last executing test programs: 3m10.396515718s ago: executing program 2 (id=849): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e23, @local}]}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="2c385a7af3", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m9.770632494s ago: executing program 2 (id=853): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r0, 0x40986f00, &(0x7f0000000500)) 3m9.522740484s ago: executing program 2 (id=854): socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x7, 0x7fff0000}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0xa602, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28217e5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) 3m8.325021796s ago: executing program 2 (id=855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r5, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe, 0xe, 0x5, [@datasec={0x3, 0x0, 0x0, 0xf, 0x2, [], "34aa"}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x2d, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 3m6.069936967s ago: executing program 2 (id=858): socket$igmp(0x2, 0x3, 0x2) inotify_init() socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m5.598810361s ago: executing program 2 (id=861): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@bridge_dellink={0x24, 0x11, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r2, 0x2040, 0x100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m49.749782286s ago: executing program 32 (id=861): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@bridge_dellink={0x24, 0x11, 0x5, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r2, 0x2040, 0x100}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.718097138s ago: executing program 0 (id=1320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) listns(0x0, 0xfffffffffffffffe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="6e8c136d952afee6af8d7505696649c727b56108f7a5cf36e46a0070c65a5c31e4fc81c6da755c9609f75b695cab69e7b69c66fc690d49d252ace7dd8342d91f06700f4cd4762c252a67699be9a5f93f79f95841fd7eba754ff7a3455e8a78c99d335bb27d1e85ea758713328ba0d0210e93ce1957922dcbee276a01e06e87c1e3ad95b0ba4e2db94944ff0a3cc4dfe3987a25ab14de387763583e3f5f595abd2e879c6589790e61be9f52eb57418ae36d8bad2340cda5ce6c491706", @ANYRESOCT=r1, @ANYRESDEC, @ANYRESHEX=r0], 0x9c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x29031, 0xffffffffffffffff, 0x9ab48000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000010040)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000c000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{r7, r8+60000000}, {0x77359400}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d60c15f308000240000000010c0001004e465155455545"], 0xd0}}, 0x40804) 7.78959582s ago: executing program 0 (id=1327): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.495822381s ago: executing program 0 (id=1329): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000140)=""/77) sendfile(r1, r2, 0x0, 0x8000fb00) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'sha384\x00'}, '\x00', '\x00', 0x0, 0x1400}}, 0xe0}}, 0x0) 6.480557496s ago: executing program 1 (id=1330): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) socket(0x10, 0x3, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0xa1b3, 0x2002, 0x3, 0x3e0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc938, 0x200, 0x3, 0x3a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x83fd, 0x1000, 0x3, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb7aa, 0x80000, 0x3, 0x46}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xace9, 0x4, 0x2, 0x99}}], 0x4, &(0x7f0000002300)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff9}, 0x0, 0x0, '\x00', {0x0, 0xebb, 0x0, &(0x7f0000001300)=@buf_max_buf="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"}}, &(0x7f0000002380)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="009800000400000000000000000000000000c6b80000000000000000"], 0x50) close(r9) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r10 = dup(r8) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x1000, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) r11 = openat2(0xffffffffffffffff, &(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x2000, 0x90, 0x36}, 0x18) r12 = syz_ublk_setup_io_uring(0x37c1, &(0x7f00000024c0)={0x0, 0x9ccf, 0x1, 0x2, 0x154}, &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r13, 0x0, 0x0, 0x1, 0x42, 0x1a) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000002700)={r0, &(0x7f0000002600)='taprio\x00', 0x20800, &(0x7f0000002640)={@_ha_fsid={[0x60, 0x8]}, {0x8, 0x3, 0x4, 0x4}}, 0x4, &(0x7f0000002680)={@_ha_fsid}, &(0x7f00000026c0)=0x8001}) r15 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000002440)={0x0, 0x1813, 0x88020, 0x3, 0x3dd, 0x0, r11}, &(0x7f0000002780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a51, 0x8, 0x0, 0x1e4, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8e73, 0x1000, 0x1, 0x12, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe139, 0x200, 0x0, 0x1d1, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac08, 0x0, 0x1, 0x1ca, 0x0, r15}}], 0x4, &(0x7f0000003a00)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xe}, 0x0, 0x0, '\x00', {0x0, 0x3, 0x0, &(0x7f0000002a00)=@buf_512="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"}}, &(0x7f0000003a80)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r16}, 0x69) 6.238297653s ago: executing program 0 (id=1332): socket$igmp(0x2, 0x3, 0x2) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.137884597s ago: executing program 3 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004050) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) 5.947325917s ago: executing program 0 (id=1334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@ifindex, 0x26, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000000303a14fe8000000000000000000000000000bbfe8000000000000000000000000000aa01059078020000006f00000000093bffff02000000000009040000000000000100050000000000000000000000000000ff0d6e"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) 5.945290785s ago: executing program 3 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 4.965574125s ago: executing program 1 (id=1337): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5b5e26bd7000ffdbdf2501000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403000000dc770000ab39"], 0xf) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, 0x0, &(0x7f0000000400)) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, 0xffffffffffffffff, 0x31, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f000068f000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000692000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x15b1, 0xd081, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x2d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.618960751s ago: executing program 1 (id=1339): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.962961054s ago: executing program 3 (id=1342): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x134, 0x65, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0xf}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x108, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf8, 0x1, [@m_tunnel_key={0x60, 0xf, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x94, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6, 0xffffffffffffffff, 0xfffffffd, 0x1}, 0x1}}]}, {0x4b, 0x6, "7f9990776b9116a186bf6ab6ea59402084b6c67eab678cda5e6845819a4bfc7305ff478d6ff7267175105e7cad5a505f8bc0247ec6267e7485971967b37fa2c137e0cf8fb8777e"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.962546673s ago: executing program 0 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) recvfrom(0xffffffffffffffff, &(0x7f0000000340)=""/4094, 0x1000, 0x40002060, &(0x7f0000001340)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x2, 0x3, 0x4, 0x2}}, 0xfffffd95) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000000040)) syz_usb_control_io(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x1, 0x5, "07ab279127"}}) 2.875696085s ago: executing program 4 (id=1344): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) (fail_nth: 1) 2.838129437s ago: executing program 1 (id=1345): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, 0x0, 0x0) 2.674854989s ago: executing program 4 (id=1346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000003600)=""/4125, &(0x7f00000010c0)=0x101d) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.044481959s ago: executing program 4 (id=1347): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0xa, 0x1, 0xce4, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340), 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x7eeb]}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r1, 0xffffffffffffffff, 0x70, 0x2010, 0x0, @value=r2, @void, @void, @void, r0}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x3, 0x1, 0xc6, 0x5f}, {0xfb9, 0x9, 0x4, 0x4}, {0x10, 0x1, 0x3, 0xffff0001}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') getdents64(r3, &(0x7f0000001f80)=""/4102, 0x1006) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a0001005dc4389c00000000810000000000400000000000140002"], 0x30}}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) 1.834750438s ago: executing program 1 (id=1348): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5b5e26bd7000ffdbdf2501000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403000000dc770000ab39"], 0xf) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f000068f000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000692000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x15b1, 0xd081, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x2d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 662.924886ms ago: executing program 1 (id=1349): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @remote, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x9a}, 0x3400c8d4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x7b, 0xb4, 0xca, 0x40, 0x483, 0x3747, 0x3a47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x4, 0xe0, 0x2, "", [{{0x9, 0x4, 0xa9, 0x8, 0x0, 0x5a, 0x65, 0x76, 0x5}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 620.751007ms ago: executing program 3 (id=1350): socket$igmp6(0xa, 0x3, 0x3a) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 358.887528ms ago: executing program 4 (id=1351): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9c7ef647c524516c0e45ec91a98a614276cb32185400"/37, 0x25}, {&(0x7f0000001bc0)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76f2c54838cc07f75ff14636ce35f9c1d2dd70ce5c6e64c0", 0x38}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001800)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc5e3ee60080b8785d96000100", "131dfac11d875397bdb22d007ee886b309c80300000000000000000000000000000000000000000000000000000000000000000000ffffffff00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 265.534809ms ago: executing program 3 (id=1352): syz_emit_ethernet(0xdf, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xa9, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, [{0x3, 0x9, "d33e6d4706598090a8030037ffffefffffffff23732407010000ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x8, "77f9290b6e87290b6e87f278e94724e20c43c95f9b49e04a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e"}]}}}}}}, 0x0) (fail_nth: 2) 213.071151ms ago: executing program 4 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a0001002d00010000000a0080000000", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x404c055}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000000080)={'netdevsim0\x00', @ifru_ivalue}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x80, 0x4, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x66, 0x0, 0x5, 0x4, 0x0, @empty, @local, {[@rr={0x7, 0xf, 0x7c, [@dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newchain={0x34, 0x64, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff2}, {0x2, 0x7}, {0xffff, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_RATE={0x6, 0x5, {0x50}}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000010200)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xd}}]}}]}, 0x3c}}, 0x0) 62.617089ms ago: executing program 3 (id=1354): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ftruncate(0xffffffffffffffff, 0x2007ffb) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000140)=""/77) sendfile(r1, r2, 0x0, 0x8000fb00) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'sha384\x00'}, '\x00', '\x00', 0x0, 0x1400}}, 0xe0}}, 0x0) 0s ago: executing program 4 (id=1355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004050) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) kernel console output (not intermixed with test programs): utor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.031038][ T36] audit: type=1326 audit(1785558446.362:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.051793][ T36] audit: type=1326 audit(1785558446.372:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.051848][ T36] audit: type=1326 audit(1785558446.372:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.123216][ T6947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.418'. [ 176.216838][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 176.216854][ T36] audit: type=1326 audit(1785558446.552:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.216989][ T36] audit: type=1326 audit(1785558446.552:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.217242][ T36] audit: type=1326 audit(1785558446.552:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.217531][ T36] audit: type=1326 audit(1785558446.552:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.217643][ T36] audit: type=1326 audit(1785558446.552:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.217784][ T36] audit: type=1326 audit(1785558446.552:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.218032][ T36] audit: type=1326 audit(1785558446.552:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.218194][ T36] audit: type=1326 audit(1785558446.552:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.230593][ T36] audit: type=1326 audit(1785558446.562:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.230712][ T36] audit: type=1326 audit(1785558446.562:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 176.358032][ T6950] ip6_vti0: Master is either lo or non-ether device [ 177.160884][ T6972] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 178.497938][ T6982] ip_vti0: Master is either lo or non-ether device [ 180.567965][ T6777] ubi0: scrubbed PEB 0 (LEB 2147479551:0), data moved to PEB 31 [ 181.534265][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 181.536665][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 181.536973][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 181.537702][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 181.537862][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 