last executing test programs: 4.031445628s ago: executing program 3 (id=684): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='r:s/p ./file0:0\f\\', 0x11) 3.765784323s ago: executing program 3 (id=688): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJ', 0x2}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) 2.837574352s ago: executing program 1 (id=694): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffdfd, 0x7, 0xfffffe01, 0x7fff, 0xb1, "fee835f605be0000002300", 0x0, 0x10}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2.533050667s ago: executing program 2 (id=697): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x2) close(0x3) 2.531766157s ago: executing program 3 (id=698): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2.393913109s ago: executing program 0 (id=699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0xd81, &(0x7f0000000700)=ANY=[], 0x0) 2.390930666s ago: executing program 4 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_TTL={0x5, 0x8, 0x40}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004d040}, 0x4048014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 2.32261315s ago: executing program 1 (id=701): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 2.21673485s ago: executing program 2 (id=702): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) 2.00135642s ago: executing program 3 (id=703): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xfffbffff) 1.980811075s ago: executing program 0 (id=704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r1, 0x11f90aaf22dbaef5, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) 1.979288069s ago: executing program 4 (id=705): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 1.909520271s ago: executing program 1 (id=706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802}}, 0x0, 0x9002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1.724787086s ago: executing program 0 (id=707): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r1}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) 1.72319771s ago: executing program 2 (id=708): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ppoll(&(0x7f0000000080)=[{r0, 0x491}], 0x1, 0x0, 0x0, 0x0) 1.679989858s ago: executing program 1 (id=709): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.678503188s ago: executing program 3 (id=710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) 1.539752813s ago: executing program 4 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) 1.517686433s ago: executing program 0 (id=712): socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x48, &(0x7f0000000000)=r0, 0x4) 1.459409532s ago: executing program 3 (id=713): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_ep_read(r0, 0x1, 0x1f, &(0x7f0000001000)) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000002000)="03") syz_usb_ep_write(r0, 0x82, 0xd, &(0x7f0000003000)='USBS\x00\x00\x00\x00\x00\x00\x00\x00\x00') 1.448948144s ago: executing program 2 (id=714): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x24}}, 0x20048000) 1.1944934s ago: executing program 4 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file5\x00', r0, &(0x7f00000007c0)='./file7\x00', 0x0) 1.186821553s ago: executing program 2 (id=716): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.128280587s ago: executing program 0 (id=717): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 967.615993ms ago: executing program 2 (id=718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='vers=3.0,username=guest,password=,port=20000,hard\x00') 961.832322ms ago: executing program 4 (id=719): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 832.165372ms ago: executing program 0 (id=720): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140)='J*U', 0x3, 0x10000485, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 640.859258ms ago: executing program 4 (id=721): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 280.080397ms ago: executing program 1 (id=722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r3, r0, 0x4, r1}, 0x10) 0s ago: executing program 1 (id=723): syz_io_uring_setup(0x914, &(0x7f0000000400)={0x0, 0x8841, 0x800, 0x5, 0x402f2}, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x24008080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r1, @ANYBLOB="01002cbd700000dcdf251a000000040022800600210061000000dc0022803400008008000500080000000800070008000000080002001000000008000500e434000008000100fbffffff2c0000803400008008"], 0x10c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 74.020506][ T5570] cgroup: Unknown subsys name 'net' [ 74.262242][ T5570] cgroup: Unknown subsys name 'cpuset' [ 74.316390][ T5570] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.088635][ T5570] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.603817][ T4898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.614438][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.615482][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.622785][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.624280][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.629746][ T5594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.636535][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.638087][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.640363][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.641376][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.712959][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.746694][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.747176][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.747544][ T5587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.753406][ T5587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.753991][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.784136][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.786713][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.788040][ T5594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.788791][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.788915][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.797164][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.800382][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.819119][ T5594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.820590][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.728874][ T4898] Bluetooth: hci1: command tx timeout [ 81.807212][ T4898] Bluetooth: hci0: command tx timeout [ 81.885940][ T4898] Bluetooth: hci3: command tx timeout [ 81.886083][ T4898] Bluetooth: hci2: command tx timeout [ 81.886168][ T4898] Bluetooth: hci4: command tx timeout [ 82.234398][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.235444][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.235559][ T5582] bridge_slave_0: entered allmulticast mode [ 82.238346][ T5582] bridge_slave_0: entered promiscuous mode [ 82.297891][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.297999][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.298521][ T5582] bridge_slave_1: entered allmulticast mode [ 82.299939][ T5582] bridge_slave_1: entered promiscuous mode [ 82.338693][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.338781][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.338876][ T5588] bridge_slave_0: entered allmulticast mode [ 82.340423][ T5588] bridge_slave_0: entered promiscuous mode [ 82.363262][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.363383][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.363550][ T5585] bridge_slave_0: entered allmulticast mode [ 82.366778][ T5585] bridge_slave_0: entered promiscuous mode [ 82.404447][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.404560][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.404699][ T5588] bridge_slave_1: entered allmulticast mode [ 82.407501][ T5588] bridge_slave_1: entered promiscuous mode [ 82.409452][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.409571][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.409706][ T5584] bridge_slave_0: entered allmulticast mode [ 82.413507][ T5584] bridge_slave_0: entered promiscuous mode [ 82.422327][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.422463][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.422618][ T5585] bridge_slave_1: entered allmulticast mode [ 82.424919][ T5585] bridge_slave_1: entered promiscuous mode [ 82.449219][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.449335][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.449504][ T5581] bridge_slave_0: entered allmulticast mode [ 82.452742][ T5581] bridge_slave_0: entered promiscuous mode [ 82.478558][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.478674][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.478814][ T5584] bridge_slave_1: entered allmulticast mode [ 82.481358][ T5584] bridge_slave_1: entered promiscuous mode [ 82.512812][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.513069][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.513179][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.513679][ T5581] bridge_slave_1: entered allmulticast mode [ 82.520329][ T5581] bridge_slave_1: entered promiscuous mode [ 82.579676][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.649696][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.674770][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.705300][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.710582][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.716257][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.737582][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.753757][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.770927][ T5582] team0: Port device team_slave_0 added [ 82.773162][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.815186][ T5582] team0: Port device team_slave_1 added [ 82.830735][ T5588] team0: Port device team_slave_0 added [ 82.851749][ T5585] team0: Port device team_slave_0 added [ 82.878445][ T5588] team0: Port device team_slave_1 added [ 82.880078][ T5584] team0: Port device team_slave_0 added [ 82.882535][ T5585] team0: Port device team_slave_1 added [ 82.903532][ T5581] team0: Port device team_slave_0 added [ 82.919611][ T5584] team0: Port device team_slave_1 added [ 82.933458][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.933469][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.933481][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.982872][ T5581] team0: Port device team_slave_1 added [ 83.030821][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.030840][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.030864][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.051664][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.051679][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.051702][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.074894][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.074910][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.074933][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.111739][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.111757][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.111781][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.114812][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.114825][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.114847][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.121256][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.121269][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.121293][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.127174][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.127187][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.127208][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.149482][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.149497][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.149520][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.163169][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.163183][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.163206][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.278010][ T5582] hsr_slave_0: entered promiscuous mode [ 83.279584][ T5582] hsr_slave_1: entered promiscuous mode [ 83.403703][ T5588] hsr_slave_0: entered promiscuous mode [ 83.404883][ T5588] hsr_slave_1: entered promiscuous mode [ 83.407391][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 83.407517][ T5588] Cannot create hsr debugfs directory [ 83.459964][ T5585] hsr_slave_0: entered promiscuous mode [ 83.461517][ T5585] hsr_slave_1: entered promiscuous mode [ 83.462391][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 83.462412][ T5585] Cannot create hsr debugfs directory [ 83.498214][ T5584] hsr_slave_0: entered promiscuous mode [ 83.499316][ T5584] hsr_slave_1: entered promiscuous mode [ 83.500664][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 83.500685][ T5584] Cannot create hsr debugfs directory [ 83.512558][ T5581] hsr_slave_0: entered promiscuous mode [ 83.513837][ T5581] hsr_slave_1: entered promiscuous mode [ 83.514698][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 83.514719][ T5581] Cannot create hsr debugfs directory [ 83.805930][ T5590] Bluetooth: hci1: command tx timeout [ 83.886079][ T5590] Bluetooth: hci0: command tx timeout [ 83.967622][ T5590] Bluetooth: hci4: command tx timeout [ 83.967689][ T5590] Bluetooth: hci2: command tx timeout [ 83.967709][ T5590] Bluetooth: hci3: command tx timeout [ 84.755571][ T5582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.795703][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.802750][ T5582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.851237][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.853925][ T5582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.881156][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.900796][ T5582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.939888][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.043812][ T5584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.087714][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.093364][ T5584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.121825][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.136846][ T5584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.179583][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.202181][ T5584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.238269][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.372990][ T5581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.410031][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.414584][ T5581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.451662][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.454579][ T5581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.498744][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.522023][ T5581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.562401][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.735256][ T5588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.749212][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.764170][ T5588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.791228][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.816595][ T5588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.850240][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.861274][ T5588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.887246][ T4898] Bluetooth: hci1: command tx timeout [ 85.895242][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.966144][ T4898] Bluetooth: hci0: command tx timeout [ 85.975263][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.013408][ T5585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.046113][ T5590] Bluetooth: hci2: command tx timeout [ 86.046144][ T5590] Bluetooth: hci4: command tx timeout [ 86.047227][ T4898] Bluetooth: hci3: command tx timeout [ 86.063405][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.073982][ T5585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.122291][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.136037][ T5585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.179016][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.193388][ T5585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.221682][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.265286][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.277409][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.317025][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.317178][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.374535][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.374671][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.420453][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.457190][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.461716][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.461838][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.510798][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.510920][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.579855][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.618056][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.618177][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.671656][ T2147] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.671753][ T2147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.699991][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.791441][ T31] cfg80211: failed to load regulatory.db [ 86.914546][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.966737][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.025408][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.032380][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.131460][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.131560][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.202067][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.293482][ T3404] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.293702][ T3404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.341628][ T3404] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.341724][ T3404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.912520][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.965955][ T4898] Bluetooth: hci1: command tx timeout [ 88.046012][ T4898] Bluetooth: hci0: command tx timeout [ 88.125903][ T4898] Bluetooth: hci3: command tx timeout [ 88.125935][ T4898] Bluetooth: hci2: command tx timeout [ 88.125956][ T4898] Bluetooth: hci4: command tx timeout [ 88.247780][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.353766][ T5582] veth0_vlan: entered promiscuous mode [ 88.462551][ T5582] veth1_vlan: entered promiscuous mode [ 88.631873][ T5584] veth0_vlan: entered promiscuous mode [ 88.690077][ T5582] veth0_macvtap: entered promiscuous mode [ 88.707854][ T5584] veth1_vlan: entered promiscuous mode [ 88.732734][ T5582] veth1_macvtap: entered promiscuous mode [ 88.762239][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.811500][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.843224][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.894891][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.960141][ T5584] veth0_macvtap: entered promiscuous mode [ 88.994435][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.009605][ T5584] veth1_macvtap: entered promiscuous mode [ 89.393251][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.422608][ T5588] veth0_vlan: entered promiscuous mode [ 89.448344][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.511737][ T5588] veth1_vlan: entered promiscuous mode [ 89.534525][ T3354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.534551][ T3354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.663180][ T5585] veth0_vlan: entered promiscuous mode [ 89.663772][ T3354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.663789][ T3354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.942369][ T5581] veth0_vlan: entered promiscuous mode [ 89.953390][ T5585] veth1_vlan: entered promiscuous mode [ 90.015248][ T5588] veth0_macvtap: entered promiscuous mode [ 90.069366][ T5581] veth1_vlan: entered promiscuous mode [ 90.099240][ T5582] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.155100][ T5588] veth1_macvtap: entered promiscuous mode [ 90.179936][ T3354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.179957][ T3354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.361161][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.513295][ T5585] veth0_macvtap: entered promiscuous mode [ 90.522290][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.527208][ T2147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.527227][ T2147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.571886][ T5585] veth1_macvtap: entered promiscuous mode [ 90.643702][ T5581] veth0_macvtap: entered promiscuous mode [ 90.759229][ T5581] veth1_macvtap: entered promiscuous mode [ 90.934741][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.160318][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.248639][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.382511][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.549973][ T3404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.550002][ T3404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.002150][ T2147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.002173][ T2147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.707271][ T3404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.991446][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.991467][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.391556][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.391576][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.908983][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.909002][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.308978][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.308998][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.626363][ T5821] mmap: syz.2.20 (5821) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.652695][ T1161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.761128][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.761612][ T1161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.761997][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.762365][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.856970][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.858813][ T3404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.867254][ T3404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.398477][ T5838] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.467797][ T5316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.683056][ T5316] usb 4-1: Using ep0 maxpacket: 16 [ 96.707069][ T5316] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.729051][ T5316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.729077][ T5316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.758688][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.758714][ T5316] usb 4-1: Product: syz [ 96.758727][ T5316] usb 4-1: Manufacturer: syz [ 96.758740][ T5316] usb 4-1: SerialNumber: syz [ 97.171564][ T1161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.171758][ T1161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.171932][ T1161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.172126][ T1161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.172300][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.262455][ T3404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.494511][ T3404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.494777][ T3404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.553998][ T5316] usb 4-1: 0:2 : does not exist [ 97.598349][ T3404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.623901][ T5316] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 97.818782][ T1133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.818835][ T1133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.590749][ T36] audit: type=1326 audit(1789527437.720:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.590798][ T36] audit: type=1326 audit(1789527437.720:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.673791][ T36] audit: type=1326 audit(1789527437.730:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.673842][ T36] audit: type=1326 audit(1789527437.810:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.673876][ T36] audit: type=1326 audit(1789527437.