10107] ? __pfx_copy_mnt_ns+0x10/0x10 [ 347.389844][T10107] ? copy_utsname+0x1f2/0x620 [ 347.389885][T10107] copy_utsname+0x1f2/0x620 [ 347.389925][T10107] create_new_namespaces+0x178/0x6b0 [ 347.389964][T10107] ? security_capable+0x7e/0x2c0 [ 347.389997][T10107] unshare_nsproxy_namespaces+0x144/0x190 [ 347.390038][T10107] ksys_unshare+0x532/0x890 [ 347.390077][T10107] ? __pfx_ksys_unshare+0x10/0x10 [ 347.390117][T10107] ? rcu_is_watching+0x16/0xb0 [ 347.390158][T10107] __x64_sys_unshare+0x38/0x50 [ 347.390179][T10107] do_syscall_64+0x166/0x520 [ 347.390209][T10107] ? trace_irq_disable+0x3b/0x140 [ 347.390234][T10107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.390258][T10107] ? clear_bhb_loop+0x70/0xc0 [ 347.390288][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.390312][T10107] RIP: 0033:0x7fad5579fb19 [ 347.390335][T10107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.390370][T10107] RSP: 002b:00007fad539f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 347.390396][T10107] RAX: ffffffffffffffda RBX: 00007fad55a25fa0 RCX: 00007fad5579fb19 [ 347.390413][T10107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002e000480 [ 347.390429][T10107] RBP: 00007fad55837b70 R08: 0000000000000000 R09: 0000000000000000 [ 347.390444][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.390457][T10107] R13: 00007fad55a26038 R14: 00007fad55a25fa0 R15: 00007ffc1f505938 [ 347.390495][T10107] [ 347.650052][ T31] lwtunnel_output(): recursion limit reached on datapath [ 347.684416][ T5609] batman_adv: batadv0: Removing interface: syz_tun [ 347.722011][ T5759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 347.722858][ T5759] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 347.722918][ T5759] usb 6-1: media controller created [ 347.722975][ T5759] technisat-usb2: i2c-error: out failed 53 = -22 [ 347.723025][ T5759] dvb-usb: MAC address reading failed. [ 347.804117][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 348.060648][T10111] gadgetfs: bound to dummy_udc driver [ 348.095042][ T36] lwtunnel_output(): recursion limit reached on datapath [ 348.221802][ T5759] DVB: Unable to find symbol stv090x_attach() [ 348.222281][ T5759] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 348.463833][ T5759] rc_core: IR keymap rc-technisat-usb2 not found [ 348.463856][ T5759] Registered IR keymap rc-empty [ 348.505723][ T5759] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 348.508827][ T5759] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input13 [ 348.539469][ T5759] dvb-usb: schedule remote query interval to 100 msecs. [ 348.540369][ T5759] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 348.572438][ T5759] usb 6-1: USB disconnect, device number 10 [ 348.750285][ T5759] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 349.115168][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 349.279948][ T11] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 349.343236][ T4918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.392417][T10137] input: syz0 as /devices/virtual/input/input14 [ 349.427223][ T4918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.433160][ T4918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.436995][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 349.443967][ T11] usb 9-1: Using ep0 maxpacket: 8 [ 349.444889][ T11] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.452591][ T11] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 349.452722][ T11] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.452902][ T11] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.453007][ T11] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.453097][ T11] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.453241][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.501173][ T4918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.503179][ T4918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.893826][ T11] usb 9-1: GET_CAPABILITIES returned 0 [ 349.893879][ T11] usbtmc 9-1:16.0: can't read capabilities [ 350.158157][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 350.233597][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 350.402899][ T8601] usb 9-1: USB disconnect, device number 2 [ 350.685755][T10138] rxe_eth0 speed is unknown, defaulting to 1000 [ 351.194047][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 351.833634][ T61] Bluetooth: hci2: command tx timeout [ 352.234144][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 352.286482][ T5759] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 352.347014][T10185] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.390467][T10185] bond1: (slave lo): Enslaving as an active interface with an up link [ 352.403280][T10185] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 352.474079][ T11] lwtunnel_output(): recursion limit reached on datapath [ 352.474539][ T5759] usb 9-1: New USB device found: idVendor=0755, idProduct=2626, bcdDevice=0.40 [ 352.478920][ T5759] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 352.478957][ T5759] usb 9-1: config 1 interface 0 has no altsetting 0 [ 352.525722][ T5759] usb 9-1: string