last executing test programs: 9m42.888891483s ago: executing program 1 (id=2): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc000, 0x7f) faccessat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000a00)={0x48, 0x1, r4, 0x0, 0x8, 0x20000008}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000b00)={0x28, 0x6, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x40}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x6004, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x125d, 0x0) syz_io_uring_setup(0x6de4, &(0x7f0000000380)={0x0, 0xfcd2, 0x40, 0x2, 0x292, 0x0, r5}, &(0x7f0000000400), &(0x7f0000000440), 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4ca3, 0x4, @loopback, 0x3}, 0x1c) 9m27.024109871s ago: executing program 32 (id=2): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc000, 0x7f) faccessat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000a00)={0x48, 0x1, r4, 0x0, 0x8, 0x20000008}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000b00)={0x28, 0x6, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x40}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x6004, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x125d, 0x0) syz_io_uring_setup(0x6de4, &(0x7f0000000380)={0x0, 0xfcd2, 0x40, 0x2, 0x292, 0x0, r5}, &(0x7f0000000400), &(0x7f0000000440), 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4ca3, 0x4, @loopback, 0x3}, 0x1c) 8m48.913406003s ago: executing program 3 (id=63): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0000, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000140)={0x1}) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r5, 0x25, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x80000000}) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002100)=0x40) writev(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x2000, 0x24000, 0x10000e}}) socket$nl_route(0x10, 0x3, 0x0) 8m47.04701863s ago: executing program 3 (id=67): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)="000000000000000463656c6c00000001000000440000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010203040000000405060708", 0xa8, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x3, 0x0, @pic={0x8, 0x7, 0x8, 0x2, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000240)={0x7, 0xfffff60b, 0xfffffff9, 0x9, 0x2}) r6 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0x40405515, &(0x7f0000000ac0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) 8m44.564704806s ago: executing program 3 (id=71): socket$rds(0x15, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) eventfd2(0x1, 0x80001) eventfd(0xe467) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, 0x0, &(0x7f0000000480)=0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r5, 0x2000) syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) 8m39.933492287s ago: executing program 3 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x40080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x3}) syz_clone3(&(0x7f0000000080)={0x190821400, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) bind$inet(r4, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r4, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r6, &(0x7f0000000400)='PASV\r\n', 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x2, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000700)={0x2, 0x1388, @loopback}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) readv(r9, &(0x7f0000002ac0)=[{&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f0000000740)=""/204, 0xcc}, {0x0}, {&(0x7f0000001a40)=""/92, 0x5c}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 8m38.3315235s ago: executing program 3 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r5, &(0x7f0000003440)=[{0x0}, {&(0x7f0000000280)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000000000007118140000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x9e) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000140)='unbind\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='00:03', 0x5) 8m35.539743564s ago: executing program 3 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r5, 0x0, &(0x7f00000006c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x871, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8880}, 0x40) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r6, &(0x7f0000000600)={&(0x7f0000000240)={0x1d, r7, 0x3, {0x0, 0x1}, 0x2}, 0x18, &(0x7f00000005c0)={&(0x7f0000000580)}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000740)) 8m20.381510928s ago: executing program 33 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0x1, &(0x7f0000000680)=0x0) io_submit(r5, 0x0, &(0x7f00000006c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x871, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8880}, 0x40) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r6, &(0x7f0000000600)={&(0x7f0000000240)={0x1d, r7, 0x3, {0x0, 0x1}, 0x2}, 0x18, &(0x7f00000005c0)={&(0x7f0000000580)}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000740)) 29.116727825s ago: executing program 0 (id=1351): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x2c, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x1c, 0xa9, 0x0, 0x1, [@nested={0x18, 0x41, 0x0, 0x1, [@typed={0xc, 0x52, 0x0, 0x0, @u64=0x6}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0xb}]}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x24008015}, 0x80) 28.806481197s ago: executing program 0 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 27.95315748s ago: executing program 6 (id=1356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22826, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xda, 0x0, 0x1}) 27.757186499s ago: executing program 0 (id=1357): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) 27.538517958s ago: executing program 2 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000bc0)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000c80)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRES32, @ANYBLOB="0100"/20, @ANYRES32], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e00)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000ec0)=0x2) recvmmsg(r1, &(0x7f0000000f00), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xa, &(0x7f0000001040)=ANY=[], &(0x7f0000001080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000010c0)='./file2\x00', 0x81c0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000001100)={0x0, 0x2, 0xe98, 0x0, 0x100}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001180)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000040)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x13, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x0, 0xfffffffe, 0x1, 0xff, 0x47, 0x8, 0x84, 0x8, 0x1010103, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffffd, 0x38, 0xc, 0x10000006, 0x10001, 0xfffffff8]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001280)='status\x00') prctl$PR_MCE_KILL_GET(0x22) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000003300)=0x4) symlinkat(&(0x7f0000003340)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000003380)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 26.154897421s ago: executing program 0 (id=1359): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r0, r0, 0x0, 0x200000) 25.917707482s ago: executing program 2 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x25, 0x0, 0x8, 0xffffff7e}]}) 25.765446748s ago: executing program 6 (id=1363): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x3}) fsopen(&(0x7f00000002c0)='9p\x00', 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x2, 0x2, {0xa, 0x4e21, 0xfffff874, @loopback, 0x1}}}, 0x3a) sendmsg$key(r0, &(0x7f0000000380)={0x500, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x0) 25.718855838s ago: executing program 2 (id=1364): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ee, &(0x7f0000000300)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 24.138739887s ago: executing program 5 (id=1366): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001d80)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001dc0)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001e40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001ec0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001f40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001f80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001fc0)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x3a) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000100)='.\x00', 0xc100092e) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r4, 0x0) mount(0x0, 0x0, &(0x7f00000020c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000640)=r6, 0x4) 23.204000564s ago: executing program 4 (id=1367): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x68093, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000c) 23.203740734s ago: executing program 4 (id=1368): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 23.171029541s ago: executing program 2 (id=1369): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000003c0)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.081274307s ago: executing program 4 (id=1370): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) 21.819170179s ago: executing program 5 (id=1371): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x10, 0x3, 0x2, 0x0, 0x0, 0x33}, {0xfd, 0x200000004, 0x40000000007, 0xfffffffc, 0x100000000, 0xfffffffffffffffe, 0x200000003, 0x1}, {0x5, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x34fe, 0x4, 0x8, 0x0, 0x80, 0xef, 0x10000}}, 0xe8) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) 21.459505881s ago: executing program 2 (id=1372): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setuid(0xee00) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140c, 0xc23, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x20}}, 0x24004090) 21.375706302s ago: executing program 0 (id=1373): clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000100)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xac, 0x6, 0x7, 0x4, 0xfffffffffffff04e, 0x7, 0x7ffffffe, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x1, 0x2, 0x4c0, 0x3, 0x1, 0x9d}) clock_adjtime(0x0, &(0x7f0000000280)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x6, 0x5, 0x9, 0xc, 0x9, 0x1, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) 21.285688089s ago: executing program 5 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25dfdbff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x3, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}}, 0x4080) 20.89760831s ago: executing program 2 (id=1375): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x1014}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 20.8904019s ago: executing program 4 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f0000000280)="d2ff03066003008cb89e08d986dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.406272524s ago: executing program 4 (id=1377): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000440)={{0xf, 0x1}, 0x1, 0x3, 0x4, {0x0, 0xb}, 0x18, 0x8000040b}) 20.291303084s ago: executing program 4 (id=1378): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x3, &(0x7f0000000680)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x9}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000020000000000088"], 0x0) 20.141559107s ago: executing program 0 (id=1379): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x7, 0x450c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ee, &(0x7f0000000300)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 20.140472131s ago: executing program 5 (id=1380): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) 18.921031865s ago: executing program 5 (id=1381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r1, 0x5f, 0x0}, 0x10) 18.797447647s ago: executing program 5 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x7, 0x450c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setns(0xc9, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89ee, &(0x7f0000000300)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.343469316s ago: executing program 6 (id=1383): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1, 0x500}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha224\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/79], 0x0, 0x0) 17.23373644s ago: executing program 6 (id=1384): setuid(0xee01) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) 17.052350015s ago: executing program 6 (id=1385): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9c10, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x1e8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x10, 0x0, 0xb0, 'crypt\x00', {'aes-cbc-elephant:sha256', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '4096', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '1'}, ' 1 sector_size:1024'}}]}) 16.813912222s ago: executing program 6 (id=1386): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d7930"], 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x75, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x3f, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf51, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@fragment={0x3a, 0x0, 0x81, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357"}}}}}}}, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x20000) 4.150382847s ago: executing program 34 (id=1375): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x1014}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 3.526149055s ago: executing program 35 (id=1379): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x7, 0x450c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ee, &(0x7f0000000300)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 3.389488509s ago: executing program 36 (id=1378): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x3, &(0x7f0000000680)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x9}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000020000000000088"], 0x0) 2.061865792s ago: executing program 37 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x7, 0x450c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setns(0xc9, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89ee, &(0x7f0000000300)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 38 (id=1386): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70000001000033000000180001801400020064756d6d7930"], 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x75, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x3f, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf51, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@fragment={0x3a, 0x0, 0x81, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357"}}}}}}}, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x20000) kernel console output (not intermixed with test programs): d=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 390.418310][ T36] audit: type=1326 audit(1792934103.211:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 390.418432][ T36] audit: type=1326 audit(1792934103.211:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 390.418658][ T36] audit: type=1326 audit(1792934103.211:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 390.419902][ T36] audit: type=1326 audit(1792934103.211:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 390.420042][ T36] audit: type=1326 audit(1792934103.211:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 390.421013][ T36] audit: type=1326 audit(1792934103.211:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 390.421151][ T36] audit: type=1326 audit(1792934103.211:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 390.424657][ T36] audit: type=1326 audit(1792934103.211:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7847 comm="syz.0.