last executing test programs: 10m24.691459746s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rpc\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r4, &(0x7f0000004d80)=""/102392, 0x18ff8) r5 = openat(r0, &(0x7f000001dd80)='auth.unix.ip/channel\x00', 0x2, 0x0) ptrace$ARCH_GET_FS(0x1e, r3, 0x0, 0x1003) write(r5, &(0x7f000001de00)=' f 127.0.0.1 2 000\\00 : l\\calhost\n', 0x24) chdir(&(0x7f000001de40)='./file0\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) 10m21.609596291s ago: executing program 1 (id=13): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r1}, 0x18) pidfd_getfd(0xffffffffffffffff, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 10m4.97447916s ago: executing program 32 (id=13): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r1}, 0x18) pidfd_getfd(0xffffffffffffffff, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 9m26.285167922s ago: executing program 3 (id=76): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) r3 = userfaultfd(0x80001) chdir(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r4, 0x8008976) r5 = syz_open_dev$sndpcmc(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, 0x0) dup2(r4, r3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing\x00', 0x1ff) mount$cgroup(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240), 0x210000, &(0x7f0000000440)={[{}, {@noprefix}]}) 9m25.106759228s ago: executing program 3 (id=86): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2) 9m24.684196565s ago: executing program 3 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) shutdown(0xffffffffffffffff, 0x2) setresuid(0x0, 0xee00, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) 9m23.065393356s ago: executing program 3 (id=82): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 9m18.280642008s ago: executing program 3 (id=88): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2) 9m17.799366238s ago: executing program 3 (id=90): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9}) listns(&(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xf4240, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000003c0)=@arm64={0x2, 0x4, 0x6}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x8010, 0xffffffffffffffff, 0xc587f000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000002c0)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}, {0x6b, 0x1200, 0x4, &(0x7f0000000240)="792f56fd"}], 0x3}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x15, r3, 0x1, 0x2, 0x6, @local}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 9m2.219880471s ago: executing program 33 (id=90): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9}) listns(&(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xf4240, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000003c0)=@arm64={0x2, 0x4, 0x6}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x8010, 0xffffffffffffffff, 0xc587f000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000002c0)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}, {0x6b, 0x1200, 0x4, &(0x7f0000000240)="792f56fd"}], 0x3}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x15, r3, 0x1, 0x2, 0x6, @local}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 20.611077202s ago: executing program 4 (id=684): openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000080)=""/92, 0x5c}], 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x46381, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newchain={0x2c, 0x1e, 0x1, 0x1000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x3}}]}, 0x2c}}, 0x2004c000) 19.917900153s ago: executing program 0 (id=685): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0xaf9f, 0x6, 0x1, 0x0, 0x53, "d9d3ddcc07cde276d624b939703976368e9ede", 0x1, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000000805000000000000000000030000090900010073797a3100000000060002400011000014000480080805400000000508000640000000000500030006000000f1cde77eb26308006fb72510d1dfa4a433f063acdfd57863f37f3020e4eee5018e3ad1d7afd8bea9bb25d0"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 18.183272294s ago: executing program 0 (id=686): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000001080)="8b4ff4a01daf008200", 0x9, 0x10000, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000)) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 17.297817767s ago: executing program 0 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000000020601040000000000000000060000020500050002000000050004000000"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='rd_pages=6', 0xa) 15.174945335s ago: executing program 4 (id=688): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x4, 0x901) gettid() unshare(0x22020400) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x8, r3, 0x0, 0x4, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) fsopen(&(0x7f0000000080)='pstore\x00', 0x0) 13.755114887s ago: executing program 4 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) r4 = socket$kcm(0x1e, 0x5, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89101) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000600)=[{0x1, 0x2, {0x2, 0xfe, 0x1}, {0x1}, 0xfe, 0x2}, {0x0, 0x1, {0x1, 0x0, 0x3}, {0x1, 0xf0}, 0xfd, 0x2}], 0x40) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1) 13.580307475s ago: executing program 0 (id=691): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 12.297378816s ago: executing program 2 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000005c40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005c00)={&(0x7f0000005c80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x486c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.455823369s ago: executing program 4 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x10000, 0x2) flock(r3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) madvise(&(0x7f00008ab000/0x4000)=nil, 0x4000, 0xe) syz_clone3(&(0x7f00000002c0)={0x22001500, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.427385812s ago: executing program 4 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffd92) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000047c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e76", 0x20) 8.907635697s ago: executing program 2 (id=695): io_setup(0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x18, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r7, 0xfffffffc) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 7.372504293s ago: executing program 2 (id=696): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) r3 = userfaultfd(0x80001) chdir(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r4, 0x8008976) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) dup2(r4, r3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount$cgroup(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240), 0x210000, &(0x7f0000000440)={[{}], [{@flag='mand'}]}) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r7 = dup(r5) ioctl$TCSETS(r7, 0x5402, 0x0) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 7.033378817s ago: executing program 4 (id=697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) ioctl$SIOCGETVIFCNT(r7, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x101201, 0x0) ioctl$FIONREAD(r10, 0x541b, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="c3d1", 0x2}], 0x1}, 0x1) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="9c72d37677", 0x5}], 0x1}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a22104000000000014000300776c616e30000000000000000000000060d0719d6b8c7598260d38e18e47c5e8950eb73d1c59dba1f5206e3557c154e1b892d5298702cee45ae898f041f75040293b547986a71e5b6ccc9fef78b7ed555e88d744c7f90dd9a6ffcee50611d59cf82af0db61fcf1a879706e6c83f7eba09097b7ce99635931cedba33f78ce7b243f5fc55b453567548ef138f62ee6c6ac123a8dabb17d729d883d8f0400cdfefa04192bcc1b9ff550d0563b64108aa4d5b557fb37309351ddafc2f1cf6c48fa2c6df5be014f5eab85e71986e3f59337f8c34b"], 0x34}}, 0x0) 4.261255396s ago: executing program 2 (id=698): syz_open_dev$usbfs(0x0, 0x9, 0x60000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet6(0xa, 0x80001, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40000, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xa8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff, 0x0, r0}}], 0x1, 0x0, 0x0) 3.26719188s ago: executing program 0 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x4, 0x42, 0x6c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) sendmsg$sock(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") write(r5, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 s', 0x35) ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000900100003801000001") 990.579608ms ago: executing program 2 (id=700): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 817.204212ms ago: executing program 0 (id=701): set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) memfd_create(&(0x7f0000000200)='\x00', 0x0) socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000002c0)) migrate_pages(0x0, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write(r4, &(0x7f0000000300)="44000000410001000300000000000000030100002a0000002c000100100004000000000000000000000000000600060086dd000010001c00010101010202020211004000", 0x44) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x10000, 0x2) flock(r3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) madvise(&(0x7f00008ab000/0x4000)=nil, 0x4000, 0xe) syz_clone3(&(0x7f00000002c0)={0x22001500, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): 1 port detected [ 123.878816][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.273622][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.280340][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.302435][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.659128][ T5975] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 125.701710][ T1114] IPVS: starting estimator thread 0... [ 125.902994][ T5976] IPVS: using max 9 ests per chain, 21600 per kthread [ 127.081744][ T60] Bluetooth: hci5: command tx timeout [ 128.629264][ T6002] netlink: 256 bytes leftover after parsing attributes in process `syz.4.44'. [ 129.102928][ T60] Bluetooth: hci5: command tx timeout [ 130.933167][ T60] Bluetooth: hci1: unexpected event 0x2f length: 509 > 255 [ 131.248855][ T60] Bluetooth: hci5: command tx timeout [ 132.307383][ T6008] loop8: detected capacity change from 0 to 16384 [ 132.705126][ T6021] loop8: detected capacity change from 16384 to 16383 [ 132.796292][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.796417][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.154689][ T60] Bluetooth: hci5: command tx timeout [ 135.811966][ T1914] IPVS: starting estimator thread 0... [ 135.903112][ T6033] IPVS: using max 7 ests per chain, 16800 per kthread [ 142.668707][ T6065] 9p: Could not find request transport: fd0xffffffffffffffff [ 144.473794][ T6077] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5589] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6077] [ 145.698781][ T60] Bluetooth: Frame is too long (len 16, expected len 4) [ 146.259628][ T84] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.539749][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.541105][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.541310][ T5945] bridge_slave_0: entered allmulticast mode [ 146.545895][ T5945] bridge_slave_0: entered promiscuous mode [ 146.569247][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.569366][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.569538][ T5945] bridge_slave_1: entered allmulticast mode [ 146.577147][ T5945] bridge_slave_1: entered promiscuous mode [ 147.400280][ T6088] Bluetooth: MGMT ver 1.23 [ 148.193814][ T36] audit: type=1326 audit(2000000007.090:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6084 comm="syz.2.64" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c3b79e1d9 code=0x0 [ 148.295216][ T60] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 148.295267][ T60] Bluetooth: hci1: command 0x206a tx timeout [ 148.367302][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.381746][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.346561][ T84] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.641196][ T5945] team0: Port device team_slave_0 added [ 151.677377][ T5945] team0: Port device team_slave_1 added [ 151.890637][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.890649][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.890662][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.957732][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.957749][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.957767][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.027451][ T6113] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 152.448986][ T84] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.499300][ T6124] jffs2: notice: (6124) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 152.542407][ T5595] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 152.732287][ T5595] usb 1-1: Using ep0 maxpacket: 8 [ 152.733634][ T5595] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 152.739667][ T5595] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.739685][ T5595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.739698][ T5595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.741519][ T5595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.741532][ T5595] usb 1-1: Product: syz [ 152.741540][ T5595] usb 1-1: Manufacturer: syz [ 152.741547][ T5595] usb 1-1: SerialNumber: syz [ 153.647858][ T5595] usb 1-1: config 0 descriptor?? [ 153.676272][ T6116] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.443860][ T5595] rc_core: IR keymap rc-streamzap not found [ 155.443874][ T5595] Registered IR keymap rc-empty [ 155.511568][ T5595] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 155.540898][ T5595] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 156.081296][ T6144] binder: BINDER_SET_CONTEXT_MGR already set [ 156.097875][ T6144] binder: 6141:6144 ioctl 4018620d 200000000100 returned -16 [ 158.671935][ T84] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.190745][ T6151] cgroup: noprefix used incorrectly [ 159.910038][ T5595] usb 1-1: USB disconnect, device number 2 [ 160.035230][ T5945] hsr_slave_0: entered promiscuous mode [ 160.097631][ T5945] hsr_slave_1: entered promiscuous mode [ 160.100518][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 160.100540][ T5945] Cannot create hsr debugfs directory [ 162.227594][ T5605] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 162.227644][ T5605] Bluetooth: hci1: command 0x206a tx timeout [ 168.262249][ T5708] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 168.594176][ T5708] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 168.605652][ T5708] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.605680][ T5708] usb 4-1: config 0 has no interface number 0 [ 168.657221][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.657248][ T5708] usb 4-1: Product: syz [ 168.657262][ T5708] usb 4-1: Manufacturer: syz [ 168.657275][ T5708] usb 4-1: SerialNumber: syz [ 169.251624][ T5708] usb 4-1: config 0 descriptor?? [ 169.674813][ T6203] netlink: 'syz.3.90': attribute type 10 has an invalid length. [ 169.718075][ T84] bridge_slave_1: left allmulticast mode [ 169.718227][ T84] bridge_slave_1: left promiscuous mode [ 169.752113][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.223131][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 170.759053][ T5708] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 172.464115][ T84] bridge_slave_0: left allmulticast mode [ 172.464152][ T84] bridge_slave_0: left promiscuous mode [ 172.481464][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.596327][ T6238] Illegal XDP return value 4294967294 on prog (id 9) dev N/A, expect packet loss! [ 172.834913][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 179.510127][ T6280] syz.0.107 (6280): attempted