descriptor 0 read error: -22 [ 352.525880][ T5759] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.555557][T10175] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 352.573548][ T2069] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 352.745266][ T2069] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 352.747376][ T2069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.802036][ T2069] usb 3-1: config 0 descriptor?? [ 353.021549][ T2069] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 353.042312][ T5759] aureal 0003:0755:2626.000A: item 0 2 0 9 parsing failed [ 353.051281][ T5759] aureal 0003:0755:2626.000A: probe with driver aureal failed with error -22 [ 353.266448][ T5759] usb 9-1: USB disconnect, device number 3 [ 353.295678][ T31] lwtunnel_output(): recursion limit reached on datapath [ 353.296129][ T31] lwtunnel_output(): recursion limit reached on datapath [ 353.344692][ T5623] lwtunnel_output(): recursion limit reached on datapath [ 353.403504][ T2069] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 353.403531][ T2069] [drm] Initialized udl on minor 1 [ 353.685243][T10138] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.685477][T10138] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.685652][T10138] bridge_slave_0: entered allmulticast mode [ 353.687997][T10138] bridge_slave_0: entered promiscuous mode [ 353.722646][T10138] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.722851][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.723038][T10138] bridge_slave_1: entered allmulticast mode [ 353.753092][T10138] bridge_slave_1: entered promiscuous mode [ 353.819486][T10204] input: syz1 as /devices/virtual/input/input15 [ 353.917057][ T61] Bluetooth: hci2: command tx timeout [ 353.991562][T10138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.095080][T10138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.364516][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 354.422084][T10138] team0: Port device team_slave_0 added [ 354.454649][T10138] team0: Port device team_slave_1 added [ 354.487403][T10212] FAULT_INJECTION: forcing a failure. [ 354.487403][T10212] name fail_futex, interval 1, probability 0, space 0, times 0 [ 354.487443][T10212] CPU: 1 UID: 0 PID: 10212 Comm: syz.5.1388 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 354.487465][T10212] Tainted: [L]=SOFTLOCKUP [ 354.487471][T10212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 354.487480][T10212] Call Trace: [ 354.487489][T10212] [ 354.487497][T10212] dump_stack_lvl+0xe8/0x150 [ 354.487529][T10212] should_fail_ex+0x447/0x5e0 [ 354.487555][T10212] get_futex_key+0x1ab/0x1410 [ 354.487578][T10212] ? do_iter_readv_writev+0x64d/0x8d0 [ 354.487598][T10212] ? __pfx_get_futex_key+0x10/0x10 [ 354.487624][T10212] futex_wake+0x119/0x600 [ 354.487656][T10212] ? __pfx_futex_wake+0x10/0x10 [ 354.487684][T10212] ? __pfx_vfs_writev+0x10/0x10 [ 354.487709][T10212] do_futex+0x458/0x4e0 [ 354.487734][T10212] ? __pfx_do_futex+0x10/0x10 [ 354.487752][T10212] ? __fget_files+0x3a8/0x420 [ 354.487802][T10212] __se_sys_futex+0x3a8/0x450 [ 354.487827][T10212] ? do_writev+0x2b7/0x2e0 [ 354.487847][T10212] ? __pfx___se_sys_futex+0x10/0x10 [ 354.487869][T10212] ? __pfx_do_writev+0x10/0x10 [ 354.487894][T10212] ? __x64_sys_futex+0x21/0xf0 [ 354.487917][T10212] do_syscall_64+0x166/0x520 [ 354.487938][T10212] ? trace_irq_disable+0x3b/0x140 [ 354.487956][T10212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.487972][T10212] ? clear_bhb_loop+0x70/0xc0 [ 354.487993][T10212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.488010][T10212] RIP: 0033:0x7f2d3e48fb19 [ 354.488025][T10212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.488040][T10212] RSP: 002b:00007f2d3c6de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 354.488058][T10212] RAX: ffffffffffffffda RBX: 00007f2d3e715fa8 RCX: 00007f2d3e48fb19 [ 354.488070][T10212] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2d3e715fac [ 354.488081][T10212] RBP: 00007f2d3e715fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 354.488092][T10212] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 354.488102][T10212] R13: 00007f2d3e716038 R14: 00007fff29e74a20 R15: 00007fff29e74b08 [ 354.488134][T10212] [ 355.191983][T10138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.192001][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.192025][T10138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.293200][T10138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.293233][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.293265][T10138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.443625][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 355.527330][T10138] hsr_slave_0: entered promiscuous mode [ 355.528645][T10138] hsr_slave_1: entered promiscuous mode [ 355.529562][T10138] debugfs: 'hsr0' already exists in 'hsr' [ 355.529584][T10138] Cannot create hsr debugfs directory [ 355.611896][ T36] lwtunnel_output(): recursion limit reached on datapath [ 356.003586][ T61] Bluetooth: hci2: command tx timeout [ 356.334108][ T5623] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 356.396291][ T8601] lwtunnel_output(): recursion limit reached on datapath [ 356.413772][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 356.531500][ T5623] usb 9-1: unable to get BOS descriptor or descriptor too short [ 356.541461][ T5623] usb 9-1: not running at top speed; connect to a high speed hub [ 356.541504][ T5623] usb 9-1: New USB device found: idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 356.566780][ T5623] usb 9-1: config 0 has an invalid interface number: 15 but max is 0 [ 356.566811][ T5623] usb 9-1: config 0 has no interface number 0 [ 356.566848][ T5623] usb 9-1: config 0 interface 15 has no altsetting 0 [ 356.609515][ T5623] usb 9-1: string descriptor 0 read error: -22 [ 356.609647][ T5623] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.658957][ T5623] usb 9-1: config 0 descriptor?? [ 357.508460][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 358.039182][ T8601] usb 9-1: USB disconnect, device number 4 [ 358.091574][ T61] Bluetooth: hci2: command tx timeout [ 358.427354][T10270] netlink: 'syz.5.1409': attribute type 21 has an invalid length. [ 358.427384][T10270] netlink: 14540 bytes leftover after parsing attributes in process `syz.5.1409'. [ 358.474393][ T36] lwtunnel_output(): recursion limit reached on datapath [ 358.588654][ T2069] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 358.631853][ T2069] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 358.782346][ T61] block nbd8: Receive control failed (result -32) [ 358.880598][ T2069] usb 3-1: USB disconnect, device number 15 [ 358.951093][T10138] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 358.963516][ T8601] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 359.017215][T10277] block nbd8: shutting down sockets [ 359.041182][T10138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.048442][T10138] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 359.138492][ T8601] usb 6-1: New USB device found: idVendor=1e7d, idProduct=2c2e, bcdDevice=0.40 [ 359.140019][ T8601] usb 6-1: config 1 interface 0 has no altsetting 0 [ 359.180701][ T8601] usb 6-1: string descriptor 0 read error: -22 [ 359.180849][ T8601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.222379][T10138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.223284][T10138] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 359.363884][T10138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.370444][T10138] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 359.439581][ T5623] lwtunnel_output(): recursion limit reached on datapath [ 359.450444][T10138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.514252][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 359.640196][T10297] netlink: 'syz.8.1406': attribute type 14 has an invalid length. [ 359.640222][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1406'. [ 359.734081][T10297] netlink: 'syz.8.1406': attribute type 14 has an invalid length. [ 359.734181][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1406'. [ 359.802342][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x1 [ 359.802498][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x4 [ 359.802579][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0 [ 359.802610][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0 [ 359.802641][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0 [ 359.802671][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0 [ 359.802700][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0 [ 359.802730][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0 [ 359.802759][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0 [ 359.802789][ T8601] lua 0003:1E7D:2C2E.000B: unknown main item tag 0x0 [ 359.875793][ T6734] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.875842][ T6734] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.875877][ T6734] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.915465][ T6707] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.959282][ T8601] lua 0003:1E7D:2C2E.000B: unbalanced collection at end of report description [ 359.960159][ T8601] lua 0003:1E7D:2C2E.000B: parse failed [ 359.960240][ T8601] lua 0003:1E7D:2C2E.000B: probe with driver lua failed with error -22 [ 360.114529][ T2069] usb 6-1: USB disconnect, device number 11 [ 360.375156][T10138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.493046][T10138] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.525543][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.526534][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.555106][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 360.584821][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.584983][ T6718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.817959][T10321] Bluetooth: hci0: unsupported parameter 5135 [ 360.817982][T10321] Bluetooth: hci0: unsupported parameter 8192 [ 360.817995][T10321] Bluetooth: hci0: unsupported parameter 5135 [ 360.818007][T10321] Bluetooth: hci0: unsupported parameter 8192 [ 361.103520][ T5623] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 361.255415][ T5623] usb 2-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 