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 390.806477][ T258] hsr_slave_0: left promiscuous mode [ 391.765944][ T258] hsr_slave_1: left promiscuous mode [ 391.768310][ T258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.842124][ T258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.955096][ T258] hsr_slave_0: left promiscuous mode [ 391.978303][ T258] hsr_slave_1: left promiscuous mode [ 391.981936][ T258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.031497][ T258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.193992][ T258] team0 (unregistering): Port device team_slave_1 removed [ 392.219691][ T258] team0 (unregistering): Port device team_slave_0 removed [ 392.389033][ T258] team0 (unregistering): Port device team_slave_1 removed [ 392.439348][ T258] team0 (unregistering): Port device team_slave_0 removed [ 392.654414][ T7861] netlink: 'syz.4.337': attribute type 2 has an invalid length. [ 392.732029][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 392.833464][ T258] team0 (unregistering): Port device team_slave_1 removed [ 392.887835][ T258] team0 (unregistering): Port device team_slave_0 removed [ 393.259629][ T7867] __vm_enough_memory: pid: 7867, comm: syz.0.338, bytes: 4503599627366400 not enough memory for the allocation [ 394.144946][ T258] team0 (unregistering): Port device team_slave_1 removed [ 394.236420][ T258] team0 (unregistering): Port device team_slave_0 removed [ 394.400598][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 395.670284][ T7633] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.670501][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.670665][ T7633] bridge_slave_0: entered allmulticast mode [ 396.708947][ T7633] bridge_slave_0: entered promiscuous mode [ 396.774778][ T7633] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.776921][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.777106][ T7633] bridge_slave_1: entered allmulticast mode [ 396.785669][ T7633] bridge_slave_1: entered promiscuous mode [ 397.724393][ T7633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.745308][ T7633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.086417][ T7633] team0: Port device team_slave_0 added [ 399.219078][ T7633] team0: Port device team_slave_1 added [ 399.271028][ T7633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.271045][ T7633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.271070][ T7633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.275196][ T7633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.275210][ T7633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.275235][ T7633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.901896][ T7907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.349'. [ 400.902196][ T7907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.349'. [ 400.940973][ T7633] hsr_slave_0: entered promiscuous mode [ 400.941717][ T7633] hsr_slave_1: entered promiscuous mode [ 401.323476][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.323699][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.323872][ T7607] bridge_slave_0: entered allmulticast mode [ 401.331315][ T7607] bridge_slave_0: entered promiscuous mode [ 401.347781][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.347951][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.348102][ T7607] bridge_slave_1: entered allmulticast mode [ 401.350603][ T7607] bridge_slave_1: entered promiscuous mode [ 403.024108][ T7607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.240067][ T36] kauditd_printk_skb: 137 callbacks suppressed [ 404.240085][ T36] audit: type=1326 audit(1792934115.945:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae5acf559 code=0x7ffc0000 [ 404.240124][ T36] audit: type=1326 audit(1792934115.945:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae5acf559 code=0x7ffc0000 [ 404.240161][ T36] audit: type=1326 audit(1792934115.945:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae5a8fd8e code=0x7ffc0000 [ 404.240197][ T36] audit: type=1326 audit(1792934115.954:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae5a8fd8e code=0x7ffc0000 [ 404.240234][ T36] audit: type=1326 audit(1792934115.954:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae5a8fd8e code=0x7ffc0000 [ 404.240268][ T36] audit: type=1326 audit(1792934115.954:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae5a8fd8e code=0x7ffc0000 [ 404.240303][ T36] audit: type=1326 audit(1792934115.954:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae5a8fd8e code=0x7ffc0000 [ 404.240640][ T36] audit: type=1326 audit(1792934115.954:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae5a8fd8e code=0x7ffc0000 [ 404.241895][ T36] audit: type=1326 audit(1792934115.954:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae5a8fd8e code=0x7ffc0000 [ 404.243153][ T36] audit: type=1326 audit(1792934115.954:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7937 comm="syz.4.354" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae5a8fd8e code=0x7ffc0000 [ 404.271006][ T7607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.507632][ T7607] team0: Port device team_slave_0 added [ 404.540503][ T7607] team0: Port device team_slave_1 added [ 404.790101][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.790119][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.790143][ T7607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.795572][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.795587][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.795611][ T7607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.513011][ T7607] hsr_slave_0: entered promiscuous mode [ 408.516028][ T7607] hsr_slave_1: entered promiscuous mode [ 408.518619][ T7607] debugfs: 'hsr0' already exists in 'hsr' [ 408.518643][ T7607] Cannot create hsr debugfs directory [ 410.933300][ T5872] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 411.087231][ T7633] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.139193][ T5872] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.140821][ T5872] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 411.140939][ T5872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 411.140994][ T5872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 411.141021][ T5872] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.141116][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.805233][ T7979] netlink: 232 bytes leftover after parsing attributes in process `syz.4.361'. [ 413.510499][ T7633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.555877][ T7633] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 413.887110][ T5872] usb 1-1: usb_control_msg returned -71 [ 413.887157][ T5872] usbtmc 1-1:16.0: can't read capabilities [ 414.080904][ T5872] usb 1-1: USB disconnect, device number 5 [ 414.317444][ T7633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.351726][ T7985] overlay: Unknown parameter 'fowner>00000000000000000000' [ 414.372497][ T7633] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 414.515933][ T7633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.284636][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 416.284657][ T36] audit: type=1326 audit(1792934126.288:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7990 comm="syz.0.365" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54520ef559 code=0x0 [ 416.285076][ T61] Bluetooth: hci0: unexpected event 0x30 length: 6 > 3 [ 416.374166][ T7633] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 416.382803][ T7997] syz.2.366: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.384597][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: syz.2.366 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 416.384620][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 416.384636][ T7997] Call Trace: [ 416.384643][ T7997] [ 416.384652][ T7997] dump_stack_lvl+0xe8/0x150 [ 416.384690][ T7997] warn_alloc+0x24d/0x270 [ 416.384718][ T7997] ? stack_depot_save_flags+0x33/0x7f0 [ 416.384820][ T7997] ? __pfx_warn_alloc+0x10/0x10 [ 416.384847][ T7997] ? kasan_save_track+0x4f/0x80 [ 416.384875][ T7997] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 416.384901][ T7997] ? xskq_create+0x56/0x220 [ 416.384931][ T7997] ? __x64_sys_setsockopt+0x143/0x1b0 [ 416.385043][ T7997] ? do_syscall_64+0x166/0x520 [ 416.385063][ T7997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.385094][ T7997] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 416.385156][ T7997] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 416.385182][ T7997] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 416.385210][ T7997] ? xskq_create+0x56/0x220 [ 416.385232][ T7997] xskq_create+0x148/0x220 [ 416.385250][ T7997] ? xsk_init_queue+0x8a/0xe0 [ 416.385282][ T7997] xsk_init_queue+0x8a/0xe0 [ 416.385320][ T7997] xsk_setsockopt+0x52a/0x960 [ 416.385347][ T7997] ? lock_acquire+0x115/0x350 [ 416.385377][ T7997] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.385412][ T7997] ? __fget_files+0x2a/0x420 [ 416.385438][ T7997] ? __fget_files+0x3a8/0x420 [ 416.385459][ T7997] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 416.385488][ T7997] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.385518][ T7997] do_sock_setsockopt+0x17c/0x1b0 [ 416.385552][ T7997] __x64_sys_setsockopt+0x143/0x1b0 [ 416.385590][ T7997] do_syscall_64+0x166/0x520 [ 416.385609][ T7997] ? trace_irq_disable+0x3b/0x140 [ 416.385627][ T7997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.385646][ T7997] ? clear_bhb_loop+0x70/0xc0 [ 416.385670][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.385694][ T7997] RIP: 0033:0x7f94866ff559 [ 416.385713][ T7997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.385729][ T7997] RSP: 002b:00007f948494e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.385749][ T7997] RAX: ffffffffffffffda RBX: 00007f9486985fa0 RCX: 00007f94866ff559 [ 416.385763][ T7997] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 416.385775][ T7997] RBP: 00007f9486796b20 R08: 0000000000000029 R09: 0000000000000000 [ 416.385788][ T7997] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.385799][ T7997] R13: 00007f9486986038 R14: 00007f9486985fa0 R15: 00007ffd2ac8a6e8 [ 416.385831][ T7997] [ 416.385852][ T7997] Mem-Info: [ 416.385865][ T7997] active_anon:3029 inactive_anon:30301 isolated_anon:0 [ 416.385865][ T7997] active_file:21533 inactive_file:35720 isolated_file:0 [ 416.385865][ T7997] unevictable:0 dirty:187 writeback:0 [ 416.385865][ T7997] slab_reclaimable:12784 slab_unreclaimable:108890 [ 416.385865][ T7997] mapped:32681 shmem:27112 pagetables:1483 [ 416.385865][ T7997] sec_pagetables:0 bounce:0 [ 416.385865][ T7997] kernel_misc_reclaimable:0 [ 416.385865][ T7997] free:1273799 free_pcp:1727 free_cma:0 [ 416.385924][ T7997] Node 0 active_anon:12116kB inactive_anon:121204kB active_file:85932kB inactive_file:142880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130724kB dirty:748kB writeback:0kB shmem:108448kB kernel_stack:13960kB pagetables:5780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 416.387803][ T7997] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 416.387852][ T7997] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.387918][ T7997] lowmem_reserve[]: 0 2479 2480 2480 2480 [ 416.387954][ T7997] Node 0 DMA32 free:1147792kB boost:0kB min:3896kB low:6404kB high:8912kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12116kB inactive_anon:121204kB active_file:85932kB inactive_file:142880kB unevictable:0kB writepending:748kB zspages:2476kB present:3129332kB managed:2538520kB mlocked:0kB bounce:0kB free_pcp:6888kB local_pcp:5204kB free_cma:0kB [ 416.388014][ T7997] lowmem_reserve[]: 0 0 1 1 1 [ 416.388048][ T7997] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1488kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 416.388102][ T7997] lowmem_reserve[]: 0 0 0 0 0 [ 416.388134][ T7997] Node 1 Normal free:3932044kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.388191][ T7997] lowmem_reserve[]: 0 0 0 0 0 [ 416.388223][ T7997] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 416.388346][ T7997] Node 0 DMA32: 590*4kB (UE) 363*8kB (UME) 174*16kB (UME) 213*32kB (UME) 42*64kB (UE) 14*128kB (UM) 8*256kB (UE) 50*512kB (UME) 29*1024kB (UM) 9*2048kB (M) 257*4096kB (UM) = 1147792kB [ 416.388503][ T7997] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 416.388600][ T7997] Node 1 Normal: 1*4kB (M) 9*8kB (UM) 12*16kB (UM) 8*32kB (UM) 8*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3932044kB [ 416.388746][ T7997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.388762][ T7997] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.388778][ T7997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.388793][ T7997] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.388808][ T7997] 84361 total pagecache pages [ 416.388820][ T7997] 0 pages in swap cache [ 416.388827][ T7997] Free swap = 61248kB [ 416.388834][ T7997] Total swap = 124996kB [ 416.388841][ T7997] 2097051 pages RAM [ 416.388848][ T7997] 0 pages HighMem/MovableOnly [ 416.388855][ T7997] 430433 pages reserved [ 416.388861][ T7997] 0 pages cma reserved [ 417.859088][ T7633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.702352][ T61] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 421.012601][ T7607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 421.064698][ T7607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.075971][ T7607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 421.128049][ T7607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.137402][ T7607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 421.194394][ T7607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.203602][ T7607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 421.253728][ T7607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.304641][ T7633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.392979][ T7633] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.424839][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.425071][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.516345][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.516452][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.041040][ T258] bridge_slave_1: left allmulticast mode [ 422.041076][ T258] bridge_slave_1: left promiscuous mode [ 422.041494][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.334211][ T258] bridge_slave_0: left allmulticast mode [ 422.334236][ T258] bridge_slave_0: left promiscuous mode [ 422.334417][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.627826][ T258] bridge_slave_1: left allmulticast mode [ 422.627862][ T258] bridge_slave_1: left promiscuous mode [ 422.628663][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.737215][ T258] bridge_slave_0: left allmulticast mode [ 422.737250][ T258] bridge_slave_0: left promiscuous mode [ 422.737476][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.101621][ T61] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 425.585939][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 425.624225][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 425.641139][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 425.647655][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 425.648372][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 426.213701][ T5330] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 426.213915][ T258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.311478][ T258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.379010][ T258] bond0 (unregistering): Released all slaves [ 426.474126][ T5330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 426.474890][ T5330] usb 1-1: not running at top speed; connect to a high speed hub [ 426.474925][ T5330] usb 1-1: New USB device found: idVendor=0545, idProduct=800c, bcdDevice=3.0a [ 426.479624][ T5330] usb 1-1: config 232 has an invalid interface number: 238 but max is 0 [ 426.479650][ T5330] usb 1-1: config 232 has no interface number 0 [ 426.479681][ T5330] usb 1-1: config 232 interface 238 has no altsetting 0 [ 426.500940][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.500963][ T5330] usb 1-1: Product: syz [ 426.500977][ T5330] usb 1-1: Manufacturer: syz [ 426.500991][ T5330] usb 1-1: SerialNumber: syz [ 427.720559][ T5330] usb 1-1: USB disconnect, device number 6 [ 427.871556][ T61] Bluetooth: hci4: command tx timeout [ 428.392433][ T258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.864351][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.888051][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.889263][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.901915][ T258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.915905][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.849566][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.033723][ T258] bond0 (unregistering): Released all slaves [ 430.140018][ T5615] Bluetooth: hci4: command tx timeout [ 430.629962][ T36] audit: type=1326 audit(1792934140.304:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 430.630133][ T36] audit: type=1326 audit(1792934140.304:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 430.630171][ T36] audit: type=1326 audit(1792934140.304:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f54520afd8e code=0x7ffc0000 [ 430.630206][ T36] audit: type=1326 audit(1792934140.304:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 430.630240][ T36] audit: type=1326 audit(1792934140.304:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 430.630279][ T36] audit: type=1326 audit(1792934140.304:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 430.630314][ T36] audit: type=1326 audit(1792934140.304:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 430.630349][ T36] audit: type=1326 audit(1792934140.304:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 430.632296][ T36] audit: type=1326 audit(1792934140.304:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 430.632510][ T36] audit: type=1326 audit(1792934140.304:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8098 comm="syz.0.384" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 432.285026][ T8115] netlink: 72 bytes leftover after parsing attributes in process `syz.2.387'. [ 432.325951][ T61] Bluetooth: hci5: command tx timeout [ 432.431108][ T61] Bluetooth: hci4: command tx timeout [ 435.334315][ T61] Bluetooth: hci5: command tx timeout [ 435.334351][ T61] Bluetooth: hci4: command tx timeout [ 435.750482][ T5330] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 435.854868][ T8139] XFS (loop0): Invalid device [./loop0], error=-16 [ 436.032255][ T5330] usb 1-1: Using ep0 maxpacket: 8 [ 436.065288][ T5330] usb 1-1: New USB device found: idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 436.068822][ T5330] usb 1-1: config 10 has an invalid interface number: 91 but max is 0 [ 436.068846][ T5330] usb 1-1: config 10 has no interface number 0 [ 436.068897][ T5330] usb 1-1: config 10 interface 91 has no altsetting 0 [ 436.072427][ T5330] usb 1-1: string descriptor 0 read error: -22 [ 436.072566][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.153132][ T5330] uvcvideo 1-1:10.91: probe with driver uvcvideo failed with error -22 [ 436.262185][ T8066] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.436074][ T5732] usb 1-1: USB disconnect, device number 7 [ 436.630781][ T258] hsr_slave_0: left promiscuous mode [ 436.672367][ T258] hsr_slave_1: left promiscuous mode [ 436.674506][ T258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.720002][ T258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.910124][ T258] hsr_slave_0: left promiscuous mode [ 436.956292][ T258] hsr_slave_1: left promiscuous mode [ 436.957162][ T258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.998210][ T258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.479036][ T258] team0 (unregistering): Port device team_slave_1 removed [ 437.527417][ T258] team0 (unregistering): Port device team_slave_0 removed [ 437.582570][ T61] Bluetooth: hci5: command tx timeout [ 438.005603][ T258] team0 (unregistering): Port device team_slave_1 removed [ 438.106448][ T258] team0 (unregistering): Port device team_slave_0 removed [ 438.321841][ T8156] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 438.418718][ T8088] rxe_eth0 speed is unknown, defaulting to 1000 [ 439.673255][ T8170] fuse: fd is not a fuse device [ 439.724511][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 439.838141][ T61] Bluetooth: hci5: command tx timeout [ 441.157713][ T61] Bluetooth: hci2: unexpected event 0x04 length: 3 < 10 [ 441.807494][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.807642][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.807741][ T8066] bridge_slave_0: entered allmulticast mode [ 441.809451][ T8066] bridge_slave_0: entered promiscuous mode [ 442.561047][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.566508][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.576778][ T8066] bridge_slave_1: entered allmulticast mode [ 442.860149][ T61] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 442.892947][ T8066] bridge_slave_1: entered promiscuous mode [ 443.111405][ T8066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.131608][ T8066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.238590][ T8066] team0: Port device team_slave_0 added [ 443.247951][ T8066] team0: Port device team_slave_1 added [ 443.319739][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.319756][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.319781][ T8066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.387453][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.387469][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.387494][ T8066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.607306][ T8066] hsr_slave_0: entered promiscuous mode [ 443.624717][ T8066] hsr_slave_1: entered promiscuous mode [ 443.625643][ T8066] debugfs: 'hsr0' already exists in 'hsr' [ 443.625666][ T8066] Cannot create hsr debugfs directory [ 444.152221][ T61] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 445.384193][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 445.385337][ T8216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.413'. [ 446.481205][ T61] Bluetooth: hci3: unexpected event 0x04 length: 3 < 10 [ 447.337190][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.337232][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.384016][ T61] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 447.396528][ T61] Bluetooth: hci3: Injecting HCI hardware error event [ 447.397191][ T61] Bluetooth: hci3: hardware error 0x00 [ 448.598769][ T8231] Device name not specified. [ 448.598769][ T8231] [ 449.709533][ T5330] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 449.731247][ T61] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 449.872125][ T5330] usb 1-1: Using ep0 maxpacket: 8 [ 449.897759][ T5330] usb 1-1: unable to get BOS descriptor or descriptor too short [ 449.897794][ T5330] usb 1-1: New USB device found: idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 449.898864][ T5330] usb 1-1: config 10 has an invalid interface number: 91 but max is 0 [ 449.898878][ T5330] usb 1-1: config 10 has no interface number 0 [ 449.898895][ T5330] usb 1-1: config 10 interface 91 has no altsetting 0 [ 449.901049][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.901062][ T5330] usb 1-1: Product: syz [ 449.901069][ T5330] usb 1-1: Manufacturer: syz [ 449.901077][ T5330] usb 1-1: SerialNumber: syz [ 450.230236][ T5330] uvcvideo 1-1:10.91: probe with driver uvcvideo failed with error -22 [ 450.245369][ T5330] usb 1-1: USB disconnect, device number 8 [ 450.390037][ T8256] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 450.391265][ T8256] Error validating options; rc = [-22] [ 451.899770][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.900041][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.900200][ T8088] bridge_slave_0: entered allmulticast mode [ 451.903557][ T8088] bridge_slave_0: entered promiscuous mode [ 451.907716][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.908004][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.908169][ T8088] bridge_slave_1: entered allmulticast mode [ 451.912837][ T8088] bridge_slave_1: entered promiscuous mode [ 451.952472][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.958879][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.000602][ T8088] team0: Port device team_slave_0 added [ 452.015438][ T8088] team0: Port device team_slave_1 added [ 452.091116][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.091128][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.091142][ T8088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.098089][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.098099][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.098113][ T8088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.181315][ T8088] hsr_slave_0: entered promiscuous mode [ 452.182595][ T8088] hsr_slave_1: entered promiscuous mode [ 452.183461][ T8088] debugfs: 'hsr0' already exists in 'hsr' [ 452.183483][ T8088] Cannot create hsr debugfs directory [ 452.446398][ T61] Bluetooth: min 0 < 6 [ 452.502794][ T61] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 453.215186][ T61] Bluetooth: hci0: unexpected cc 0x2029 length: 100 > 1 [ 453.898928][ T61] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 454.431494][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 454.853020][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 455.871508][ T5745] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 456.120352][ T5745] usb 1-1: New USB device found: idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 456.138598][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.138636][ T5745] usb 1-1: Product: syz [ 456.138650][ T5745] usb 1-1: Manufacturer: syz [ 456.138663][ T5745] usb 1-1: SerialNumber: syz [ 456.199686][ T5745] usb 1-1: config 0 descriptor?? [ 456.243756][ T5745] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 009 [ 456.276217][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 456.443994][ T5745] (null): error -EIO: failure setting delay to 10us [ 456.444057][ T5745] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 456.452502][ T5745] usb 1-1: USB disconnect, device number 9 [ 456.500618][ T8350] 9p: Bad value for 'rfdno' [ 457.340588][ T5745] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 457.501792][ T5745] usb 1-1: Using ep0 maxpacket: 16 [ 457.502632][ T5745] usb 1-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 457.504075][ T5745] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 457.504104][ T5745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 457.504125][ T5745] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 457.504148][ T5745] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 107 [ 457.510649][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.510672][ T5745] usb 1-1: Product: syz [ 457.510685][ T5745] usb 1-1: Manufacturer: syz [ 457.510698][ T5745] usb 1-1: SerialNumber: syz [ 457.823214][ T5745] usb 1-1: config 0 descriptor?? [ 457.825369][ T8367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 458.847361][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 458.858736][ T5745] port100 1-1:0.0: NFC: Could not get supported command types [ 458.875750][ T5745] usb 1-1: USB disconnect, device number 10 [ 459.094997][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 459.398520][ T5615] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 459.994721][ T258] bridge_slave_1: left allmulticast mode [ 459.994756][ T258] bridge_slave_1: left promiscuous mode [ 459.995028][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.151190][ T258] bridge_slave_0: left allmulticast mode [ 460.151224][ T258] bridge_slave_0: left promiscuous mode [ 460.165159][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.355374][ T8428] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 460.460737][ T258] bridge_slave_1: left allmulticast mode [ 460.460772][ T258] bridge_slave_1: left promiscuous mode [ 460.461030][ T258] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.569811][ T258] bridge_slave_0: left allmulticast mode [ 462.579455][ T258] bridge_slave_0: left promiscuous mode [ 462.579684][ T258] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.855693][ T5745] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 463.018264][ T5745] usb 1-1: Using ep0 maxpacket: 8 [ 463.027651][ T5745] usb 1-1: unable to get BOS descriptor or descriptor too short [ 463.027704][ T5745] usb 1-1: New USB device found: idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 463.028902][ T5745] usb 1-1: config 10 has an invalid interface number: 91 but max is 0 [ 463.058973][ T5745] usb 1-1: config 10 has no interface number 0 [ 463.059002][ T5745] usb 1-1: config 10 interface 91 has no altsetting 0 [ 463.074550][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.074566][ T5745] usb 1-1: Product: syz [ 463.074574][ T5745] usb 1-1: Manufacturer: syz [ 463.074581][ T5745] usb 1-1: SerialNumber: syz [ 463.374082][ T5745] uvcvideo 1-1:10.91: probe with driver uvcvideo failed with error -22 [ 463.387232][ T5745] usb 1-1: USB disconnect, device number 11 [ 463.584142][ T258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.712709][ T258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.801205][ T258] bond0 (unregistering): Released all slaves [ 465.104410][ T8482] gadgetfs: bound to dummy_udc driver [ 466.270138][ T258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.336947][ T258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.359481][ T258] bond0 (unregistering): Released all slaves [ 467.375668][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 467.452144][ T6302] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 467.613511][ T6302] usb 1-1: Using ep0 maxpacket: 8 [ 467.619688][ T6302] usb 1-1: unable to get BOS descriptor or descriptor too short [ 467.619743][ T6302] usb 1-1: New USB device found: idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 467.646427][ T6302] usb 1-1: config index 0 descriptor too short (expected 37885, got 102) [ 467.646455][ T6302] usb 1-1: config 10 has an invalid interface number: 91 but max is 0 [ 467.646474][ T6302] usb 1-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 467.646492][ T6302] usb 1-1: config 10 has no interface number 0 [ 467.646532][ T6302] usb 1-1: config 10 interface 91 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.646557][ T6302] usb 1-1: config 10 interface 91 has no altsetting 0 [ 467.706683][ T6302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.706709][ T6302] usb 1-1: Product: syz [ 467.706723][ T6302] usb 1-1: Manufacturer: syz [ 467.706736][ T6302] usb 1-1: SerialNumber: syz [ 468.241255][ T6302] uvcvideo 1-1:10.91: probe with driver uvcvideo failed with error -22 [ 468.311654][ T6302] usb 1-1: USB disconnect, device number 12 [ 468.537690][ T258] hsr_slave_0: left promiscuous