to duplicate a private mapping with mremap. This is not supported. [ 181.457119][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.805073][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.752727][ T84] bond0 (unregistering): Released all slaves [ 182.950667][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.004752][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.006428][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.020809][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.028699][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.410148][ T6203] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.490515][ T6203] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.508329][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 183.731233][ T6190] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 183.951459][ T6190] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 183.998257][ T6190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.998285][ T6190] usb 5-1: Product: syz [ 183.998300][ T6190] usb 5-1: Manufacturer: syz [ 183.998315][ T6190] usb 5-1: SerialNumber: syz [ 184.073264][ T6190] usb 5-1: config 0 descriptor?? [ 184.309159][ T6190] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.303735][ T5605] Bluetooth: hci3: command tx timeout [ 185.663213][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.691233][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.706788][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.708645][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.711221][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.084518][ T6190] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 187.248942][ T42] usb 5-1: USB disconnect, device number 2 [ 187.334571][ T60] Bluetooth: hci3: command tx timeout [ 187.393540][ T6336] Zero length message leads to an empty skb [ 187.748292][ T60] Bluetooth: hci6: command tx timeout [ 189.912528][ T60] Bluetooth: hci3: command tx timeout [ 189.925298][ T60] Bluetooth: hci6: command tx timeout [ 191.061636][ T6373] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 191.982339][ T60] Bluetooth: hci6: command tx timeout [ 191.982347][ T5605] Bluetooth: hci3: command tx timeout [ 192.565794][ T5701] usb 4-1: USB disconnect, device number 2 [ 194.257885][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.258059][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.556823][ T60] Bluetooth: hci6: command tx timeout [ 195.468409][ T6415] FAULT_INJECTION: forcing a failure. [ 195.468409][ T6415] name fail_futex, interval 1, probability 0, space 0, times 1 [ 195.468447][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.468471][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.468484][ T6415] Call Trace: [ 195.468493][ T6415] [ 195.468502][ T6415] dump_stack_lvl+0xe8/0x150 [ 195.468540][ T6415] should_fail_ex+0x46b/0x600 [ 195.468575][ T6415] get_futex_key+0x1b4/0x1580 [ 195.468607][ T6415] ? __pfx_futex_wake_mark+0x10/0x10 [ 195.468640][ T6415] ? __pfx_get_futex_key+0x10/0x10 [ 195.468681][ T6415] futex_wake+0x119/0x600 [ 195.468707][ T6415] ? __pfx_futex_wait+0x10/0x10 [ 195.468732][ T6415] ? __pfx_futex_wake+0x10/0x10 [ 195.468771][ T6415] do_futex+0x458/0x4e0 [ 195.468797][ T6415] ? __pfx_do_futex+0x10/0x10 [ 195.468828][ T6415] __se_sys_futex+0x3a8/0x450 [ 195.468856][ T6415] ? ksys_read+0xfe/0x270 [ 195.468881][ T6415] ? __pfx___se_sys_futex+0x10/0x10 [ 195.468908][ T6415] ? __pfx_ksys_read+0x10/0x10 [ 195.468947][ T6415] ? __x64_sys_futex+0x21/0xf0 [ 195.468971][ T6415] do_syscall_64+0x166/0x520 [ 195.468999][ T6415] ? trace_irq_disable+0x3b/0x140 [ 195.469024][ T6415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.469049][ T6415] ? clear_bhb_loop+0x70/0xc0 [ 195.469072][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.469093][ T6415] RIP: 0033:0x7f3c3b79e1d9 [ 195.469113][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.469132][ T6415] RSP: 002b:00007f3c399d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 195.469155][ T6415] RAX: ffffffffffffffda RBX: 00007f3c3ba26098 RCX: 00007f3c3b79e1d9 [ 195.469170][ T6415] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c3ba2609c [ 195.469184][ T6415] RBP: 00007f3c3ba26090 R08: 3fffffffffffffff R09: 0000000000000000 [ 195.469197][ T6415] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 195.469211][ T6415] R13: 00007f3c3ba26128 R14: 00007ffe3551f0d0 R15: 00007ffe3551f1b8 [ 195.469245][ T6415] [ 201.620806][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 204.114260][ T84] hsr_slave_0: left promiscuous mode [ 204.962423][ T84] hsr_slave_1: left promiscuous mode [ 204.963786][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.963868][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.991599][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.991625][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.076369][ T84] veth1_macvtap: left promiscuous mode [ 205.076643][ T84] veth0_macvtap: left promiscuous mode [ 205.076939][ T84] veth1_vlan: left promiscuous mode [ 205.077294][ T84] veth0_vlan: left promiscuous mode [ 207.718339][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 207.718532][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 207.718644][ T5605] Bluetooth: hci1: command 0x206a tx timeout [ 207.878251][ T84] team0 (unregistering): Port device team_slave_1 removed [ 208.001466][ T84] team0 (unregistering): Port device team_slave_0 removed [ 212.653980][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.654111][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.654250][ T6300] bridge_slave_0: entered allmulticast mode [ 212.657689][ T6300] bridge_slave_0: entered promiscuous mode [ 212.802941][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.803015][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.803142][ T6300] bridge_slave_1: entered allmulticast mode [ 212.834884][ T6300] bridge_slave_1: entered promiscuous mode [ 213.185557][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.445201][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.122862][ T6300] team0: Port device team_slave_0 added [ 214.181732][ T6300] team0: Port device team_slave_1 added [ 215.423060][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.423078][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.423103][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.496954][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.496971][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.496994][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.658771][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 216.092225][ T6190] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 216.212349][ T6300] hsr_slave_0: entered promiscuous mode [ 216.216565][ T6300] hsr_slave_1: entered promiscuous mode [ 216.217678][ T6300] debugfs: 'hsr0' already exists in 'hsr' [ 216.217702][ T6300] Cannot create hsr debugfs directory [ 216.248282][ T6190] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 216.250249][ T6190] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.250273][ T6190] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 216.250324][ T6190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.318096][ T6190] usb 3-1: config 0 descriptor?? [ 216.390904][ T6190] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 216.418315][ T6190] dvb-usb: bulk message failed: -22 (3/0) [ 216.701575][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.701703][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.701829][ T6321] bridge_slave_0: entered allmulticast mode [ 216.748511][ T6321] bridge_slave_0: entered promiscuous mode [ 216.778672][ T6190] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 216.781066][ T6190] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 216.781159][ T6190] usb 3-1: media controller created [ 216.809857][ T6190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.874622][ T6190] dvb-usb: bulk message failed: -22 (6/0) [ 216.874752][ T6190] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 216.905430][ T6190] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 216.929536][ T6190] dvb-usb: schedule remote query interval to 150 msecs. [ 216.929560][ T6190] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 216.967653][ T6190] usb 3-1: USB disconnect, device number 3 [ 217.989988][ T6553] ======================================================= [ 217.989988][ T6553] WARNING: The mand mount option has been deprecated and [ 217.989988][ T6553] and is ignored by this kernel. Remove the mand [ 217.989988][ T6553] option from the mount to silence this warning. [ 217.989988][ T6553] ======================================================= [ 218.085813][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.085946][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.086116][ T6321] bridge_slave_1: entered allmulticast mode [ 218.102130][ T6321] bridge_slave_1: entered promiscuous mode [ 220.160252][ T6190] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 221.760397][ T6321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.060684][ T6321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.893384][ T5722] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 224.165184][ T6321] team0: Port device team_slave_0 added [ 224.173222][ T5722] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 224.174602][ T5722] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.174626][ T5722] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 224.174659][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.326600][ T6321] team0: Port device team_slave_1 added [ 225.640639][ T5250] 8021q: adding VLAN 0 to HW filter on device eth4 [ 226.232458][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 226.379855][ T6610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.387084][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 226.406105][ T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 226.406132][ T9] usb 5-1: config 0 has no interface number 0 [ 226.406175][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 226.406196][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 226.406220][ T9] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 226.406434][ T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.409639][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.409661][ T9] usb 5-1: Product: syz [ 226.409676][ T9] usb 5-1: Manufacturer: syz [ 226.409691][ T9] usb 5-1: SerialNumber: syz [ 226.541280][ T9] usb 5-1: config 0 descriptor?? [ 226.560568][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input7 [ 226.577640][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.577656][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.577673][ T6321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.650339][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.650354][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.650376][ T6321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.814480][ T6614] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 226.814508][ T6614] CIFS mount error: No usable UNC path provided in device string! [ 226.814508][ T6614] [ 226.814909][ T6614] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 226.926389][ T6321] hsr_slave_0: entered promiscuous mode [ 226.928470][ T6321] hsr_slave_1: entered promiscuous mode [ 226.929443][ T6321] debugfs: 'hsr0' already exists in 'hsr' [ 226.929466][ T6321] Cannot create hsr debugfs directory [ 228.165323][ T5708] usb 1-1: USB disconnect, device number 3 [ 228.390706][ T6634] syz.2.172 uses obsolete (PF_INET,SOCK_PACKET) [ 228.578165][ T5722] usb 5-1: USB disconnect, device number 3 [ 233.278336][ T84] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.617159][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 234.622329][ T36] audit: type=1800 audit(2000000094.540:4): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.178" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 237.188151][ T84] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.761319][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.848916][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.850703][ T5594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.886264][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.906543][ T5594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.093411][ T84] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.308080][ T6754] FAULT_INJECTION: forcing a failure. [ 244.308080][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 244.308119][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.308142][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.308173][ T6754] Call Trace: [ 244.308181][ T6754] [ 244.308190][ T6754] dump_stack_lvl+0xe8/0x150 [ 244.308235][ T6754] should_fail_ex+0x46b/0x600 [ 244.308273][ T6754] should_failslab+0xa8/0x100 [ 244.308294][ T6754] ? __kernfs_new_node+0xe7/0xa70 [ 244.308323][ T6754] kmem_cache_alloc_noprof+0x9e/0x690 [ 244.308354][ T6754] ? __kernfs_new_node+0xe7/0xa70 [ 244.308390][ T6754] __kernfs_new_node+0xe7/0xa70 [ 244.308429][ T6754] ? __pfx___kernfs_new_node+0x10/0x10 [ 244.308462][ T6754] ? kernfs_root+0x1c/0x230 [ 244.308497][ T6754] ? kernfs_root+0x1c/0x230 [ 244.308523][ T6754] ? kernfs_root+0x1c/0x230 [ 244.308548][ T6754] ? kernfs_root+0x1c/0x230 [ 244.308581][ T6754] kernfs_create_dir_ns+0xfe/0x230 [ 244.308617][ T6754] sysfs_create_dir_ns+0x12f/0x2a0 [ 244.308648][ T6754] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 244.308680][ T6754] ? rt_spin_unlock+0x165/0x200 [ 244.308707][ T6754] kobject_add_internal+0x62c/0xce0 [ 244.308735][ T6754] kobject_add+0x163/0x240 [ 244.308755][ T6754] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 244.308781][ T6754] ? __pfx_kobject_add+0x10/0x10 [ 244.308808][ T6754] ? get_device_parent+0x370/0x3a0 [ 244.308836][ T6754] device_add+0x3fa/0xb80 [ 244.308861][ T6754] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 244.308891][ T6754] wakeup_source_register+0x17f/0x390 [ 244.308918][ T6754] ep_insert+0x1034/0x1990 [ 244.308964][ T6754] ? __pfx_ep_insert+0x10/0x10 [ 244.309006][ T6754] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.309034][ T6754] ? mutex_lock_nested+0x152/0x1d0 [ 244.309055][ T6754] ? do_epoll_ctl_file+0xc94/0xf00 [ 244.309088][ T6754] do_epoll_ctl_file+0x8d5/0xf00 [ 244.309120][ T6754] ? do_epoll_ctl_file+0xae6/0xf00 [ 244.309152][ T6754] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 244.309186][ T6754] ? __fget_files+0x3a8/0x420 [ 244.309218][ T6754] ? __fget_files+0x2a/0x420 [ 244.309252][ T6754] __se_sys_epoll_ctl+0x162/0x230 [ 244.309286][ T6754] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 244.309329][ T6754] do_syscall_64+0x166/0x520 [ 244.309356][ T6754] ? trace_irq_disable+0x3b/0x140 [ 244.309383][ T6754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.309404][ T6754] ? clear_bhb_loop+0x70/0xc0 [ 244.309428][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.309448][ T6754] RIP: 0033:0x7fccea74e1d9 [ 244.309468][ T6754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.309485][ T6754] RSP: 002b:00007fcce89a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 244.309507][ T6754] RAX: ffffffffffffffda RBX: 00007fccea9d5fa0 RCX: 00007fccea74e1d9 [ 244.309522][ T6754] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 244.309535][ T6754] RBP: 00007fccea7e5888 R08: 0000000000000000 R09: 0000000000000000 [ 244.309547][ T6754] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.309560][ T6754] R13: 00007fccea9d6038 R14: 00007fccea9d5fa0 R15: 00007ffdfeb53738 [ 244.309594][ T6754] [ 244.667535][ T6754] kobject: kobject_add_internal failed for wakeup13 (error: -12 parent: wakeup) [ 245.622839][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.660948][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.992016][ T4905] Bluetooth: hci4: command tx timeout [ 