361.257108][ T5623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.296842][ T5759] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 361.360001][ T5623] usb 2-1: config 0 descriptor?? [ 361.373705][ T5623] cp210x 2-1:0.0: cp210x converter detected [ 361.599215][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 361.665499][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 361.665523][ T37] audit: type=1326 audit(1794029848.009:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10318 comm="syz.5.1416" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3e48fb19 code=0x7fc00000 [ 361.787239][ T5623] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 362.023794][ T5623] usb 2-1: cp210x converter now attached to ttyUSB0 [ 362.208812][ T5623] usb 2-1: USB disconnect, device number 23 [ 362.266112][T10138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.320807][T10350] netlink: 'syz.2.1422': attribute type 11 has an invalid length. [ 362.378632][ T5623] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 362.394479][ T5623] cp210x 2-1:0.0: device disconnected [ 362.474002][ T8601] lwtunnel_output(): recursion limit reached on datapath [ 362.644160][ T31] lwtunnel_output(): recursion limit reached on datapath [ 362.875082][ T31] lwtunnel_output(): recursion limit reached on datapath [ 363.667309][T10138] veth0_vlan: entered promiscuous mode [ 363.681003][ T31] lwtunnel_output(): recursion limit reached on datapath [ 363.797529][T10138] veth1_vlan: entered promiscuous mode [ 364.066057][T10138] veth0_macvtap: entered promiscuous mode [ 364.075816][T10386] netlink: 'syz.1.1434': attribute type 19 has an invalid length. [ 364.075880][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 364.120439][T10386] netlink: 'syz.1.1434': attribute type 19 has an invalid length. [ 364.120468][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 364.132481][T10138] veth1_macvtap: entered promiscuous mode [ 364.373301][T10138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.522844][T10396] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 364.528750][T10138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.722708][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 364.723241][ C1] Unknown status report in ack skb [ 364.960986][ T6721] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.961164][ T6721] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.961207][ T6721] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.518311][ T5623] lwtunnel_output(): recursion limit reached on datapath [ 365.721145][ T6707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.721170][ T6707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.757329][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 365.815302][ T6709] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.850377][T10418] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1449'. [ 365.887543][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.922228][T10423] netlink: 'syz.2.1449': attribute type 1 has an invalid length. [ 365.922244][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 365.922480][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.061270][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 366.113286][ T6709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.114012][ T6709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.369260][ T11] hid_parser_main: 3991 callbacks suppressed [ 366.369288][ T11] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 366.437139][ T11] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 366.876529][ T36] lwtunnel_output(): recursion limit reached on datapath [ 367.361869][T10457] lo: entered allmulticast mode [ 367.405626][T10457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.406355][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 367.914091][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 368.052669][T10477] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1468'. [ 368.556340][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 368.721413][ T6719] lwtunnel_output(): recursion limit reached on datapath [ 368.964428][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 369.485814][ T11] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 369.633522][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 369.634378][ T11] usb 6-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 369.639860][ T11] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 369.639889][ T11] usb 6-1: config 2 has no interface number 0 [ 369.639942][ T11] usb 6-1: config 2 interface 31 has no altsetting 0 [ 369.681120][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.681153][ T11] usb 6-1: Product: syz [ 369.681171][ T11] usb 6-1: Manufacturer: syz [ 369.681204][ T11] usb 6-1: SerialNumber: syz [ 369.803196][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 369.811866][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 369.838650][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 369.840613][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 369.861062][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 