mode [ 468.579319][ T258] hsr_slave_1: left promiscuous mode [ 468.580483][ T258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.614786][ T5615] Bluetooth: hci2: Unexpected cc 0x0000 with no status [ 468.629205][ T258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.838248][ T258] hsr_slave_0: left promiscuous mode [ 468.881547][ T258] hsr_slave_1: left promiscuous mode [ 468.882786][ T258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.936484][ T258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.214202][ T258] team0 (unregistering): Port device team_slave_1 removed [ 471.322985][ T258] team0 (unregistering): Port device team_slave_0 removed [ 472.123932][ T258] team0 (unregistering): Port device team_slave_1 removed [ 472.231288][ T258] team0 (unregistering): Port device team_slave_0 removed [ 472.438902][ T5615] Bluetooth: hci2: unexpected cc 0x0c47 length: 2 > 1 [ 472.438934][ T5615] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 474.004350][ T8066] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 474.223094][ T8066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.232164][ T8066] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 474.353512][ T8606] __vm_enough_memory: pid: 8606, comm: syz.4.516, bytes: 4503599627366400 not enough memory for the allocation [ 475.174806][ T8066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.207300][ T8066] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 475.334564][ T8066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.636068][ T8066] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 475.686693][ T8066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.221090][ T8088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 476.299445][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.303608][ T8088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 476.422782][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.430979][ T8088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 476.576279][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.580212][ T8088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 476.675089][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.174008][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.317234][ T8066] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.341366][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.356318][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.363977][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.441154][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.441301][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.495635][ T8088] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.586995][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.587540][ T6004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.591523][ T8657] netlink: 'syz.0.535': attribute type 5 has an invalid length. [ 477.693348][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.696040][ T6004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.175611][ T8721] gadgetfs: bound to dummy_udc driver [ 480.229005][ T8066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.357670][ T5615] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 480.492926][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.702864][ T8066] veth0_vlan: entered promiscuous mode [ 480.736481][ T8066] veth1_vlan: entered promiscuous mode [ 480.787344][ T8066] veth0_macvtap: entered promiscuous mode [ 480.805350][ T8066] veth1_macvtap: entered promiscuous mode [ 480.832203][ T8066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.864887][ T8749] comedi comedi1: pcm3724: I/O base address not correctly aligned [ 480.878272][ T8066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.240603][ T158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.242608][ T6016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.243090][ T6016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.243127][ T6016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.696119][ T8088] veth0_vlan: entered promiscuous mode [ 482.714164][ T6006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.714185][ T6006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.791250][ T8088] veth1_vlan: entered promiscuous mode [ 483.030634][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.030655][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.178386][ T8088] veth0_macvtap: entered promiscuous mode [ 483.192384][ T8088] veth1_macvtap: entered promiscuous mode [ 484.252015][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.278418][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.852624][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23'. [ 485.150272][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 485.150315][ T36] audit: type=1326 audit(1792934190.305:382): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.150483][ T36] audit: type=1326 audit(1792934190.305:383): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.150522][ T36] audit: type=1326 audit(1792934190.305:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.150786][ T36] audit: type=1326 audit(1792934190.305:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.151049][ T36] audit: type=1326 audit(1792934190.314:386): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.151294][ T36] audit: type=1326 audit(1792934190.314:387): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.151413][ T36] audit: type=1326 audit(1792934190.314:388): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.151451][ T36] audit: type=1326 audit(1792934190.314:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.151773][ T36] audit: type=1326 audit(1792934190.314:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.152010][ T36] audit: type=1326 audit(1792934190.323:391): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.5.23" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f59d82ef559 code=0x7ffc0000 [ 485.929623][ T5842] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.610472][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 486.646364][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 486.646403][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 486.654974][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 486.655006][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 486.695557][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 486.695588][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 487.748494][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 487.748532][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 488.064675][ T8830] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 488.064873][ T8830] Error validating options; rc = [-22] [ 488.733566][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 488.871986][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.912153][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.954958][ T8827] device-mapper: table: 248:0: multipath: unknown path selector type (-EINVAL) [ 488.954982][ T8827] device-mapper: ioctl: error adding target to table [ 489.210407][ T8844] comedi comedi1: 8255: I/O base address not correctly aligned [ 489.436802][ T8815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.457351][ T8815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.356868][ T8815] __nla_validate_parse: 132 callbacks suppressed [ 490.356883][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.588'. [ 490.433410][ T6010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.433433][ T6010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.442351][ T5842] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.442726][ T5842] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.708960][ T8855] netlink: 'syz.2.606': attribute type 16 has an invalid length. [ 490.708979][ T8855] netlink: 'syz.2.606': attribute type 17 has an invalid length. [ 490.888697][ T8857] __vm_enough_memory: pid: 8857, comm: syz.5.605, bytes: 4503599627366400 not enough memory for the allocation [ 491.378212][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 491.867305][ T8855] bridge1: left promiscuous mode [ 491.867337][ T8855] bridge1: left allmulticast mode [ 492.149365][ T8871] netlink: 'syz.5.609': attribute type 1 has an invalid length. [ 493.205032][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.608'. [ 493.205077][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'. [ 493.289266][ T6003] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.410345][ T1173] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.429278][ T1173] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.429706][ T1173] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.430288][ T1173] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.071389][ T8878] netlink: 144 bytes leftover after parsing attributes in process `syz.2.612'. [ 494.361449][ T5605] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 494.514241][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.550449][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.585523][ T4914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.591906][ T5605] usb 1-1: unable to get BOS descriptor or descriptor too short [ 494.591960][ T5605] usb 1-1: New USB device found: idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 494.593489][ T5605] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 494.593513][ T5605] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 494.593532][ T5605] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 494.593552][ T5605] usb 1-1: config 129 has no interface number 0 [ 494.593567][ T5605] usb 1-1: config 129 has no interface number 1 [ 494.593619][ T5605] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 494.593645][ T5605] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 494.593679][ T5605] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 494.593704][ T5605] usb 1-1: config 129 interface 135 has no altsetting 0 [ 494.593721][ T5605] usb 1-1: config 129 interface 5 has no altsetting 0 [ 494.596558][ T5605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.596580][ T5605] usb 1-1: Product: syz [ 494.596594][ T5605] usb 1-1: Manufacturer: syz [ 494.596607][ T5605] usb 1-1: SerialNumber: syz [ 494.617854][ T4914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.638642][ T4914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.338260][ T5605] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 496.338396][ T5605] usb 1-1: MIDIStreaming interface descriptor not found [ 497.520783][ T5615] Bluetooth: hci1: command tx timeout [ 498.484266][ T8922] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 498.516442][ T8922] Bluetooth: ISO socket layer initialized [ 499.685742][ T5605] usb 1-1: USB disconnect, device number 14 [ 499.752796][ T5615] Bluetooth: hci1: command tx timeout [ 500.045444][ T6003] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.439978][ T8934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.628'. [ 500.882739][ T8947] FAULT_INJECTION: forcing a failure. [ 500.882739][ T8947] name failslab, interval 1, probability 0, space 0, times 0 [ 500.882764][ T8947] CPU: 1 UID: 0 PID: 8947 Comm: syz.5.634 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 500.882776][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 500.882783][ T8947] Call Trace: [ 500.882787][ T8947] [ 500.882792][ T8947] dump_stack_lvl+0xe8/0x150 [ 500.882814][ T8947] should_fail_ex+0x46b/0x600 [ 500.882835][ T8947] should_failslab+0xa8/0x100 [ 500.882847][ T8947] __kmalloc_noprof+0xf6/0x790 [ 500.882862][ T8947] ? security_sk_alloc+0x52/0x360 [ 500.882872][ T8947] ? security_sk_alloc+0x52/0x360 [ 500.882885][ T8947] security_sk_alloc+0x52/0x360 [ 500.882897][ T8947] sk_prot_alloc+0x101/0x210 [ 500.883024][ T8947] ? sk_alloc+0x27/0x390 [ 500.883043][ T8947] sk_alloc+0x3a/0x390 [ 500.883056][ T8947] ? rt_read_unlock+0x175/0x350 [ 500.883075][ T8947] __netlink_create+0x62/0x260 [ 500.883127][ T8947] ? netlink_create+0x4e7/0x5b0 [ 500.883141][ T8947] ? __pfx_genl_release+0x10/0x10 [ 500.883173][ T8947] netlink_create+0x3c6/0x5b0 [ 500.883188][ T8947] ? __pfx_genl_unbind+0x10/0x10 [ 500.883197][ T8947] ? __pfx_genl_bind+0x10/0x10 [ 500.883207][ T8947] __sock_create+0x4b5/0xac0 [ 500.883227][ T8947] __sys_socket+0xd6/0x1b0 [ 500.883243][ T8947] __x64_sys_socket+0x7a/0x90 [ 500.883256][ T8947] do_syscall_64+0x166/0x520 [ 500.883266][ T8947] ? trace_irq_disable+0x3b/0x140 [ 500.883277][ T8947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.883288][ T8947] ? clear_bhb_loop+0x70/0xc0 [ 500.883300][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.883310][ T8947] RIP: 0033:0x7f59d82ef559 [ 500.883322][ T8947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.883332][ T8947] RSP: 002b:00007f59d653e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 500.883344][ T8947] RAX: ffffffffffffffda RBX: 00007f59d8575fa0 RCX: 00007f59d82ef559 [ 500.883352][ T8947] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 500.883358][ T8947] RBP: 00007f59d8386b20 R08: 0000000000000000 R09: 0000000000000000 [ 500.883365][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.883371][ T8947] R13: 00007f59d8576038 R14: 00007f59d8575fa0 R15: 00007ffe1b6a7538 [ 500.883388][ T8947] [ 501.453010][ T6003] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.728032][ T8943] rxe_eth0 speed is unknown, defaulting to 1000 [ 502.015734][ T5615] Bluetooth: hci1: command tx timeout [ 502.157836][ T6003] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.339015][ T8886] rxe_eth0 speed is unknown, defaulting to 1000 [ 503.005160][ T6003] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.265792][ T5615] Bluetooth: hci1: command tx timeout [ 506.030449][ T8983] Device name not specified. [ 506.030449][ T8983] [ 506.760538][ T8983] vivid-000: kernel_thread() failed [ 507.347917][ T5615] Bluetooth: hci0: unexpected event 0x04 length: 3 < 10 [ 508.537715][ T6003] bridge_slave_1: left allmulticast mode [ 508.537749][ T6003] bridge_slave_1: left promiscuous mode [ 508.538004][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.860056][ T6003] bridge_slave_0: left allmulticast mode [ 508.860092][ T6003] bridge_slave_0: left promiscuous mode [ 508.860318][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.759742][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.695487][ T9035] comedi comedi0: pcl711: I/O base address not correctly aligned [ 511.723970][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.770519][ T6003] bond0 (unregistering): Released all slaves [ 511.815161][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.650'. [ 511.815187][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.650'. [ 511.865743][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 512.509381][ T9056] Device name not specified. [ 512.509381][ T9056] [ 513.068275][ T9058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.136930][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.137057][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.137225][ T8886] bridge_slave_0: entered allmulticast mode [ 513.170845][ T8886] bridge_slave_0: entered promiscuous mode [ 513.189906][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.190029][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.190189][ T8886] bridge_slave_1: entered allmulticast mode [ 513.282543][ T8886] bridge_slave_1: entered promiscuous mode [ 513.364396][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.364458][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.648316][ T9079] netlink: 52 bytes leftover after