246.136874][ T4905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.667363][ T4905] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.673206][ T4905] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.795733][ T4905] Bluetooth: hci2: unexpected event for opcode 0x200c [ 247.832975][ T6805] netlink: 280 bytes leftover after parsing attributes in process `syz.4.197'. [ 248.550081][ T5602] Bluetooth: hci4: command tx timeout [ 249.739802][ T5602] Bluetooth: hci5: command tx timeout [ 250.006635][ T84] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.046579][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 251.720489][ T5602] Bluetooth: hci4: command tx timeout [ 251.812809][ T4905] Bluetooth: hci5: command tx timeout [ 252.270844][ T42] libceph: connect (1)[c::]:6789 error -101 [ 252.391962][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 252.453434][ T42] libceph: connect (1)[c::]:6789 error -101 [ 252.453621][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 252.460549][ T6829] ceph: No mds server is up or the cluster is laggy [ 254.014854][ T4905] Bluetooth: hci4: command tx timeout [ 254.063306][ T4905] Bluetooth: hci5: command tx timeout [ 254.105284][ T42] libceph: connect (1)[c::]:6789 error -101 [ 254.105504][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 254.613970][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 254.614164][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 255.908220][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.908285][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.132522][ T4905] Bluetooth: hci5: command tx timeout [ 265.653116][ T6921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.213'. [ 266.542196][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.542334][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.542527][ T6767] bridge_slave_0: entered allmulticast mode [ 266.564012][ T6767] bridge_slave_0: entered promiscuous mode [ 266.570461][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.570590][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.570761][ T6767] bridge_slave_1: entered allmulticast mode [ 266.578668][ T6767] bridge_slave_1: entered promiscuous mode [ 267.568512][ T84] bridge_slave_1: left allmulticast mode [ 267.568548][ T84] bridge_slave_1: left promiscuous mode [ 267.568799][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.753791][ T84] bridge_slave_0: left allmulticast mode [ 268.753825][ T84] bridge_slave_0: left promiscuous mode [ 268.780972][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.491211][ T6948] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 269.601813][ T6948] Error validating options; rc = [-22] [ 274.673761][ T84] bridge_slave_1: left allmulticast mode [ 274.673797][ T84] bridge_slave_1: left promiscuous mode [ 274.674027][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.909258][ T6985] netlink: 256 bytes leftover after parsing attributes in process `syz.0.225'. [ 276.848380][ T6984] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input8 [ 277.061120][ T84] bridge_slave_0: left allmulticast mode [ 277.061156][ T84] bridge_slave_0: left promiscuous mode [ 277.061404][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.492399][ T5602] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 279.492448][ T5602] Bluetooth: hci1: command 0x206a tx timeout [ 282.252828][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.772833][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.835325][ T84] bond0 (unregistering): Released all slaves [ 285.330779][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.393635][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.453191][ T84] bond0 (unregistering): (slave team0): Releasing backup interface [ 285.663791][ T84] bond0 (unregistering): Released all slaves [ 287.172566][ T6767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.241359][ T6767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.858693][ T6767] team0: Port device team_slave_0 added [ 287.960817][ T6767] team0: Port device team_slave_1 added [ 288.292771][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.292789][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.292812][ T6767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.294964][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.294976][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.295015][ T6767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.404978][ T6767] hsr_slave_0: entered promiscuous mode [ 290.405734][ T6767] hsr_slave_1: entered promiscuous mode [ 290.410310][ T6767] debugfs: 'hsr0' already exists in 'hsr' [ 290.410328][ T6767] Cannot create hsr debugfs directory [ 291.202928][ T7087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.894709][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.243'. [ 298.127019][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.127130][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.127281][ T6745] bridge_slave_0: entered allmulticast mode [ 298.131546][ T6745] bridge_slave_0: entered promiscuous mode [ 298.919568][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.919715][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.919900][ T6745] bridge_slave_1: entered allmulticast mode [ 298.923564][ T6745] bridge_slave_1: entered promiscuous mode [ 301.103485][ T84] hsr_slave_0: left promiscuous mode [ 301.335490][ T84] hsr_slave_1: left promiscuous mode [ 301.337616][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.274100][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.213289][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.260745][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.262569][ T84] hsr_slave_0: left promiscuous mode [ 303.280109][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.299170][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.060662][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.079863][ T84] hsr_slave_1: left promiscuous mode [ 304.082664][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.082692][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.503796][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.503825][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.855024][ T4905] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.388804][ T4905] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.560438][ T4905] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.570770][ T4905] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.597359][ T4905] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.835670][ T84] veth1_macvtap: left promiscuous mode [ 305.835774][ T84] veth0_macvtap: left promiscuous mode [ 305.836038][ T84] veth1_vlan: left promiscuous mode [ 305.836225][ T84] veth0_vlan: left promiscuous mode [ 306.312244][ T5602] Bluetooth: hci3: command tx timeout [ 307.252273][ T36] audit: type=1800 audit(2000000167.160:5): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.263" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 307.867240][ T5602] Bluetooth: hci6: command tx timeout [ 309.032617][ T5602] Bluetooth: hci3: command tx timeout [ 309.449001][ T7206] netlink: 72 bytes leftover after parsing attributes in process `syz.4.266'. [ 309.564878][ T7206] Failed to get privilege flags for destination (handle=0x2:0x0) [ 309.572142][ T7206] netlink: 'syz.4.266': attribute type 4 has an invalid length. [ 309.572217][ T7206] netlink: 17 bytes leftover after parsing attributes in process `syz.4.266'. [ 309.893390][ T5602] Bluetooth: hci6: command tx timeout [ 311.092202][ T5602] Bluetooth: hci3: command tx timeout [ 311.972506][ T5602] Bluetooth: hci6: command tx timeout [ 312.581009][ T84] team0 (unregistering): Port device team_slave_1 removed [ 312.723321][ T84] team0 (unregistering): Port device team_slave_0 removed [ 314.196105][ T5602] Bluetooth: hci3: command tx timeout [ 314.196164][ T5602] Bluetooth: hci6: command tx timeout [ 316.766977][ T84] team0 (unregistering): Port device team_slave_1 removed [ 317.072806][ T84] team0 (unregistering): Port device team_slave_0 removed [ 317.163592][ T7244] CIFS mount error: No usable UNC path provided in device string! [ 317.163592][ T7244] [ 317.163675][ T7244] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 317.368906][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.393830][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.452270][ T5596] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 325.622201][ T5596] usb 1-1: Using ep0 maxpacket: 32 [ 325.625150][ T5596] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 325.626348][ T5596] usb 1-1: config index 0 descriptor too short (expected 6668, got 18) [ 325.626373][ T5596] usb 1-1: config 224 has too many interfaces: 101, using maximum allowed: 32 [ 325.626395][ T5596] usb 1-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config [ 325.626414][ T5596] usb 1-1: config 224 has 0 interfaces, different from the descriptor's value: 101 [ 325.628784][ T5596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.628810][ T5596] usb 1-1: Product: syz [ 325.628825][ T5596] usb 1-1: Manufacturer: syz [ 325.628839][ T5596] usb 1-1: SerialNumber: syz [ 326.141855][ T5596] usb 1-1: can't set config #224, error -71 [ 326.203168][ T5596] usb 1-1: USB disconnect, device number 4 [ 326.259446][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 326.910488][ T7338] kAFS: No cell specified [ 333.172201][ T4905] Bluetooth: hci1: command 0x206a tx timeout [ 333.172258][ T5602] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 333.208050][ T7382] syz.0.298: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 333.208405][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.0.298 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.208433][ T7382] Tainted: [L]=SOFTLOCKUP [ 333.208440][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.208451][ T7382] Call Trace: [ 333.208459][ T7382] [ 333.208468][ T7382] dump_stack_lvl+0xe8/0x150 [ 333.208503][ T7382] warn_alloc+0x24d/0x270 [ 333.208540][ T7382] ? __pfx_warn_alloc+0x10/0x10 [ 333.208567][ T7382] ? xsk_setsockopt+0x52a/0x960 [ 333.208589][ T7382] ? __x64_sys_setsockopt+0x143/0x1b0 [ 333.208634][ T7382] __vmalloc_node_range_noprof+0x127/0x1540 [ 333.208695][ T7382] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.208724][ T7382] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 333.208754][ T7382] ? xskq_create+0x56/0x220 [ 333.208783][ T7382] xskq_create+0x148/0x220 [ 333.208813][ T7382] ? xsk_init_queue+0x8a/0xe0 [ 333.208839][ T7382] xsk_init_queue+0x8a/0xe0 [ 333.208866][ T7382] xsk_setsockopt+0x52a/0x960 [ 333.208892][ T7382] ? __pfx_xsk_setsockopt+0x10/0x10 [ 333.208928][ T7382] ? __fget_files+0x2a/0x420 [ 333.208951][ T7382] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 333.208973][ T7382] ? __pfx_xsk_setsockopt+0x10/0x10 [ 333.208998][ T7382] do_sock_setsockopt+0x17c/0x1b0 [ 333.209028][ T7382] __x64_sys_setsockopt+0x143/0x1b0 [ 333.209059][ T7382] do_syscall_64+0x166/0x520 [ 333.209087][ T7382] ? trace_irq_disable+0x3b/0x140 [ 333.209114][ T7382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.209134][ T7382] ? clear_bhb_loop+0x70/0xc0 [ 333.209158][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.209178][ T7382] RIP: 0033:0x7fccea74e1d9 [ 333.209198][ T7382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.209215][ T7382] RSP: 002b:00007fcce8541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.209234][ T7382] RAX: ffffffffffffffda RBX: 00007fccea9d6270 RCX: 00007fccea74e1d9 [ 333.209249][ T7382] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 333.209261][ T7382] RBP: 00007fccea7e5888 R08: 0000000000000004 R09: 0000000000000000 [ 333.209274][ T7382] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.209287][ T7382] R13: 00007fccea9d6308 R14: 00007fccea9d6270 R15: 00007ffdfeb53738 [ 333.209321][ T7382] [ 333.299440][ T7382] Mem-Info: [ 333.299465][ T7382] active_anon:189 inactive_anon:10552 isolated_anon:0 [ 333.299465][ T7382] active_file:23538 inactive_file:38141 isolated_file:0 [ 333.299465][ T7382] unevictable:0 dirty:198 writeback:0 [ 333.299465][ T7382] slab_reclaimable:12259 slab_unreclaimable:105097 [ 333.299465][ T7382] mapped:30500 shmem:5073 pagetables:1453 [ 333.299465][ T7382] sec_pagetables:0 bounce:0 [ 333.299465][ T7382] kernel_misc_reclaimable:0 [ 333.299465][ T7382] free:1284553 free_pcp:8208 free_cma:0 [ 333.299559][ T7382] Node 0 active_anon:756kB inactive_anon:42208kB active_file:93856kB inactive_file:152564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122000kB dirty:792kB writeback:0kB shmem:20292kB kernel_stack:13976kB pagetables:5624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 333.299695][ T7382] Node 1 active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 333.299754][ T7382] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.299850][ T7382] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 333.301808][ T7382] Node 0 DMA32 free:1185084kB boost:0kB min:3900kB low:6412kB high:8924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:756kB inactive_anon:42212kB active_file:93856kB inactive_file:152564kB unevictable:0kB writepending:792kB zspages:268kB present:3129332kB managed:2540292kB mlocked:0kB bounce:0kB free_pcp:31148kB local_pcp:4280kB free_cma:0kB [ 333.302041][ T7382] lowmem_reserve[]: 0 0 1 1 1 [ 333.302378][ T7382] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1804kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 333.302495][ T7382] lowmem_reserve[]: 0 0 0 0 0 [ 333.302813][ T7382] Node 1 Normal free:3937768kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1676kB local_pcp:176kB free_cma:0kB [ 333.302941][ T7382] lowmem_reserve[]: 0 0 0 0 0 [ 333.303179][ T7382] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 333.308363][ T7382] Node 0 DMA32: 1483*4kB (UME) 638*8kB (UME) 700*16kB (UME) 455*32kB (UME) 322*64kB (UME) 177*128kB (UM) 54*256kB (UM) 35*512kB (UM) 18*1024kB (ME) 11*2048kB (UME) 252*4096kB (UM) = 1184956kB [ 333.321039][ T7382] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 333.321630][ T7382] Node 1 Normal: 0*4kB 3*8kB (UM) 3*16kB (UM) 3*32kB (U) 7*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3937768kB [ 333.322685][ T7382] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.322745][ T7382] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.322800][ T7382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.322872][ T7382] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.322943][ T7382] 66748 total pagecache pages [ 333.323041][ T7382] 0 pages in swap cache [ 333.323049][ T7382] Free swap = 124936kB [ 333.323056][ T7382] Total swap = 124996kB [ 333.323191][ T7382] 2097051 pages RAM [ 333.323251][ T7382] 0 pages HighMem/MovableOnly [ 333.323258][ T7382] 429911 pages reserved [ 333.323318][ T7382] 0 pages cma reserved [ 335.422522][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.520885][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.521131][ T7171] bridge_slave_0: entered allmulticast mode [ 335.792388][ T7171] bridge_slave_0: entered promiscuous mode [ 335.885431][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.885505][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.885606][ T7171] bridge_slave_1: entered allmulticast mode [ 335.970420][ T7171] bridge_slave_1: entered promiscuous mode [ 336.192871][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.192994][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.193184][ T7156] bridge_slave_0: entered allmulticast mode [ 336.230732][ T7156] bridge_slave_0: entered promiscuous mode [ 336.408755][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.408889][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.409049][ T7156] bridge_slave_1: entered allmulticast mode [ 336.455656][ T7156] bridge_slave_1: entered promiscuous mode [ 336.814204][ T84] bridge_slave_1: left allmulticast mode [ 