369.878920][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 369.895869][ T5737] lwtunnel_output(): recursion limit reached on datapath [ 369.915117][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 370.879117][ T11] ch9200 6-1:2.31: probe with driver ch9200 failed with error -71 [ 370.989409][ T11] usb 6-1: USB disconnect, device number 12 [ 371.131677][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'. [ 371.680544][T10541] FAULT_INJECTION: forcing a failure. [ 371.680544][T10541] name failslab, interval 1, probability 0, space 0, times 0 [ 371.680603][T10541] CPU: 1 UID: 0 PID: 10541 Comm: syz.1.1498 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 371.680639][T10541] Tainted: [L]=SOFTLOCKUP [ 371.680648][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 371.680668][T10541] Call Trace: [ 371.680678][T10541] [ 371.680689][T10541] dump_stack_lvl+0xe8/0x150 [ 371.680766][T10541] should_fail_ex+0x447/0x5e0 [ 371.680806][T10541] should_failslab+0xa8/0x100 [ 371.680840][T10541] __kmalloc_noprof+0xf6/0x790 [ 371.680867][T10541] ? __vb2_queue_alloc+0x2a0/0x1660 [ 371.680898][T10541] ? __vb2_queue_alloc+0x2a0/0x1660 [ 371.680935][T10541] __vb2_queue_alloc+0x2a0/0x1660 [ 371.680997][T10541] vb2_core_reqbufs+0xc3f/0x1470 [ 371.681047][T10541] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 371.681090][T10541] ? vb2_verify_memory_type+0x1fc/0x570 [ 371.681125][T10541] vb2_ioctl_reqbufs+0x4be/0x850 [ 371.681173][T10541] __video_do_ioctl+0x8b2/0xc70 [ 371.681219][T10541] ? __pfx___video_do_ioctl+0x10/0x10 [ 371.681270][T10541] video_usercopy+0x860/0x1430 [ 371.681312][T10541] ? __pfx___video_do_ioctl+0x10/0x10 [ 371.681349][T10541] ? __pfx_video_usercopy+0x10/0x10 [ 371.681379][T10541] ? smack_file_ioctl+0x2c4/0x370 [ 371.681430][T10541] ? __fget_files+0x2a/0x420 [ 371.681471][T10541] ? __fget_files+0x2a/0x420 [ 371.681509][T10541] v4l2_ioctl+0x190/0x1e0 [ 371.681541][T10541] ? __pfx_v4l2_ioctl+0x10/0x10 [ 371.681572][T10541] __se_sys_ioctl+0xff/0x170 [ 371.681601][T10541] do_syscall_64+0x166/0x520 [ 371.681630][T10541] ? trace_irq_disable+0x3b/0x140 [ 371.681655][T10541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.681680][T10541] ? clear_bhb_loop+0x70/0xc0 [ 371.681719][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.681753][T10541] RIP: 0033:0x7fad5579fb19 [ 371.681776][T10541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.681797][T10541] RSP: 002b:00007fad539f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.681823][T10541] RAX: ffffffffffffffda RBX: 00007fad55a25fa0 RCX: 00007fad5579fb19 [ 371.681842][T10541] RDX: 0000200000000100 RSI: 00000000c0145608 RDI: 0000000000000003 [ 371.681859][T10541] RBP: 00007fad55837b70 R08: 0000000000000000 R09: 0000000000000000 [ 371.681874][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.681890][T10541] R13: 00007fad55a26038 R14: 00007fad55a25fa0 R15: 00007ffc1f505938 [ 371.681929][T10541] [ 372.536115][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 372.559853][T10553] sctp: [Deprecated]: syz.5.1503 (pid 10553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.559853][T10553] Use struct sctp_sack_info instead [ 373.054459][ T5737] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 373.207008][ T5737] usb 6-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 373.236276][ T5737] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 373.236308][ T5737] usb 6-1: Product: syz [ 373.236325][ T5737] usb 6-1: Manufacturer: syz [ 373.236343][ T5737] usb 6-1: SerialNumber: syz [ 373.283097][ T5737] usb 6-1: config 0 descriptor?? [ 373.309122][ T5737] ch341 6-1:0.0: ch341-uart converter detected [ 373.830003][ T6719] net_ratelimit: 369 callbacks suppressed [ 373.849942][ T6719] lwtunnel_output(): recursion limit reached on datapath [ 374.155767][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 374.538720][ T5737] ch341-uart ttyUSB0: failed to read break control: -71 [ 374.538785][ T5737] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 374.565469][ T5737] usb 6-1: USB disconnect, device number 13 [ 374.597279][ T5737] ch341 6-1:0.0: device disconnected [ 375.197939][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 375.234922][ T8601] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 375.385280][ T8601] usb 3-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 375.390780][ T8601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.390816][ T8601] usb 3-1: Product: syz [ 375.390834][ T8601] usb 3-1: Manufacturer: syz [ 375.390860][ T8601] usb 3-1: SerialNumber: syz [ 375.433232][ T8601] usb 3-1: config 0 descriptor?? [ 375.880194][ T8601] usb 3-1: Firmware: major: 63, minor: 28, hardware type: UNKNOWN (21) [ 375.928001][T10628] FAULT_INJECTION: forcing a failure. [ 375.928001][T10628] name fail_futex, interval 1, probability 0, space 0, times 0 [ 375.928043][T10628] CPU: 1 UID: 0 PID: 10628 Comm: syz.9.1534 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.928079][T10628] Tainted: [L]=SOFTLOCKUP [ 375.928088][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 375.928103][T10628] Call Trace: [ 375.928113][T10628] [ 375.928124][T10628] dump_stack_lvl+0xe8/0x150 [ 