parsing attributes in process `syz.2.664'. [ 513.729496][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 514.636489][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.636901][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.728371][ T8886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.765450][ T8886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.926241][ T9084] FAULT_INJECTION: forcing a failure. [ 514.926241][ T9084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.926278][ T9084] CPU: 0 UID: 0 PID: 9084 Comm: syz.5.669 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 514.926304][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 514.926316][ T9084] Call Trace: [ 514.926323][ T9084] [ 514.926332][ T9084] dump_stack_lvl+0xe8/0x150 [ 514.926372][ T9084] should_fail_ex+0x46b/0x600 [ 514.926408][ T9084] _copy_from_user+0x2d/0xb0 [ 514.926438][ T9084] __ia32_sys_rt_sigreturn+0x27f/0x860 [ 514.926471][ T9084] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 514.926522][ T9084] ? __task_pid_nr_ns+0x28/0x470 [ 514.926557][ T9084] do_syscall_64+0x166/0x520 [ 514.926579][ T9084] ? trace_irq_disable+0x3b/0x140 [ 514.926598][ T9084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.926619][ T9084] ? clear_bhb_loop+0x70/0xc0 [ 514.926645][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.926673][ T9084] RIP: 0033:0x7f59d82908d9 [ 514.926692][ T9084] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 514.926710][ T9084] RSP: 002b:00007f59d653da80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 514.926732][ T9084] RAX: ffffffffffffffda RBX: 00007f59d8575fa0 RCX: 00007f59d82908d9 [ 514.926748][ T9084] RDX: 00007f59d653da80 RSI: 00007f59d653dbb0 RDI: 0000000000000021 [ 514.926761][ T9084] RBP: 00007f59d8386b20 R08: 0000000000000000 R09: 0000000000000000 [ 514.926774][ T9084] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 514.926788][ T9084] R13: 00007f59d8576038 R14: 00007f59d8575fa0 R15: 00007ffe1b6a7538 [ 514.926821][ T9084] [ 514.985570][ T9092] jffs2: notice: (9092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 515.238782][ T8886] team0: Port device team_slave_0 added [ 515.247580][ T8886] team0: Port device team_slave_1 added [ 515.296727][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.296745][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.296767][ T8886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.298844][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.298870][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.298902][ T8886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.319523][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 515.613377][ T9099] netlink: 'syz.0.682': attribute type 10 has an invalid length. [ 515.934623][ T9105] Device name not specified. [ 515.934623][ T9105] [ 516.873773][ T9099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.895270][ T9099] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 517.035548][ T8886] hsr_slave_0: entered promiscuous mode [ 517.036948][ T8886] hsr_slave_1: entered promiscuous mode [ 517.359445][ T9130] netlink: 52 bytes leftover after parsing attributes in process `syz.5.681'. [ 517.439425][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.681'. [ 521.139186][ T9161] XFS (nbd5): SB validate failed with error -5. [ 521.414549][ T5615] Bluetooth: hci2: unexpected event 0x04 length: 3 < 10 [ 522.308740][ T9161] XFS (nbd5): io_pages changed from 0 to 1024, not restoring. [ 522.308769][ T9161] XFS (nbd5): ra_pages changed from 0 to 64, not restoring. [ 522.409626][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 522.648653][ T6003] hsr_slave_0: left promiscuous mode [ 522.691048][ T6003] hsr_slave_1: left promiscuous mode [ 522.691932][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.691948][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.735167][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.735191][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.824646][ T6003] veth1_macvtap: left promiscuous mode [ 522.824709][ T6003] veth0_macvtap: left promiscuous mode [ 522.826433][ T6003] veth1_vlan: left promiscuous mode [ 522.826636][ T6003] veth0_vlan: left promiscuous mode [ 523.635415][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 523.678820][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 523.862770][ T9183] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 523.863560][ T9183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 524.066506][ T9203] [U] /TENh>O]>&+x [ 524.066545][ T9203] [U] }csL63?g?6CwsIr;&tIlytoME#R_m*f, [ 524.066557][ T9203] [U] Sz [ 524.066628][ T9203] [U] 7(aP5zkʈE:^ZkiX=DE۟K艐s9$}PkZ KWJĺhxg-}Sp Ŏbxy`f [ 524.107435][ T9200] [U] [ 524.463827][ T5615] Bluetooth: hci0: unexpected event 0x04 length: 3 < 10 [ 525.434074][ T6017] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.498494][ T9218] netlink: 'syz.0.713': attribute type 10 has an invalid length. [ 525.873758][ T9236] comedi comedi0: rti802: I/O base address or length out of range [ 525.980390][ T9243] netlink: 68 bytes leftover after parsing attributes in process `syz.5.721'. [ 526.133199][ T9218] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 526.135153][ T9218] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 526.135177][ T9218] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 528.172663][ T9295] netlink: 'syz.4.739': attribute type 21 has an invalid length. [ 530.081619][ T5615] Bluetooth: hci4: command tx timeout [ 530.456058][ T9295] netlink: 156 bytes leftover after parsing attributes in process `syz.4.739'. [ 533.202081][ T8886] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 533.269660][ T8886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.282195][ T9371] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 533.282785][ T8886] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 533.382426][ T8886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.390527][ T8886] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 533.482431][ T9383] openvswitch: netlink: Message has 4 unknown bytes. [ 533.791833][ T9398] overlayfs: failed to resolve './dev/sda1': -2 [ 534.370062][ T8886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.398115][ T8886] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 534.428219][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 534.889541][ T9405] netlink: 'syz.4.766': attribute type 15 has an invalid length. [ 534.889566][ T9405] netlink: 'syz.4.766': attribute type 7 has an invalid length. [ 534.889580][ T9405] netlink: 52 bytes leftover after parsing attributes in process `syz.4.766'. [ 535.084160][ T8886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.283534][ T9419] ubi0: attaching mtd0 [ 535.288595][ T9419] ubi0: scanning is finished [ 535.288612][ T9419] ubi0: empty MTD device detected [ 537.243167][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.348350][ T8886] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.402960][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.403094][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.477368][ T9419] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 537.571711][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.571786][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.607084][ T9450] nvme_fabrics: missing parameter 'transport=%s' [ 537.607096][ T9450] nvme_fabrics: missing parameter 'nqn=%s' [ 539.196863][ T5605] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 539.362476][ T5605] usb 6-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.01 [ 539.393165][ T5605] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.638928][ T9486] bond0: (slave bond_slave_1): Releasing backup interface [ 539.692019][ C0] dln2 6-1:1.0: size mismatch: handle 42c cmd 5631 echo a7c9 size 26047 actual 8 [ 539.739009][ T5605] dln2 6-1:1.0: USB write failed: -110 [ 539.763432][ T5605] dln2 6-1:1.0: failed to initialize hardware [ 539.793430][ T5605] dln2 6-1:1.0: probe with driver dln2 failed with error -110 [ 539.923832][ T5605] usb 6-1: USB disconnect, device number 2 [ 540.050796][ T8886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.108798][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.786'. [ 540.124996][ T9501] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 540.622801][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 541.090163][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 541.090252][ T36] audit: type=1326 audit(1792934241.764:463): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 541.093862][ T36] audit: type=1326 audit(1792934241.764:464): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 541.097563][ T36] audit: type=1326 audit(1792934241.773:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 541.098109][ T36] audit: type=1326 audit(1792934241.773:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 541.290511][ T36] audit: type=1326 audit(1792934241.773:467): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 541.290992][ T36] audit: type=1326 audit(1792934241.773:468): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 541.291564][ T36] audit: type=1326 audit(1792934241.773:469): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 541.316283][ T36] audit: type=1326 audit(1792934241.773:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 541.316827][ T36] audit: type=1326 audit(1792934241.773:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 541.317126][ T36] audit: type=1326 audit(1792934241.773:472): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.2.788" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f94866ff559 code=0x7ffc0000 [ 542.709155][ T9521] FAULT_INJECTION: forcing a failure. [ 542.709155][ T9521] name failslab, interval 1, probability 0, space 0, times 0 [ 542.709191][ T9521] CPU: 1 UID: 0 PID: 9521 Comm: syz.5.793 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 542.709215][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 542.709227][ T9521] Call Trace: [ 542.709235][ T9521] [ 542.709243][ T9521] dump_stack_lvl+0xe8/0x150 [ 542.709281][ T9521] should_fail_ex+0x46b/0x600 [ 542.709317][ T9521] should_failslab+0xa8/0x100 [ 542.709339][ T9521] __kmalloc_noprof+0xf6/0x790 [ 542.709368][ T9521] ? security_sk_alloc+0x52/0x360 [ 542.709386][ T9521] ? security_sk_alloc+0x52/0x360 [ 542.709411][ T9521] security_sk_alloc+0x52/0x360 [ 542.709441][ T9521] sk_prot_alloc+0x101/0x210 [ 542.709472][ T9521] ? sk_alloc+0x27/0x390 [ 542.709505][ T9521] sk_alloc+0x3a/0x390 [ 542.709538][ T9521] __netlink_create+0x62/0x260 [ 542.709562][ T9521] ? __pfx_genl_release+0x10/0x10 [ 542.709582][ T9521] netlink_create+0x3c6/0x5b0 [ 542.709611][ T9521] ? __pfx_genl_unbind+0x10/0x10 [ 542.709628][ T9521] ? __pfx_genl_bind+0x10/0x10 [ 542.709649][ T9521] __sock_create+0x4b5/0xac0 [ 542.709683][ T9521] __sys_socket+0xd6/0x1b0 [ 542.709711][ T9521] __x64_sys_socket+0x7a/0x90 [ 542.709737][ T9521] do_syscall_64+0x166/0x520 [ 542.709758][ T9521] ? trace_irq_disable+0x3b/0x140 [ 542.709777][ T9521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.709797][ T9521] ? clear_bhb_loop+0x70/0xc0 [ 542.709823][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.709843][ T9521] RIP: 0033:0x7f59d82ef559 [ 542.709861][ T9521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.709878][ T9521] RSP: 002b:00007f59d653e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 542.709899][ T9521] RAX: ffffffffffffffda RBX: 00007f59d8575fa0 RCX: 00007f59d82ef559 [ 542.709914][ T9521] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 542.709925][ T9521] RBP: 00007f59d8386b20 R08: 0000000000000000 R09: 0000000000000000 [ 542.709938][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.709949][ T9521] R13: 00007f59d8576038 R14: 00007f59d8575fa0 R15: 00007ffe1b6a7538 [ 542.709978][ T9521] [ 542.976021][ T8886] veth0_vlan: entered promiscuous mode [ 543.136412][ T8886] veth1_vlan: entered promiscuous mode [ 543.265413][ T9537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.797'. [ 543.265437][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 543.265485][ T9537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.797'. [ 543.310137][ T9533] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.368645][ T8886] veth0_macvtap: entered promiscuous mode [ 543.417659][ T8886] veth1_macvtap: entered promiscuous mode [ 543.451719][ T9525] input: syz0 as /devices/virtual/input/input14 [ 543.665569][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.789394][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.121816][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.804'. [ 545.430790][ T158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.442979][ T158] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.443378][ T158] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.143663][ T258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.143683][ T258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.190864][ T6004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.190885][ T6004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.235516][ T5842] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.541089][ T9599] comedi comedi1: Minor 19 could not be opened [ 548.710803][ T9605] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 551.059550][ T9659] netlink: 'syz.0.849': attribute type 6 has an invalid length. [ 551.383473][ T9670] : renamed from bond_slave_0 (while UP) [ 551.393700][ T9674] netlink: 'syz.0.855': attribute type 1 has an invalid length. [ 551.393720][ T9674] netlink: 244 bytes leftover after parsing attributes in process `syz.0.855'. [ 551.512719][ T9678] CIFS: Attempting to mount //127.0.0.1/share [ 551.572598][ T258] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 551.572662][ T258] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 551.581621][ T9678] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:5445 failed: -ENODEV [ 551.611407][ T6003] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 551.611431][ T6003] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 551.616682][ T9678] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:445 failed: -ENODEV [ 551.694006][ T9678] CIFS: VFS: cifs_mount failed w/return code = -2 [ 554.072286][ T5615] Bluetooth: hci2: Malformed Event: 0x02 [ 555.758869][ T5615] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 555.759100][ T5615] Bluetooth: hci1: Injecting HCI hardware error event [ 555.760734][ T4914] Bluetooth: hci1: hardware error 0x00 [ 557.547698][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.882'. [ 557.796217][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 557.796330][ T36] audit: type=1326 audit(1792934257.385:535): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 557.798130][ T36] audit: type=1326 audit(1792934257.385:536): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 557.800167][ T36] audit: type=1326 audit(1792934257.385:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 557.926013][ T36] audit: type=1326 audit(1792934257.385:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 557.926397][ T36] audit: type=1326 audit(1792934257.394:539): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 557.926437][ T36] audit: type=1326 audit(1792934257.394:540): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 557.927177][ T36] audit: type=1326 audit(1792934257.394:541): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 557.927820][ T36] audit: type=1326 audit(1792934257.394:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 557.928268][ T36] audit: type=1326 audit(1792934257.394:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 