336.814242][ T84] bridge_slave_1: left promiscuous mode [ 336.814498][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.083835][ T84] bridge_slave_0: left allmulticast mode [ 338.083871][ T84] bridge_slave_0: left promiscuous mode [ 338.084108][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.992109][ T84] bridge_slave_1: left allmulticast mode [ 340.992144][ T84] bridge_slave_1: left promiscuous mode [ 340.992385][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.572311][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 341.878216][ T5602] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 341.913465][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 342.654046][ T84] bridge_slave_0: left allmulticast mode [ 342.654082][ T84] bridge_slave_0: left promiscuous mode [ 342.654325][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.655293][ T84] bridge_slave_1: left allmulticast mode [ 345.655328][ T84] bridge_slave_1: left promiscuous mode [ 345.655586][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.833675][ T84] bridge_slave_0: left allmulticast mode [ 345.868039][ T84] bridge_slave_0: left promiscuous mode [ 345.868217][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.295131][ T7469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.317'. [ 347.393454][ T84] bridge_slave_1: left allmulticast mode [ 347.393490][ T84] bridge_slave_1: left promiscuous mode [ 347.393750][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.578222][ T84] bridge_slave_0: left allmulticast mode [ 348.578259][ T84] bridge_slave_0: left promiscuous mode [ 348.578493][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.228608][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.810007][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.902932][ T84] bond0 (unregistering): Released all slaves [ 356.566991][ T84] bond0 (unregistering): Released all slaves [ 360.070465][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.492682][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.241191][ T84] bond0 (unregistering): Released all slaves [ 365.102827][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.147620][ T4905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.196415][ T4905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.201121][ T4905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.205016][ T4905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.205950][ T4905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.307424][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.425588][ T84] bond0 (unregistering): Released all slaves [ 365.507771][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.799040][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 366.298900][ T4905] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.338574][ T4905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.341139][ T4905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.401575][ T7552] No source specified [ 366.720081][ T4905] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.874374][ T4905] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.262221][ T4905] Bluetooth: hci4: command tx timeout [ 367.444094][ T36] audit: type=1326 audit(2000000227.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 367.444234][ T36] audit: type=1326 audit(2000000227.390:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 367.503598][ T36] audit: type=1326 audit(2000000227.450:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 367.534192][ T36] audit: type=1326 audit(2000000227.450:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 367.534245][ T36] audit: type=1326 audit(2000000227.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 367.534281][ T36] audit: type=1326 audit(2000000227.450:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 367.534318][ T36] audit: type=1326 audit(2000000227.450:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 367.534353][ T36] audit: type=1326 audit(2000000227.450:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 367.534389][ T36] audit: type=1326 audit(2000000227.450:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 367.534424][ T36] audit: type=1326 audit(2000000227.450:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.4.336" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 368.544499][ T7558] nvme_fabrics: missing parameter 'nqn=%s' [ 368.948153][ T4905] Bluetooth: hci5: command tx timeout [ 369.336642][ T4905] Bluetooth: hci4: command tx timeout [ 369.755576][ T4905] Bluetooth: hci2: unexpected subevent 0x1a length: 10 > 6 [ 371.058710][ T4905] Bluetooth: hci5: command tx timeout [ 376.668604][ T4905] Bluetooth: hci4: command tx timeout [ 376.668662][ T4905] Bluetooth: hci5: command tx timeout [ 377.063527][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 377.678872][ T7618] capability: warning: `syz.4.342' uses 32-bit capabilities (legacy support in use) [ 378.392236][ T84] hsr_slave_0: left promiscuous mode [ 378.445524][ T84] hsr_slave_1: left promiscuous mode [ 378.446721][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.522936][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.572786][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.572857][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.692192][ T5602] Bluetooth: hci5: command tx timeout [ 378.692228][ T5602] Bluetooth: hci4: command tx timeout [ 380.846861][ T84] hsr_slave_0: left promiscuous mode [ 381.105339][ T7636] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5588] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7636] [ 382.001137][ T4905] Bluetooth: Frame is too long (len 16, expected len 4) [ 382.264905][ T84] hsr_slave_1: left promiscuous mode [ 382.424834][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.820898][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.037286][ T7642] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 383.037286][ T7642] [ 383.037348][ T7642] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 383.037888][ T7642] CIFS: Attempting to mount //172.20.20.170/share [ 384.083030][ T7642] CIFS: VFS: cifs_mount failed w/return code = -112 [ 384.372805][ T7642] syz.4.348 (7642) used greatest stack depth: 18080 bytes left [ 384.844845][ T84] hsr_slave_0: left promiscuous mode [ 385.749466][ T84] hsr_slave_1: left promiscuous mode [ 385.750664][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.793042][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.056325][ T84] team0 (unregistering): Port device team_slave_1 removed [ 387.120570][ T84] team0 (unregistering): Port device team_slave_0 removed [ 396.932139][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 396.932210][ T4905] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 397.718297][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 397.718316][ T36] audit: type=1326 audit(2000000257.660:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7694 comm="syz.2.361" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c3b79e1d9 code=0x0 [ 404.022828][ T84] team0 (unregistering): Port device team_slave_1 removed [ 404.342739][ T84] team0 (unregistering): Port device team_slave_0 removed [ 407.742735][ T84] team0 (unregistering): Port device team_slave_1 removed [ 407.783630][ T84] team0 (unregistering): Port device team_slave_0 removed [ 407.982521][ T5723] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 408.279506][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 408.284262][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short [ 408.284331][ T5723] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.285745][ T5723] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.285767][ T5723] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 408.288522][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.288545][ T5723] usb 5-1: Product: syz [ 408.288559][ T5723] usb 5-1: Manufacturer: syz [ 408.288573][ T5723] usb 5-1: SerialNumber: syz [ 411.147898][ T5723] usb 5-1: USB disconnect, device number 4 [ 412.932524][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 412.932593][ T4905] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 414.590999][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8 [ 415.538788][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.539892][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.540418][ T7538] bridge_slave_0: entered allmulticast mode [ 415.744685][ T7538] bridge_slave_0: entered promiscuous mode [ 415.761165][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.761492][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.761671][ T7538] bridge_slave_1: entered allmulticast mode [ 415.786389][ T7538] bridge_slave_1: entered promiscuous mode [ 415.862628][ T7538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.866631][ T7538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.502223][ T7538] team0: Port device team_slave_0 added [ 418.621030][ T7538] team0: Port device team_slave_1 added [ 419.651440][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.651459][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.651483][ T7538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.809857][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.809875][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.809900][ T7538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.152890][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.153093][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.153616][ T7544] bridge_slave_0: entered allmulticast mode [ 420.156244][ T7544] bridge_slave_0: entered promiscuous mode [ 420.216789][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.216915][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.217079][ T7544] bridge_slave_1: entered allmulticast mode [ 420.221244][ T7544] bridge_slave_1: entered promiscuous mode [ 420.313180][ T7538] hsr_slave_0: entered promiscuous mode [ 420.317237][ T7538] hsr_slave_1: entered promiscuous mode [ 420.318144][ T7538] debugfs: 'hsr0' already exists in 'hsr' [ 420.318169][ T7538] Cannot create hsr debugfs directory [ 420.596550][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.257007][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.639813][ T7544] team0: Port device team_slave_0 added [ 422.659139][ T7544] team0: Port device team_slave_1 added [ 423.543118][ T7851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.386'. [ 423.543143][ T7851] netlink: 43 bytes leftover after parsing attributes in process `syz.0.386'. [ 423.543159][ T7851] netlink: 'syz.0.386': attribute type 5 has an invalid length. [ 423.543172][ T7851] netlink: 43 bytes leftover after parsing attributes in process `syz.0.386'. [ 425.116286][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 426.811455][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.866234][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.879780][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.894728][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.895609][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.454090][ T4905] Bluetooth: hci3: command tx timeout [ 430.875203][ T5602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 431.063641][ T5602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 431.073547][ T5602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 431.079460][ T5602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 431.080158][ T5602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 431.957573][ T5602] Bluetooth: hci3: command tx timeout [ 433.184586][ T1318] rpcbind: server 127.0.0.1 not responding, timed out [ 433.989134][ T5602] Bluetooth: hci3: command tx timeout [ 434.298875][ T5602] Bluetooth: hci6: command tx timeout [ 435.862189][ T6190] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 437.451767][ T5602] Bluetooth: hci3: command tx timeout [ 437.451803][ T5602] Bluetooth: hci6: command tx timeout [ 437.663353][ T6190] usb 1-1: Using ep0 maxpacket: 32 [ 437.663653][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 437.663995][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 437.664420][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 437.664545][ T6190] usb 1-1: device descriptor read/all, error -32 [ 439.585568][ T5602] Bluetooth: hci6: command tx timeout [ 440.024551][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.024622][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.652349][ T5602] Bluetooth: hci6: command tx timeout [ 444.821924][ T84] bridge_slave_1: left allmulticast mode [ 444.823905][ T84] bridge_slave_1: left promiscuous mode [ 444.824230][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.982166][ T84] bridge_slave_0: left allmulticast mode [ 445.982191][ T84] bridge_slave_0: left promiscuous mode [ 446.057570][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.336099][ T84] bridge_slave_1: left allmulticast mode [ 446.336135][ T84] bridge_slave_1: left promiscuous mode [ 446.336375][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.897567][ T84] bridge_slave_0: left allmulticast mode [ 446.897591][ T84] bridge_slave_0: left promiscuous mode [ 446.897750][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.296131][ T84] bridge_slave_1: left allmulticast mode [ 450.296156][ T84] bridge_slave_1: left promiscuous mode [ 450.296313][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.217030][ T84] bridge_slave_0: left allmulticast mode [ 452.217055][ T84] bridge_slave_0: left promiscuous mode [ 452.217202][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.343706][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.874618][ T8047] IPVS: ip_vs_add_dest(): server weight less than zero [ 454.101082][ T1475] IPVS: starting estimator thread 0... [ 454.610861][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.692973][ T8048] IPVS: using max 9 ests per chain, 21600 per kthread [ 454.787984][ T84] bond0 (unregistering): Released all slaves [ 457.270005][ T84] bond0 (unregistering): Released all slaves [ 458.259775][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 458.503007][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.670781][ T84] bond0 (unregistering): Released all slaves [ 460.568087][ T8088] jffs2: notice: (8088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 462.227386][ T84] hsr_slave_0: left promiscuous mode [ 462.266633][ T84] hsr_slave_1: left promiscuous mode [ 462.267821][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.368240][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.550421][ T8105] UDC core: g1: couldn't find an available UDC or it's busy [ 465.130249][ T84] team0 (unregistering): Port device team_slave_1 removed [ 465.269855][ T5723] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 465.355539][ T84] team0 (unregistering): Port device team_slave_0 removed [ 466.819859][ T36] audit: type=1326 audit(2000000325.750:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8136 comm="syz.0.432" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccea74e1d9 code=0x0 [ 468.862180][ T5723] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 469.012851][ T5723] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 469.015147][ T5723] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 469.015177][ T5723] usb 3-1: config 0 interface 0 has no altsetting 0 [ 469.019641][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 469.019666][ T5723] usb 3-1: Product: syz [ 469.019680][ T5723] usb 3-1: Manufacturer: syz [ 469.019694][ T5723] usb 3-1: SerialNumber: syz [ 469.131272][ T5723] usb 3-1: config 0 descriptor?? [ 469.139957][ T8150] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 469.449402][ T5723] usb 3-1: selecting invalid altsetting 0 [ 472.640473][ T8177] syz.0.434 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 473.009496][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.009687][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.009860][ T7870] bridge_slave_0: entered allmulticast mode [ 473.058528][ T7870] bridge_slave_0: entered promiscuous mode [ 473.203124][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.203259][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.203453][ T7870] bridge_slave_1: entered allmulticast mode [ 473.223249][ T7870] bridge_slave_1: entered promiscuous mode [ 473.531019][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.531144][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.531327][ T7900] bridge_slave_0: entered allmulticast mode [ 473.541872][ T7900] bridge_slave_0: entered promiscuous mode [ 473.718857][ T5723] usb 3-1: USB disconnect, device number 4 [ 473.747616][ T7900] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.747742][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.747960][ T7900] bridge_slave_1: entered allmulticast mode [ 473.772184][ T7900] bridge_slave_1: entered promiscuous mode [ 473.808328][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.990378][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.208435][ T7900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.866677][ T7900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.869534][ T7870] team0: Port device team_slave_0 added [ 475.895346][ T7870] team0: Port device team_slave_1 added [ 475.975726][ T7900] team0: Port device team_slave_0 added [ 476.340930][ T7900] team0: Port device team_slave_1 added [ 477.519797][ T8217] udevd[8217]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.708398][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.708416][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.708439][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.854673][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.854690][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.854715][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.970731][ T7900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.970750][ T7900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.970774][ T7900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.048699][ T7900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.048716][ T7900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.048741][ T7900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.403341][ T7870] hsr_slave_0: entered promiscuous mode [ 478.405015][ T7870] hsr_slave_1: entered promiscuous mode [ 478.407561][ T7870] debugfs: 'hsr0' already exists in 'hsr' [ 478.407587][ T7870] Cannot create hsr debugfs directory [ 478.493934][ T7900] hsr_slave_0: entered promiscuous mode [ 478.495293][ T7900] hsr_slave_1: entered promiscuous mode [ 478.496079][ T7900] debugfs: 'hsr0' already exists in 'hsr' [ 478.496099][ T7900] Cannot create hsr debugfs directory [ 481.225638][ T8253] No source specified [ 483.704181][ T8248] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 486.810608][ T7900] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 486.950533][ T8272] netlink: 48 bytes leftover after parsing attributes in process `syz.4.456'. [ 487.712459][ T7900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.715543][ T7900] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.890415][ T7900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.019043][ T4905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.792437][ T4905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.797274][ T4905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 488.800265][ T4905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 488.801057][ T4905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.237867][ T84] bridge_slave_1: left allmulticast mode [ 489.237903][ T84] bridge_slave_1: left promiscuous mode [ 489.238145][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.062875][ T84] bridge_slave_0: left allmulticast mode [ 490.062935][ T84] bridge_slave_0: left promiscuous mode [ 490.072554][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.127637][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.313074][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.349742][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.450691][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.487753][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 491.023030][ T5602] Bluetooth: hci4: command tx timeout [ 493.349891][ T4905] Bluetooth: hci4: command tx timeout [ 494.952072][ T4905] Bluetooth: hci3: command tx timeout [ 495.942056][ T4905] Bluetooth: hci4: command tx timeout [ 496.837508][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.063532][ T4905] Bluetooth: hci3: command tx timeout [ 497.275267][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.972076][ T5602] Bluetooth: hci4: command tx timeout [ 499.092092][ T5602] Bluetooth: hci3: command tx timeout [ 500.020350][ T84] bond0 (unregistering): Released all slaves [ 501.244258][ T5602] Bluetooth: hci3: command tx timeout [ 502.279256][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.279327][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.777331][ T84] team0 (unregistering): Port device team_slave_1 removed [ 505.872750][ T84] team0 (unregistering): Port device team_slave_0 removed [ 505.889315][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 506.036368][ T42] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 506.095492][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.095519][ T42] usb 1-1: Product: syz [ 506.095533][ T42] usb 1-1: Manufacturer: syz [ 506.095547][ T42] usb 1-1: SerialNumber: syz [ 508.608717][ T5730] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 508.750832][ T42] rtl8150 1-1:1.0: couldn't reset the device [ 508.751447][ T42] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 508.813872][ T5730] usb 3-1: Using ep0 maxpacket: 8 [ 508.817050][ T5730] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 508.839843][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.839870][ T5730] usb 3-1: Product: syz [ 508.839884][ T5730] usb 3-1: Manufacturer: syz [ 508.839898][ T5730] usb 3-1: SerialNumber: syz [ 510.519170][ T42] usb 1-1: USB disconnect, device number 7 [ 510.556494][ T5730] usb 3-1: config 0 descriptor?? [ 510.567529][ T5730] usb 3-1: can't set config #0, error -71 [ 510.615313][ T5730] usb 3-1: USB disconnect, device number 5 [ 515.457824][ T8413] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5589] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8413] [ 520.549891][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.549961][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.550052][ T8268] bridge_slave_0: entered allmulticast mode [ 520.558345][ T8268] bridge_slave_0: entered promiscuous mode [ 520.584129][ T8446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.211623][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.211749][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.229037][ T8268] bridge_slave_1: entered allmulticast mode [ 521.355075][ T8268] bridge_slave_1: entered promiscuous mode [ 525.865488][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.250806][ T8484] binder: 8475:8484 ioctl 4018620d 0 returned -22 [ 529.950693][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.951228][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.951382][ T8286] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.951555][ T8286] bridge_slave_0: entered allmulticast mode [ 529.971602][ T8286] bridge_slave_0: entered promiscuous mode [ 530.447954][ T8495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.317215][ T8502] IPVS: ip_vs_add_dest(): server weight less than zero [ 531.394459][ T36] audit: type=1326 audit(2000000391.210:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccea74e1d9 code=0x7ffc0000 [ 531.394804][ T36] audit: type=1326 audit(2000000391.210:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccea74e1d9 code=0x7ffc0000 [ 531.413752][ T36] audit: type=1326 audit(2000000391.220:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fccea70ea0e code=0x7ffc0000 [ 531.414066][ T36] audit: type=1326 audit(2000000391.220:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccea74e1d9 code=0x7ffc0000 [ 531.414692][ T36] audit: type=1326 audit(2000000391.220:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccea74e1d9 code=0x7ffc0000 [ 531.414939][ T36] audit: type=1326 audit(2000000391.220:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccea74e1d9 code=0x7ffc0000 [ 531.415201][ T36] audit: type=1326 audit(2000000391.220:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccea74e1d9 code=0x7ffc0000 [ 531.415822][ T36] audit: type=1326 audit(2000000391.230:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccea74e1d9 code=0x7ffc0000 [ 531.416562][ T36] audit: type=1326 audit(2000000391.230:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccea74e1d9 code=0x7ffc0000 [ 531.417113][ T36] audit: type=1326 audit(2000000391.240:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8491 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccea74e1d9 code=0x7ffc0000 [ 532.131241][ T8506] FAULT_INJECTION: forcing a failure. [ 532.131241][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 532.131290][ T8506] CPU: 1 UID: 0 PID: 8506 Comm: syz.2.502 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 532.131318][ T8506] Tainted: [L]=SOFTLOCKUP [ 532.131325][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.131340][ T8506] Call Trace: [ 532.131348][ T8506] [ 532.131358][ T8506] dump_stack_lvl+0xe8/0x150 [ 532.131395][ T8506] should_fail_ex+0x46b/0x600 [ 532.131432][ T8506] should_failslab+0xa8/0x100 [ 532.131456][ T8506] __kmalloc_cache_noprof+0xa1/0x680 [ 532.131487][ T8506] ? eventfs_create_dir+0x70/0x3d0 [ 532.131504][ T8506] ? eventfs_create_dir+0x70/0x3d0 [ 532.131530][ T8506] eventfs_create_dir+0x70/0x3d0 [ 532.131556][ T8506] event_create_dir+0x4dd/0xb60 [ 532.131594][ T8506] trace_add_event_call+0x142/0x1e0 [ 532.131622][ T8506] trace_probe_register_event_call+0x397/0x470 [ 532.131654][ T8506] register_trace_uprobe+0x817/0x1320 [ 532.131687][ T8506] ? traceprobe_set_print_fmt+0x78/0xc0 [ 532.131714][ T8506] __trace_uprobe_create+0xc42/0xe50 [ 532.131752][ T8506] ? __pfx___trace_uprobe_create+0x10/0x10 [ 532.131780][ T8506] ? __kmalloc_noprof+0x43e/0x790 [ 532.131808][ T8506] ? argv_split+0x18d/0x400 [ 532.131832][ T8506] ? argv_split+0x18d/0x400 [ 532.131865][ T8506] ? argv_split+0x378/0x400 [ 532.131898][ T8506] trace_probe_create+0xce/0x130 [ 532.131925][ T8506] ? __pfx___trace_uprobe_create+0x10/0x10 [ 532.131950][ T8506] ? __pfx_trace_probe_create+0x10/0x10 [ 532.131972][ T8506] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 532.131998][ T8506] ? mutex_lock_nested+0x152/0x1d0 [ 532.132016][ T8506] ? dyn_event_create+0x2a/0x80 [ 532.132039][ T8506] dyn_event_create+0x59/0x80 [ 532.132058][ T8506] create_or_delete_trace_uprobe+0x65/0xa0 [ 532.132088][ T8506] trace_parse_run_command+0x1f3/0x380 [ 532.132123][ T8506] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 532.132154][ T8506] ? __pfx_probes_write+0x10/0x10 [ 532.132182][ T8506] vfs_write+0x29f/0xbb0 [ 532.132217][ T8506] ? __pfx_vfs_write+0x10/0x10 [ 532.132246][ T8506] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 532.132275][ T8506] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 532.132302][ T8506] ? mutex_lock_nested+0x152/0x1d0 [ 532.132321][ T8506] ? fdget_pos+0x252/0x320 [ 532.132353][ T8506] ksys_write+0x156/0x270 [ 532.132381][ T8506] ? __pfx_ksys_write+0x10/0x10 [ 532.132420][ T8506] do_syscall_64+0x166/0x520 [ 532.132446][ T8506] ? trace_irq_disable+0x3b/0x140 [ 532.132471][ T8506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.132491][ T8506] ? clear_bhb_loop+0x70/0xc0 [ 532.132515][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.132540][ T8506] RIP: 0033:0x7f3c3b79e1d9 [ 532.132560][ T8506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.132577][ T8506] RSP: 002b:00007f3c399b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 532.132599][ T8506] RAX: ffffffffffffffda RBX: 00007f3c3ba26180 RCX: 00007f3c3b79e1d9 [ 532.132613][ T8506] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000008 [ 532.132625][ T8506] RBP: 00007f3c3b835888 R08: 0000000000000000 R09: 0000000000000000 [ 532.132637][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.132648][ T8506] R13: 00007f3c3ba26218 R14: 00007f3c3ba26180 R15: 00007ffe3551f1b8 [ 532.132682][ T8506] [ 532.152032][ T8506] Failed to create system directory s [ 532.936346][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.936415][ T8286] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.936560][ T8286] bridge_slave_1: entered allmulticast mode [ 532.943893][ T8286] bridge_slave_1: entered promiscuous mode [ 538.042925][ T8268] team0: Port device team_slave_0 added [ 541.196137][ T8268] team0: Port device team_slave_1 added [ 541.920130][ T8531] FAULT_INJECTION: forcing a failure. [ 541.920130][ T8531] name failslab, interval 1, probability 0, space 0, times 0 [ 541.920196][ T8531] CPU: 0 UID: 60928 PID: 8531 Comm: syz.2.511 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 541.920226][ T8531] Tainted: [L]=SOFTLOCKUP [ 541.920234][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.920246][ T8531] Call Trace: [ 541.920254][ T8531] [ 541.920263][ T8531] dump_stack_lvl+0xe8/0x150 [ 541.920300][ T8531] should_fail_ex+0x46b/0x600 [ 541.920338][ T8531] should_failslab+0xa8/0x100 [ 541.920363][ T8531] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 541.920396][ T8531] ? register_pidns_sysctls+0x46/0x1e0 [ 541.920417][ T8531] ? register_pidns_sysctls+0x46/0x1e0 [ 541.920446][ T8531] kmemdup_noprof+0x2b/0x70 [ 541.920471][ T8531] register_pidns_sysctls+0x46/0x1e0 [ 541.920497][ T8531] copy_pid_ns+0x54d/0x940 [ 541.920525][ T8531] ? irqentry_exit+0x218/0x920 [ 541.920563][ T8531] ? __pfx_copy_pid_ns+0x10/0x10 [ 541.920605][ T8531] ? copy_ipcs+0x2a9/0x6c0 [ 541.920629][ T8531] create_new_namespaces+0x2ad/0x6b0 [ 541.920661][ T8531] ? security_capable+0x7e/0x2c0 [ 541.920690][ T8531] unshare_nsproxy_namespaces+0x149/0x190 [ 541.920721][ T8531] ksys_unshare+0x5d8/0x970 [ 541.920758][ T8531] ? __pfx_ksys_unshare+0x10/0x10 [ 541.920787][ T8531] ? rcu_is_watching+0x16/0xb0 [ 541.920818][ T8531] __x64_sys_unshare+0x38/0x50 [ 541.920847][ T8531] do_syscall_64+0x166/0x520 [ 541.920874][ T8531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.920894][ T8531] ? clear_bhb_loop+0x70/0xc0 [ 541.920926][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.920946][ T8531] RIP: 0033:0x7f3c3b79e1d9 [ 541.920965][ T8531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.920983][ T8531] RSP: 002b:00007f3c399b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 541.921006][ T8531] RAX: ffffffffffffffda RBX: 00007f3c3ba26180 RCX: 00007f3c3b79e1d9 [ 541.921022][ T8531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 541.921035][ T8531] RBP: 00007f3c3b835888 R08: 0000000000000000 R09: 0000000000000000 [ 541.921047][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.921059][ T8531] R13: 00007f3c3ba26218 R14: 00007f3c3ba26180 R15: 00007ffe3551f1b8 [ 541.921092][ T8531] [ 542.360331][ T5602] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 542.756682][ T8537] netlink: zone id is out of range [ 542.756698][ T8537] netlink: zone id is out of range [ 542.756704][ T8537] netlink: zone id is out of range [ 542.756711][ T8537] netlink: zone id is out of range [ 542.756718][ T8537] netlink: zone id is out of range [ 542.809005][ T8286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.077497][ T8286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.039229][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.039246][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.039267][ T8268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.220875][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.220892][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.220915][ T8268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.227948][ T8286] team0: Port device team_slave_0 added [ 544.280234][ T8286] team0: Port device team_slave_1 added [ 546.023565][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.023582][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.023600][ T8286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.037371][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.037385][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.037408][ T8286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.104244][ T8286] hsr_slave_0: entered promiscuous mode [ 546.112867][ T8286] hsr_slave_1: entered promiscuous mode [ 546.113803][ T8286] debugfs: 'hsr0' already exists in 'hsr' [ 546.113826][ T8286] Cannot create hsr debugfs directory [ 549.099148][ T4905] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 549.136596][ T4905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 549.223096][ T8571] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 549.962017][ T4905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 549.963155][ T4905] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 549.965132][ T4905] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 551.431040][ T8584] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5589] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8584] [ 553.342616][ T4905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 554.516153][ T4905] Bluetooth: hci5: command tx timeout [ 554.593318][ T4905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 554.601647][ T4905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 554.784528][ T4905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 554.785883][ T4905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 556.778040][ T4905] Bluetooth: hci5: command tx timeout [ 556.932035][ T4905] Bluetooth: hci4: command tx timeout [ 559.373816][ T84] bridge_slave_1: left allmulticast mode [ 559.373859][ T84] bridge_slave_1: left promiscuous mode [ 559.374106][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.399711][ T4905] Bluetooth: hci5: command tx timeout [ 559.399745][ T4905] Bluetooth: hci4: command tx timeout [ 561.349286][ T84] bridge_slave_0: left allmulticast mode [ 561.349323][ T84] bridge_slave_0: left promiscuous mode [ 561.349572][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.412521][ T4905] Bluetooth: hci5: command tx timeout [ 561.412581][ T5602] Bluetooth: hci4: command tx timeout [ 563.934928][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.934989][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.936246][ T5602] Bluetooth: hci4: command tx timeout [ 564.092159][ T84] bridge_slave_1: left allmulticast mode [ 564.092184][ T84] bridge_slave_1: left promiscuous mode [ 564.092336][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.194150][ T84] bridge_slave_0: left allmulticast mode [ 564.194177][ T84] bridge_slave_0: left promiscuous mode [ 564.194330][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.435502][ T8645] qnx4: no qnx4 filesystem (no root dir). [ 567.343877][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.447431][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.515567][ T84] bond0 (unregistering): Released all slaves [ 569.773365][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.917136][ T8664] CacheFiles: Failed to register: -95 [ 570.203454][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.249218][ T84] bond0 (unregistering): Released all slaves [ 570.303246][ T8638] netlink: 84 bytes leftover after parsing attributes in process `syz.2.530'. [ 570.615032][ T4905] Bluetooth: hci4: command 0x0405 tx timeout [ 572.554572][ T8664] Process accounting resumed [ 572.834086][ T8676] comedi comedi3: pcl730: I/O base address not correctly aligned [ 572.930716][ T8676] overlayfs: upper fs does not support tmpfile. [ 574.526807][ T84] hsr_slave_0: left promiscuous mode [ 574.567813][ T84] hsr_slave_1: left promiscuous mode [ 574.569750][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.643687][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.682516][ T84] hsr_slave_0: left promiscuous mode [ 578.312938][ T8715] kAFS: No cell specified [ 579.755376][ T84] hsr_slave_1: left promiscuous mode [ 579.756081][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.956719][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.297277][ T8735] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 584.202510][ T8755] sd 0:0:1:0: PR command failed: 1026 [ 584.202848][ T8755] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 584.203122][ T8755] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 585.404396][ T84] team0 (unregistering): Port device team_slave_1 removed [ 585.659033][ T84] team0 (unregistering): Port device team_slave_0 removed [ 585.838355][ T8766] IPVS: ip_vs_add_dest(): server weight less than zero [ 585.934975][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 585.935024][ T36] audit: type=1326 audit(2000000445.720:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 585.936818][ T36] audit: type=1326 audit(2000000445.720:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 585.937168][ T36] audit: type=1326 audit(2000000445.730:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6aec82ea0e code=0x7ffc0000 [ 585.937625][ T36] audit: type=1326 audit(2000000445.740:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 585.937933][ T36] audit: type=1326 audit(2000000445.740:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 585.938288][ T36] audit: type=1326 audit(2000000445.750:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 585.938813][ T36] audit: type=1326 audit(2000000445.760:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 585.940240][ T36] audit: type=1326 audit(2000000445.760:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 585.940798][ T36] audit: type=1326 audit(2000000445.760:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 585.941200][ T36] audit: type=1326 audit(2000000445.760:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8763 comm="syz.4.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec86e1d9 code=0x7ffc0000 [ 592.886740][ T84] team0 (unregistering): Port device team_slave_1 removed [ 592.925191][ T84] team0 (unregistering): Port device team_slave_0 removed [ 593.187139][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 594.624148][ T8802] IPVS: ip_vs_add_dest(): server weight less than zero [ 594.705207][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 594.705248][ T36] audit: type=1326 audit(2000000454.490:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3b79e1d9 code=0x7ffc0000 [ 594.705553][ T36] audit: type=1326 audit(2000000454.490:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3b79e1d9 code=0x7ffc0000 [ 594.705874][ T36] audit: type=1326 audit(2000000454.500:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3c3b75ea0e code=0x7ffc0000 [ 594.706248][ T36] audit: type=1326 audit(2000000454.510:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3b79e1d9 code=0x7ffc0000 [ 594.706535][ T36] audit: type=1326 audit(2000000454.520:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3b79e1d9 code=0x7ffc0000 [ 594.706801][ T36] audit: type=1326 audit(2000000454.530:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c3b79e1d9 code=0x7ffc0000 [ 594.708025][ T36] audit: type=1326 audit(2000000454.530:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3b79e1d9 code=0x7ffc0000 [ 594.710040][ T36] audit: type=1326 audit(2000000454.530:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3b79e1d9 code=0x7ffc0000 [ 594.817279][ T36] audit: type=1326 audit(2000000454.540:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c3b79e1d9 code=0x7ffc0000 [ 594.832363][ T36] audit: type=1326 audit(2000000454.540:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.2.566" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3b79e1d9 code=0x7ffc0000 [ 596.766222][ T8808] fuse: Unknown parameter 'id' [ 598.374976][ T8816] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 598.949856][ T5708] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 599.745640][ T5708] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 599.748913][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.748981][ T5708] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 599.749025][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.863283][ T5250] 8021q: adding VLAN 0 to HW filter on device eth10 [ 602.420593][ T5595] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 602.545783][ T5595] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 602.736233][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 602.736251][ T36] audit: type=1326 audit(2000000462.680:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8865 comm="syz.2.576" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c3b79e1d9 code=0x0 [ 604.341149][ T8872] fido_id[8872]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 604.362755][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.362885][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.363067][ T8590] bridge_slave_0: entered allmulticast mode [ 604.365706][ T8590] bridge_slave_0: entered promiscuous mode [ 604.846011][ T8875] null_blk: nullb1: using native zone append [ 607.257780][ T8875] null_blk: disk nullb1 created [ 607.376651][ T5708] dvb_ttusb_budget: ttusb_init_controller: error [ 607.376715][ T5708] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 607.409614][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.409741][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.409940][ T8590] bridge_slave_1: entered allmulticast mode [ 607.566412][ T8590] bridge_slave_1: entered promiscuous mode [ 607.938567][ T8590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.954586][ T8590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.223619][ T8590] team0: Port device team_slave_0 added [ 608.302115][ T8590] team0: Port device team_slave_1 added [ 608.345613][ T5708] DVB: Unable to find symbol stv0299_attach() [ 610.056843][ T5708] DVB: Unable to find symbol tda8083_attach() [ 610.056859][ T5708] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 610.136899][ T5708] usb 1-1: USB disconnect, device number 8 [ 610.285404][ T84] bridge_slave_1: left allmulticast mode [ 610.285539][ T84] bridge_slave_1: left promiscuous mode [ 610.285789][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.629342][ T84] bridge_slave_0: left allmulticast mode [ 610.629391][ T84] bridge_slave_0: left promiscuous mode [ 610.629653][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.730674][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.749541][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.759695][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.781847][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.790502][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 614.028906][ T4905] Bluetooth: hci3: command tx timeout [ 614.084685][ T84] bridge_slave_1: left allmulticast mode [ 614.084720][ T84] bridge_slave_1: left promiscuous mode [ 614.084990][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.267835][ T84] bridge_slave_0: left allmulticast mode [ 614.267873][ T84] bridge_slave_0: left promiscuous mode [ 614.268114][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.530233][ T5602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.570258][ T5602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.571713][ T5602] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.607159][ T5602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.619145][ T5602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 615.416256][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.579271][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.634644][ T84] bond0 (unregistering): Released all slaves [ 617.024526][ T5602] Bluetooth: hci3: command tx timeout [ 617.024610][ T5602] Bluetooth: hci5: command tx timeout [ 618.367856][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.195678][ T4905] Bluetooth: hci5: command tx timeout [ 619.195714][ T4905] Bluetooth: hci3: command tx timeout [ 619.294674][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.516933][ T84] bond0 (unregistering): Released all slaves [ 620.992081][ T5595] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 621.162079][ T5595] usb 3-1: Using ep0 maxpacket: 16 [ 621.164052][ T5595] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 621.165090][ T5595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 621.165108][ T5595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 42662, setting to 1024 [ 621.168556][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.168570][ T5595] usb 3-1: Product: syz [ 621.168578][ T5595] usb 3-1: Manufacturer: syz [ 621.168585][ T5595] usb 3-1: SerialNumber: syz [ 621.188962][ T5595] usb 3-1: config 0 descriptor?? [ 621.253868][ T4905] Bluetooth: hci5: command tx timeout [ 621.253965][ T5602] Bluetooth: hci3: command tx timeout [ 621.681602][ T5595] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 621.689677][ T5595] usb 3-1: USB disconnect, device number 6 [ 621.807245][ T2345] usb 3-1: Failed to submit usb control message: -19 [ 621.807283][ T2345] usb 3-1: unable to send the bmi data to the device: -19 [ 621.807300][ T2345] usb 3-1: unable to get target info from device [ 621.807325][ T2345] usb 3-1: could not get target info (-19) [ 621.807722][ T2345] usb 3-1: could not probe fw (-19) [ 622.020850][ T5250] 8021q: adding VLAN 0 to HW filter on device eth11 [ 623.334527][ T5602] Bluetooth: hci5: command tx timeout [ 624.319017][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.320269][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.110524][ T84] hsr_slave_0: left promiscuous mode [ 627.223503][ T84] hsr_slave_1: left promiscuous mode [ 627.224717][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.474264][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.074552][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.219817][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.943426][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 630.102176][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 630.102980][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 630.104460][ T10] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 630.104484][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.104505][ T10] usb 3-1: config 0 has no interface number 0 [ 630.104550][ T10] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 630.104575][ T10] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.166443][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.166469][ T10] usb 3-1: Product: syz [ 630.166482][ T10] usb 3-1: Manufacturer: syz [ 630.166495][ T10] usb 3-1: SerialNumber: syz [ 630.209934][ T10] usb 3-1: config 0 descriptor?? [ 630.213675][ T8988] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 630.239387][ T10] asix 3-1:0.34: probe with driver asix failed with error -22 [ 631.328955][ T84] team0 (unregistering): Port device team_slave_1 removed [ 631.532744][ T84] team0 (unregistering): Port device team_slave_0 removed [ 632.746075][ T42] usb 3-1: USB disconnect, device number 7 [ 634.771689][ T84] team0 (unregistering): Port device team_slave_1 removed [ 634.897019][ T84] team0 (unregistering): Port device team_slave_0 removed [ 637.666732][ T36] audit: type=1326 audit(2000000497.590:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.2.605" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c3b79e1d9 code=0x0 [ 637.760827][ T9056] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 639.401513][ T5250] 8021q: adding VLAN 0 to HW filter on device eth12 [ 640.416408][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.416598][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.417092][ T8896] bridge_slave_0: entered allmulticast mode [ 640.420059][ T8896] bridge_slave_0: entered promiscuous mode [ 640.553044][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063f1b000: rx timeout, send abort [ 640.556028][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888063f1b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 640.790353][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.790522][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.790698][ T8896] bridge_slave_1: entered allmulticast mode [ 640.838841][ T8896] bridge_slave_1: entered promiscuous mode [ 641.217401][ T8896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.270931][ T8896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.271153][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.272470][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.272631][ T8925] bridge_slave_0: entered allmulticast mode [ 641.276920][ T8925] bridge_slave_0: entered promiscuous mode [ 641.424871][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.425023][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.425186][ T8925] bridge_slave_1: entered allmulticast mode [ 641.433041][ T8925] bridge_slave_1: entered promiscuous mode [ 641.544525][ T8896] team0: Port device team_slave_0 added [ 641.693976][ T8896] team0: Port device team_slave_1 added [ 641.706929][ T8925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.788273][ T8925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.805595][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 644.136476][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.136493][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.136514][ T8896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.467678][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.467696][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.467722][ T8896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.528329][ T8925] team0: Port device team_slave_0 added [ 644.530014][ T9119] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 645.645276][ T8925] team0: Port device team_slave_1 added [ 647.052257][ T84] bridge_slave_1: left allmulticast mode [ 647.052294][ T84] bridge_slave_1: left promiscuous mode [ 647.052562][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.570774][ T84] bridge_slave_0: left allmulticast mode [ 648.570811][ T84] bridge_slave_0: left promiscuous mode [ 648.571075][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.008463][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.600441][ T9167] fuse: Unknown parameter '0x0000000000000003' [ 652.672817][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.873260][ T84] bond0 (unregistering): Released all slaves [ 654.433453][ T9175] random: crng reseeded on system resumption [ 655.050371][ T84] bond0 (unregistering): Released all slaves [ 657.409760][ T8925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.409778][ T8925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.409794][ T8925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.686917][ T9191] netlink: 304 bytes leftover after parsing attributes in process `syz.2.628'. [ 659.951131][ T8925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.951149][ T8925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.951176][ T8925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.222264][ T8896] hsr_slave_0: entered promiscuous mode [ 660.226714][ T8896] hsr_slave_1: entered promiscuous mode [ 660.230770][ T8896] debugfs: 'hsr0' already exists in 'hsr' [ 660.230802][ T8896] Cannot create hsr debugfs directory [ 660.557803][ T8925] hsr_slave_0: entered promiscuous mode [ 660.559153][ T8925] hsr_slave_1: entered promiscuous mode [ 660.562064][ T6190] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 660.589728][ T8925] debugfs: 'hsr0' already exists in 'hsr' [ 660.589757][ T8925] Cannot create hsr debugfs directory [ 661.251308][ T6190] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 661.272965][ T6190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.272995][ T6190] usb 5-1: Product: syz [ 661.273010][ T6190] usb 5-1: Manufacturer: syz [ 661.273024][ T6190] usb 5-1: SerialNumber: syz [ 662.939418][ T6190] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 662.939499][ T6190] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 663.028531][ T6190] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 663.067107][ T6190] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 663.976639][ T84] team0 (unregistering): Port device team_slave_1 removed [ 664.183950][ T9230] FAULT_INJECTION: forcing a failure. [ 664.183950][ T9230] name failslab, interval 1, probability 0, space 0, times 0 [ 664.184019][ T9230] CPU: 0 UID: 60928 PID: 9230 Comm: syz.0.630 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 664.184050][ T9230] Tainted: [L]=SOFTLOCKUP [ 664.184058][ T9230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.184071][ T9230] Call Trace: [ 664.184079][ T9230] [ 664.184088][ T9230] dump_stack_lvl+0xe8/0x150 [ 664.184127][ T9230] should_fail_ex+0x46b/0x600 [ 664.184164][ T9230] should_failslab+0xa8/0x100 [ 664.184189][ T9230] __kmalloc_noprof+0xfb/0x790 [ 664.184219][ T9230] ? __register_sysctl_table+0x6f/0x1370 [ 664.184248][ T9230] ? __register_sysctl_table+0x6f/0x1370 [ 664.184285][ T9230] __register_sysctl_table+0x6f/0x1370 [ 664.184318][ T9230] ? kmemdup_noprof+0x55/0x70 [ 664.184347][ T9230] register_pidns_sysctls+0x105/0x1e0 [ 664.184374][ T9230] copy_pid_ns+0x54d/0x940 [ 664.184403][ T9230] ? irqentry_exit+0x218/0x920 [ 664.184436][ T9230] ? __pfx_copy_pid_ns+0x10/0x10 [ 664.184492][ T9230] create_new_namespaces+0x2ad/0x6b0 [ 664.184524][ T9230] ? security_capable+0x7e/0x2c0 [ 664.184554][ T9230] unshare_nsproxy_namespaces+0x149/0x190 [ 664.184586][ T9230] ksys_unshare+0x5d8/0x970 [ 664.184624][ T9230] ? __pfx_ksys_unshare+0x10/0x10 [ 664.184654][ T9230] ? rcu_is_watching+0x16/0xb0 [ 664.184685][ T9230] __x64_sys_unshare+0x38/0x50 [ 664.184715][ T9230] do_syscall_64+0x166/0x520 [ 664.184743][ T9230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.184763][ T9230] ? clear_bhb_loop+0x70/0xc0 [ 664.184788][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.184808][ T9230] RIP: 0033:0x7fccea74e1d9 [ 664.184828][ T9230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.184846][ T9230] RSP: 002b:00007fcce8964028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 664.184869][ T9230] RAX: ffffffffffffffda RBX: 00007fccea9d6180 RCX: 00007fccea74e1d9 [ 664.184884][ T9230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 664.184898][ T9230] RBP: 00007fccea7e5888 R08: 0000000000000000 R09: 0000000000000000 [ 664.184911][ T9230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.184923][ T9230] R13: 00007fccea9d6218 R14: 00007fccea9d6180 R15: 00007ffdfeb53738 [ 664.184957][ T9230] [ 665.199776][ T84] team0 (unregistering): Port device team_slave_0 removed [ 665.215936][ T5723] usb 5-1: USB disconnect, device number 6 [ 671.090815][ T4905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 671.138305][ T4905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 671.147410][ T4905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 671.151631][ T4905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 671.154790][ T4905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 673.452757][ T5602] Bluetooth: hci4: command tx timeout [ 676.001790][ T9347] FAULT_INJECTION: forcing a failure. [ 676.001790][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 676.001987][ T9347] CPU: 1 UID: 60928 PID: 9347 Comm: syz.4.647 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 676.002018][ T9347] Tainted: [L]=SOFTLOCKUP [ 676.002026][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 676.002039][ T9347] Call Trace: [ 676.002047][ T9347] [ 676.002056][ T9347] dump_stack_lvl+0xe8/0x150 [ 676.002100][ T9347] should_fail_ex+0x46b/0x600 [ 676.002137][ T9347] should_failslab+0xa8/0x100 [ 676.002162][ T9347] __kmalloc_noprof+0xfb/0x790 [ 676.002192][ T9347] ? __register_sysctl_table+0x6f/0x1370 [ 676.002221][ T9347] ? __register_sysctl_table+0x6f/0x1370 [ 676.002258][ T9347] __register_sysctl_table+0x6f/0x1370 [ 676.002290][ T9347] ? __asan_memcpy+0x40/0x70 [ 676.002323][ T9347] register_pidns_sysctls+0x105/0x1e0 [ 676.002349][ T9347] copy_pid_ns+0x54d/0x940 [ 676.002386][ T9347] ? __pfx_copy_pid_ns+0x10/0x10 [ 676.002418][ T9347] ? __pfx_copy_mnt_ns+0x10/0x10 [ 676.002448][ T9347] ? copy_ipcs+0x2a9/0x6c0 [ 676.002467][ T9347] ? copy_utsname+0x184/0x620 [ 676.002494][ T9347] create_new_namespaces+0x2ad/0x6b0 [ 676.002525][ T9347] ? security_capable+0x7e/0x2c0 [ 676.002554][ T9347] unshare_nsproxy_namespaces+0x149/0x190 [ 676.002585][ T9347] ksys_unshare+0x5d8/0x970 [ 676.002621][ T9347] ? __pfx_ksys_unshare+0x10/0x10 [ 676.002651][ T9347] ? rcu_is_watching+0x16/0xb0 [ 676.002682][ T9347] __x64_sys_unshare+0x38/0x50 [ 676.002711][ T9347] do_syscall_64+0x166/0x520 [ 676.002739][ T9347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.002760][ T9347] ? clear_bhb_loop+0x70/0xc0 [ 676.002785][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.002805][ T9347] RIP: 0033:0x7f6aec86e1d9 [ 676.002824][ T9347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.002842][ T9347] RSP: 002b:00007f6aeaa84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 676.002865][ T9347] RAX: ffffffffffffffda RBX: 00007f6aecaf6180 RCX: 00007f6aec86e1d9 [ 676.002880][ T9347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 676.002894][ T9347] RBP: 00007f6aec905888 R08: 0000000000000000 R09: 0000000000000000 [ 676.002907][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.002920][ T9347] R13: 00007f6aecaf6218 R14: 00007f6aecaf6180 R15: 00007ffcf056b138 [ 676.002953][ T9347] [ 676.300417][ T5602] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 676.763512][ T5602] Bluetooth: hci4: command tx timeout [ 676.901633][ T4905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 677.103620][ T4905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 677.182534][ T4905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 677.238440][ T4905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 677.240684][ T4905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 678.503632][ T84] bridge_slave_1: left allmulticast mode [ 678.503658][ T84] bridge_slave_1: left promiscuous mode [ 678.503841][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.792038][ T4905] Bluetooth: hci4: command tx timeout [ 680.475663][ T4905] Bluetooth: hci3: command tx timeout [ 681.812397][ T4905] Bluetooth: hci4: command tx timeout [ 682.209098][ T36] audit: type=1326 audit(2000000542.150:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9378 comm="syz.2.657" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c3b79e1d9 code=0x0 [ 682.532110][ T4905] Bluetooth: hci3: command tx timeout [ 683.383396][ T84] bridge_slave_0: left allmulticast mode [ 683.383599][ T84] bridge_slave_0: left promiscuous mode [ 683.384332][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.006635][ T4905] Bluetooth: hci3: command tx timeout [ 686.076135][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.077011][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.787995][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.385931][ T4905] Bluetooth: hci3: command tx timeout [ 687.667380][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.276210][ T84] bond0 (unregistering): Released all slaves [ 694.662854][ T84] hsr_slave_0: left promiscuous mode [ 694.822146][ T84] hsr_slave_1: left promiscuous mode [ 694.824483][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.567707][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.152722][ T84] team0 (unregistering): Port device team_slave_1 removed [ 697.204651][ T84] team0 (unregistering): Port device team_slave_0 removed [ 698.743768][ T9452] jffs2: notice: (9452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 700.172034][ T9480] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 701.662420][ T9497] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 704.965224][ T9545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.311996][ T5595] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 705.599020][ T5595] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 705.610360][ T5595] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 705.610390][ T5595] usb 3-1: config 0 has no interface number 0 [ 705.610434][ T5595] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 705.610456][ T5595] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 705.610481][ T5595] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 705.610507][ T5595] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 705.618537][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.618563][ T5595] usb 3-1: Product: syz [ 705.618578][ T5595] usb 3-1: Manufacturer: syz [ 705.618592][ T5595] usb 3-1: SerialNumber: syz [ 705.629186][ T5595] usb 3-1: config 0 descriptor?? [ 705.705993][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.685'. [ 706.533016][ T9545] CIFS mount error: No usable UNC path provided in device string! [ 706.533016][ T9545] [ 706.533063][ T9545] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 706.778187][ T5595] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input9 [ 708.463084][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.463300][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.463946][ T9287] bridge_slave_0: entered allmulticast mode [ 708.469639][ T9287] bridge_slave_0: entered promiscuous mode [ 708.794892][ T5595] input: failed to attach handler mousedev to device input9, error: -90 [ 710.014375][ T5595] usb 3-1: USB disconnect, device number 9 [ 711.299405][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.299528][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.299718][ T9287] bridge_slave_1: entered allmulticast mode [ 711.304012][ T9287] bridge_slave_1: entered promiscuous mode [ 711.644488][ T9348] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.644665][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.644814][ T9348] bridge_slave_0: entered allmulticast mode [ 711.648494][ T9348] bridge_slave_0: entered promiscuous mode [ 711.684080][ T9287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.560716][ T84] bridge_slave_1: left allmulticast mode [ 713.560752][ T84] bridge_slave_1: left promiscuous mode [ 713.561075][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.625805][ T84] bridge_slave_0: left allmulticast mode [ 714.625831][ T84] bridge_slave_0: left promiscuous mode [ 714.634277][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.636066][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.732693][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.793406][ T84] bond0 (unregistering): Released all slaves [ 717.832372][ T9607] : renamed from bond_slave_0 (while UP) [ 717.905960][ T9348] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.906070][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.906249][ T9348] bridge_slave_1: entered allmulticast mode [ 717.945000][ T9348] bridge_slave_1: entered promiscuous mode [ 717.985799][ T9287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.371723][ T9348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.428045][ T9630] random: crng reseeded on system resumption [ 718.636086][ T84] hsr_slave_0: left promiscuous mode [ 718.673921][ T84] hsr_slave_1: left promiscuous mode [ 718.675236][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.723679][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.655509][ T84] team0 (unregistering): Port device team_slave_1 removed [ 720.116708][ T9647] netlink: 220 bytes leftover after parsing attributes in process `syz.2.696'. [ 720.669335][ T9650] Invalid ELF header magic: != ELF [ 720.670616][ T9650] overlayfs: missing 'lowerdir' [ 