181.882420][ T7023] futex_wake_op: syz.4.447 tries to shift op by 144; fix this program [ 183.979086][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 183.980734][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 183.981108][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 183.981457][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 183.981709][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 184.436864][ T7065] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 185.029156][ T7069] bond1: (slave gretap1): making interface the new active one [ 185.030131][ T7069] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 185.055960][ T7072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.692625][ T5600] bridge0: port 3(syz_tun) entered disabled state [ 186.330389][ T5600] syz_tun (unregistering): left allmulticast mode [ 186.330424][ T5600] syz_tun (unregistering): left promiscuous mode [ 186.330532][ T5600] bridge0: port 3(syz_tun) entered disabled state [ 190.491130][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.523368][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.526680][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.530499][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.593846][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.962886][ T1189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.737557][ T5611] Bluetooth: hci1: command tx timeout [ 192.817649][ T1189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.338099][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338183][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.676304][ T1189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.811732][ T5611] Bluetooth: hci1: command tx timeout [ 195.584601][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.584818][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.585050][ T7148] bridge_slave_0: entered allmulticast mode [ 195.587826][ T7148] bridge_slave_0: entered promiscuous mode [ 195.638495][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.638615][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.638845][ T7148] bridge_slave_1: entered allmulticast mode [ 195.674061][ T7148] bridge_slave_1: entered promiscuous mode [ 195.807851][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.822321][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.320570][ T7222] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 196.411166][ T7222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.429369][ T7148] team0: Port device team_slave_0 added [ 196.691013][ T1189] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.789253][ T7222] gretap1: entered promiscuous mode [ 196.861915][ T7222] bond1: (slave gretap1): making interface the new active one [ 196.871289][ T7222] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 196.884542][ T7148] team0: Port device team_slave_1 added [ 196.902184][ T5611] Bluetooth: hci1: command tx timeout [ 197.917607][ T7226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.939594][ T7226] bond1: (slave bond2): Enslaving as an active interface with a down link [ 198.431851][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.431868][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.431892][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.436605][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.436621][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.436644][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.977891][ T5611] Bluetooth: hci1: command tx timeout [ 199.102166][ T7250] ubi: mtd0 is already attached to ubi0 [ 199.157893][ T7148] hsr_slave_0: entered promiscuous mode [ 199.168712][ T7148] hsr_slave_1: entered promiscuous mode [ 199.196025][ T7148] debugfs: 'hsr0' already exists in 'hsr' [ 199.196054][ T7148] Cannot create hsr debugfs directory [ 199.305627][ T7247] ubi0 error: verify_mkvol_req: bad volume creation request [ 199.305661][ T7247] Volume creation request dump: [ 199.305667][ T7247] vol_id 0 [ 199.305674][ T7247] alignment 1 [ 199.305679][ T7247] bytes 65536 [ 199.305686][ T7247] vol_type 3 [ 199.305692][ T7247] name_len 7 [ 199.305699][ T7247] 1st 16 characters of name: test [ 200.127767][ T7265] __nla_validate_parse: 5 callbacks suppressed [ 200.127788][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 201.103027][ T7270] ubi: mtd0 is already attached to ubi0 [ 201.260512][ T7270] ubi0 error: ubi_create_volume: volume 0 already exists [ 201.260571][ T7270] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 201.656529][ T4914] Bluetooth: hci2: command 0x0406 tx timeout [ 201.656579][ T4914] Bluetooth: hci0: command 0x0406 tx timeout [ 201.656603][ T4914] Bluetooth: hci3: command 0x0406 tx timeout [ 201.656625][ T4914] Bluetooth: hci4: command 0x0406 tx timeout [ 202.390016][ T7291] ubi: mtd0 is already attached to ubi0 [ 202.541306][ T7279] ubi0 error: verify_mkvol_req: bad volume creation request [ 202.541327][ T7279] Volume creation request dump: [ 202.541331][ T7279] vol_id 0 [ 202.541335][ T7279] alignment 0 [ 202.541338][ T7279] bytes 0 [ 202.541342][ T7279] vol_type 0 [ 202.541346][ T7279] name_len 0 [ 202.541349][ T7279] 1st 16 characters of name: [ 202.663874][ T1189] bridge_slave_1: left allmulticast mode [ 202.664024][ T1189] bridge_slave_1: left promiscuous mode [ 202.691353][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.997146][ T1189] bridge_slave_0: left allmulticast mode [ 203.997195][ T1189] bridge_slave_0: left promiscuous mode [ 203.997438][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.316222][ T7317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.553'. [ 205.189783][ T7339] capability: warning: `syz.1.560' uses deprecated v2 capabilities in a way that may be insecure [ 206.312583][ T1189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.374070][ T1189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.413728][ T1189] bond0 (unregistering): Released all slaves [ 210.246182][ T7403] loop4: detected capacity change from 0 to 7 [ 210.270628][ T7403] Dev loop4: unable to read RDB block 7 [ 210.270657][ T7403] loop4: AHDI p2 [ 210.270672][ T7403] loop4: partition table partially beyond EOD, truncated [ 210.434134][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 212.564794][ T7415] bond3 (unregistering): Released all slaves [ 213.176916][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'. [ 213.231559][ T7462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.916074][ T7459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.378396][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 215.068796][ T7484] loop4: detected capacity change from 0 to 7 [ 215.226949][ T7484] Dev loop4: unable to read RDB block 7 [ 215.226992][ T7484] loop4: AHDI p2 p3 [ 215.227010][ T7484] loop4: partition table partially beyond EOD, truncated [ 215.279985][ T7484] loop4: p3 start 335544320 is beyond EOD, truncated [ 215.527796][ T7498] futex_wake_op: syz.0.608 tries to shift op by 144; fix this program [ 216.095611][ T7514] netlink: 'syz.3.614': attribute type 1 has an invalid length. [ 217.422101][ T7514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.479217][ T7520] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 217.612084][ T7536] netlink: 48 bytes leftover after parsing attributes in process `syz.0.618'. [ 217.746305][ T7539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.791269][ T1189] hsr_slave_0: left promiscuous mode [ 217.824406][ T1189] hsr_slave_1: left promiscuous mode [ 217.848450][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.848585][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.957936][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.957963][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.327647][ T7563] fuse: Bad value for 'fd' [ 218.349599][ T7530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.499909][ T1189] veth1_macvtap: left promiscuous mode [ 218.546057][ T1189] veth0_macvtap: left promiscuous mode [ 218.564531][ T1189] veth1_vlan: left promiscuous mode [ 218.569927][ T1189] veth0_vlan: left promiscuous mode [ 219.685119][ T7573] fuse: Bad value for 'fd' [ 222.223445][ T1189] team0 (unregistering): Port device team_slave_1 removed [ 222.296178][ T1189] team0 (unregistering): Port device team_slave_0 removed [ 222.353952][ T7595] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 223.278491][ T7615] netlink: 72 bytes leftover after parsing attributes in process `syz.0.640'. [ 223.291923][ T7595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.459536][ T7597] gretap2: entered promiscuous mode [ 223.480189][ T7597] bond2: (slave gretap2): making interface the new active one [ 223.511074][ T7597] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 223.514876][ T7598] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 223.770911][ T7628] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 223.845895][ T7628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.340518][ T7628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.371083][ T7628] bond3: (slave bond4): Enslaving as an active interface with a down link [ 227.230347][ T7670] netlink: 72 bytes leftover after parsing attributes in process `syz.4.651'. [ 227.494840][ T7148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.535470][ T7676] ubi: mtd0 is already attached to ubi0 [ 227.598549][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.599925][ T7148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.688575][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.689818][ T7148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.773414][ T7655] ubi0 error: ubi_create_volume: volume 0 already exists [ 227.773469][ T7655] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 228.558994][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.560070][ T7693] veth1_to_bond: entered allmulticast mode [ 228.646267][ T7684] veth1_to_bond: left allmulticast mode [ 228.650676][ T7148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.849177][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.215253][ T7715] : renamed from bond_slave_0 (while UP) [ 230.430904][ T7730] netlink: 'syz.0.662': attribute type 1 has an invalid length. [ 230.657627][ T7724] bond4 (unregistering): Released all slaves [ 231.702924][ T7730] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 231.712866][ T7734] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 231.735064][ T7738] gretap1: entered promiscuous mode [ 231.829303][ T7749] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 231.862732][ T7739] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 231.867661][ T7741] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 231.876065][ T7751] program syz.1.667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.933457][ T7749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.060281][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.958082][ T7749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.962259][ T7749] bond4: (slave bond5): Enslaving as an active interface with a down link [ 233.012507][ T7762] ip_vti0: Master is either lo or non-ether device [ 233.242843][ T7148] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.296670][ T7774] netlink: 176 bytes leftover after parsing attributes in process `syz.0.672'. [ 233.307502][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.308367][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.462452][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.462578][ T771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.619295][ T7800] veth1_to_bond: entered allmulticast mode [ 239.163131][ T7806] : renamed from bond_slave_0 (while UP) [ 239.217028][ T7790] veth1_to_bond: left allmulticast mode [ 239.295952][ T7810] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 239.343938][ T7810] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.397116][ T7810] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.400332][ T7810] bond6: (slave bond7): Enslaving as an active interface with a down link [ 239.849229][ T7148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.061709][ T7148] veth0_vlan: entered promiscuous mode [ 240.114910][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 240.114928][ T36] audit: type=1326 audit(1785558510.432:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.115058][ T36] audit: type=1326 audit(1785558510.452:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.153258][ T36] audit: type=1326 audit(1785558510.492:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.153310][ T36] audit: type=1326 audit(1785558510.492:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.153348][ T36] audit: type=1326 audit(1785558510.492:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.153386][ T36] audit: type=1326 audit(1785558510.492:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.154955][ T36] audit: type=1326 audit(1785558510.492:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.155000][ T36] audit: type=1326 audit(1785558510.492:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.156730][ T36] audit: type=1326 audit(1785558510.492:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.175367][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 240.214076][ T36] audit: type=1326 audit(1785558510.552:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60ddfe019 code=0x7ffc0000 [ 240.393006][ T7835] batadv_slave_1: entered promiscuous mode [ 240.399780][ T7839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.628269][ T7839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.727864][ T7148] veth1_vlan: entered promiscuous mode [ 240.852459][ T7829] batadv_slave_1: left promiscuous mode [ 240.858384][ T7148] veth0_macvtap: entered promiscuous mode [ 240.882724][ T7148] veth1_macvtap: entered promiscuous mode [ 240.950143][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.968845][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.031862][ T7854] : renamed from bond_slave_0 (while UP) [ 241.111929][ T3291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.156225][ T7860] ubi: mtd0 is already attached to ubi0 [ 244.439037][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.886612][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 244.914726][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.912732][ T3411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.912751][ T3411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.932242][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.203196][ T7901] ip6_vti0: Master is either lo or non-ether device [ 246.241022][ T3411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.241043][ T3411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.701643][ T7921] veth1_to_bond: entered allmulticast mode [ 247.704786][ T7925] ubi: mtd0 