557.929453][ T36] audit: type=1326 audit(1792934257.394:544): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9740 comm="syz.0.882" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f54520ef559 code=0x7ffc0000 [ 559.707260][ T4914] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 559.842710][ T5745] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 560.264354][ T5745] usb 7-1: Using ep0 maxpacket: 8 [ 560.265389][ T5745] usb 7-1: New USB device found: idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 560.269023][ T5745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.269046][ T5745] usb 7-1: Product: syz [ 560.269060][ T5745] usb 7-1: Manufacturer: syz [ 560.269073][ T5745] usb 7-1: SerialNumber: syz [ 561.227209][ T5745] usb 7-1: config 0 descriptor?? [ 561.327856][ T5745] gspca_main: se401-2.14.0 probing 047d:5003 [ 561.663576][ T5732] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 561.836888][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 561.839144][ T5732] usb 1-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 561.841559][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 561.841604][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.863029][ T5745] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 561.863135][ T5745] se401 7-1:0.0: probe with driver se401 failed with error -71 [ 561.872995][ T5745] usb 7-1: USB disconnect, device number 2 [ 561.934411][ T5732] usb 1-1: config 0 descriptor?? [ 561.936160][ T9785] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 563.432307][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 563.432350][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 563.432379][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 563.432407][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 563.432436][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 563.717793][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 563.717815][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 563.717831][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 563.717847][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 563.717862][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: unknown main item tag 0x0 [ 564.579294][ T9823] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 564.579624][ T9823] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 564.942774][ T5732] aquacomputer_d5next 0003:0C70:F00D.0001: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 565.956534][ T9824] kthread_run failed with err -4 [ 566.147574][ T5732] usb 1-1: USB disconnect, device number 15 [ 566.257327][ T9846] rxe_eth0 speed is unknown, defaulting to 1000 [ 567.829615][ T9865] tipc: Started in network mode [ 567.829645][ T9865] tipc: Node identity ac14142a, cluster identity 4711 [ 567.938121][ T9865] tipc: Enabled bearer , priority 10 [ 568.361288][ T5732] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 568.634220][ T9888] FAULT_INJECTION: forcing a failure. [ 568.634220][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 568.634255][ T9888] CPU: 1 UID: 0 PID: 9888 Comm: syz.6.937 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 568.634279][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 568.634292][ T9888] Call Trace: [ 568.634300][ T9888] [ 568.634309][ T9888] dump_stack_lvl+0xe8/0x150 [ 568.634345][ T9888] should_fail_ex+0x46b/0x600 [ 568.634380][ T9888] should_failslab+0xa8/0x100 [ 568.634402][ T9888] __kmalloc_noprof+0xf6/0x790 [ 568.634433][ T9888] ? security_sk_alloc+0x52/0x360 [ 568.634447][ T9888] ? security_sk_alloc+0x52/0x360 [ 568.634466][ T9888] security_sk_alloc+0x52/0x360 [ 568.634483][ T9888] sk_prot_alloc+0x101/0x210 [ 568.634507][ T9888] ? sk_alloc+0x27/0x390 [ 568.634530][ T9888] sk_alloc+0x3a/0x390 [ 568.634555][ T9888] __netlink_create+0x62/0x260 [ 568.634574][ T9888] ? __pfx_genl_release+0x10/0x10 [ 568.634589][ T9888] netlink_create+0x3c6/0x5b0 [ 568.634610][ T9888] ? __pfx_genl_unbind+0x10/0x10 [ 568.634622][ T9888] ? __pfx_genl_bind+0x10/0x10 [ 568.634637][ T9888] __sock_create+0x4b5/0xac0 [ 568.634663][ T9888] __sys_socket+0xd6/0x1b0 [ 568.634687][ T9888] __x64_sys_socket+0x7a/0x90 [ 568.634707][ T9888] do_syscall_64+0x166/0x520 [ 568.634723][ T9888] ? trace_irq_disable+0x3b/0x140 [ 568.634738][ T9888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.634753][ T9888] ? clear_bhb_loop+0x70/0xc0 [ 568.634771][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.634785][ T9888] RIP: 0033:0x7f85e512f559 [ 568.634800][ T9888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.634813][ T9888] RSP: 002b:00007f85e3386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 568.634831][ T9888] RAX: ffffffffffffffda RBX: 00007f85e53b5fa0 RCX: 00007f85e512f559 [ 568.634842][ T9888] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 568.634851][ T9888] RBP: 00007f85e51c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 568.634860][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.634869][ T9888] R13: 00007f85e53b6038 R14: 00007f85e53b5fa0 R15: 00007ffee03ffdb8 [ 568.634893][ T9888] [ 569.840166][ T9] tipc: Node number set to 2886997034 [ 570.013962][ T5732] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 570.016528][ T5732] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.027859][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.027884][ T5732] usb 1-1: Product: syz [ 570.027899][ T5732] usb 1-1: Manufacturer: syz [ 570.027913][ T5732] usb 1-1: SerialNumber: syz [ 570.111336][ T5732] hub 1-1:1.0: bad descriptor, ignoring hub [ 570.115040][ T5732] hub 1-1:1.0: probe with driver hub failed with error -5 [ 570.515258][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.953'. [ 571.173538][ T9] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 571.349009][ T9941] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 571.349092][ T9941] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 571.459689][ T9939] bridge0: port 3(syz_tun) entered blocking state [ 571.468233][ T9939] bridge0: port 3(syz_tun) entered disabled state [ 571.470098][ T9939] syz_tun: entered allmulticast mode [ 571.491164][ T9939] syz_tun: entered promiscuous mode [ 571.559747][ T9] usb 1-1: device descriptor read/all, error -71 [ 571.591147][ T9942] bridge0: port 4(ip6gretap0) entered blocking state [ 571.591208][ T9942] bridge0: port 4(ip6gretap0) entered disabled state [ 571.591329][ T9942] ip6gretap0: entered allmulticast mode [ 571.648123][ T9942] ip6gretap0: entered promiscuous mode [ 571.672528][ T9948] xt_hl: Unknown TTL match mode: 29 [ 571.736125][ T9949] gadgetfs: bound to dummy_udc driver [ 572.154429][ T9] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 572.154940][ C0] gadgetfs: connected [ 572.155726][ T9] gadgetfs: disconnected [ 572.360608][ C0] gadgetfs: connected [ 572.363467][ T9] usb 1-1: device firmware changed [ 572.393286][ T9] gadgetfs: suspended from state 3 [ 572.510765][ T9943] gadgetfs: disconnected [ 572.627575][ T9] usb 1-1: USB disconnect, device number 16 [ 572.747916][ T9979] rxe_eth0 speed is unknown, defaulting to 1000 [ 575.246815][ T9993] device-mapper: table: 248:1: multipath: error getting device (-ENOENT) [ 575.246840][ T9993] device-mapper: ioctl: error adding target to table [ 575.570135][T10002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 575.570297][T10002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 575.919622][ T4914] Bluetooth: hci4: link tx timeout [ 575.919641][ T4914] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 576.053590][T10016] gadgetfs: bound to dummy_udc driver [ 578.524367][ T4914] Bluetooth: hci4: command 0x0406 tx timeout [ 580.184845][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.341490][T10063] gadgetfs: bound to dummy_udc driver [ 580.629999][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 580.630286][ C0] gadgetfs: connected [ 580.632022][ T9] gadgetfs: disconnected [ 582.208546][ T5745] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 582.391813][ T5745] usb 7-1: Using ep0 maxpacket: 16 [ 582.394577][ T5745] usb 7-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 582.398880][ T5745] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 582.398905][ T5745] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 582.398924][ T5745] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 582.398943][ T5745] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 582.398961][ T5745] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 582.398981][ T5745] usb 7-1: config 0 has no interface number 0 [ 582.399022][ T5745] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 582.399048][ T5745] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 582.399070][ T5745] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.399110][ T5745] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 582.399136][ T5745] usb 7-1: config 0 interface 125 has no altsetting 0 [ 582.399153][ T5745] usb 7-1: config 0 interface 125 has no altsetting 2 [ 582.405134][ T5745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.405157][ T5745] usb 7-1: Product: syz [ 582.405171][ T5745] usb 7-1: Manufacturer: syz [ 582.405184][ T5745] usb 7-1: SerialNumber: syz [ 582.431042][ T5745] usb 7-1: config 0 descriptor?? [ 582.528147][ T5745] usb 7-1: selecting invalid altsetting 2 [ 582.771454][ C0] usb 7-1: async_complete: urb error -71 [ 582.771695][ C0] usb 7-1: async_complete: urb error -71 [ 582.771787][ C0] usb 7-1: async_complete: urb error -71 [ 582.771877][ C0] usb 7-1: async_complete: urb error -71 [ 582.780259][ T5745] get_1284_register: usb error -71 [ 582.836227][ T5745] usb 7-1: USB disconnect, device number 3 [ 583.199942][T10094] IPv6: Can't replace route, no match found [ 584.461214][T10104] tmpfs: Bad value for 'nr_inodes' [ 585.910546][T10124] gadgetfs: bound to dummy_udc driver [ 587.347679][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1043'. [ 587.348196][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1043'. [ 587.587764][T10163] tipc: MTU too low for tipc bearer [ 588.348031][T10170] netlink: 'syz.6.1042': attribute type 10 has an invalid length. [ 588.780043][T10171] netlink: 'syz.6.1042': attribute type 4 has an invalid length. [ 588.780066][T10171] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1042'. [ 589.326381][T10170] macvlan1: entered promiscuous mode [ 589.326408][T10170] macvlan1: entered allmulticast mode [ 589.369910][T10170] veth1_vlan: entered allmulticast mode [ 589.393199][T10170] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 590.509135][T10185] device-mapper: table: 248:2: mirror: Device lookup failure (-ENOENT) [ 590.509161][T10185] device-mapper: ioctl: error adding target to table [ 590.847561][T10202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 591.098490][T10202] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 593.733088][ T5872] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 593.995255][ T5872] usb 1-1: New USB device found: idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 593.996500][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.015131][ T5872] usb 1-1: config 0 descriptor?? [ 594.056202][ T5872] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 594.059564][ T5872] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 594.099493][T10243] overlayfs: failed to clone upperpath [ 594.295415][T10244] FAULT_INJECTION: forcing a failure. [ 594.295415][T10244] name failslab, interval 1, probability 0, space 0, times 0 [ 594.295453][T10244] CPU: 0 UID: 0 PID: 10244 Comm: syz.6.1078 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 594.295476][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 594.295488][T10244] Call Trace: [ 594.295496][T10244] [ 594.295504][T10244] dump_stack_lvl+0xe8/0x150 [ 594.295543][T10244] should_fail_ex+0x46b/0x600 [ 594.295579][T10244] should_failslab+0xa8/0x100 [ 594.295602][T10244] __kmalloc_noprof+0xf6/0x790 [ 594.295631][T10244] ? security_sk_alloc+0x52/0x360 [ 594.295649][T10244] ? security_sk_alloc+0x52/0x360 [ 594.295674][T10244] security_sk_alloc+0x52/0x360 [ 594.295696][T10244] sk_prot_alloc+0x101/0x210 [ 594.295726][T10244] ? sk_alloc+0x27/0x390 [ 594.295761][T10244] sk_alloc+0x3a/0x390 [ 594.295794][T10244] __netlink_create+0x62/0x260 [ 594.295819][T10244] ? __pfx_genl_release+0x10/0x10 [ 594.295838][T10244] netlink_create+0x3c6/0x5b0 [ 594.295867][T10244] ? __pfx_genl_unbind+0x10/0x10 [ 594.295883][T10244] ? __pfx_genl_bind+0x10/0x10 [ 594.295904][T10244] __sock_create+0x4b5/0xac0 [ 594.295940][T10244] __sys_socket+0xd6/0x1b0 [ 594.295976][T10244] __x64_sys_socket+0x7a/0x90 [ 594.296002][T10244] do_syscall_64+0x166/0x520 [ 594.296024][T10244] ? trace_irq_disable+0x3b/0x140 [ 594.296042][T10244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.296061][T10244] ? clear_bhb_loop+0x70/0xc0 [ 594.296085][T10244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.296103][T10244] RIP: 0033:0x7f85e512f559 [ 594.296122][T10244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.296140][T10244] RSP: 002b:00007f85e3386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 594.296162][T10244] RAX: ffffffffffffffda RBX: 00007f85e53b5fa0 RCX: 00007f85e512f559 [ 594.296177][T10244] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 594.296190][T10244] RBP: 00007f85e51c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 594.296202][T10244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.296214][T10244] R13: 00007f85e53b6038 R14: 00007f85e53b5fa0 R15: 00007ffee03ffdb8 [ 594.296246][T10244] [ 594.610284][ T5872] usb 1-1: USB disconnect, device number 18 [ 596.243603][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 596.243664][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 600.196506][T10299] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 600.439938][T10299] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 601.567630][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1102'. [ 605.073393][T10368] FAULT_INJECTION: forcing a failure. [ 605.073393][T10368] name failslab, interval 1, probability 0, space 0, times 0 [ 605.073429][T10368] CPU: 1 UID: 0 PID: 10368 Comm: syz.5.1123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 605.073453][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 605.073465][T10368] Call Trace: [ 605.073472][T10368] [ 605.073480][T10368] dump_stack_lvl+0xe8/0x150 [ 605.073518][T10368] should_fail_ex+0x46b/0x600 [ 605.073554][T10368] should_failslab+0xa8/0x100 [ 605.073574][T10368] __kmalloc_noprof+0xf6/0x790 [ 605.073590][T10368] ? security_sk_alloc+0x52/0x360 [ 605.073602][T10368] ? security_sk_alloc+0x52/0x360 [ 605.073616][T10368] security_sk_alloc+0x52/0x360 [ 605.073627][T10368] sk_prot_alloc+0x101/0x210 [ 605.073643][T10368] ? sk_alloc+0x27/0x390 [ 605.073658][T10368] sk_alloc+0x3a/0x390 [ 605.073675][T10368] __netlink_create+0x62/0x260 [ 605.073688][T10368] ? __pfx_genl_release+0x10/0x10 [ 605.073698][T10368] netlink_create+0x3c6/0x5b0 [ 605.073712][T10368] ? __pfx_genl_unbind+0x10/0x10 [ 605.073721][T10368] ? __pfx_genl_bind+0x10/0x10 [ 605.073731][T10368] __sock_create+0x4b5/0xac0 [ 605.073749][T10368] __sys_socket+0xd6/0x1b0 [ 605.073764][T10368] __x64_sys_socket+0x7a/0x90 [ 605.073777][T10368] do_syscall_64+0x166/0x520 [ 605.073789][T10368] ? trace_irq_disable+0x3b/0x140 [ 605.073800][T10368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.073810][T10368] ? clear_bhb_loop+0x70/0xc0 [ 605.073822][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.073833][T10368] RIP: 0033:0x7f59d82ef559 [ 605.073843][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.073853][T10368] RSP: 