721.422830][ T84] team0 (unregistering): Port device team_slave_0 removed [ 721.594395][ T9649] tipc: Started in network mode [ 721.594428][ T9649] tipc: Node identity 0010000000000000002, cluster identity 1 [ 721.597659][ T9287] team0: Port device team_slave_0 added [ 721.645126][ T9348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.405562][ T9667] openvswitch: netlink: nsh attribute has 12 unknown bytes. [ 726.146757][ T9630] ------------[ cut here ]------------ [ 726.146769][ T9630] in_task() && kcov_mode_enabled(mode) [ 726.146780][ T9630] WARNING: kernel/kcov.c:893 at kcov_remote_start+0x5fa/0x730, CPU#1: syz.4.697/9630 [ 726.169499][ T9630] Modules linked in: [ 726.175182][ T9630] CPU: 1 UID: 0 PID: 9630 Comm: syz.4.697 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 726.186481][ T9630] Tainted: [L]=SOFTLOCKUP [ 726.190781][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.200919][ T9630] RIP: 0010:kcov_remote_start+0x5fa/0x730 [ 726.206695][ T9630] Code: 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 70 97 09 cc 90 0f 0b 90 eb ea 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 87 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 f8 b8 93 09 89 c0 48 c7 c7 b8 e3 a6 [ 726.226403][ T9630] RSP: 0018:ffffc900058f6388 EFLAGS: 00010202 [ 726.232520][ T9630] RAX: 0000000000000000 RBX: ffff888030418000 RCX: 8000000000000001 [ 726.240542][ T9630] RDX: 0000000000000000 RSI: ffffffff8bcc6c60 RDI: ffffffff8bcc6c20 [ 726.248556][ T9630] RBP: ffffc900058f6630 R08: ffffffff8b5ce282 R09: 0000000000000000 [ 726.256620][ T9630] R10: dffffc0000000000 R11: fffffbfff2164730 R12: dffffc0000000000 [ 726.264638][ T9630] R13: ffff8880613f3280 R14: 0000000000000000 R15: ffff8880634c11e0 [ 726.272692][ T9630] FS: 00007f6aeaaa56c0(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 [ 726.281638][ T9630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 726.288335][ T9630] CR2: 00007fccea79b8c0 CR3: 000000003ea2e000 CR4: 00000000003526f0 [ 726.296353][ T9630] Call Trace: [ 726.299647][ T9630] [ 726.302636][ T9630] ieee80211_rx_list+0x7c3/0x3b40 [ 726.307744][ T9630] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 726.313286][ T9630] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 726.319185][ T9630] ? lock_acquire+0x115/0x350 [ 726.323965][ T9630] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 726.329687][ T9630] ? ieee80211_rx_napi+0xd1/0x3d0 [ 726.334841][ T9630] ieee80211_rx_napi+0x1ad/0x3d0 [ 726.339869][ T9630] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 726.345464][ T9630] ? skb_dequeue+0x11a/0x150 [ 726.350208][ T9630] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 726.356300][ T9630] ? ieee80211_stop_device+0x29/0xf0 [ 726.361674][ T9630] ieee80211_stop_device+0x3e/0xf0 [ 726.366899][ T9630] ieee80211_do_stop+0x1c58/0x2470 [ 726.372154][ T9630] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 726.377669][ T9630] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 726.383370][ T9630] ? rt_spin_unlock+0x159/0x200 [ 726.388281][ T9630] ? rt_spin_unlock+0x165/0x200 [ 726.393187][ T9630] ieee80211_stop+0x1ab/0x200 [ 726.397969][ T9630] ? __pfx_ieee80211_stop+0x10/0x10 [ 726.403337][ T9630] __dev_close_many+0x366/0x6e0 [ 726.408304][ T9630] ? __pfx___dev_close_many+0x10/0x10 [ 726.413802][ T9630] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 726.419263][ T9630] ? lockdep_hardirqs_on+0x7b/0x110 [ 726.424606][ T9630] __dev_change_flags+0x3f5/0x820 [ 726.429797][ T9630] ? __pfx___dev_change_flags+0x10/0x10 [ 726.435434][ T9630] ? __lock_acquire+0x747/0x2de0 [ 726.440459][ T9630] netif_change_flags+0x7c/0x1b0 [ 726.445547][ T9630] do_setlink+0xdd6/0x4670 [ 726.450180][ T9630] ? do_raw_spin_lock+0x12b/0x2f0 [ 726.455312][ T9630] ? __pfx_do_setlink+0x10/0x10 [ 726.460224][ T9630] ? do_raw_spin_unlock+0xf5/0x200 [ 726.465446][ T9630] ? try_to_take_rt_mutex+0x801/0xac0 [ 726.470845][ T9630] ? rcu_is_watching+0x16/0xb0 [ 726.475752][ T9630] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 726.481627][ T9630] ? rt_mutex_slowlock+0x424/0x780 [ 726.486869][ T9630] ? rt_mutex_slowlock+0x1f2/0x780 [ 726.492135][ T9630] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 726.497676][ T9630] ? rtnl_newlink+0xc10/0x1c30 [ 726.502549][ T9630] ? full_name_hash+0x92/0xe0 [ 726.507318][ T9630] rtnl_newlink+0x15a3/0x1c30 [ 726.512141][ T9630] ? __pfx_rtnl_newlink+0x10/0x10 [ 726.517271][ T9630] ? __lock_acquire+0x747/0x2de0 [ 726.522309][ T9630] ? kasan_quarantine_put+0xbb/0x1f0 [ 726.527649][ T9630] ? lockdep_hardirqs_on+0x7b/0x110 [ 726.532983][ T9630] ? nlmon_xmit+0xb0/0x100 [ 726.537561][ T9630] ? kmem_cache_free+0x187/0x6d0 [ 726.542585][ T9630] ? nlmon_xmit+0xb0/0x100 [ 726.547032][ T9630] ? __lock_acquire+0x747/0x2de0 [ 726.552034][ T9630] ? lockdep_hardirqs_on+0x7b/0x110 [ 726.557324][ T9630] ? __dev_queue_xmit+0x2a0/0x3a70 [ 726.562591][ T9630] ? __dev_queue_xmit+0x1f26/0x3a70 [ 726.567867][ T9630] ? netlink_unicast+0x7b8/0x990 [ 726.572966][ T9630] ? netlink_sendmsg+0x813/0xb40 [ 726.577964][ T9630] ? lock_acquire+0x115/0x350 [ 726.582773][ T9630] ? __pfx_rtnl_newlink+0x10/0x10 [ 726.587890][ T9630] ? __pfx_rtnl_newlink+0x10/0x10 [ 726.593041][ T9630] rtnetlink_rcv_msg+0x802/0xc00 [ 726.598032][ T9630] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 726.603194][ T9630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 726.608735][ T9630] ? ref_tracker_free+0x668/0x820 [ 726.613911][ T9630] ? __pfx_ref_tracker_free+0x10/0x10 [ 726.619308][ T9630] ? __asan_memcpy+0x40/0x70 [ 726.624031][ T9630] ? __skb_clone+0x5c/0x6c0 [ 726.628671][ T9630] netlink_rcv_skb+0x226/0x4a0 [ 726.633590][ T9630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 726.639106][ T9630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 726.644558][ T9630] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.649819][ T9630] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.655143][ T9630] netlink_unicast+0x7f5/0x990 [ 726.659988][ T9630] netlink_sendmsg+0x813/0xb40 [ 726.664840][ T9630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.670183][ T9630] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 726.676731][ T9630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.682076][ T9630] sock_sendmsg_nosec+0x13a/0x180 [ 726.687200][ T9630] ____sys_sendmsg+0x565/0x870 [ 726.692117][ T9630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.697485][ T9630] ? import_iovec+0x73/0xa0 [ 726.702092][ T9630] ___sys_sendmsg+0x2a5/0x360 [ 726.706818][ T9630] ? __lock_acquire+0x747/0x2de0 [ 726.711884][ T9630] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.717155][ T9630] ? futex_wait+0x2a2/0x390 [ 726.721734][ T9630] ? __fget_files+0x2a/0x420 [ 726.726440][ T9630] ? __fget_files+0x3a8/0x420 [ 726.731194][ T9630] __x64_sys_sendmsg+0x1b7/0x290 [ 726.736281][ T9630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.744580][ T9630] do_syscall_64+0x166/0x520 [ 726.749221][ T9630] ? trace_irq_disable+0x3b/0x140 [ 726.754385][ T9630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.760531][ T9630] ? clear_bhb_loop+0x70/0xc0 [ 726.765358][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.771310][ T9630] RIP: 0033:0x7f6aec86e1d9 [ 726.775771][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.795498][ T9630] RSP: 002b:00007f6aeaaa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.804041][ T9630] RAX: ffffffffffffffda RBX: 00007f6aecaf6090 RCX: 00007f6aec86e1d9 [ 726.812164][ T9630] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 726.820149][ T9630] RBP: 00007f6aec905888 R08: 0000000000000000 R09: 0000000000000000 [ 726.828229][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.836267][ T9630] R13: 00007f6aecaf6128 R14: 00007f6aecaf6090 R15: 00007ffcf056b138 [ 726.844361][ T9630] [ 726.847421][ T9630] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 726.854701][ T9630] CPU: 1 UID: 0 PID: 9630 Comm: syz.4.697 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 726.865983][ T9630] Tainted: [L]=SOFTLOCKUP [ 726.870302][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 726.880355][ T9630] Call Trace: [ 726.883633][ T9630] [ 726.886564][ T9630] vpanic+0x56d/0xa60 [ 726.890554][ T9630] ? __pfx__printk+0x10/0x10 [ 726.895150][ T9630] ? __pfx_vpanic+0x10/0x10 [ 726.899657][ T9630] ? is_bpf_text_address+0x292/0x2b0 [ 726.904945][ T9630] ? is_bpf_text_address+0x26/0x2b0 [ 726.910156][ T9630] panic+0xc5/0xd0 [ 726.913883][ T9630] ? __pfx_panic+0x10/0x10 [ 726.918321][ T9630] __warn+0x315/0x4c0 [ 726.922303][ T9630] ? kcov_remote_start+0x5fa/0x730 [ 726.927424][ T9630] ? kcov_remote_start+0x5fa/0x730 [ 726.932550][ T9630] __report_bug+0x276/0x570 [ 726.937068][ T9630] ? kcov_remote_start+0x5fa/0x730 [ 726.942198][ T9630] ? __pfx___report_bug+0x10/0x10 [ 726.947240][ T9630] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 726.953142][ T9630] ? lock_acquire+0x115/0x350 [ 726.957843][ T9630] ? kcov_remote_start+0x5fa/0x730 [ 726.962961][ T9630] report_bug+0x16b/0x220 [ 726.967300][ T9630] ? kcov_remote_start+0x5fa/0x730 [ 726.972418][ T9630] ? kcov_remote_start+0x5fc/0x730 [ 726.977536][ T9630] handle_bug+0x9c/0x200 [ 726.981784][ T9630] exc_invalid_op+0x1a/0x50 [ 726.986286][ T9630] asm_exc_invalid_op+0x1a/0x20 [ 726.991134][ T9630] RIP: 0010:kcov_remote_start+0x5fa/0x730 [ 726.996863][ T9630] Code: 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 70 97 09 cc 90 0f 0b 90 eb ea 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 87 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 f8 b8 93 09 89 c0 48 c7 c7 b8 e3 a6 [ 727.016474][ T9630] RSP: 0018:ffffc900058f6388 EFLAGS: 00010202 [ 727.022543][ T9630] RAX: 0000000000000000 RBX: ffff888030418000 RCX: 8000000000000001 [ 727.030513][ T9630] RDX: 0000000000000000 RSI: ffffffff8bcc6c60 RDI: ffffffff8bcc6c20 [ 727.038482][ T9630] RBP: ffffc900058f6630 R08: ffffffff8b5ce282 R09: 0000000000000000 [ 727.046451][ T9630] R10: dffffc0000000000 R11: fffffbfff2164730 R12: dffffc0000000000 [ 727.054425][ T9630] R13: ffff8880613f3280 R14: 0000000000000000 R15: ffff8880634c11e0 [ 727.062405][ T9630] ? rt_spin_lock+0x1e2/0x400 [ 727.067099][ T9630] ? kcov_remote_start+0xeb/0x730 [ 727.072136][ T9630] ieee80211_rx_list+0x7c3/0x3b40 [ 727.077210][ T9630] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 727.082690][ T9630] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 727.088510][ T9630] ? lock_acquire+0x115/0x350 [ 727.093205][ T9630] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 727.098853][ T9630] ? ieee80211_rx_napi+0xd1/0x3d0 [ 727.103887][ T9630] ieee80211_rx_napi+0x1ad/0x3d0 [ 727.108837][ T9630] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 727.114309][ T9630] ? skb_dequeue+0x11a/0x150 [ 727.118911][ T9630] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 727.124900][ T9630] ? ieee80211_stop_device+0x29/0xf0 [ 727.130191][ T9630] ieee80211_stop_device+0x3e/0xf0 [ 727.135314][ T9630] ieee80211_do_stop+0x1c58/0x2470 [ 727.140457][ T9630] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 727.145931][ T9630] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 727.151551][ T9630] ? rt_spin_unlock+0x159/0x200 [ 727.156382][ T9630] ? rt_spin_unlock+0x165/0x200 [ 727.161211][ T9630] ieee80211_stop+0x1ab/0x200 [ 727.165869][ T9630] ? __pfx_ieee80211_stop+0x10/0x10 [ 727.171050][ T9630] __dev_close_many+0x366/0x6e0 [ 727.175878][ T9630] ? __pfx___dev_close_many+0x10/0x10 [ 727.181227][ T9630] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 727.186577][ T9630] ? lockdep_hardirqs_on+0x7b/0x110 [ 727.191756][ T9630] __dev_change_flags+0x3f5/0x820 [ 727.196764][ T9630] ? __pfx___dev_change_flags+0x10/0x10 [ 727.202293][ T9630] ? __lock_acquire+0x747/0x2de0 [ 727.207250][ T9630] netif_change_flags+0x7c/0x1b0 [ 727.212198][ T9630] do_setlink+0xdd6/0x4670 [ 727.216633][ T9630] ? do_raw_spin_lock+0x12b/0x2f0 [ 727.221664][ T9630] ? __pfx_do_setlink+0x10/0x10 [ 727.226528][ T9630] ? do_raw_spin_unlock+0xf5/0x200 [ 727.231648][ T9630] ? try_to_take_rt_mutex+0x801/0xac0 [ 727.237026][ T9630] ? rcu_is_watching+0x16/0xb0 [ 727.241811][ T9630] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 727.247630][ T9630] ? rt_mutex_slowlock+0x424/0x780 [ 727.252749][ T9630] ? rt_mutex_slowlock+0x1f2/0x780 [ 727.257862][ T9630] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 727.263346][ T9630] ? rtnl_newlink+0xc10/0x1c30 [ 727.268119][ T9630] ? full_name_hash+0x92/0xe0 [ 727.272816][ T9630] rtnl_newlink+0x15a3/0x1c30 [ 727.277514][ T9630] ? __pfx_rtnl_newlink+0x10/0x10 [ 727.282571][ T9630] ? __lock_acquire+0x747/0x2de0 [ 727.287524][ T9630] ? kasan_quarantine_put+0xbb/0x1f0 [ 727.292821][ T9630] ? lockdep_hardirqs_on+0x7b/0x110 [ 727.298031][ T9630] ? nlmon_xmit+0xb0/0x100 [ 727.302448][ T9630] ? kmem_cache_free+0x187/0x6d0 [ 727.307389][ T9630] ? nlmon_xmit+0xb0/0x100 [ 727.311822][ T9630] ? __lock_acquire+0x747/0x2de0 [ 727.316775][ T9630] ? lockdep_hardirqs_on+0x7b/0x110 [ 727.321988][ T9630] ? __dev_queue_xmit+0x2a0/0x3a70 [ 727.327108][ T9630] ? __dev_queue_xmit+0x1f26/0x3a70 [ 727.332320][ T9630] ? netlink_unicast+0x7b8/0x990 [ 727.337260][ T9630] ? netlink_sendmsg+0x813/0xb40 [ 727.342217][ T9630] ? lock_acquire+0x115/0x350 [ 727.346902][ T9630] ? __pfx_rtnl_newlink+0x10/0x10 [ 727.351946][ T9630] ? __pfx_rtnl_newlink+0x10/0x10 [ 727.356974][ T9630] rtnetlink_rcv_msg+0x802/0xc00 [ 727.361922][ T9630] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 727.367037][ T9630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 727.372496][ T9630] ? ref_tracker_free+0x668/0x820 [ 727.377527][ T9630] ? __pfx_ref_tracker_free+0x10/0x10 [ 727.382899][ T9630] ? __asan_memcpy+0x40/0x70 [ 727.387497][ T9630] ? __skb_clone+0x5c/0x6c0 [ 727.392016][ T9630] netlink_rcv_skb+0x226/0x4a0 [ 727.396797][ T9630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 727.402263][ T9630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 727.407575][ T9630] ? netlink_deliver_tap+0x2e/0x1b0 [ 727.412781][ T9630] ? netlink_deliver_tap+0x2e/0x1b0 [ 727.417995][ T9630] netlink_unicast+0x7f5/0x990 [ 727.422782][ T9630] netlink_sendmsg+0x813/0xb40 [ 727.427575][ T9630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.432890][ T9630] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 727.439329][ T9630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.444630][ T9630] sock_sendmsg_nosec+0x13a/0x180 [ 727.449676][ T9630] ____sys_sendmsg+0x565/0x870 [ 727.454460][ T9630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.459769][ T9630] ? import_iovec+0x73/0xa0 [ 727.464283][ T9630] ___sys_sendmsg+0x2a5/0x360 [ 727.468970][ T9630] ? __lock_acquire+0x747/0x2de0 [ 727.473928][ T9630] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.479143][ T9630] ? futex_wait+0x2a2/0x390 [ 727.483695][ T9630] ? __fget_files+0x2a/0x420 [ 727.488288][ T9630] ? __fget_files+0x3a8/0x420 [ 727.492983][ T9630] __x64_sys_sendmsg+0x1b7/0x290 [ 727.497935][ T9630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.503430][ T9630] do_syscall_64+0x166/0x520 [ 727.508029][ T9630] ? trace_irq_disable+0x3b/0x140 [ 727.513059][ T9630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.519129][ T9630] ? clear_bhb_loop+0x70/0xc0 [ 727.523812][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.529704][ T9630] RIP: 0033:0x7f6aec86e1d9 [ 727.534123][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.553732][ T9630] RSP: 002b:00007f6aeaaa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.562150][ T9630] RAX: ffffffffffffffda RBX: 00007f6aecaf6090 RCX: 00007f6aec86e1d9 [ 727.570121][ T9630] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 727.578091][ T9630] RBP: 00007f6aec905888 R08: 0000000000000000 R09: 0000000000000000 [ 727.586059][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.594032][ T9630] R13: 00007f6aecaf6128 R14: 00007f6aecaf6090 R15: 00007ffcf056b138 [ 727.602029][ T9630] [ 727.605315][ T9630] Kernel Offset: disabled [ 727.609626][ T9630] Rebooting in 86400 seconds..