375.928171][T10628] should_fail_ex+0x447/0x5e0 [ 375.928210][T10628] get_futex_key+0x1ab/0x1410 [ 375.928238][T10628] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 375.928281][T10628] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 375.928309][T10628] ? reacquire_held_locks+0x117/0x1a0 [ 375.928342][T10628] ? __pfx_get_futex_key+0x10/0x10 [ 375.928382][T10628] futex_wake+0x119/0x600 [ 375.928419][T10628] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 375.928452][T10628] ? lockdep_hardirqs_on+0x7b/0x110 [ 375.928484][T10628] ? __pfx_futex_wake+0x10/0x10 [ 375.928522][T10628] ? packet_setsockopt+0x13f4/0x1510 [ 375.928558][T10628] ? __pfx_packet_setsockopt+0x10/0x10 [ 375.928598][T10628] do_futex+0x458/0x4e0 [ 375.928636][T10628] ? __pfx_do_futex+0x10/0x10 [ 375.928679][T10628] __se_sys_futex+0x3a8/0x450 [ 375.928714][T10628] ? __fget_files+0x3a8/0x420 [ 375.928750][T10628] ? __pfx___se_sys_futex+0x10/0x10 [ 375.928793][T10628] ? __x64_sys_futex+0x21/0xf0 [ 375.928828][T10628] do_syscall_64+0x166/0x520 [ 375.928858][T10628] ? trace_irq_disable+0x3b/0x140 [ 375.928883][T10628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.928908][T10628] ? clear_bhb_loop+0x70/0xc0 [ 375.928937][T10628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.928961][T10628] RIP: 0033:0x7fbb9888fb19 [ 375.928983][T10628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.929005][T10628] RSP: 002b:00007fbb96ae60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 375.929031][T10628] RAX: ffffffffffffffda RBX: 00007fbb98b15fa8 RCX: 00007fbb9888fb19 [ 375.929053][T10628] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbb98b15fac [ 375.929070][T10628] RBP: 00007fbb98b15fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 375.929087][T10628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.929102][T10628] R13: 00007fbb98b16038 R14: 00007ffd91292a00 R15: 00007ffd91292ae8 [ 375.929140][T10628] [ 375.958259][T10631] veth1_to_bond: entered allmulticast mode [ 375.959309][T10630] veth1_to_bond: left allmulticast mode [ 376.121651][ T8601] usb 3-1: no permanent extended address found, random address set [ 376.121687][ T8601] usb 3-1: atusb_probe: initialization failed, error = -524 [ 376.121955][ T8601] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 376.234207][ T5759] lwtunnel_output(): recursion limit reached on datapath [ 376.354107][ T36] usb 3-1: USB disconnect, device number 16 [ 376.555878][T10644] FAULT_INJECTION: forcing a failure. [ 376.555878][T10644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.555921][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.1.1542 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 376.555955][T10644] Tainted: [L]=SOFTLOCKUP [ 376.555965][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 376.555979][T10644] Call Trace: [ 376.555988][T10644] [ 376.555999][T10644] dump_stack_lvl+0xe8/0x150 [ 376.556045][T10644] should_fail_ex+0x447/0x5e0 [ 376.556084][T10644] _copy_from_user+0x2d/0xb0 [ 376.556119][T10644] io_register_files_update+0xcd/0x180 [ 376.556150][T10644] ? __pfx_io_register_files_update+0x10/0x10 [ 376.556182][T10644] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.556213][T10644] ? mutex_lock_nested+0x14d/0x1d0 [ 376.556248][T10644] ? __se_sys_io_uring_register+0x230/0x1a20 [ 376.556283][T10644] __se_sys_io_uring_register+0x130a/0x1a20 [ 376.556321][T10644] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 376.556352][T10644] ? ksys_write+0x248/0x270 [ 376.556376][T10644] ? __pfx___se_sys_futex+0x10/0x10 [ 376.556408][T10644] ? __pfx_ksys_write+0x10/0x10 [ 376.556445][T10644] do_syscall_64+0x166/0x520 [ 376.556487][T10644] ? trace_irq_disable+0x3b/0x140 [ 376.556512][T10644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.556536][T10644] ? clear_bhb_loop+0x70/0xc0 [ 376.556564][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.556588][T10644] RIP: 0033:0x7fad5579fb19 [ 376.556609][T10644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.556630][T10644] RSP: 002b:00007fad539f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 376.556656][T10644] RAX: ffffffffffffffda RBX: 00007fad55a25fa0 RCX: 00007fad5579fb19 [ 376.556674][T10644] RDX: 00002000000003c0 RSI: 0000000000000006 RDI: 0000000000000003 [ 376.556689][T10644] RBP: 00007fad55837b70 R08: 0000000000000000 R09: 0000000000000000 [ 376.556703][T10644] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 376.556717][T10644] R13: 00007fad55a26038 R14: 00007fad55a25fa0 R15: 00007ffc1f505938 [ 376.556753][T10644] [ 376.794054][ T5623] lwtunnel_output(): recursion limit reached on datapath [ 376.932896][T10651] FAULT_INJECTION: forcing a failure. [ 376.932896][T10651] name failslab, interval 1, probability 0, space 0, times 0 [ 376.932940][T10651] CPU: 1 UID: 0 PID: 10651 Comm: syz.8.1545 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 376.932975][T10651] Tainted: [L]=SOFTLOCKUP [ 376.932985][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 376.932999][T10651] Call Trace: [ 376.933008][T10651] [ 376.933019][T10651] dump_stack_lvl+0xe8/0x150 [ 376.933077][T10651] should_fail_ex+0x447/0x5e0 [ 376.933119][T10651] should_failslab+0xa8/0x100 [ 376.933160][T10651] __kmalloc_noprof+0xf6/0x790 [ 376.933185][T10651] ? security_key_alloc+0x51/0x390 [ 376.933206][T10651] ? security_key_alloc+0x51/0x390 [ 376.933236][T10651] security_key_alloc+0x51/0x390 [ 376.933262][T10651] key_alloc+0x7fd/0xfe0 [ 376.933301][T10651] __key_create_or_update+0x843/0xa90 [ 376.933339][T10651] ? __pfx___key_create_or_update+0x10/0x10 [ 376.933363][T10651] ? lookup_user_key+0x112c/0x12c0 [ 376.933405][T10651] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 376.933446][T10651] key_create_or_update+0x42/0x60 [ 376.933477][T10651] __se_sys_add_key+0x349/0x420 [ 376.933514][T10651] ? __pfx___se_sys_add_key+0x10/0x10 [ 376.933556][T10651] ? __x64_sys_add_key+0x20/0xc0 [ 376.933590][T10651] do_syscall_64+0x166/0x520 [ 376.933619][T10651] ? trace_irq_disable+0x3b/0x140 [ 376.933643][T10651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.933668][T10651] ? clear_bhb_loop+0x70/0xc0 [ 376.933697][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.933721][T10651] RIP: 0033:0x7ff73fe7fb19 [ 376.933744][T10651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.933766][T10651] RSP: 002b:00007ff73e0d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 376.933793][T10651] RAX: ffffffffffffffda RBX: 00007ff740105fa0 RCX: 00007ff73fe7fb19 [ 376.933811][T10651] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 376.933827][T10651] RBP: 00007ff73ff17b70 R08: ffffffffffffffff R09: 0000000000000000 [ 376.933844][T10651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.933859][T10651] R13: 00007ff740106038 R14: 00007ff740105fa0 R15: 00007ffcc6e03b78 [ 376.933897][T10651] [ 376.954513][ T36] lwtunnel_output(): recursion limit reached on datapath [ 377.275868][ T2069] lwtunnel_output(): recursion limit reached on datapath [ 377.330164][T10654] lwtunnel_input(): recursion limit reached on datapath [ 377.340922][T10654] lwtunnel_input(): recursion limit reached on datapath [ 377.341261][T10654] lwtunnel_input(): recursion limit reached on datapath [ 377.668781][T10660] macsec0: entered promiscuous mode [ 377.762486][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 377.762514][T10665] netlink: 'syz.1.1553': attribute type 30 has an invalid length. [ 377.785066][T10660] veth1_macvtap: left promiscuous mode [ 377.814836][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 377.814874][T10666] netlink: 'syz.1.1553': attribute type 30 has an invalid length. [ 377.821861][T10660] macsec0 (unregistering): left promiscuous mode [ 377.901679][T10668] ------------[ cut here ]------------ [ 377.901691][T10668] read > cnt + 1 [ 377.901703][T10668] WARNING: kernel/trace/ring_buffer.c:866 at ring_buffer_nr_dirty_pages+0x1c6/0x1d0, CPU#1: syz.9.1552/10668 [ 377.922357][T10668] Modules linked in: [ 377.926307][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.9.1552 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 377.937783][T10668] Tainted: [L]=SOFTLOCKUP [ 377.942142][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 377.952223][T10668] RIP: 0010:ring_buffer_nr_dirty_pages+0x1c6/0x1d0 [ 377.958768][T10668] Code: 02 fe ff 4c 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 19 02 fe ff 90 0f 0b 90 45 31 ff eb df e8 0b 02 fe ff 90 <0f> 0b 90 45 31 ff eb d1 66 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 377.978417][T10668] RSP: 0018:ffffc90005caf880 EFLAGS: 00010087 [ 377.984523][T10668] RAX: ffffffff81c9d795 RBX: 0000000000000002 RCX: 0000000000080000 [ 377.992532][T10668] RDX: ffffc9001e6fa000 RSI: 00000000000000ef RDI: 00000000000000f0 [ 378.000531][T10668] RBP: 1ffff11027fc7a14 R08: 0000000000000000 R09: 0000000000000000 [ 378.008543][T10668] R10: dffffc0000000000 R11: ffffed1027fc8423 R12: 0000000000000000 [ 378.016560][T10668] R13: dffffc0000000000 R14: 0000000000000001 R15: fffffffffffffffe [ 378.024573][T10668] FS: 00007fbb96ae66c0(0000) GS:ffff888124811000(0000) knlGS:0000000000000000 [ 378.033547][T10668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.040170][T10668] CR2: 00007f5b66f85ff8 CR3: 0000000036bc0000 CR4: 00000000003526f0 [ 378.048176][T10668] Call Trace: [ 378.051581][T10668] [ 378.054560][T10668] rb_watermark_hit+0x1e3/0x2d0 [ 378.059451][T10668] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 378.065052][T10668] ring_buffer_poll_wait+0x254/0x2f0 [ 378.070376][T10668] ? __pfx_tracing_buffers_poll+0x10/0x10 [ 378.076144][T10668] __io_arm_poll_handler+0x395/0xbb0 [ 378.081484][T10668] io_poll_add+0x1a0/0x2c0 [ 378.085950][T10668] ? __pfx_io_poll_add+0x10/0x10 [ 378.090932][T10668] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 378.096531][T10668] ? __fget_files+0x2a/0x420 [ 378.101168][T10668] ? __fget_files+0x2a/0x420 [ 378.105806][T10668] ? __fget_files+0x3a8/0x420 [ 378.110524][T10668] __io_issue_sqe+0x180/0x450 [ 378.115253][T10668] io_issue_sqe+0x177/0x12a0 [ 378.119904][T10668] io_submit_sqes+0xea7/0x2500 [ 378.124746][T10668] __se_sys_io_uring_enter+0x364/0x1bb0 [ 378.130363][T10668] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 378.136409][T10668] ? rcu_is_watching+0x16/0xb0 [ 378.141289][T10668] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 