002b:00007f59d653e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 605.073865][T10368] RAX: ffffffffffffffda RBX: 00007f59d8575fa0 RCX: 00007f59d82ef559 [ 605.073873][T10368] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 605.073879][T10368] RBP: 00007f59d8386b20 R08: 0000000000000000 R09: 0000000000000000 [ 605.073892][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.073898][T10368] R13: 00007f59d8576038 R14: 00007f59d8575fa0 R15: 00007ffe1b6a7538 [ 605.073915][T10368] [ 606.295019][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 606.435400][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'. [ 607.935735][T10443] netlink: 'syz.0.1153': attribute type 322 has an invalid length. [ 607.980935][ T5605] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 608.019853][T10427] ceph: No mds server is up or the cluster is laggy [ 608.089879][ T5605] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 609.388601][T10454] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 609.388740][T10454] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 609.473892][T10456] xt_policy: too many policy elements [ 609.754002][T10462] tipc: Started in network mode [ 609.754033][T10462] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 609.754288][T10462] tipc: Enabled bearer , priority 0 [ 610.986072][ T5605] tipc: Node number set to 11578026 [ 611.135441][T10484] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1169'. [ 611.135484][T10484] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 613.858760][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1184'. [ 613.858785][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1184'. [ 613.858810][T10524] netlink: 'syz.6.1184': attribute type 13 has an invalid length. [ 613.858825][T10524] netlink: 'syz.6.1184': attribute type 12 has an invalid length. [ 615.288395][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 615.288433][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1195'. [ 616.802586][T10567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1201'. [ 618.050518][T10584] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 618.051370][T10584] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 620.797032][T10615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.088354][T10617] pim6reg9: entered allmulticast mode [ 621.780584][ T5605] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 622.117863][ T5605] usb 7-1: Using ep0 maxpacket: 32 [ 622.118832][ T5605] usb 7-1: New USB device found: idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 622.120507][ T5605] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.175611][ T5605] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 623.336380][ T5605] usb 7-1: USB disconnect, device number 4 [ 625.010964][T10674] gadgetfs: bound to dummy_udc driver [ 625.889264][ T5732] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 625.889554][ C1] gadgetfs: connected [ 625.890937][ T5732] gadgetfs: disconnected [ 625.899747][T10684] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1235'. [ 626.193119][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1241'. [ 627.431955][T10701] ubi0: attaching mtd0 [ 627.437180][T10701] ubi0: scanning is finished [ 628.287468][ T5605] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 628.459134][ T5605] usb 6-1: New USB device found: idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 628.460698][ T5605] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 628.460724][ T5605] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 628.460745][ T5605] usb 6-1: config 150 has no interface number 0 [ 628.460789][ T5605] usb 6-1: config 150 interface 204 has no altsetting 0 [ 628.509925][ T5605] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.509951][ T5605] usb 6-1: Product: syz [ 628.509965][ T5605] usb 6-1: Manufacturer: syz [ 628.509978][ T5605] usb 6-1: SerialNumber: syz [ 628.643077][T10701] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 628.878595][ T5605] xr_serial 6-1:150.204: skipping garbage [ 628.878708][ T5605] xr_serial 6-1:150.204: xr_serial converter detected [ 628.956867][ T5745] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 629.149587][T10730] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 629.157380][T10730] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 629.165911][T10733] gadgetfs: bound to dummy_udc driver [ 629.183369][ T5745] usb 1-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 629.186983][ T5745] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 629.187007][ T5745] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 629.187026][ T5745] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 629.187057][ T5745] usb 1-1: config 220 has no interface number 2 [ 629.187183][ T5745] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 629.187211][ T5745] usb 1-1: config 220 interface 0 has no altsetting 0 [ 629.187229][ T5745] usb 1-1: config 220 interface 76 has no altsetting 0 [ 629.187301][ T5745] usb 1-1: config 220 interface 1 has no altsetting 0 [ 629.275372][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.275398][ T5745] usb 1-1: Product: syz [ 629.275480][ T5745] usb 1-1: Manufacturer: syz [ 629.275496][ T5745] usb 1-1: SerialNumber: syz [ 629.414481][ T5605] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 629.414540][ T5605] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 629.444914][ T5732] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 629.445175][ C1] gadgetfs: connected [ 629.446624][ T5732] gadgetfs: disconnected [ 629.497108][ T5605] usb 6-1: USB disconnect, device number 3 [ 629.620803][ T5605] xr_serial 6-1:150.204: device disconnected [ 629.623459][ C1] gadgetfs: connected [ 629.623721][ T5732] usb 2-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 629.624549][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.702620][ C1] gadgetfs: configuration #1 [ 629.741473][ T5745] uvcvideo 1-1:220.0: probe with driver uvcvideo failed with error -22 [ 629.815402][ T5745] usb 1-1: USB disconnect, device number 20 [ 629.927580][T10727] gadgetfs: suspended from state 3 [ 629.928021][T10727] gadgetfs: disconnected [ 629.988019][ T5732] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16 [ 631.768842][ T5732] usb 2-1: USB disconnect, device number 2 [ 631.768943][ C1] usbtouchscreen 2-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 631.892108][ T5605] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 632.119687][ T5605] usb 1-1: Using ep0 maxpacket: 32 [ 632.121391][ T5605] usb 1-1: New USB device found: idVendor=5543, idProduct=0004, bcdDevice=0.00 [ 632.124139][ T5605] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.124169][ T5605] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 632.124197][ T5605] usb 1-1: config 0 interface 0 has no altsetting 0 [ 632.124230][ T5605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.353284][ T5605] usb 1-1: config 0 descriptor?? [ 632.860099][T10768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1263'. [ 632.948535][ T5605] hid_parser_main: 465 callbacks suppressed [ 632.948561][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 632.948592][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 632.948620][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 632.948647][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 632.948674][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 632.948708][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 632.948735][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 632.948762][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 632.948788][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 632.948815][ T5605] uclogic 0003:5543:0004.0002: unknown main item tag 0x0 [ 633.074747][ T5605] uclogic 0003:5543:0004.0002: hidraw0: USB HID v0.07 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 633.177228][ T5605] usb 1-1: USB disconnect, device number 21 [ 633.386112][T10773] fido_id[10773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 634.785586][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 634.785606][ T36] audit: type=1326 audit(1792934328.673:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.6.1271" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e512f559 code=0x7ffc0000 [ 634.822979][ T36] audit: type=1326 audit(1792934328.673:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.6.1271" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e512f559 code=0x7ffc0000 [ 634.823035][ T36] audit: type=1326 audit(1792934328.682:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.6.1271" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f85e512f559 code=0x7ffc0000 [ 634.823082][ T36] audit: type=1326 audit(1792934328.682:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.6.1271" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e512f559 code=0x7ffc0000 [ 634.823115][ T36] audit: type=1326 audit(1792934328.682:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.6.1271" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e512f559 code=0x7ffc0000 [ 634.823143][ T36] audit: type=1326 audit(1792934328.682:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.6.1271" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f85e512f559 code=0x7ffc0000 [ 634.823172][ T36] audit: type=1326 audit(1792934328.710:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.6.1271" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e512f559 code=0x7ffc0000 [ 634.823201][ T36] audit: type=1326 audit(1792934328.710:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.6.1271" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e512f559 code=0x7ffc0000 [ 635.024249][T10802] ublk_ctrl_add_dev: invalid recovery flags 10 [ 635.810269][T10819] ubi0: attaching mtd0 [ 635.813580][T10819] ubi0: scanning is finished [ 640.050077][T10819] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 641.359230][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1290'. [ 641.559449][ T5724] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 641.721933][ T5724] usb 7-1: Using ep0 maxpacket: 32 [ 641.722895][ T5724] usb 7-1: New USB device found: idVendor=046d, idProduct=c24f, bcdDevice=0.00 [ 641.724867][ T5724] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 641.724900][ T5724] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.724926][ T5724] usb 7-1: config 0 interface 0 has no altsetting 0 [ 641.724958][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.746969][ T5724] usb 7-1: config 0 descriptor?? [ 642.012392][T10899] vlan0: entered promiscuous mode [ 642.446135][ T5724] hid_parser_main: 14 callbacks suppressed [ 642.446160][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446189][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446217][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446244][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446271][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446297][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446324][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446350][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446376][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446402][ T5724] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 642.446473][ T5724] logitech 0003:046D:C24F.0003: unbalanced collection at end of report description [ 642.460693][ T5724] logitech 0003:046D:C24F.0003: parse failed [ 642.640448][ T5724] logitech 0003:046D:C24F.0003: probe with driver logitech failed with error -22 [ 643.275755][ T5605] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 643.376614][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1305'. [ 643.376638][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1305'. [ 643.376663][T10913] netlink: 'syz.5.1305': attribute type 19 has an invalid length. [ 643.376677][T10913] netlink: 'syz.5.1305': attribute type 20 has an invalid length. [ 643.435129][ T5605] usb 1-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 643.451313][ T5605] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.451346][ T5605] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.451382][ T5605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.516485][ T5724] usb 7-1: USB disconnect, device number 5 [ 643.522337][T10915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1306'. [ 643.522383][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1306'. [ 643.661955][ T6003] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.662003][ T6003] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.662038][ T6003] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.668896][ T5605] hub 1-1:4.0: USB hub found [ 643.672830][ T6003] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.841346][ T5605] hub 1-1:4.0: 3 ports detected [ 643.841541][ T5605] usb 1-1: selecting invalid altsetting 1 [ 643.841594][ T5605] hub 1-1:4.0: Using single TT (err -22) [ 644.319426][ T5605] usb 1-1: USB disconnect, device number 22 [ 646.545514][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 647.981089][T10990] loop7: detected capacity change from 0 to 7 [ 648.936567][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 649.092302][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.092596][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.136022][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.136108][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.185493][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.185580][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.188843][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.188922][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.189617][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.189705][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.190597][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.190681][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.192816][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.192887][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.193054][T10990] ldm_validate_partition_table(): Disk read failed. [ 649.194816][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.194889][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.196016][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 649.196142][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.197663][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 649.203834][T10990] Dev loop7: unable to read RDB block 0 [ 649.207613][T10990] loop7: unable to read partition table [ 649.207810][T10990] loop7: partition table beyond EOD, truncated [ 649.207827][T10990] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 649.319213][ T5745] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 649.414589][T11012] device-mapper: table: 248:3: verity: Hash device lookup failed (-ENOENT) [ 649.414615][T11012] device-mapper: ioctl: error adding target to table [ 649.516138][ T5745] usb 6-1: Using ep0 maxpacket: 16 [ 649.516989][ T5745] usb 6-1: New USB device found: idVendor=046d, idProduct=c534, bcdDevice=0.00 [ 649.519405][ T5745] usb 6-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 649.519437][ T5745] usb 6-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.519463][ T5745] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.519496][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.585925][ T5745] usb 6-1: config 0 descriptor?? [ 650.837843][T11026] tipc: Enabling of bearer rejected, already enabled [ 650.895127][ T5745] hid_parser_main: 4 callbacks suppressed [ 650.895152][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 