is already attached to ubi0 [ 247.849213][ T7917] veth1_to_bond: left allmulticast mode [ 248.500523][ T7932] ubi: mtd0 is already attached to ubi0 [ 248.649459][ T7934] program syz.0.718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.978560][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 249.164964][ T7944] gretap1: entered promiscuous mode [ 249.468520][ T7947] bond1 (unregistering): Released all slaves [ 250.127924][ T7967] program syz.0.731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.521878][ T7977] ubi: mtd0 is already attached to ubi0 [ 250.941285][ T7981] ubi: mtd0 is already attached to ubi0 [ 252.524327][ T7993] veth1_to_bond: entered allmulticast mode [ 252.983022][ T7988] veth1_to_bond: left allmulticast mode [ 255.777896][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.777960][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.209613][ T8029] ubi: mtd0 is already attached to ubi0 [ 259.545594][ T8033] veth1_to_bond: entered allmulticast mode [ 259.921503][ T8030] veth1_to_bond: left allmulticast mode [ 260.142272][ T8045] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 260.151774][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 261.398228][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.398360][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 261.398383][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.469055][ T10] usb 1-1: config 0 descriptor?? [ 261.561537][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 262.360069][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.763'. [ 262.411226][ T8077] ubi: mtd0 is already attached to ubi0 [ 262.484174][ T8075] bond5 (unregistering): Released all slaves [ 263.740914][ T8085] ubi: mtd0 is already attached to ubi0 [ 264.014272][ T5879] usb 1-1: USB disconnect, device number 2 [ 264.843686][ T8104] ubi0 error: verify_mkvol_req: bad volume creation request [ 264.843731][ T8104] Volume creation request dump: [ 264.843738][ T8104] vol_id 0 [ 264.843746][ T8104] alignment 0 [ 264.843753][ T8104] bytes 0 [ 264.843760][ T8104] vol_type 0 [ 264.843767][ T8104] name_len 0 [ 264.843774][ T8104] 1st 16 characters of name: [ 265.176381][ T8098] syz.3.773 (8098) used greatest stack depth: 17056 bytes left [ 265.260292][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.273458][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.540924][ T8124] ubi: mtd0 is already attached to ubi0 [ 265.927304][ T8129] ubi: mtd0 is already attached to ubi0 [ 266.156361][ T8134] overlayfs: missing 'lowerdir' [ 269.565644][ T8167] 9p: Bad value for 'rfdno' [ 270.115299][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 270.116800][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 270.117159][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 270.117485][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 271.463686][ T8197] ubi: mtd0 is already attached to ubi0 [ 274.445687][ T8205] 9p: Bad value for 'rfdno' [ 274.615122][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 275.862841][ T8234] : renamed from bond_slave_0 (while UP) [ 280.005739][ T8254] 9p: Bad value for 'rfdno' [ 280.294054][ T8260] overlayfs: missing 'lowerdir' [ 281.600596][ T8271] ubi0 error: verify_mkvol_req: bad volume creation request [ 281.600619][ T8271] Volume creation request dump: [ 281.600622][ T8271] vol_id 0 [ 281.600626][ T8271] alignment 0 [ 281.600630][ T8271] bytes 0 [ 281.600634][ T8271] vol_type 0 [ 281.600637][ T8271] name_len 0 [ 281.600641][ T8271] 1st 16 characters of name: [ 281.740401][ T8272] ubi: mtd0 is already attached to ubi0 [ 281.860755][ T8277] overlayfs: missing 'lowerdir' [ 288.171103][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 288.212860][ T8319] netlink: 60 bytes leftover after parsing attributes in process `syz.3.844'. [ 289.004535][ T8338] ubi: mtd0 is already attached to ubi0 [ 290.800151][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 290.802925][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 290.803233][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 290.803534][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 290.803821][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 292.995125][ T8353] overlayfs: missing 'lowerdir' [ 293.088009][ T8359] netlink: 'syz.1.856': attribute type 2 has an invalid length. [ 293.628433][ T3411] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 296.430010][ T8359] : entered promiscuous mode [ 296.473873][ T8376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.828755][ T8398] netlink: 'syz.0.869': attribute type 1 has an invalid length. [ 297.116500][ T8398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.149370][ T8402] gretap1: entered promiscuous mode [ 297.170827][ T8402] bond1: (slave gretap1): making interface the new active one [ 297.216827][ T8402] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 300.517777][ T8406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.531669][ T8406] bond1: (slave bond2): Enslaving as an active interface with a down link [ 301.514704][ T8419] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 304.347408][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 304.379004][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 304.381366][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 304.387313][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 304.393165][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 308.883320][ T4927] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 309.217307][ T8479] overlayfs: missing 'lowerdir' [ 309.380084][ T4927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.380139][ T4927] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 309.380161][ T4927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.871087][ T4927] usb 5-1: config 0 descriptor?? [ 310.099545][ T4927] usb 5-1: can't set config #0, error -71 [ 310.200502][ T8471] netlink: 'syz.3.890': attribute type 2 has an invalid length. [ 310.343456][ T4927] usb 5-1: USB disconnect, device number 3 [ 310.691420][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.892'. [ 310.851613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 310.956526][ T8495] netlink: 72 bytes leftover after parsing attributes in process `syz.4.893'. [ 311.049998][ T8471] : entered promiscuous mode [ 311.080829][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.136302][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.173549][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.193602][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.197678][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.243279][ T8524] program syz.1.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.587163][ T5608] Bluetooth: hci5: command tx timeout [ 315.075483][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.903'. [ 315.346119][ T36] kauditd_printk_skb: 133 callbacks suppressed [ 315.346137][ T36] audit: type=1326 audit(1785558585.682:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.403769][ T36] audit: type=1326 audit(1785558585.732:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.403822][ T36] audit: type=1326 audit(1785558585.732:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.403856][ T36] audit: type=1326 audit(1785558585.732:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.403889][ T36] audit: type=1326 audit(1785558585.732:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.403921][ T36] audit: type=1326 audit(1785558585.732:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.403956][ T36] audit: type=1326 audit(1785558585.732:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.403992][ T36] audit: type=1326 audit(1785558585.732:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.404022][ T36] audit: type=1326 audit(1785558585.732:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.404051][ T36] audit: type=1326 audit(1785558585.732:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.904" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 315.612504][ T5608] Bluetooth: hci5: command tx timeout [ 315.744944][ T8547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.906'. [ 317.239722][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.239795][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.861390][ T5608] Bluetooth: hci5: command tx timeout [ 318.100780][ T8565] program syz.0.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.395821][ T8567] overlayfs: missing 'lowerdir' [ 318.579104][ T8567] netlink: 'syz.4.912': attribute type 2 has an invalid length. [ 318.774035][ T8578] netlink: 72 bytes leftover after parsing attributes in process `syz.3.916'. [ 319.045899][ T3291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.150618][ T8571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.914'. [ 319.257077][ T8567] : entered promiscuous mode [ 319.754416][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 319.776988][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 319.781796][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 319.784519][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 319.787101][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 321.408248][ T5608] Bluetooth: hci5: command tx timeout [ 323.271041][ T3291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.312360][ T8599] : renamed from bond_slave_0 (while UP) [ 323.944415][ T8616] futex_wake_op: syz.0.926 tries to shift op by 144; fix this program [ 325.996847][ T3291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.119576][ T8629] netlink: 72 bytes leftover after parsing attributes in process `syz.4.930'. [ 326.222409][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 326.436876][ T8635] futex_wake_op: syz.1.932 tries to shift op by 144; fix this program [ 329.165571][ T3291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.243066][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.243272][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.243481][ T8497] bridge_slave_0: entered allmulticast mode [ 331.246083][ T8497] bridge_slave_0: entered promiscuous mode [ 331.256746][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.256861][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.257397][ T8497] bridge_slave_1: entered allmulticast mode [ 331.263593][ T8497] bridge_slave_1: entered promiscuous mode [ 332.438038][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.614085][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.200570][ T8497] team0: Port device team_slave_0 added [ 334.219612][ T8497] team0: Port device team_slave_1 added [ 334.356011][ T8688] overlayfs: missing 'lowerdir' [ 334.432793][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.432810][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.432835][ T8497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.518460][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.518477][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.518503][ T8497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.844750][ T3291] bridge_slave_1: left allmulticast mode [ 335.844853][ T3291] bridge_slave_1: left promiscuous mode [ 335.845087][ T3291] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.104565][ T3291] bridge_slave_0: left allmulticast mode [ 337.104602][ T3291] bridge_slave_0: left promiscuous mode [ 337.131272][ T3291] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.832061][ T8741] overlayfs: missing 'lowerdir' [ 339.462311][ T3291] bond0 (unregistering): (slave 30): Releasing backup interface [ 339.543005][ T3291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.583842][ T3291] bond0 (unregistering): Released all slaves [ 339.616886][ T8708] veth1_to_bond: entered allmulticast mode [ 339.619999][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 339.705599][ T8708] veth1_to_bond: left allmulticast mode [ 339.735135][ T8497] hsr_slave_0: entered promiscuous mode [ 339.736437][ T8497] hsr_slave_1: entered promiscuous mode [ 339.737328][ T8497] debugfs: 'hsr0' already exists in 'hsr' [ 339.737351][ T8497] Cannot create hsr debugfs directory [ 340.050468][ T8757] overlayfs: missing 'lowerdir' [ 340.677995][ T8757] netlink: 'syz.4.960': attribute type 2 has an invalid length. [ 341.107502][ T8768] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 341.250162][ T8774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.965'. [ 341.518481][ T8784] overlayfs: missing 'lowerdir' [ 342.201845][ T5733] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 342.884434][ T5733] usb 2-1: unable to get BOS descriptor or descriptor too short [ 342.979574][ T5733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.979628][ T5733] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 342.979651][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 342.979672][ T5733] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 342.984601][ T5733] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 342.984630][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.984649][ T5733] usb 2-1: Product: syz [ 342.984662][ T5733] usb 2-1: Manufacturer: syz [ 342.984676][ T5733] usb 2-1: SerialNumber: syz [ 343.047648][ T5733] usb 2-1: config 0 descriptor?? [ 343.051334][ T8786] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.169755][ C1] usb 2-1: NFC: Urb failure (status -71) [ 343.180464][ T5733] usb 2-1: NFC: Unable to get FW version [ 343.216140][ T5733] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 343.286799][ T5717] usb 2-1: USB disconnect, device number 2 [ 345.317134][ T8800] veth1_to_bond: entered allmulticast mode [ 345.655846][ T8834] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 345.874288][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.979'. [ 346.233579][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 346.332681][ T8794] veth1_to_bond: left allmulticast mode [ 346.682559][ T3291] hsr_slave_0: left promiscuous mode [ 346.832022][ T3291] hsr_slave_1: left promiscuous mode [ 346.833217][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.833277][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.883585][ T3291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.883604][ T3291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.050803][ T3291] veth1_macvtap: left promiscuous mode [ 347.050904][ T3291] veth0_macvtap: left promiscuous mode [ 347.051150][ T3291] veth1_vlan: left promiscuous mode [ 347.051427][ T3291] veth0_vlan: left promiscuous mode [ 348.866127][ T36] kauditd_printk_skb: 185 callbacks suppressed [ 348.866145][ T36] audit: type=1326 audit(1785558619.202:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 348.869829][ T36] audit: type=1326 audit(1785558619.202:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 348.869878][ T36] audit: type=1326 audit(1785558619.202:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 348.869919][ T36] audit: type=1326 audit(1785558619.202:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 348.871163][ T36] audit: type=1326 audit(1785558619.202:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 348.991694][ T36] audit: type=1326 audit(1785558619.302:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 348.991749][ T36] audit: type=1326 audit(1785558619.302:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 348.991788][ T36] audit: type=1326 audit(1785558619.312:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 348.991828][ T36] audit: type=1326 audit(1785558619.312:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 348.991866][ T36] audit: type=1326 audit(1785558619.312:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8866 comm="syz.4.989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 349.804523][ T3291] team0 (unregistering): Port device team_slave_1 removed [ 349.883151][ T8872] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 349.902367][ T3291] team0 (unregistering): Port device team_slave_0 removed [ 350.003667][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 350.222402][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 350.492567][ T8880] overlayfs: missing 'lowerdir' [ 352.067382][ T8872] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 354.272729][ T8497] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.384082][ T8912] FAULT_INJECTION: forcing a failure. [ 354.384082][ T8912] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 354.384204][ T8912] CPU: 1 UID: 0 PID: 8912 Comm: syz.0.998 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 354.384233][ T8912] Tainted: [L]=SOFTLOCKUP [ 354.384239][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.384257][ T8912] Call Trace: [ 354.384302][ T8912] [ 354.384373][ T8912] dump_stack_lvl+0xe8/0x150 [ 354.384677][ T8912] should_fail_ex+0x467/0x600 [ 354.384772][ T8912] _copy_to_user+0x31/0xb0 [ 354.384853][ T8912] sctp_getsockopt_event+0x290/0x330 [ 354.384939][ T8912] ? __local_bh_enable+0x1e1/0x2f0 [ 354.385049][ T8912] ? __pfx_sctp_getsockopt_event+0x10/0x10 [ 354.385070][ T8912] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 354.385093][ T8912] ? lockdep_hardirqs_on+0x7a/0x110 [ 354.385170][ T8912] sctp_getsockopt+0x242/0xb90 [ 354.385221][ T8912] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 354.385336][ T8912] do_sock_getsockopt+0x51d/0x7e0 [ 354.385381][ T8912] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 354.385420][ T8912] ? __fget_files+0x3a8/0x420 [ 354.385491][ T8912] ? __fget_files+0x2a/0x420 [ 354.385518][ T8912] __x64_sys_getsockopt+0x1aa/0x250 [ 354.385547][ T8912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.385582][ T8912] do_syscall_64+0x174/0x580 [ 354.385636][ T8912] ? trace_irq_disable+0x3b/0x140 [ 354.385700][ T8912] ? clear_bhb_loop+0x40/0x90 [ 354.385723][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.385742][ T8912] RIP: 0033:0x7fda3b0ee019 [ 354.385795][ T8912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.385810][ T8912] RSP: 002b:00007fda39346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 354.385836][ T8912] RAX: ffffffffffffffda RBX: 00007fda3b375fa0 RCX: 00007fda3b0ee019 [ 354.385850][ T8912] RDX: 000000000000007f RSI: 0000000000000084 RDI: 0000000000000003 [ 354.385861][ T8912] RBP: 00007fda39346090 R08: 0000200000001180 R09: 0000000000000000 [ 354.385874][ T8912] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 354.385886][ T8912] R13: 00007fda3b376038 R14: 00007fda3b375fa0 R15: 00007fffc24e8e78 [ 354.385917][ T8912] [ 354.409898][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.434369][ T8497] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 355.323791][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.324617][ T8497] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 355.390709][ T8914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.508395][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.527626][ T8497] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.675731][ T8927] loop8: detected capacity change from 0 to 8 [ 355.780748][ T8927] Dev loop8: unable to read RDB block 8 [ 355.780852][ T8927] loop8: unable to read partition table [ 355.781047][ T8927] loop8: partition table beyond EOD, truncated [ 355.781079][ T8927] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 356.756785][ T8497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.321677][ T5879] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 357.450974][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.491663][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 357.497592][ T5879] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.497611][ T5879] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.497623][ T5879] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 357.497636][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 357.497655][ T5879] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 357.497667][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.606539][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.634548][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.634783][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.673778][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.673956][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.824897][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 357.959413][ T5879] usb 4-1: config 0 descriptor?? [ 358.053177][ T8955] 9p: Bad value for 'wfdno' [ 358.700946][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1004'. [ 358.700989][ T8964] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 359.178436][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 359.239546][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 359.248301][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 359.258404][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 359.449522][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 359.661678][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 359.661796][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 359.792683][ T5717] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 359.808005][ T5879] usb 4-1: USB disconnect, device number 3 [ 359.943714][ T5717] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.943747][ T5717] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.943787][ T5717] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 359.943809][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.623826][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 361.078367][ T5717] hub 1-1:4.0: USB hub found [ 361.080717][ T5717] hub 1-1:4.0: 2 ports detected [ 361.080773][ T5717] usb 1-1: selecting invalid altsetting 1 [ 361.080800][ T5717] hub 1-1:4.0: Using single TT (err -22) [ 361.749779][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.839635][ T5717] usb 1-1: USB disconnect, device number 3 [ 361.851228][ T4927] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 361.989914][ T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 362.173371][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 362.179705][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.179737][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.179773][ T48] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 362.179795][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.201851][ T48] usb 4-1: config 0 descriptor?? [ 362.295119][ T48] hub 4-1:0.0: USB hub found [ 362.414546][ T48] hub 4-1:0.0: 1 port detected [ 362.752358][ T9030] syz.3.1013 uses obsolete (PF_INET,SOCK_PACKET) [ 362.862529][ T48] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 362.862637][ T48] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 362.934756][ T48] usbhid 4-1:0.0: can't add hid device: -71 [ 362.934857][ T48] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 363.186117][ T8497] veth0_vlan: entered promiscuous mode [ 364.009100][ T48] usb 4-1: USB disconnect, device number 4 [ 364.171461][ T8497] veth1_vlan: entered promiscuous mode [ 364.387522][ T8497] veth0_macvtap: entered promiscuous mode [ 364.405965][ T8497] veth1_macvtap: entered promiscuous mode [ 365.169347][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.211353][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.344387][ T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.344454][ T55] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.344489][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.344523][ T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.625150][ T3317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.625171][ T3317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.828368][ T3317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.828388][ T3317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.541579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 372.641578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 373.257519][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.293676][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.294911][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.296206][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.296887][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.041820][ T9110] veth1_to_bond: entered allmulticast mode [ 374.057630][ T9103] veth1_to_bond: left allmulticast mode [ 375.023866][ T4927] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 375.181300][ T4927] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 375.181329][ T4927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.181347][ T4927] usb 4-1: Product: syz [ 375.181359][ T4927] usb 4-1: Manufacturer: syz [ 375.181381][ T4927] usb 4-1: SerialNumber: syz [ 375.228566][ T4927] usb 4-1: config 0 descriptor?? [ 375.464666][ T4927] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 376.021994][ T5608] Bluetooth: hci1: command tx timeout [ 376.159242][ T9141] ipip0: entered promiscuous mode [ 376.159495][ T9141] ipip0: entered allmulticast mode [ 376.448499][ T9175] overlayfs: missing 'lowerdir' [ 377.844806][ T4927] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 377.873895][ T4927] usb 4-1: USB disconnect, device number 5 [ 378.091977][ T5608] Bluetooth: hci1: command tx timeout [ 378.368791][ T1042] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.665030][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.665136][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.727802][ T9203] loop5: detected capacity change from 0 to 7 [ 378.818177][ T9210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1055'. [ 378.855103][ T9203] Dev loop5: unable to read RDB block 7 [ 378.855121][ T9203] loop5: AHDI p1 [ 378.855132][ T9203] loop5: partition table partially beyond EOD, truncated [ 379.207209][ T1042] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.181858][ T5608] Bluetooth: hci1: command tx timeout [ 380.656791][ T9237] tmpfs: Bad value for 'mpol' [ 380.690383][ T9240] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 381.053749][ T1042] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.286843][ T9263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1070'. [ 381.346124][ T9267] warning: `syz.4.1069' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 381.901667][ T5733] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 382.045126][ T5733] usb 1-1: device descriptor read/64, error -71 [ 382.253778][ T5608] Bluetooth: hci1: command tx timeout [ 382.266904][ T1042] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.363084][ T5733] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 382.491790][ T5733] usb 1-1: device descriptor read/64, error -71 [ 382.639586][ T5733] usb usb1-port1: attempt power cycle [ 382.729307][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.729512][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.729698][ T9112] bridge_slave_0: entered allmulticast mode [ 382.756188][ T9112] bridge_slave_0: entered promiscuous mode [ 382.776361][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.776551][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.776769][ T9112] bridge_slave_1: entered allmulticast mode [ 382.779871][ T9319] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1082'. [ 382.780242][ T9112] bridge_slave_1: entered promiscuous mode [ 382.880939][ T9112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.898569][ T9112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.033785][ T5733] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 383.055348][ T5733] usb 1-1: device descriptor read/8, error -71 [ 383.080055][ T9112] team0: Port device team_slave_0 added [ 383.089165][ T9112] team0: Port device team_slave_1 added [ 383.275831][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.275847][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.275877][ T9112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.277937][ T9112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.277949][ T9112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.277968][ T9112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.356621][ T9112] hsr_slave_0: entered promiscuous mode [ 383.358005][ T9112] hsr_slave_1: entered promiscuous mode [ 383.358967][ T9112] debugfs: 'hsr0' already exists in 'hsr' [ 383.358988][ T9112] Cannot create hsr debugfs directory [ 383.390242][ T5733] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 383.428218][ T5733] usb 1-1: device descriptor read/8, error -71 [ 383.542028][ T5733] usb usb1-port1: unable to enumerate USB device [ 384.319253][ T9273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.474088][ T1042] bridge_slave_1: left allmulticast mode [ 384.474111][ T1042] bridge_slave_1: left promiscuous mode [ 384.477230][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.729100][ T1042] bridge_slave_0: left allmulticast mode [ 384.729132][ T1042] bridge_slave_0: left promiscuous mode [ 384.783314][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.839236][ T9346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1092'. [ 385.903379][ T9357] FAULT_INJECTION: forcing a failure. [ 385.903379][ T9357] name failslab, interval 1, probability 0, space 0, times 0 [ 385.903430][ T9357] CPU: 1 UID: 0 PID: 9357 Comm: syz.3.1095 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 385.903455][ T9357] Tainted: [L]=SOFTLOCKUP [ 385.903462][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.903477][ T9357] Call Trace: [ 385.903484][ T9357] [ 385.903492][ T9357] dump_stack_lvl+0xe8/0x150 [ 385.903529][ T9357] should_fail_ex+0x467/0x600 [ 385.903563][ T9357] should_failslab+0xa8/0x100 [ 385.903701][ T9357] __kmalloc_noprof+0xfe/0x780 [ 385.903756][ T9357] ? rcu_is_watching+0x15/0xb0 [ 385.903827][ T9357] ? tomoyo_realpath_from_path+0xef/0x640 [ 385.903926][ T9357] ? tomoyo_realpath_from_path+0xef/0x640 [ 