378.146895][T10668] do_syscall_64+0x166/0x520 [ 378.151530][T10668] ? trace_irq_disable+0x3b/0x140 [ 378.156594][T10668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.162702][T10668] ? clear_bhb_loop+0x70/0xc0 [ 378.167450][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.173485][T10668] RIP: 0033:0x7fbb9888fb19 [ 378.177967][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.197881][T10668] RSP: 002b:00007fbb96ae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 378.206363][T10668] RAX: ffffffffffffffda RBX: 00007fbb98b15fa0 RCX: 00007fbb9888fb19 [ 378.214384][T10668] RDX: 00000000fffffffd RSI: 0000000000000b38 RDI: 0000000000000004 [ 378.222391][T10668] RBP: 00007fbb98927b70 R08: 0000000000000000 R09: 0000000000000000 [ 378.230398][T10668] R10: 000000000000004b R11: 0000000000000246 R12: 0000000000000000 [ 378.238411][T10668] R13: 00007fbb98b16038 R14: 00007fbb98b15fa0 R15: 00007ffd91292ae8 [ 378.246440][T10668] [ 378.249508][T10668] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 378.256831][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.9.1552 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 378.268343][T10668] Tainted: [L]=SOFTLOCKUP [ 378.272778][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 378.282878][T10668] Call Trace: [ 378.286210][T10668] [ 378.289183][T10668] vpanic+0x26f/0x710 [ 378.293226][T10668] panic+0xc5/0xd0 [ 378.296986][T10668] ? __pfx_panic+0x10/0x10 [ 378.301565][T10668] __warn+0x315/0x4c0 [ 378.305587][T10668] ? ring_buffer_nr_dirty_pages+0x1c6/0x1d0 [ 378.311546][T10668] ? ring_buffer_nr_dirty_pages+0x1c6/0x1d0 [ 378.317480][T10668] __report_bug+0x276/0x570 [ 378.322050][T10668] ? __lock_acquire+0x747/0x2de0 [ 378.327046][T10668] ? ring_buffer_nr_dirty_pages+0x1c6/0x1d0 [ 378.332995][T10668] ? __pfx___report_bug+0x10/0x10 [ 378.338070][T10668] ? __lock_acquire+0x747/0x2de0 [ 378.343077][T10668] ? ring_buffer_nr_dirty_pages+0x1c6/0x1d0 [ 378.349015][T10668] report_bug+0x16b/0x220 [ 378.353407][T10668] ? ring_buffer_nr_dirty_pages+0x1c6/0x1d0 [ 378.359347][T10668] ? ring_buffer_nr_dirty_pages+0x1c8/0x1d0 [ 378.365302][T10668] handle_bug+0x9c/0x200 [ 378.369598][T10668] exc_invalid_op+0x1a/0x50 [ 378.374244][T10668] asm_exc_invalid_op+0x1a/0x20 [ 378.379134][T10668] RIP: 0010:ring_buffer_nr_dirty_pages+0x1c6/0x1d0 [ 378.385678][T10668] Code: 02 fe ff 4c 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 19 02 fe ff 90 0f 0b 90 45 31 ff eb df e8 0b 02 fe ff 90 <0f> 0b 90 45 31 ff eb d1 66 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 378.405324][T10668] RSP: 0018:ffffc90005caf880 EFLAGS: 00010087 [ 378.411425][T10668] RAX: ffffffff81c9d795 RBX: 0000000000000002 RCX: 0000000000080000 [ 378.419465][T10668] RDX: ffffc9001e6fa000 RSI: 00000000000000ef RDI: 00000000000000f0 [ 378.427558][T10668] RBP: 1ffff11027fc7a14 R08: 0000000000000000 R09: 0000000000000000 [ 378.435757][T10668] R10: dffffc0000000000 R11: ffffed1027fc8423 R12: 0000000000000000 [ 378.443790][T10668] R13: dffffc0000000000 R14: 0000000000000001 R15: fffffffffffffffe [ 378.451811][T10668] ? ring_buffer_nr_dirty_pages+0x1c5/0x1d0 [ 378.457844][T10668] rb_watermark_hit+0x1e3/0x2d0 [ 378.462738][T10668] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 378.468326][T10668] ring_buffer_poll_wait+0x254/0x2f0 [ 378.473652][T10668] ? __pfx_tracing_buffers_poll+0x10/0x10 [ 378.479424][T10668] __io_arm_poll_handler+0x395/0xbb0 [ 378.484770][T10668] io_poll_add+0x1a0/0x2c0 [ 378.489232][T10668] ? __pfx_io_poll_add+0x10/0x10 [ 378.494358][T10668] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 378.499949][T10668] ? __fget_files+0x2a/0x420 [ 378.504590][T10668] ? __fget_files+0x2a/0x420 [ 378.509224][T10668] ? __fget_files+0x3a8/0x420 [ 378.513943][T10668] __io_issue_sqe+0x180/0x450 [ 378.518689][T10668] io_issue_sqe+0x177/0x12a0 [ 378.523338][T10668] io_submit_sqes+0xea7/0x2500 [ 378.528208][T10668] __se_sys_io_uring_enter+0x364/0x1bb0 [ 378.533821][T10668] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 378.539942][T10668] ? rcu_is_watching+0x16/0xb0 [ 378.544744][T10668] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 378.550331][T10668] do_syscall_64+0x166/0x520 [ 378.554988][T10668] ? trace_irq_disable+0x3b/0x140 [ 378.560227][T10668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.566350][T10668] ? clear_bhb_loop+0x70/0xc0 [ 378.571060][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.576980][T10668] RIP: 0033:0x7fbb9888fb19 [ 378.581422][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.601145][T10668] RSP: 002b:00007fbb96ae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 378.609888][T10668] RAX: ffffffffffffffda RBX: 00007fbb98b15fa0 RCX: 00007fbb9888fb19 [ 378.617896][T10668] RDX: 00000000fffffffd RSI: 0000000000000b38 RDI: 0000000000000004 [ 378.625913][T10668] RBP: 00007fbb98927b70 R08: 0000000000000000 R09: 0000000000000000 [ 378.633915][T10668] R10: 000000000000004b R11: 0000000000000246 R12: 0000000000000000 [ 378.641918][T10668] R13: 00007fbb98b16038 R14: 00007fbb98b15fa0 R15: 00007ffd91292ae8 [ 378.649944][T10668] [ 378.656754][T10668] Kernel Offset: disabled [ 378.661118][T10668] Rebooting in 86400 seconds..