650.895185][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 650.895211][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 650.895238][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 650.895264][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 650.895291][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 650.895319][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 650.895345][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 650.895371][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 650.895398][ T5745] logitech-djreceiver 0003:046D:C534.0004: unknown main item tag 0x0 [ 651.153880][ T5731] usb 6-1: USB disconnect, device number 4 [ 654.124053][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 654.124273][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 656.681538][T11074] bond0: option ad_select: unable to set because the bond device is up [ 663.045186][T11133] device-mapper: table: 248:4: crypt: Device lookup failed (-ENOENT) [ 663.045212][T11133] device-mapper: ioctl: error adding target to table [ 663.636020][T11140] ubi0: attaching mtd0 [ 663.690382][T11140] ubi0: scanning is finished [ 676.201209][ T4914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 676.231707][ T4914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 676.233169][ T4914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 676.234220][ T4914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 676.235242][ T4914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 677.143742][ T4914] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 677.170038][ T4914] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 677.186213][ T4914] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 677.203352][ T4914] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 677.204136][ T4914] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 677.416486][ T4914] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 677.452317][ T4914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 677.454154][ T4914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 677.458446][ T4914] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 677.480557][ T4914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 678.341420][T11153] rxe_eth0 speed is unknown, defaulting to 1000 [ 678.529541][ T5615] Bluetooth: hci5: command tx timeout [ 678.538995][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 678.575664][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 678.580096][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 678.597522][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 678.601614][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 679.393982][ T4914] Bluetooth: hci6: command tx timeout [ 679.632399][T11161] rxe_eth0 speed is unknown, defaulting to 1000 [ 679.830573][ T4914] Bluetooth: hci7: command tx timeout [ 680.583083][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 680.612828][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 680.617860][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 680.623705][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 680.624526][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 680.783384][ T4914] Bluetooth: hci5: command tx timeout [ 680.844096][T11164] rxe_eth0 speed is unknown, defaulting to 1000 [ 680.954656][ T4914] Bluetooth: hci8: command tx timeout [ 681.648361][ T4914] Bluetooth: hci6: command tx timeout [ 681.725258][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.725383][T11153] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.725549][T11153] bridge_slave_0: entered allmulticast mode [ 681.739158][T11153] bridge_slave_0: entered promiscuous mode [ 681.803752][T11153] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.803877][T11153] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.804415][T11153] bridge_slave_1: entered allmulticast mode [ 681.811939][T11153] bridge_slave_1: entered promiscuous mode [ 681.875938][T11180] rxe_eth0 speed is unknown, defaulting to 1000 [ 682.042087][T11153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.082073][ T4914] Bluetooth: hci7: command tx timeout [ 682.120993][T11153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.402632][T11153] team0: Port device team_slave_0 added [ 682.463466][T11153] team0: Port device team_slave_1 added [ 682.948892][ T4914] Bluetooth: hci9: command tx timeout [ 683.035473][ T4914] Bluetooth: hci5: command tx timeout [ 683.208889][ T4914] Bluetooth: hci8: command tx timeout [ 683.902597][ T4914] Bluetooth: hci6: command tx timeout [ 684.335985][ T4914] Bluetooth: hci7: command tx timeout [ 685.203159][ T4914] Bluetooth: hci9: command tx timeout [ 685.289671][ T4914] Bluetooth: hci5: command tx timeout [ 685.463072][ T4914] Bluetooth: hci8: command tx timeout [ 686.156842][ T4914] Bluetooth: hci6: command tx timeout [ 686.590324][ T4914] Bluetooth: hci7: command tx timeout [ 687.457376][ T4914] Bluetooth: hci9: command tx timeout [ 687.717433][ T4914] Bluetooth: hci8: command tx timeout [ 689.711617][ T4914] Bluetooth: hci9: command tx timeout [ 741.031987][ T61] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 741.067766][ T61] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 741.070343][ T61] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 741.072194][ T61] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 741.073048][ T61] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 742.214680][ T4914] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 742.263008][ T4914] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 742.271601][ T4914] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 742.273243][ T4914] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 742.274060][ T4914] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 742.469470][T11231] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 742.504016][T11231] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 742.505749][T11231] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 742.509546][T11231] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 742.521292][T11231] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 743.380189][ T61] Bluetooth: hci10: command tx timeout [ 743.563754][T11231] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 743.596013][T11231] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 743.603543][T11231] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 743.605084][T11231] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 743.605877][T11231] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 744.594060][ T61] Bluetooth: hci11: command tx timeout [ 744.767360][ T61] Bluetooth: hci12: command tx timeout [ 745.568142][T11231] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 745.608947][T11231] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 745.610718][T11231] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 745.611949][T11231] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 745.612952][T11231] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 745.642928][ T61] Bluetooth: hci10: command tx timeout [ 745.807787][T11231] Bluetooth: hci13: command tx timeout [ 746.848291][T11231] Bluetooth: hci11: command tx timeout [ 747.021585][T11231] Bluetooth: hci12: command tx timeout [ 747.801924][T11231] Bluetooth: hci14: command tx timeout [ 747.888671][T11231] Bluetooth: hci10: command tx timeout [ 748.061989][T11231] Bluetooth: hci13: command tx timeout [ 749.102579][T11231] Bluetooth: hci11: command tx timeout [ 749.275956][T11231] Bluetooth: hci12: command tx timeout [ 750.056226][T11231] Bluetooth: hci14: command tx timeout [ 750.142843][T11231] Bluetooth: hci10: command tx timeout [ 750.316320][T11231] Bluetooth: hci13: command tx timeout [ 751.356795][T11231] Bluetooth: hci11: command tx timeout [ 751.530043][T11231] Bluetooth: hci12: command tx timeout [ 752.310350][T11231] Bluetooth: hci14: command tx timeout [ 752.570471][T11231] Bluetooth: hci13: command tx timeout [ 754.218095][T11231] Bluetooth: hci4: command 0x0406 tx timeout [ 754.564708][T11231] Bluetooth: hci14: command tx timeout [ 772.750267][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 773.439245][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16 [ 773.446358][ C0] rcu: (detected by 0, t=10562 jiffies, g=31385, q=14801 ncpus=2) [ 773.454224][ C0] task:ktimers/0 state:R running task stack:22984 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080010 [ 773.467761][ C0] Call Trace: [ 773.471026][ C0] [ 773.473852][ C0] sched_show_task+0x4aa/0x5f0 [ 773.478607][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 773.483875][ C0] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 773.489060][ C0] ? wq_watchdog_touch+0xf9/0x160 [ 773.494069][ C0] print_other_cpu_stall+0x1115/0x14c0 [ 773.499513][ C0] ? notifier_call_chain+0x1a5/0x3d0 [ 773.504781][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 773.510575][ C0] ? __timekeeping_advance+0xe58/0x1370 [ 773.516104][ C0] rcu_sched_clock_irq+0xa05/0x1090 [ 773.521284][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 773.526895][ C0] ? rcu_is_watching+0x16/0xb0 [ 773.531638][ C0] ? trace_softirq_raise+0x3b/0x130 [ 773.536817][ C0] update_process_times+0x234/0x2d0 [ 773.541992][ C0] tick_nohz_handler+0x38f/0x6b0 [ 773.546910][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 773.552362][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 773.557453][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 773.562886][ C0] __hrtimer_run_queues+0x3a0/0xaf0 [ 773.568073][ C0] hrtimer_interrupt+0x4c2/0xa80 [ 773.573004][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 773.578965][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 773.584575][ C0] [ 773.587484][ C0] [ 773.590409][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 773.596368][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 773.602757][ C0] Code: f7 e8 1d 31 32 f6 f7 c3 00 02 00 00 74 05 e8 10 d7 5e f6 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 64 32 24 f6 65 48 8b 05 dc c4 5c 08 48 85 c0 74 18 5b 41 5e c3 [ 773.622336][ C0] RSP: 0018:ffffc90000157b98 EFLAGS: 00000206 [ 773.628379][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 773.636324][ C0] RDX: 0000000000000002 RSI: ffffffff8daee582 RDI: 0000000000000001 [ 773.644273][ C0] RBP: 1ffff110170851aa R08: ffffffff90d49abf R09: 1ffffffff21a9357 [ 773.652220][ C0] R10: dffffc0000000000 R11: fffffbfff21a9358 R12: ffffffff897528c0 [ 773.660165][ C0] R13: ffff8880b8428880 R14: ffff8880b8428880 R15: ffff8880607ed440 [ 773.668114][ C0] ? __pfx_advance_sched+0x10/0x10 [ 773.673278][ C0] __hrtimer_run_queues+0x2ee/0xaf0 [ 773.678467][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 773.683562][ C0] handle_softirqs+0x1d4/0x6c0 [ 773.688313][ C0] run_ktimerd+0x6a/0x100 [ 773.692628][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 773.697545][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 773.702562][ C0] kthread+0x38b/0x470 [ 773.706609][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 773.712043][ C0] ? __pfx_kthread+0x10/0x10 [ 773.716612][ C0] ret_from_fork+0x514/0xb70 [ 773.721180][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 773.726267][ C0] ? __switch_to+0xc78/0x1410 [ 773.730922][ C0] ? __pfx_kthread+0x10/0x10 [ 773.735488][ C0] ret_from_fork_asm+0x1a/0x30 [ 773.740243][ C0] [ 773.743257][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10094 jiffies! g31385 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 773.755220][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=21852 [ 773.763089][ C0] rcu: rcu_preempt kthread starved for 10095 jiffies! g31385 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 773.774082][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 773.784030][ C0] rcu: RCU grace-period kthread stack dump: [ 773.789895][ C0] task:rcu_preempt state:I stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 773.801785][ C0] Call Trace: [ 773.805058][ C0] [ 773.807972][ C0] __schedule+0x171d/0x56e0 [ 773.812480][ C0] ? __pfx___schedule+0x10/0x10 [ 773.817313][ C0] ? lock_acquire+0x115/0x350 [ 773.821977][ C0] ? schedule+0x90/0x2b0 [ 773.826211][ C0] schedule+0x164/0x2b0 [ 773.830370][ C0] schedule_timeout+0x152/0x2c0 [ 773.835210][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 773.840570][ C0] ? __pfx_process_timeout+0x10/0x10 [ 773.845841][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 773.851624][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 773.857163][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 773.862709][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 773.867542][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 773.873674][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 773.878957][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 773.884761][ C0] rcu_gp_kthread+0x9c/0x340 [ 773.889332][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 773.894510][ C0] ? __kthread_parkme+0x71/0x1f0 [ 773.899428][ C0] ? __kthread_parkme+0x199/0x1f0 [ 773.904433][ C0] kthread+0x38b/0x470 [ 773.908478][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 773.913650][ C0] ? __pfx_kthread+0x10/0x10 [ 773.918221][ C0] ret_from_fork+0x514/0xb70 [ 773.922793][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 773.927882][ C0] ? __switch_to+0xc78/0x1410 [ 773.932541][ C0] ? __pfx_kthread+0x10/0x10 [ 773.937115][ C0] ret_from_fork_asm+0x1a/0x30 [ 773.941870][ C0] [ 773.944872][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 773.951189][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 773.960745][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 773.970778][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 773.977172][ C0] Code: f7 e8 1d 31 32 f6 f7 c3 00 02 00 00 74 05 e8 10 d7 5e f6 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 64 32 24 f6 65 48 8b 05 dc c4 5c 08 48 85 c0 74 18 5b 41 5e c3 [ 773.996764][ C0] RSP: 0018:ffffc90000157b98 EFLAGS: 00000206 [ 774.002841][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000001 [ 774.010823][ C0] RDX: 0000000000000002 RSI: ffffffff8daee582 RDI: 0000000000000001 [ 774.018777][ C0] RBP: 1ffff110170851aa R08: ffffffff90d49abf R09: 1ffffffff21a9357 [ 774.026728][ C0] R10: dffffc0000000000 R11: fffffbfff21a9358 R12: ffffffff897528c0 [ 774.034704][ C0] R13: ffff8880b8428880 R14: ffff8880b8428880 R15: ffff8880607ed440 [ 774.042656][ C0] FS: 0000000000000000(0000) GS:ffff88812473f000(0000) knlGS:0000000000000000 [ 774.051568][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.058136][ C0] CR2: 00007f54d4697112 CR3: 0000000033792000 CR4: 00000000003526f0 [ 774.066094][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 774.074053][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 774.082007][ C0] Call Trace: [ 774.085274][ C0] [ 774.088189][ C0] __hrtimer_run_queues+0x2ee/0xaf0 [ 774.093389][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 774.098488][ C0] handle_softirqs+0x1d4/0x6c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 774.103239][ C0] run_ktimerd+0x6a/0x100 [ 774.107553][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 774.112490][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 774.117509][ C0] kthread+0x38b/0x470 [ 774.121565][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 774.127023][ C0] ? __pfx_kthread+0x10/0x10 [ 774.131600][ C0] ret_from_fork+0x514/0xb70 [ 774.136176][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 774.141282][ C0] ? __switch_to+0xc78/0x1410 [ 774.145941][ C0] ? __pfx_kthread+0x10/0x10 [ 774.150513][ C0] ret_from_fork_asm+0x1a/0x30 [ 774.155267][ C0]