385.903954][ T9357] tomoyo_realpath_from_path+0xef/0x640 [ 385.903987][ T9357] ? tomoyo_path2_perm+0x299/0x760 [ 385.904009][ T9357] tomoyo_path2_perm+0x2c5/0x760 [ 385.904035][ T9357] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 385.904057][ T9357] ? __asan_memset+0x22/0x50 [ 385.904115][ T9357] ? current_check_refer_path+0x402/0x11f0 [ 385.904208][ T9357] tomoyo_path_rename+0x121/0x1b0 [ 385.904239][ T9357] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 385.904280][ T9357] security_path_rename+0x248/0x460 [ 385.904363][ T9357] filename_renameat2+0x4ba/0x9b0 [ 385.904416][ T9357] ? __might_fault+0xaf/0x130 [ 385.904476][ T9357] ? __pfx_filename_renameat2+0x10/0x10 [ 385.904511][ T9357] ? do_getname+0x151/0x250 [ 385.904589][ T9357] __se_sys_renameat2+0x5a/0x2c0 [ 385.904607][ T9357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.904628][ T9357] do_syscall_64+0x174/0x580 [ 385.904663][ T9357] ? trace_irq_disable+0x3b/0x140 [ 385.904683][ T9357] ? clear_bhb_loop+0x40/0x90 [ 385.904706][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.904728][ T9357] RIP: 0033:0x7f16999fe019 [ 385.904747][ T9357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.904761][ T9357] RSP: 002b:00007f1697c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 385.904781][ T9357] RAX: ffffffffffffffda RBX: 00007f1699c85fa0 RCX: 00007f16999fe019 [ 385.904795][ T9357] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 385.904806][ T9357] RBP: 00007f1697c56090 R08: 0000000000000002 R09: 0000000000000000 [ 385.904818][ T9357] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 385.904828][ T9357] R13: 00007f1699c86038 R14: 00007f1699c85fa0 R15: 00007ffd6075b0f8 [ 385.904857][ T9357] [ 385.904877][ T9357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.864342][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 387.864354][ T36] audit: type=1326 audit(1785558658.202:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 387.864380][ T36] audit: type=1326 audit(1785558658.202:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 387.935437][ T36] audit: type=1326 audit(1785558658.272:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 387.935554][ T36] audit: type=1326 audit(1785558658.272:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 387.935711][ T36] audit: type=1326 audit(1785558658.272:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 387.935822][ T36] audit: type=1326 audit(1785558658.272:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 387.937010][ T36] audit: type=1326 audit(1785558658.272:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 387.940338][ T36] audit: type=1326 audit(1785558658.272:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 387.962259][ T36] audit: type=1326 audit(1785558658.272:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 388.020329][ T36] audit: type=1326 audit(1785558658.352:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9390 comm="syz.4.1108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f0518e84e code=0x7ffc0000 [ 388.527158][ T9411] overlayfs: missing 'lowerdir' [ 389.634432][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.829178][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.881479][ T1042] bond0 (unregistering): Released all slaves [ 390.378551][ T9433] FAULT_INJECTION: forcing a failure. [ 390.378551][ T9433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.378589][ T9433] CPU: 1 UID: 0 PID: 9433 Comm: syz.3.1118 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 390.378614][ T9433] Tainted: [L]=SOFTLOCKUP [ 390.378621][ T9433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.378632][ T9433] Call Trace: [ 390.378640][ T9433] [ 390.378648][ T9433] dump_stack_lvl+0xe8/0x150 [ 390.378682][ T9433] should_fail_ex+0x467/0x600 [ 390.378713][ T9433] _copy_from_user+0x2d/0xb0 [ 390.378736][ T9433] ___sys_sendmsg+0x1c6/0x360 [ 390.378759][ T9433] ? __lock_acquire+0x683/0x2ce0 [ 390.378862][ T9433] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.378915][ T9433] ? __fget_files+0x2a/0x420 [ 390.378934][ T9433] ? __fget_files+0x3a8/0x420 [ 390.378962][ T9433] __x64_sys_sendmsg+0x1b7/0x290 [ 390.378987][ T9433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.379025][ T9433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.379045][ T9433] do_syscall_64+0x174/0x580 [ 390.379068][ T9433] ? trace_irq_disable+0x3b/0x140 [ 390.379087][ T9433] ? clear_bhb_loop+0x40/0x90 [ 390.379111][ T9433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.379128][ T9433] RIP: 0033:0x7f16999fe019 [ 390.379145][ T9433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.379159][ T9433] RSP: 002b:00007f1697c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.379179][ T9433] RAX: ffffffffffffffda RBX: 00007f1699c85fa0 RCX: 00007f16999fe019 [ 390.379192][ T9433] RDX: 0000000000048000 RSI: 0000200000000340 RDI: 0000000000000003 [ 390.379204][ T9433] RBP: 00007f1697c56090 R08: 0000000000000000 R09: 0000000000000000 [ 390.379215][ T9433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.379225][ T9433] R13: 00007f1699c86038 R14: 00007f1699c85fa0 R15: 00007ffd6075b0f8 [ 390.379253][ T9433] [ 392.321649][ T5736] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 392.325370][ T9472] futex_wake_op: syz.3.1126 tries to shift op by 144; fix this program [ 392.534340][ T5736] usb 5-1: Using ep0 maxpacket: 16 [ 392.550651][ T5736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.550674][ T5736] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.575590][ T5736] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.575621][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.575640][ T5736] usb 5-1: Product: syz [ 392.575653][ T5736] usb 5-1: Manufacturer: syz [ 392.575667][ T5736] usb 5-1: SerialNumber: syz [ 392.758233][ T5736] usb 5-1: 0:2 : does not exist [ 392.878777][ T9477] overlayfs: missing 'lowerdir' [ 394.541565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 394.875139][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 394.904750][ T5736] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 397.242324][ T5736] usb 5-1: USB disconnect, device number 4 [ 397.608260][ T9419] udevd[9419]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.232117][ T9528] FAULT_INJECTION: forcing a failure. [ 399.232117][ T9528] name failslab, interval 1, probability 0, space 0, times 0 [ 399.232152][ T9528] CPU: 0 UID: 0 PID: 9528 Comm: syz.0.1140 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 399.232179][ T9528] Tainted: [L]=SOFTLOCKUP [ 399.232185][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.232196][ T9528] Call Trace: [ 399.232204][ T9528] [ 399.232212][ T9528] dump_stack_lvl+0xe8/0x150 [ 399.232248][ T9528] should_fail_ex+0x467/0x600 [ 399.232284][ T9528] should_failslab+0xa8/0x100 [ 399.232308][ T9528] __kmalloc_noprof+0xfe/0x780 [ 399.232328][ T9528] ? tomoyo_encode+0x2ad/0x570 [ 399.232350][ T9528] ? tomoyo_encode+0x2ad/0x570 [ 399.232378][ T9528] tomoyo_encode+0x2ad/0x570 [ 399.232403][ T9528] tomoyo_realpath_from_path+0x5fa/0x640 [ 399.232435][ T9528] ? tomoyo_path_number_perm+0x219/0x5f0 [ 399.232453][ T9528] tomoyo_path_number_perm+0x246/0x5f0 [ 399.232470][ T9528] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 399.232484][ T9528] ? __lock_acquire+0x683/0x2ce0 [ 399.232511][ T9528] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.232630][ T9528] ? hook_file_ioctl+0x1f3/0x600 [ 399.232651][ T9528] ? lockdep_hardirqs_on+0x7a/0x110 [ 399.232682][ T9528] ? __fget_files+0x2a/0x420 [ 399.232702][ T9528] ? __fget_files+0x2a/0x420 [ 399.232715][ T9528] ? __fget_files+0x3a8/0x420 [ 399.232729][ T9528] ? __fget_files+0x2a/0x420 [ 399.232746][ T9528] security_file_ioctl+0xc3/0x2a0 [ 399.232764][ T9528] __se_sys_ioctl+0x47/0x170 [ 399.232783][ T9528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.232799][ T9528] do_syscall_64+0x174/0x580 [ 399.232816][ T9528] ? trace_irq_disable+0x3b/0x140 [ 399.232839][ T9528] ? clear_bhb_loop+0x40/0x90 [ 399.232856][ T9528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.232870][ T9528] RIP: 0033:0x7fda3b0ee019 [ 399.232885][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.232896][ T9528] RSP: 002b:00007fda39346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.232911][ T9528] RAX: ffffffffffffffda RBX: 00007fda3b375fa0 RCX: 00007fda3b0ee019 [ 399.232921][ T9528] RDX: 0000200000001800 RSI: 0000000000004c0a RDI: 0000000000000003 [ 399.232930][ T9528] RBP: 00007fda39346090 R08: 0000000000000000 R09: 0000000000000000 [ 399.232938][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.232946][ T9528] R13: 00007fda3b376038 R14: 00007fda3b375fa0 R15: 00007fffc24e8e78 [ 399.232968][ T9528] [ 399.236073][ T9528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 399.236452][ T9528] loop8: detected capacity change from 0 to 8 [ 399.254176][ T9528] Dev loop8: unable to read RDB block 8 [ 399.254216][ T9528] loop8: unable to read partition table [ 399.255898][ T9528] loop8: partition table beyond EOD, truncated [ 399.255918][ T9528] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 400.129712][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 400.129773][ T36] audit: type=1804 audit(1785558670.332:1468): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1139" name="/newroot/268/file0" dev="tmpfs" ino=1432 res=1 errno=0 [ 401.250018][ T9538] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1143'. [ 401.701529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 401.791528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 402.131731][ T1042] hsr_slave_0: left promiscuous mode [ 402.156574][ T1042] hsr_slave_1: left promiscuous mode [ 402.157203][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.157219][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.048430][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.048458][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.196964][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 403.250490][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1146'. [ 403.276104][ T1042] veth1_macvtap: left promiscuous mode [ 403.276183][ T1042] veth0_macvtap: left promiscuous mode [ 403.276386][ T1042] veth1_vlan: left promiscuous mode [ 403.276486][ T1042] veth0_vlan: left promiscuous mode [ 403.851694][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 404.006681][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 404.006721][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.006742][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 404.006763][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 404.006955][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 404.006974][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.083245][ T10] usb 4-1: config 0 descriptor?? [ 404.085211][ T9560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 404.193436][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 405.447718][ T10] elecom 0003:056E:010D.0001: ignoring exceeding usage max [ 405.483490][ T9570] futex_wake_op: syz.1.1152 tries to shift op by 144; fix this program [ 405.674975][ T10] elecom 0003:056E:010D.0001: hidraw0: USB HID v0.82 Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 405.765913][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 405.818090][ T10] usb 4-1: USB disconnect, device number 6 [ 405.858263][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 405.975538][ T9571] fido_id[9571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 406.370447][ T9546] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 406.469864][ T9574] overlayfs: missing 'lowerdir' [ 406.767371][ T9577] capability: warning: `syz.3.1154' uses 32-bit capabilities (legacy support in use) [ 407.972148][ T9546] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 408.390423][ T36] audit: type=1326 audit(1785558678.722:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.390567][ T36] audit: type=1326 audit(1785558678.722:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.427062][ T36] audit: type=1326 audit(1785558678.762:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.428610][ T36] audit: type=1326 audit(1785558678.762:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.428659][ T36] audit: type=1326 audit(1785558678.762:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.428699][ T36] audit: type=1326 audit(1785558678.762:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.428741][ T36] audit: type=1326 audit(1785558678.762:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.428782][ T36] audit: type=1326 audit(1785558678.762:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.428821][ T36] audit: type=1326 audit(1785558678.762:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.428861][ T36] audit: type=1326 audit(1785558678.762:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9590 comm="syz.4.1158" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 408.791655][ T48] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 408.901802][ T9604] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 408.901830][ T9604] CPU: 0 UID: 0 PID: 9604 Comm: syz.3.1162 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.901858][ T9604] Tainted: [L]=SOFTLOCKUP [ 408.901866][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.901877][ T9604] Call Trace: [ 408.901885][ T9604] [ 408.901897][ T9604] dump_stack_lvl+0xe8/0x150 [ 408.901934][ T9604] sysfs_create_dir_ns+0x271/0x2a0 [ 408.902058][ T9604] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 408.902085][ T9604] ? rt_spin_unlock+0x163/0x200 [ 408.902109][ T9604] kobject_add_internal+0x62c/0xce0 [ 408.902261][ T9604] kobject_add+0x163/0x240 [ 408.902298][ T9604] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 408.902321][ T9604] ? __pfx_kobject_add+0x10/0x10 [ 408.902355][ T9604] ? get_device_parent+0x370/0x3a0 [ 408.902437][ T9604] ? __pfx_klist_children_get+0x10/0x10 [ 408.902497][ T9604] device_add+0x3fa/0xb80 [ 408.902525][ T9604] tty_register_device_attr+0x422/0x950 [ 408.902632][ T9604] ? __pfx_tty_register_device_attr+0x10/0x10 [ 408.902666][ T9604] ? tty_port_init+0x140/0x1b0 [ 408.902719][ T9604] ? gsm_dlci_alloc+0x341/0x650 [ 408.902750][ T9604] gsm_activate_mux+0x110/0x2a0 [ 408.902784][ T9604] gsmld_ioctl+0xcf5/0x1930 [ 408.902817][ T9604] ? __pfx_gsmld_ioctl+0x10/0x10 [ 408.902854][ T9604] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 408.902894][ T9604] ? ldsem_down_read+0x12/0x40 [ 408.902922][ T9604] ? __pfx_gsmld_ioctl+0x10/0x10 [ 408.902946][ T9604] tty_ioctl+0x9c3/0xde0 [ 408.902972][ T9604] ? __pfx_tty_ioctl+0x10/0x10 [ 408.902997][ T9604] __se_sys_ioctl+0xff/0x170 [ 408.903024][ T9604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.903045][ T9604] do_syscall_64+0x174/0x580 [ 408.903068][ T9604] ? trace_irq_disable+0x3b/0x140 [ 408.903088][ T9604] ? clear_bhb_loop+0x40/0x90 [ 408.903112][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.903132][ T9604] RIP: 0033:0x7f16999fe019 [ 408.903151][ T9604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.903168][ T9604] RSP: 002b:00007f1697c35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.903190][ T9604] RAX: ffffffffffffffda RBX: 00007f1699c86090 RCX: 00007f16999fe019 [ 408.903206][ T9604] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 408.903219][ T9604] RBP: 00007f1699a9500c R08: 0000000000000000 R09: 0000000000000000 [ 408.903232][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.903244][ T9604] R13: 00007f1699c86128 R14: 00007f1699c86090 R15: 00007ffd6075b0f8 [ 408.903274][ T9604] [ 408.942641][ T9604] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.163805][ T48] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.163830][ T48] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 409.164534][ T48] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.185115][ T48] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 409.185144][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.185162][ T48] usb 1-1: Product: syz [ 409.185174][ T48] usb 1-1: Manufacturer: syz [ 409.185186][ T48] usb 1-1: SerialNumber: syz [ 409.545595][ T9589] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20004 [ 409.552764][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 409.773358][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.775099][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.938174][ T9612] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1164'. [ 411.434855][ T48] usb 1-1: 0:2 : does not exist [ 412.027518][ T9633] overlayfs: missing 'lowerdir' [ 412.976482][ T48] usb 1-1: USB disconnect, device number 8 [ 413.111556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 413.203908][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1171'. [ 413.973746][ T9419] udevd[9419]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.075575][ T9665] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1176'. [ 414.357689][ T9671] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65' [ 414.357719][ T9671] CPU: 1 UID: 0 PID: 9671 Comm: syz.1.1178 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 414.357749][ T9671] Tainted: [L]=SOFTLOCKUP [ 414.357756][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.357768][ T9671] Call Trace: [ 414.357776][ T9671] [ 414.357785][ T9671] dump_stack_lvl+0xe8/0x150 [ 414.357824][ T9671] sysfs_create_dir_ns+0x271/0x2a0 [ 414.357850][ T9671] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 414.357877][ T9671] ? rt_spin_unlock+0x163/0x200 [ 414.357902][ T9671] kobject_add_internal+0x62c/0xce0 [ 414.357941][ T9671] kobject_add+0x163/0x240 [ 414.357970][ T9671] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 414.357994][ T9671] ? __pfx_kobject_add+0x10/0x10 [ 414.358028][ T9671] ? get_device_parent+0x370/0x3a0 [ 414.358053][ T9671] ? __pfx_klist_children_get+0x10/0x10 [ 414.358075][ T9671] device_add+0x3fa/0xb80 [ 414.358103][ T9671] tty_register_device_attr+0x422/0x950 [ 414.358148][ T9671] ? __pfx_tty_register_device_attr+0x10/0x10 [ 414.358183][ T9671] ? tty_port_init+0x140/0x1b0 [ 414.358211][ T9671] ? gsm_dlci_alloc+0x341/0x650 [ 414.358244][ T9671] gsm_activate_mux+0x110/0x2a0 [ 414.358273][ T9671] gsmld_ioctl+0xcf5/0x1930 [ 414.358308][ T9671] ? __pfx_gsmld_ioctl+0x10/0x10 [ 414.358346][ T9671] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 414.358385][ T9671] ? ldsem_down_read+0x12/0x40 [ 414.358412][ T9671] ? __pfx_gsmld_ioctl+0x10/0x10 [ 414.358434][ T9671] tty_ioctl+0x9c3/0xde0 [ 414.358456][ T9671] ? __pfx_tty_ioctl+0x10/0x10 [ 414.358480][ T9671] __se_sys_ioctl+0xff/0x170 [ 414.358506][ T9671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.358527][ T9671] do_syscall_64+0x174/0x580 [ 414.358558][ T9671] ? trace_irq_disable+0x3b/0x140 [ 414.358579][ T9671] ? clear_bhb_loop+0x40/0x90 [ 414.358602][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.358622][ T9671] RIP: 0033:0x7fd60ddfe019 [ 414.358640][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.358657][ T9671] RSP: 002b:00007fd60c035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.358679][ T9671] RAX: ffffffffffffffda RBX: 00007fd60e086090 RCX: 00007fd60ddfe019 [ 414.358692][ T9671] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 414.358703][ T9671] RBP: 00007fd60de9500c R08: 0000000000000000 R09: 0000000000000000 [ 414.358713][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.358724][ T9671] R13: 00007fd60e086128 R14: 00007fd60e086090 R15: 00007ffde9bdd1a8 [ 414.358754][ T9671] [ 414.358882][ T9671] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory. [ 414.762305][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 415.045920][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 415.045938][ T36] audit: type=1326 audit(1785558685.382:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.057468][ T36] audit: type=1326 audit(1785558685.382:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.063917][ T36] audit: type=1326 audit(1785558685.392:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.067866][ T36] audit: type=1326 audit(1785558685.402:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.068698][ T36] audit: type=1326 audit(1785558685.402:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.069010][ T36] audit: type=1326 audit(1785558685.402:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.069293][ T36] audit: type=1326 audit(1785558685.402:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.076256][ T36] audit: type=1326 audit(1785558685.412:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.076912][ T36] audit: type=1326 audit(1785558685.412:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.077467][ T36] audit: type=1326 audit(1785558685.412:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9676 comm="syz.4.1179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f051ce019 code=0x7ffc0000 [ 415.958917][ T9112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.134955][ T9687] overlayfs: missing 'lowerdir' [ 416.354944][ T9689] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1184'. [ 417.513923][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.638383][ T9112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 417.745393][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.746581][ T9112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 417.797191][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.813653][ T9112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 417.857200][ T9112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.221646][ T48] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 418.307093][ T9112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.330255][ T9112] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.387999][ T9112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.388025][ T9112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.412679][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 418.415062][ T48] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.415095][ T48] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.415117][ T48] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 418.415143][ T48] usb 5-1: config 0 interface 0 has no altsetting 0 [ 418.415175][ T48] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 418.415197][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.557150][ T48] usb 5-1: config 0 descriptor?? [ 418.714788][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.714960][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.717568][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.717772][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.741615][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 418.859285][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 418.861616][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 418.864429][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 419.799410][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.817531][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.857783][ T48] hid (null): invalid report_count 1745597440 [ 420.987982][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 420.987999][ T36] audit: type=1326 audit(1785558691.322:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 420.988038][ T36] audit: type=1326 audit(1785558691.322:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 420.988535][ T36] audit: type=1326 audit(1785558691.322:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 420.989707][ T36] audit: type=1326 audit(1785558691.322:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 420.989892][ T36] audit: type=1326 audit(1785558691.322:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 421.012053][ T36] audit: type=1326 audit(1785558691.352:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 421.012125][ T36] audit: type=1326 audit(1785558691.352:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 421.012483][ T36] audit: type=1326 audit(1785558691.352:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 421.012896][ T36] audit: type=1326 audit(1785558691.352:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 421.013037][ T36] audit: type=1326 audit(1785558691.352:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.0.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3b0ee019 code=0x7ffc0000 [ 421.479713][ T9743] overlayfs: missing 'lowerdir' [ 422.478977][ T5703] usb 5-1: USB disconnect, device number 5 [ 422.895445][ T9753] FAULT_INJECTION: forcing a failure. [ 422.895445][ T9753] name failslab, interval 1, probability 0, space 0, times 0 [ 422.895480][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.0.1198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 422.895506][ T9753] Tainted: [L]=SOFTLOCKUP [ 422.895512][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.895524][ T9753] Call Trace: [ 422.895531][ T9753] [ 422.895538][ T9753] dump_stack_lvl+0xe8/0x150 [ 422.895575][ T9753] should_fail_ex+0x467/0x600 [ 422.895609][ T9753] should_failslab+0xa8/0x100 [ 422.895643][ T9753] kmem_cache_alloc_node_noprof+0xae/0x670 [ 422.895666][ T9753] ? __alloc_skb+0x1d7/0x7a0 [ 422.895686][ T9753] ? __alloc_skb+0x1d7/0x7a0 [ 422.895713][ T9753] __alloc_skb+0x1d7/0x7a0 [ 422.895738][ T9753] netlink_sendmsg+0x5d4/0xb40 [ 422.895927][ T9753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.895952][ T9753] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 422.895982][ T9753] ? __kernel_text_address+0xd/0x30 [ 422.896041][ T9753] ? unwind_get_return_address+0x4d/0x90 [ 422.896122][ T9753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.896144][ T9753] sock_sendmsg_nosec+0x13a/0x180 [ 422.896178][ T9753] ____sys_sendmsg+0x565/0x870 [ 422.896201][ T9753] ? __might_fault+0xaf/0x130 [ 422.896229][ T9753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.896260][ T9753] ? import_iovec+0x73/0xa0 [ 422.896322][ T9753] ___sys_sendmsg+0x2a5/0x360 [ 422.896344][ T9753] ? __lock_acquire+0x683/0x2ce0 [ 422.896369][ T9753] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.896420][ T9753] ? __fget_files+0x2a/0x420 [ 422.896441][ T9753] ? __fget_files+0x3a8/0x420 [ 422.896467][ T9753] __x64_sys_sendmsg+0x1b7/0x290 [ 422.896490][ T9753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.896530][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.896550][ T9753] do_syscall_64+0x174/0x580 [ 422.896573][ T9753] ? trace_irq_disable+0x3b/0x140 [ 422.896591][ T9753] ? clear_bhb_loop+0x40/0x90 [ 422.896614][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.896632][ T9753] RIP: 0033:0x7fda3b0ee019 [ 422.896658][ T9753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.896675][ T9753] RSP: 002b:00007fda39346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.896697][ T9753] RAX: ffffffffffffffda RBX: 00007fda3b375fa0 RCX: 00007fda3b0ee019 [ 422.896710][ T9753] RDX: 00000000000000c0 RSI: 00002000000014c0 RDI: 0000000000000004 [ 422.896723][ T9753] RBP: 00007fda39346090 R08: 0000000000000000 R09: 0000000000000000 [ 422.896733][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.896745][ T9753] R13: 00007fda3b376038 R14: 00007fda3b375fa0 R15: 00007fffc24e8e78 [ 422.896773][ T9753] [ 423.277885][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 423.303580][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 423.303924][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 423.304228][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 423.304673][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 423.441757][ T9112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.909999][ T9792] binder_alloc: 9789: binder_alloc_buf, no vma [ 424.971430][ T9796] binder: 9789:9796 ioctl c018937e 200000000200 returned -22 [ 425.528206][ T9800] binder: 9799:9800 ioctl c0306201 200000000180 returned -14 [ 425.545904][ T9112] veth0_vlan: entered promiscuous mode [ 425.569486][ T9112] veth1_vlan: entered promiscuous mode [ 425.710883][ T9804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1209'. [ 425.752700][ T9112] veth0_macvtap: entered promiscuous mode [ 425.785650][ T9112] veth1_macvtap: entered promiscuous mode [ 425.813249][ T9807] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1210'. [ 425.840133][ T9112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.009911][ T9112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.770243][ T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.773462][ T146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.773905][ T146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.774379][ T146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.886358][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.893368][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.898112][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.955279][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.960539][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 436.126602][ T9831] program syz.4.1215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.334717][ T9836] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 436.334746][ T9836] CPU: 0 UID: 0 PID: 9836 Comm: syz.0.1216 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 436.334782][ T9836] Tainted: [L]=SOFTLOCKUP [ 436.334789][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.334802][ T9836] Call Trace: [ 436.334810][ T9836] [ 436.334819][ T9836] dump_stack_lvl+0xe8/0x150 [ 436.334857][ T9836] sysfs_create_dir_ns+0x271/0x2a0 [ 436.334881][ T9836] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 436.334908][ T9836] ? rt_spin_unlock+0x163/0x200 [ 436.334932][ T9836] kobject_add_internal+0x62c/0xce0 [ 436.334971][ T9836] kobject_add+0x163/0x240 [ 436.334999][ T9836] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 436.335027][ T9836] ? __pfx_kobject_add+0x10/0x10 [ 436.335061][ T9836] ? get_device_parent+0x370/0x3a0 [ 436.335085][ T9836] ? __pfx_klist_children_get+0x10/0x10 [ 436.335108][ T9836] device_add+0x3fa/0xb80 [ 436.335134][ T9836] tty_register_device_attr+0x422/0x950 [ 436.335169][ T9836] ? __pfx_tty_register_device_attr+0x10/0x10 [ 436.335203][ T9836] ? tty_port_init+0x140/0x1b0 [ 436.335229][ T9836] ? gsm_dlci_alloc+0x341/0x650 [ 436.335259][ T9836] gsm_activate_mux+0x110/0x2a0 [ 436.335290][ T9836] gsmld_ioctl+0xcf5/0x1930 [ 436.335320][ T9836] ? __pfx_gsmld_ioctl+0x10/0x10 [ 436.335355][ T9836] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 436.335395][ T9836] ? ldsem_down_read+0x12/0x40 [ 436.335423][ T9836] ? __pfx_gsmld_ioctl+0x10/0x10 [ 436.335448][ T9836] tty_ioctl+0x9c3/0xde0 [ 436.335473][ T9836] ? __pfx_tty_ioctl+0x10/0x10 [ 436.335498][ T9836] __se_sys_ioctl+0xff/0x170 [ 436.335524][ T9836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.335552][ T9836] do_syscall_64+0x174/0x580 [ 436.335577][ T9836] ? trace_irq_disable+0x3b/0x140 [ 436.335598][ T9836] ? clear_bhb_loop+0x40/0x90 [ 436.335623][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.335643][ T9836] RIP: 0033:0x7fda3b0ee019 [ 436.335663][ T9836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.335679][ T9836] RSP: 002b:00007fda39325028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.335701][ T9836] RAX: ffffffffffffffda RBX: 00007fda3b376090 RCX: 00007fda3b0ee019 [ 436.335716][ T9836] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 436.335729][ T9836] RBP: 00007fda3b18500c R08: 0000000000000000 R09: 0000000000000000 [ 436.335741][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.335754][ T9836] R13: 00007fda3b376128 R14: 00007fda3b376090 R15: 00007fffc24e8e78 [ 436.335793][ T9836] [ 436.361040][ T9836] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 437.249502][ T9848] fuse: Bad value for 'fd' [ 437.351831][ T9851] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1221'. [ 438.105801][ T5608] Bluetooth: hci5: command tx timeout [ 438.779047][ T9865] fuse: fd is not a fuse device [ 439.124640][ T9871] program syz.4.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.312109][ T5608] Bluetooth: hci5: command tx timeout [ 440.724365][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.726239][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.618870][ T9888] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1232'. [ 441.917415][ T67] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.083243][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 442.334354][ T5608] Bluetooth: hci5: command tx timeout [ 443.602545][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1236'. [ 444.381962][ T5608] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 444.411913][ T5608] Bluetooth: hci5: command tx timeout [ 444.819169][ T9916] fuse: Bad value for 'group_id' [ 444.819188][ T9916] fuse: Bad value for 'group_id' [ 444.844793][ T9918] program syz.4.1237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.191459][ T9929] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 445.191520][ T9929] CPU: 1 UID: 0 PID: 9929 Comm: syz.1.1240 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.191548][ T9929] Tainted: [L]=SOFTLOCKUP [ 445.191555][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.191568][ T9929] Call Trace: [ 445.191575][ T9929] [ 445.191583][ T9929] dump_stack_lvl+0xe8/0x150 [ 445.191621][ T9929] sysfs_create_dir_ns+0x271/0x2a0 [ 445.191647][ T9929] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 445.191673][ T9929] ? rt_spin_unlock+0x163/0x200 [ 445.191701][ T9929] kobject_add_internal+0x62c/0xce0 [ 445.191742][ T9929] kobject_add+0x163/0x240 [ 445.191769][ T9929] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 445.191793][ T9929] ? __pfx_kobject_add+0x10/0x10 [ 445.191827][ T9929] ? get_device_parent+0x370/0x3a0 [ 445.191852][ T9929] ? __pfx_klist_children_get+0x10/0x10 [ 445.191874][ T9929] device_add+0x3fa/0xb80 [ 445.191902][ T9929] tty_register_device_attr+0x422/0x950 [ 445.191938][ T9929] ? __pfx_tty_register_device_attr+0x10/0x10 [ 445.191972][ T9929] ? tty_port_init+0x140/0x1b0 [ 445.191999][ T9929] ? gsm_dlci_alloc+0x341/0x650 [ 445.192030][ T9929] gsm_activate_mux+0x110/0x2a0 [ 445.192063][ T9929] gsmld_ioctl+0xcf5/0x1930 [ 445.192097][ T9929] ? __pfx_gsmld_ioctl+0x10/0x10 [ 445.192134][ T9929] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 445.192174][ T9929] ? ldsem_down_read+0x12/0x40 [ 445.192202][ T9929] ? __pfx_gsmld_ioctl+0x10/0x10 [ 445.192227][ T9929] tty_ioctl+0x9c3/0xde0 [ 445.192252][ T9929] ? __pfx_tty_ioctl+0x10/0x10 [ 445.192285][ T9929] __se_sys_ioctl+0xff/0x170 [ 445.192313][ T9929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.192336][ T9929] do_syscall_64+0x174/0x580 [ 445.192360][ T9929] ? trace_irq_disable+0x3b/0x140 [ 445.192381][ T9929] ? clear_bhb_loop+0x40/0x90 [ 445.192406][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.192426][ T9929] RIP: 0033:0x7fd60ddfe019 [ 445.192446][ T9929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.192463][ T9929] RSP: 002b:00007fd60c035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.192485][ T9929] RAX: ffffffffffffffda RBX: 00007fd60e086090 RCX: 00007fd60ddfe019 [ 445.192500][ T9929] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 445.192514][ T9929] RBP: 00007fd60de9500c R08: 0000000000000000 R09: 0000000000000000 [ 445.192527][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.192538][ T9929] R13: 00007fd60e086128 R14: 00007fd60e086090 R15: 00007ffde9bdd1a8 [ 445.192569][ T9929] [ 445.196141][ T9929] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 446.632179][ T67] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.691254][ T9942] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1244'. [ 448.098859][ T9960] fuse: fd is not a fuse device [ 448.828168][ T5879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 449.072293][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 449.919917][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 449.919952][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49883, setting to 1024 [ 449.919994][ T5879] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 449.920017][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.975493][ T5879] usb 1-1: config 0 descriptor?? [ 449.991710][ T5879] hub 1-1:0.0: USB hub found [ 450.108054][ T5879] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 450.125868][ T5879] usbhid 1-1:0.0: can't add hid device: -71 [ 450.125985][ T5879] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 450.157218][ T67] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.173317][ T5879] usb 1-1: USB disconnect, device number 9 [ 450.277895][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 450.862905][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1258'. [ 451.050859][ T9992] 8021q: adding VLAN 0 to HW filter on device bond9 [ 451.823161][T10002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1260'. [ 451.864698][ T5608] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 452.326194][T10005] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 452.326222][T10005] CPU: 0 UID: 0 PID: 10005 Comm: syz.0.1261 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 452.326249][T10005] Tainted: [L]=SOFTLOCKUP [ 452.326256][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.326269][T10005] Call Trace: [ 452.326277][T10005] [ 452.326286][T10005] dump_stack_lvl+0xe8/0x150 [ 452.326325][T10005] sysfs_create_dir_ns+0x271/0x2a0 [ 452.326348][T10005] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 452.326371][T10005] ? rt_spin_unlock+0x163/0x200 [ 452.326405][T10005] kobject_add_internal+0x62c/0xce0 [ 452.326443][T10005] kobject_add+0x163/0x240 [ 452.326472][T10005] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 452.326493][T10005] ? __pfx_kobject_add+0x10/0x10 [ 452.326530][T10005] ? get_device_parent+0x370/0x3a0 [ 452.326558][T10005] ? __pfx_klist_children_get+0x10/0x10 [ 452.326581][T10005] device_add+0x3fa/0xb80 [ 452.326607][T10005] tty_register_device_attr+0x422/0x950 [ 452.326644][T10005] ? __pfx_tty_register_device_attr+0x10/0x10 [ 452.326678][T10005] ? tty_port_init+0x140/0x1b0 [ 452.326702][T10005] ? gsm_dlci_alloc+0x341/0x650 [ 452.326734][T10005] gsm_activate_mux+0x110/0x2a0 [ 452.326765][T10005] gsmld_ioctl+0xcf5/0x1930 [ 452.326798][T10005] ? __pfx_gsmld_ioctl+0x10/0x10 [ 452.326834][T10005] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 452.326873][T10005] ? ldsem_down_read+0x12/0x40 [ 452.326901][T10005] ? __pfx_gsmld_ioctl+0x10/0x10 [ 452.326925][T10005] tty_ioctl+0x9c3/0xde0 [ 452.326951][T10005] ? __pfx_tty_ioctl+0x10/0x10 [ 452.326977][T10005] __se_sys_ioctl+0xff/0x170 [ 452.327008][T10005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.327033][T10005] do_syscall_64+0x174/0x580 [ 452.327060][T10005] ? trace_irq_disable+0x3b/0x140 [ 452.327079][T10005] ? clear_bhb_loop+0x40/0x90 [ 452.327102][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.327122][T10005] RIP: 0033:0x7fda3b0ee019 [ 452.327141][T10005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.327160][T10005] RSP: 002b:00007fda39325028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.327182][T10005] RAX: ffffffffffffffda RBX: 00007fda3b376090 RCX: 00007fda3b0ee019 [ 452.327197][T10005] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 452.327208][T10005] RBP: 00007fda3b18500c R08: 0000000000000000 R09: 0000000000000000 [ 452.327219][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.327229][T10005] R13: 00007fda3b376128 R14: 00007fda3b376090 R15: 00007fffc24e8e78 [ 452.327257][T10005] [ 452.351647][T10005] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 452.854356][ T67] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.369942][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.370063][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.370293][ T9819] bridge_slave_0: entered allmulticast mode [ 453.394078][ T9819] bridge_slave_0: entered promiscuous mode [ 453.397633][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.397840][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.398012][ T9819] bridge_slave_1: entered allmulticast mode [ 453.400400][ T9819] bridge_slave_1: entered promiscuous mode [ 453.552003][T10022] fuse: fd is not a fuse device [ 453.650833][ T9819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.712828][ T9819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.987399][ T9819] team0: Port device team_slave_0 added [ 453.996140][ T9819] team0: Port device team_slave_1 added [ 454.040878][T10034] netlink: 'syz.1.1272': attribute type 12 has an invalid length. [ 454.146551][T10034] bond6: option primary_reselect: invalid value (255) [ 455.042612][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1273'. [ 455.147088][T10034] bond6 (unregistering): Released all slaves [ 455.796451][T10049] netlink: 'syz.4.1275': attribute type 2 has an invalid length. [ 456.422279][T10047] veth1_to_bond: entered allmulticast mode [ 456.591180][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.591198][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.591224][ T9819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.951608][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 457.028609][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 457.028954][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 457.030075][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 457.030433][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 457.435787][ T9819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.435805][ T9819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.435833][ T9819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.438468][T10045] veth1_to_bond: left allmulticast mode [ 458.304954][ T9819] hsr_slave_0: entered promiscuous mode [ 458.308728][ T9819] hsr_slave_1: entered promiscuous mode [ 458.326490][ T9819] debugfs: 'hsr0' already exists in 'hsr' [ 458.326517][ T9819] Cannot create hsr debugfs directory [ 459.834305][ T67] bridge_slave_1: left allmulticast mode [ 459.834338][ T67] bridge_slave_1: left promiscuous mode [ 459.834595][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.890449][T10095] FAULT_INJECTION: forcing a failure. [ 459.890449][T10095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.890485][T10095] CPU: 1 UID: 0 PID: 10095 Comm: syz.4.1286 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.890512][T10095] Tainted: [L]=SOFTLOCKUP [ 459.890518][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.890529][T10095] Call Trace: [ 459.890537][T10095] [ 459.890545][T10095] dump_stack_lvl+0xe8/0x150 [ 459.890581][T10095] should_fail_ex+0x467/0x600 [ 459.890616][T10095] _copy_from_user+0x2d/0xb0 [ 459.890640][T10095] ___sys_sendmsg+0x1c6/0x360 [ 459.890664][T10095] ? __lock_acquire+0x683/0x2ce0 [ 459.890687][T10095] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.890742][T10095] ? __fget_files+0x2a/0x420 [ 459.890766][T10095] ? __fget_files+0x3a8/0x420 [ 459.890795][T10095] __x64_sys_sendmsg+0x1b7/0x290 [ 459.890821][T10095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.890860][T10095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.890880][T10095] do_syscall_64+0x174/0x580 [ 459.890904][T10095] ? trace_irq_disable+0x3b/0x140 [ 459.890922][T10095] ? clear_bhb_loop+0x40/0x90 [ 459.890944][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.890961][T10095] RIP: 0033:0x7f0f051ce019 [ 459.890977][T10095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.891000][T10095] RSP: 002b:00007f0f03426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.891016][T10095] RAX: ffffffffffffffda RBX: 00007f0f05455fa0 RCX: 00007f0f051ce019 [ 459.891026][T10095] RDX: 0000000000048000 RSI: 0000200000000340 RDI: 0000000000000003 [ 459.891035][T10095] RBP: 00007f0f03426090 R08: 0000000000000000 R09: 0000000000000000 [ 459.891045][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.891054][T10095] R13: 00007f0f05456038 R14: 00007f0f05455fa0 R15: 00007ffdcbc12468 [ 459.891076][T10095] [ 460.283200][ T67] bridge_slave_0: left allmulticast mode [ 460.283236][ T67] bridge_slave_0: left promiscuous mode [ 460.283490][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.455569][ T1042] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 460.644441][T10124] netlink: 'syz.3.1294': attribute type 8 has an invalid length. [ 460.644461][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 461.274863][ T198] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 461.397355][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 461.460700][ T198] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.460755][ T198] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 461.460778][ T198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.568327][ T198] usb 2-1: config 0 descriptor?? [ 462.642407][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.722552][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.745061][ T67] bond0 (unregistering): Released all slaves [ 462.877763][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 463.329373][T10110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.395728][ T5614] usb 2-1: USB disconnect, device number 3 [ 463.411755][ T67] hsr_slave_0: left promiscuous mode [ 463.412977][T10148] loop8: detected capacity change from 0 to 8 [ 463.422719][T10148] Dev loop8: unable to read RDB block 8 [ 463.422763][T10148] loop8: unable to read partition table [ 463.422957][T10148] loop8: partition table beyond EOD, truncated [ 463.422993][T10148] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 463.491753][ T67] hsr_slave_1: left promiscuous mode [ 463.607413][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.607440][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.721905][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.721931][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.593219][ T67] veth1_macvtap: left promiscuous mode [ 464.593344][ T67] veth0_macvtap: left promiscuous mode [ 464.593599][ T67] veth1_vlan: left promiscuous mode [ 464.593782][ T67] veth0_vlan: left promiscuous mode [ 465.113586][T10174] futex_wake_op: syz.1.1311 tries to shift op by 144; fix this program [ 465.275011][T10178] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 465.380637][T10180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1313'. [ 466.862230][ T67] team0 (unregistering): Port device team_slave_1 removed [ 466.892125][ T67] team0 (unregistering): Port device team_slave_0 removed [ 467.166624][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1316'. [ 467.246002][ T5608] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 467.639247][T10189] veth1_to_bond: entered allmulticast mode [ 467.656576][T10178] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 467.670475][T10185] veth1_to_bond: left allmulticast mode [ 468.105887][T10207] overlayfs: missing 'lowerdir' [ 471.383892][T10246] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 471.505331][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1326'. [ 471.689046][ T5608] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 471.973643][T10251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1327'. [ 472.169947][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 472.207876][T10251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.266182][T10247] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 472.970832][T10278] FAULT_INJECTION: forcing a failure. [ 472.970832][T10278] name failslab, interval 1, probability 0, space 0, times 0 [ 472.970865][T10278] CPU: 1 UID: 0 PID: 10278 Comm: syz.4.1335 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 472.970890][T10278] Tainted: [L]=SOFTLOCKUP [ 472.970896][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.970906][T10278] Call Trace: [ 472.970913][T10278] [ 472.970921][T10278] dump_stack_lvl+0xe8/0x150 [ 472.970953][T10278] should_fail_ex+0x467/0x600 [ 472.970984][T10278] should_failslab+0xa8/0x100 [ 472.971006][T10278] __kmalloc_noprof+0xfe/0x780 [ 472.971025][T10278] ? tomoyo_encode+0x2ad/0x570 [ 472.971047][T10278] ? tomoyo_encode+0x2ad/0x570 [ 472.971072][T10278] tomoyo_encode+0x2ad/0x570 [ 472.971098][T10278] tomoyo_realpath_from_path+0x5fa/0x640 [ 472.971126][T10278] ? tomoyo_path_number_perm+0x219/0x5f0 [ 472.971144][T10278] tomoyo_path_number_perm+0x246/0x5f0 [ 472.971163][T10278] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 472.971185][T10278] ? __lock_acquire+0x683/0x2ce0 [ 472.971218][T10278] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 472.971239][T10278] ? hook_file_ioctl+0x1f3/0x600 [ 472.971264][T10278] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.971300][T10278] ? __fget_files+0x2a/0x420 [ 472.971320][T10278] ? __fget_files+0x2a/0x420 [ 472.971335][T10278] ? __fget_files+0x3a8/0x420 [ 472.971350][T10278] ? __fget_files+0x2a/0x420 [ 472.971370][T10278] security_file_ioctl+0xc3/0x2a0 [ 472.971390][T10278] __se_sys_ioctl+0x47/0x170 [ 472.971412][T10278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.971430][T10278] do_syscall_64+0x174/0x580 [ 472.971450][T10278] ? trace_irq_disable+0x3b/0x140 [ 472.971467][T10278] ? clear_bhb_loop+0x40/0x90 [ 472.971487][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.971502][T10278] RIP: 0033:0x7f0f051ce019 [ 472.971518][T10278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.971532][T10278] RSP: 002b:00007f0f03426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.971551][T10278] RAX: ffffffffffffffda RBX: 00007f0f05455fa0 RCX: 00007f0f051ce019 [ 472.971562][T10278] RDX: 0000200000001800 RSI: 0000000000004c0a RDI: 0000000000000003 [ 472.971573][T10278] RBP: 00007f0f03426090 R08: 0000000000000000 R09: 0000000000000000 [ 472.971583][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.971593][T10278] R13: 00007f0f05456038 R14: 00007f0f05455fa0 R15: 00007ffdcbc12468 [ 472.971618][T10278] [ 473.036216][T10278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.116874][T10281] overlayfs: missing 'lowerdir' [ 473.630259][T10278] loop8: detected capacity change from 0 to 8 [ 473.982452][T10278] Dev loop8: unable to read RDB block 8 [ 473.982582][T10278] loop8: unable to read partition table [ 473.997789][T10278] loop8: partition table beyond EOD, truncated [ 473.997878][T10278] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 474.538714][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1337'. [ 475.161525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 475.245607][ T5608] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 475.419406][T10296] netlink: 'syz.1.1339': attribute type 1 has an invalid length. [ 475.544411][T10299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1339'. [ 475.746925][T10279] vlan2: entered allmulticast mode [ 475.746968][T10279] bond0: entered allmulticast mode [ 475.746982][T10279] : entered allmulticast mode [ 475.747005][T10279] bond_slave_1: entered allmulticast mode [ 475.886293][T10299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.261608][ T5717] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 476.418886][ T5717] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 476.418916][ T5717] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 476.418951][ T5717] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 476.418973][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.502550][ T5717] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 476.626268][ T5717] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 477.137690][T10310] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 477.167947][T10310] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 477.226123][T10310] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 477.411529][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1348'. [ 477.519748][ T5608] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 478.285871][T10338] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 478.331241][ T48] usb 1-1: USB disconnect, device number 10 [ 478.466557][ T48] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 478.467440][ T48] spcp8x5 1-1:1.0: device disconnected [ 478.505766][T10346] Bluetooth: MGMT ver 1.23 [ 478.695399][ T5736] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 478.872864][T10338] ------------[ cut here ]------------ [ 478.872878][T10338] kcov->t != t [ 478.872891][T10338] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#1: syz.0.1343/10338 [ 478.873081][T10338] Modules linked in: [ 478.873101][T10338] CPU: 1 UID: 0 PID: 10338 Comm: syz.0.1343 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 478.873130][T10338] Tainted: [L]=SOFTLOCKUP [ 478.873138][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.873151][T10338] RIP: 0010:kcov_task_exit+0x181/0x240 [ 478.873196][T10338] Code: 90 00 00 00 e8 e0 d2 57 00 4c 89 f7 5b 41 5e 41 5f e9 c3 92 5d 00 7c 40 5b 41 5e 41 5f e9 97 4b 82 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 478.873215][T10338] RSP: 0018:ffffc9000626fae0 EFLAGS: 00010206 [ 478.873231][T10338] RAX: 1715bb4c66687400 RBX: ffff888036479f00 RCX: 0000000000000000 [ 478.873246][T10338] RDX: 000000009fc1a67b RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 478.873260][T10338] RBP: ffffc9000626fc30 R08: ffffffff8b46bb20 R09: 0000000000000000 [ 478.873275][T10338] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 478.873288][T10338] R13: 0000000000000004 R14: ffff88803241ec00 R15: ffff88803241ec08 [ 478.873301][T10338] FS: 00007fda393046c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 478.873319][T10338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.873332][T10338] CR2: 00007f6e2ac0e543 CR3: 000000002f932000 CR4: 00000000003526f0 [ 478.873350][T10338] Call Trace: [ 478.873357][T10338] [ 478.873367][T10338] do_exit+0x159/0x2360 [ 478.873388][T10338] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.873415][T10338] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 478.873440][T10338] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 478.873463][T10338] ? __pfx_do_exit+0x10/0x10 [ 478.873530][T10338] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 478.873548][T10338] ? rt_spin_lock+0x1e0/0x400 [ 478.873574][T10338] ? rt_spin_unlock+0x157/0x200 [ 478.873595][T10338] do_group_exit+0x22d/0x2f0 [ 478.873612][T10338] ? rt_spin_unlock+0x163/0x200 [ 478.873634][T10338] get_signal+0x121b/0x12c0 [ 478.873730][T10338] arch_do_signal_or_restart+0xbb/0x860 [ 478.873796][T10338] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 478.873851][T10338] exit_to_user_mode_loop+0x104/0x730 [ 478.873898][T10338] ? rcu_is_watching+0x15/0xb0 [ 478.873925][T10338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.873947][T10338] do_syscall_64+0x353/0x580 [ 478.873971][T10338] ? trace_irq_disable+0x3b/0x140 [ 478.873992][T10338] ? clear_bhb_loop+0x40/0x90 [ 478.874016][T10338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.874036][T10338] RIP: 0033:0x7fda3b0ee019 [ 478.874055][T10338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.874071][T10338] RSP: 002b:00007fda393040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 478.874092][T10338] RAX: fffffffffffffe00 RBX: 00007fda3b376188 RCX: 00007fda3b0ee019 [ 478.874108][T10338] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda3b376188 [ 478.874153][T10338] RBP: 00007fda3b376180 R08: 0000000000000000 R09: 0000000000000000 [ 478.874170][T10338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.874182][T10338] R13: 00007fda3b376218 R14: 00007fffc24e8d90 R15: 00007fffc24e8e78 [ 478.874214][T10338] [ 478.874224][T10338] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 478.874242][T10338] CPU: 1 UID: 0 PID: 10338 Comm: syz.0.1343 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 478.874270][T10338] Tainted: [L]=SOFTLOCKUP [ 478.874278][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.874291][T10338] Call Trace: [ 478.874298][T10338] [ 478.874305][T10338] vpanic+0x56c/0xa60 [ 478.874382][T10338] ? __pfx__printk+0x10/0x10 [ 478.874432][T10338] ? __pfx_vpanic+0x10/0x10 [ 478.874451][T10338] ? is_bpf_text_address+0x292/0x2b0 [ 478.874502][T10338] ? is_bpf_text_address+0x26/0x2b0 [ 478.874534][T10338] panic+0xc5/0xd0 [ 478.874554][T10338] ? __pfx_panic+0x10/0x10 [ 478.874591][T10338] __warn+0x315/0x4c0 [ 478.874609][T10338] ? kcov_task_exit+0x181/0x240 [ 478.874638][T10338] ? kcov_task_exit+0x181/0x240 [ 478.874663][T10338] __report_bug+0x276/0x570 [ 478.874730][T10338] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 478.874758][T10338] ? kcov_task_exit+0x181/0x240 [ 478.874790][T10338] ? __pfx___report_bug+0x10/0x10 [ 478.874822][T10338] ? try_to_take_rt_mutex+0x842/0xb00 [ 478.874847][T10338] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 478.874870][T10338] ? rt_spin_lock+0x1e0/0x400 [ 478.874890][T10338] ? rt_spin_lock+0x1e0/0x400 [ 478.874911][T10338] ? kcov_task_exit+0x181/0x240 [ 478.874939][T10338] report_bug+0x16a/0x220 [ 478.874965][T10338] ? kcov_task_exit+0x181/0x240 [ 478.874989][T10338] ? kcov_task_exit+0x183/0x240 [ 478.875014][T10338] handle_bug+0x9c/0x200 [ 478.875042][T10338] exc_invalid_op+0x1a/0x50 [ 478.875068][T10338] asm_exc_invalid_op+0x1a/0x20 [ 478.875086][T10338] RIP: 0010:kcov_task_exit+0x181/0x240 [ 478.875116][T10338] Code: 90 00 00 00 e8 e0 d2 57 00 4c 89 f7 5b 41 5e 41 5f e9 c3 92 5d 00 7c 40 5b 41 5e 41 5f e9 97 4b 82 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 478.875134][T10338] RSP: 0018:ffffc9000626fae0 EFLAGS: 00010206 [ 478.875151][T10338] RAX: 1715bb4c66687400 RBX: ffff888036479f00 RCX: 0000000000000000 [ 478.875166][T10338] RDX: 000000009fc1a67b RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 478.875180][T10338] RBP: ffffc9000626fc30 R08: ffffffff8b46bb20 R09: 0000000000000000 [ 478.875195][T10338] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 478.875208][T10338] R13: 0000000000000004 R14: ffff88803241ec00 R15: ffff88803241ec08 [ 478.875230][T10338] ? rt_spin_lock+0x1e0/0x400 [ 478.875258][T10338] do_exit+0x159/0x2360 [ 478.875276][T10338] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.875301][T10338] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 478.875327][T10338] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 478.875350][T10338] ? __pfx_do_exit+0x10/0x10 [ 478.875381][T10338] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 478.875400][T10338] ? rt_spin_lock+0x1e0/0x400 [ 478.875425][T10338] ? rt_spin_unlock+0x157/0x200 [ 478.875448][T10338] do_group_exit+0x22d/0x2f0 [ 478.875466][T10338] ? rt_spin_unlock+0x163/0x200 [ 478.875489][T10338] get_signal+0x121b/0x12c0 [ 478.875533][T10338] arch_do_signal_or_restart+0xbb/0x860 [ 478.875564][T10338] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 478.875611][T10338] exit_to_user_mode_loop+0x104/0x730 [ 478.875632][T10338] ? rcu_is_watching+0x15/0xb0 [ 478.875657][T10338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.875678][T10338] do_syscall_64+0x353/0x580 [ 478.875703][T10338] ? trace_irq_disable+0x3b/0x140 [ 478.875722][T10338] ? clear_bhb_loop+0x40/0x90 [ 478.875747][T10338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.875767][T10338] RIP: 0033:0x7fda3b0ee019 [ 478.875785][T10338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.875811][T10338] RSP: 002b:00007fda393040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 478.875831][T10338] RAX: fffffffffffffe00 RBX: 00007fda3b376188 RCX: 00007fda3b0ee019 [ 478.875845][T10338] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda3b376188 [ 478.875858][T10338] RBP: 00007fda3b376180 R08: 0000000000000000 R09: 0000000000000000 [ 478.875871][T10338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.875883][T10338] R13: 00007fda3b376218 R14: 00007fffc24e8d90 R15: 00007fffc24e8e78 [ 478.875916][T10338] [ 478.876196][T10338] Kernel Offset: disabled