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.673912][ T36] audit: type=1326 audit(1789527437.810:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.673948][ T36] audit: type=1326 audit(1789527437.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.675160][ T36] audit: type=1326 audit(1789527437.810:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.675202][ T36] audit: type=1326 audit(1789527437.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.675237][ T36] audit: type=1326 audit(1789527437.810:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5862 comm="syz.1.33" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccfc46e159 code=0x7ffc0000 [ 98.683368][ T5863] loop5: detected capacity change from 0 to 4095 [ 98.896560][ T5316] usb 4-1: USB disconnect, device number 2 [ 100.331576][ T5883] capability: warning: `syz.4.41' uses deprecated v2 capabilities in a way that may be insecure [ 100.820879][ T5889] nbd0: detected capacity change from 0 to 63 [ 100.999220][ T5590] block nbd0: Receive control failed (result -32) [ 101.021342][ T72] block nbd0: Dead connection, failed to find a fallback [ 101.021369][ T72] block nbd0: shutting down sockets [ 101.021519][ T72] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.021602][ T72] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.023322][ T72] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.023350][ T72] Buffer I/O error on dev nbd0, logical block 1, async page read [ 101.027465][ T72] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.027488][ T72] Buffer I/O error on dev nbd0, logical block 2, async page read [ 101.037857][ T72] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.037887][ T72] Buffer I/O error on dev nbd0, logical block 3, async page read [ 101.134555][ T72] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 101.134591][ T72] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.134609][ T72] Buffer I/O error on dev nbd0, logical block 1, async page read [ 101.134624][ T72] Buffer I/O error on dev nbd0, logical block 2, async page read [ 101.134638][ T72] Buffer I/O error on dev nbd0, logical block 3, async page read [ 101.156890][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 101.156923][ T58] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.156942][ T58] Buffer I/O error on dev nbd0, logical block 1, async page read [ 101.160304][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 101.160547][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 101.162325][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 101.162578][ T58] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 101.162793][ T5803] ldm_validate_partition_table(): Disk read failed. [ 101.163392][ T5803] Dev nbd0: unable to read RDB block 0 [ 101.178575][ T5803] nbd0: unable to read partition table [ 101.314531][ T5803] ldm_validate_partition_table(): Disk read failed. [ 101.321183][ T5803] Dev nbd0: unable to read RDB block 0 [ 101.373300][ T5803] nbd0: unable to read partition table [ 102.133963][ T5905] Zero length message leads to an empty skb [ 103.773739][ T5949] ======================================================= [ 103.773739][ T5949] WARNING: The mand mount option has been deprecated and [ 103.773739][ T5949] and is ignored by this kernel. Remove the mand [ 103.773739][ T5949] option from the mount to silence this warning. [ 103.773739][ T5949] ======================================================= [ 105.660201][ T998] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.918019][ T998] usb 4-1: Using ep0 maxpacket: 32 [ 105.960569][ T998] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 105.961862][ T998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.228695][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.236165][ T998] usb 4-1: config 0 descriptor?? [ 106.292914][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.494557][ T6002] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 106.497973][ T998] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 106.554747][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.554911][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.570535][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.570695][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.637302][ T5998] team0: Port device bridge0 added [ 106.868086][ T998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.871381][ T998] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 106.877992][ T998] usb 4-1: media controller created [ 106.953293][ T6010] capability: warning: `syz.2.92' uses 32-bit capabilities (legacy support in use) [ 107.049595][ T998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.105912][ T5572] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.209053][ T998] az6027: usb out operation failed. (-71) [ 107.214657][ T998] az6027: usb out operation failed. (-71) [ 107.214670][ T998] stb0899_attach: Driver disabled by Kconfig [ 107.214675][ T998] az6027: no front-end attached [ 107.214675][ T998] [ 107.214970][ T998] az6027: usb out operation failed. (-71) [ 107.214991][ T998] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 107.255939][ T5572] usb 2-1: Using ep0 maxpacket: 16 [ 107.265657][ T998] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 107.310341][ T5572] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.310397][ T5572] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 107.313905][ T5572] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 107.313927][ T5572] usb 2-1: config 9 has no interface number 0 [ 107.315182][ T5572] usb 2-1: config 9 interface 57 has no altsetting 0 [ 107.367654][ T5572] usb 2-1: string descriptor 0 read error: -22 [ 107.367807][ T5572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.528690][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.618062][ T998] dvb-usb: schedule remote query interval to 400 msecs. [ 107.618086][ T998] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 107.831766][ T998] usb 4-1: USB disconnect, device number 3 [ 108.688635][ T5572] video4linux radio48: keene_cmd_set failed (-71) [ 108.688662][ T5572] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 108.777425][ T5572] usb 2-1: USB disconnect, device number 2 [ 109.570350][ T998] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 109.863790][ T6066] FAULT_INJECTION: forcing a failure. [ 109.863790][ T6066] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 109.863850][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.863874][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.863893][ T6066] Call Trace: [ 109.863901][ T6066] [ 109.863911][ T6066] dump_stack_lvl+0xe8/0x150 [ 109.863943][ T6066] should_fail_ex+0x46b/0x600 [ 109.863974][ T6066] prepare_alloc_pages+0x223/0x650 [ 109.864007][ T6066] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 109.864040][ T6066] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.864070][ T6066] ? __pfx_policy_nodemask+0x10/0x10 [ 109.864096][ T6066] ? lock_acquire+0x115/0x350 [ 109.864118][ T6066] ? percpu_ref_get_many+0x19/0x140 [ 109.864146][ T6066] alloc_pages_mpol+0xd4/0x280 [ 109.864169][ T6066] alloc_pages_noprof+0xd2/0x2f0 [ 109.864191][ T6066] __pud_alloc+0x3a/0x460 [ 109.864213][ T6066] ? rcu_is_watching+0x16/0xb0 [ 109.864242][ T6066] get_locked_pte+0x327/0x490 [ 109.864265][ T6066] map_ldt_struct+0x4e1/0xb50 [ 109.864305][ T6066] ? __pfx_map_ldt_struct+0x10/0x10 [ 109.864330][ T6066] ? alloc_pages_noprof+0x161/0x2f0 [ 109.864354][ T6066] write_ldt+0x768/0x930 [ 109.864376][ T6066] ? __se_sys_futex+0x3a8/0x450 [ 109.864399][ T6066] ? __pfx_write_ldt+0x10/0x10 [ 109.864425][ T6066] ? rcu_is_watching+0x16/0xb0 [ 109.864458][ T6066] __se_sys_modify_ldt+0x6c/0x310 [ 109.864485][ T6066] do_syscall_64+0x166/0x520 [ 109.864510][ T6066] ? trace_irq_disable+0x3b/0x140 [ 109.864532][ T6066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.864551][ T6066] ? clear_bhb_loop+0x70/0xc0 [ 109.864574][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.864593][ T6066] RIP: 0033:0x7fccfc46e159 [ 109.864623][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.864639][ T6066] RSP: 002b:00007fccfa6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 109.864665][ T6066] RAX: ffffffffffffffda RBX: 00007fccfc6f5fa0 RCX: 00007fccfc46e159 [ 109.864679][ T6066] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000011 [ 109.864692][ T6066] RBP: 00007fccfc50506b R08: 0000000000000000 R09: 0000000000000000 [ 109.864704][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.864716][ T6066] R13: 00007fccfc6f6038 R14: 00007fccfc6f5fa0 R15: 00007ffd121fb3b8 [ 109.864747][ T6066] [ 110.131339][ T6069] FAULT_INJECTION: forcing a failure. [ 110.131339][ T6069] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.131371][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 110.131392][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.131403][ T6069] Call Trace: [ 110.131411][ T6069] [ 110.131419][ T6069] dump_stack_lvl+0xe8/0x150 [ 110.131448][ T6069] should_fail_ex+0x46b/0x600 [ 110.131476][ T6069] _copy_to_iter+0x1e4/0x1810 [ 110.131503][ T6069] ? __asan_memset+0x22/0x50 [ 110.131525][ T6069] ? __pfx__copy_to_iter+0x10/0x10 [ 110.131540][ T6069] ? preempt_count_add+0x6a/0x140 [ 110.131557][ T6069] get_random_bytes_user+0x1d0/0x3d0 [ 110.131575][ T6069] ? __pfx_get_random_bytes_user+0x10/0x10 [ 110.131598][ T6069] ? import_ubuf+0xfb/0x1d0 [ 110.131618][ T6069] __x64_sys_getrandom+0x17a/0x270 [ 110.131634][ T6069] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 110.131650][ T6069] ? rcu_is_watching+0x16/0xb0 [ 110.131671][ T6069] do_syscall_64+0x166/0x520 [ 110.131684][ T6069] ? trace_irq_disable+0x3b/0x140 [ 110.131696][ T6069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.131706][ T6069] ? clear_bhb_loop+0x70/0xc0 [ 110.131717][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.131727][ T6069] RIP: 0033:0x7f5c35d3e159 [ 110.131737][ T6069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.131745][ T6069] RSP: 002b:00007f5c33f96028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 110.131757][ T6069] RAX: ffffffffffffffda RBX: 00007f5c35fc5fa0 RCX: 00007f5c35d3e159 [ 110.131764][ T6069] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 110.131770][ T6069] RBP: 00007f5c35dd506b R08: 0000000000000000 R09: 0000000000000000 [ 110.131776][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.131781][ T6069] R13: 00007f5c35fc6038 R14: 00007f5c35fc5fa0 R15: 00007fff26c5aad8 [ 110.131796][ T6069] [ 110.295837][ T5572] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.495859][ T5572] usb 1-1: Using ep0 maxpacket: 16 [ 110.496511][ T5572] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 110.504642][ T5572] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 110.504666][ T5572] usb 1-1: config 0 has no interface number 0 [ 110.504710][ T5572] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 110.504734][ T5572] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 110.571773][ T5572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.571800][ T5572] usb 1-1: Product: syz [ 110.571813][ T5572] usb 1-1: Manufacturer: syz [ 110.571827][ T5572] usb 1-1: SerialNumber: syz [ 110.646322][ T5572] usb 1-1: config 0 descriptor?? [ 110.657666][ T6064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.657824][ T6064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.952719][ T6064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.952834][ T6064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.518208][ T6091] netlink: 'syz.1.124': attribute type 63 has an invalid length. [ 111.838111][ T5572] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 111.838141][ T5572] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 111.881783][ T5572] asix 1-1:0.34: probe with driver asix failed with error -71 [ 111.958318][ T5572] usb 1-1: USB disconnect, device number 2 [ 112.204311][ T6103] FAULT_INJECTION: forcing a failure. [ 112.204311][ T6103] name failslab, interval 1, probability 0, space 0, times 1 [ 112.204346][ T6103] CPU: 1 UID: 0 PID: 6103 Comm: syz.3.128 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.204367][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.204387][ T6103] Call Trace: [ 112.204395][ T6103] [ 112.204403][ T6103] dump_stack_lvl+0xe8/0x150 [ 112.204436][ T6103] should_fail_ex+0x46b/0x600 [ 112.204466][ T6103] should_failslab+0xa8/0x100 [ 112.204496][ T6103] __kmalloc_cache_noprof+0xa1/0x680 [ 112.204522][ T6103] ? __se_sys_memfd_secret+0x14a/0x580 [ 112.204546][ T6103] ? __se_sys_memfd_secret+0x14a/0x580 [ 112.204578][ T6103] __se_sys_memfd_secret+0x14a/0x580 [ 112.204606][ T6103] do_syscall_64+0x166/0x520 [ 112.204630][ T6103] ? trace_irq_disable+0x3b/0x140 [ 112.204652][ T6103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.204671][ T6103] ? clear_bhb_loop+0x70/0xc0 [ 112.204691][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.204709][ T6103] RIP: 0033:0x7f6599ace159 [ 112.204726][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.204741][ T6103] RSP: 002b:00007f6597d26028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 112.204761][ T6103] RAX: ffffffffffffffda RBX: 00007f6599d55fa0 RCX: 00007f6599ace159 [ 112.204774][ T6103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.204785][ T6103] RBP: 00007f6599b6506b R08: 0000000000000000 R09: 0000000000000000 [ 112.204797][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.204808][ T6103] R13: 00007f6599d56038 R14: 00007f6599d55fa0 R15: 00007ffeb6cd7378 [ 112.204836][ T6103] [ 113.036845][ T5572] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.137059][ T998] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.186258][ T5572] usb 1-1: Using ep0 maxpacket: 32 [ 113.187095][ T5572] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 113.188534][ T5572] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 113.188556][ T5572] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 113.188575][ T5572] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 113.188594][ T5572] usb 1-1: config 1 has no interface number 0 [ 113.188637][ T5572] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.188661][ T5572] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 113.188699][ T5572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.317914][ T5572] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 113.318774][ T998] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.323044][ T998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.323073][ T998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.323093][ T998] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.323131][ T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.410112][ T998] usb 2-1: config 0 descriptor?? [ 113.584907][ T5572] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 113.585846][ T5591] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.917638][ T6133] netlink: 48 bytes leftover after parsing attributes in process `syz.2.142'. [ 113.936625][ T5591] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 113.966340][ T5591] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 113.966366][ T5591] usb 4-1: config 0 has no interface number 0 [ 113.966405][ T5591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.064150][ T5591] usb 4-1: config 0 descriptor?? [ 114.139018][ T31] usb 1-1: USB disconnect, device number 3 [ 114.141641][ T5591] ums-realtek 4-1:0.6: USB Mass Storage device detected [ 114.189189][ T6139] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 114.278186][ T31] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 114.700975][ T5591] usb 4-1: USB disconnect, device number 4 [ 114.974977][ T998] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 115.085297][ T998] usb 2-1: USB disconnect, device number 3 [ 115.323024][ T6152] fido_id[6152]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 116.410935][ T6181] warning: `syz.2.159' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.593968][ T6186] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET) [ 116.747810][ T6193] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.495292][ T2147] IPVS: starting estimator thread 0... [ 117.605971][ T6215] IPVS: using max 9 ests per chain, 21600 per kthread [ 117.646415][ T6212] tipc: Started in network mode [ 117.646455][ T6212] tipc: Node identity ac1414aa, cluster identity 4711 [ 117.843092][ T6212] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 117.853334][ T6212] tipc: Enabled bearer , priority 10 [ 117.878438][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.015853][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.074849][ T6230] netlink: 56 bytes leftover after parsing attributes in process `syz.0.173'. [ 118.155932][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.298413][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.445976][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.595853][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.746323][ T5712] tipc: Node number set to 2886997162 [ 118.838391][ T6256] process 'syz.0.185' launched './file2' with NULL argv: empty string added [ 118.877516][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.910400][ T6256] afs: Bad value for 'source' [ 119.149497][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.202774][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 119.202796][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 119.295523][ T6262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.675899][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 120.395295][ T6282] input: syz1 as /devices/virtual/input/input6 [ 120.740433][ T6299] FAULT_INJECTION: forcing a failure. [ 120.740433][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 120.740469][ T6299] CPU: 1 UID: 0 PID: 6299 Comm: syz.1.202 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 120.740491][ T6299] Tainted: [L]=SOFTLOCKUP [ 120.740498][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.740509][ T6299] Call Trace: [ 120.740516][ T6299] [ 120.740524][ T6299] dump_stack_lvl+0xe8/0x150 [ 120.740557][ T6299] should_fail_ex+0x46b/0x600 [ 120.740584][ T6299] ? __d_alloc+0x37/0x6f0 [ 120.740607][ T6299] should_failslab+0xa8/0x100 [ 120.740640][ T6299] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 120.740663][ T6299] ? __d_lookup+0x66/0x790 [ 120.740685][ T6299] ? __d_alloc+0x37/0x6f0 [ 120.740711][ T6299] __d_alloc+0x37/0x6f0 [ 120.740737][ T6299] d_alloc+0x4b/0x190 [ 120.740755][ T6299] ? lookup_one_qstr_excl+0xc4/0x360 [ 120.740778][ T6299] lookup_one_qstr_excl+0xd8/0x360 [ 120.740804][ T6299] start_removing_noperm+0x7d/0xb0 [ 120.740826][ T6299] __se_sys_mq_unlink+0x24b/0x3a0 [ 120.740852][ T6299] ? __pfx___se_sys_mq_unlink+0x10/0x10 [ 120.740886][ T6299] do_syscall_64+0x166/0x520 [ 120.740912][ T6299] ? trace_irq_disable+0x3b/0x140 [ 120.740936][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.740955][ T6299] ? clear_bhb_loop+0x70/0xc0 [ 120.740978][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.740996][ T6299] RIP: 0033:0x7fccfc46e159 [ 120.741014][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.741029][ T6299] RSP: 002b:00007fccfa6c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 120.741058][ T6299] RAX: ffffffffffffffda RBX: 00007fccfc6f5fa0 RCX: 00007fccfc46e159 [ 120.741072][ T6299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 120.741085][ T6299] RBP: 00007fccfc50506b R08: 0000000000000000 R09: 0000000000000000 [ 120.741096][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.741108][ T6299] R13: 00007fccfc6f6038 R14: 00007fccfc6f5fa0 R15: 00007ffd121fb3b8 [ 120.741140][ T6299] [ 123.491956][ T6369] net_ratelimit: 3 callbacks suppressed [ 123.491976][ T6369] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.818092][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.395893][ T998] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.485905][ T5316] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.548808][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 124.570271][ T998] usb 4-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 124.571336][ T998] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.571360][ T998] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.571390][ T998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.638572][ T998] usb-storage 4-1:1.0: USB Mass Storage device detected [ 124.645866][ T5316] usb 2-1: Using ep0 maxpacket: 32 [ 124.658827][ T5316] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 124.661407][ T5316] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 124.661430][ T5316] usb 2-1: config 2 has no interface number 0 [ 124.661472][ T5316] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 124.661496][ T5316] usb 2-1: config 2 interface 88 has no altsetting 0 [ 124.711605][ T5316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 124.711630][ T5316] usb 2-1: Product: syz [ 124.711644][ T5316] usb 2-1: Manufacturer: syz [ 124.711657][ T5316] usb 2-1: SerialNumber: syz [ 124.782177][ T6393] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.857335][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.860911][ T998] scsi host1: usb-storage 4-1:1.0 [ 124.997901][ T6393] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 125.717699][ T6422] netlink: 112 bytes leftover after parsing attributes in process `syz.0.247'. [ 125.831785][ T5316] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 125.831813][ T5316] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 125.832070][ T5316] asix 2-1:2.88: probe with driver asix failed with error -71 [ 125.885874][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 125.887294][ T5316] usb 2-1: USB disconnect, device number 4 [ 126.054277][ T6425] input: syz1 as /devices/virtual/input/input7 [ 126.101106][ T998] usb 4-1: USB disconnect, device number 5 [ 126.935920][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.259221][ T6466] batadv_slave_1: entered promiscuous mode [ 127.265074][ T6463] batadv_slave_1: left promiscuous mode [ 127.284711][ T6467] coredump: 145(syz.4.265): Core dump to core aborted: cannot preserve file permissions [ 127.422822][ T6472] Bluetooth: MGMT ver 1.23 [ 127.449683][ T6459] syzkaller1: entered promiscuous mode [ 127.449707][ T6459] syzkaller1: entered allmulticast mode [ 127.975861][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.090669][ T6488] netlink: 'syz.2.275': attribute type 2 has an invalid length. [ 128.235427][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 129.000467][ T6489] Set syz1 is full, maxelem 6117 reached [ 129.012198][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 129.291871][ T6527] Invalid argument reading file caps for ./file0 [ 129.486137][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 129.486268][ T4898] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.056995][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 130.057393][ T998] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.240743][ T998] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 130.242039][ T998] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 130.242062][ T998] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 130.250740][ T998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.250764][ T998] usb 1-1: Product: syz [ 130.250776][ T998] usb 1-1: Manufacturer: syz [ 130.250789][ T998] usb 1-1: SerialNumber: syz [ 130.279799][ T6552] FAULT_INJECTION: forcing a failure. [ 130.279799][ T6552] name failslab, interval 1, probability 0, space 0, times 0 [ 130.279835][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.2.300 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 130.279860][ T6552] Tainted: [L]=SOFTLOCKUP [ 130.279867][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.279878][ T6552] Call Trace: [ 130.279885][ T6552] [ 130.279892][ T6552] dump_stack_lvl+0xe8/0x150 [ 130.279925][ T6552] should_fail_ex+0x46b/0x600 [ 130.279954][ T6552] should_failslab+0xa8/0x100 [ 130.279983][ T6552] __kmalloc_cache_noprof+0xa1/0x680 [ 130.280007][ T6552] ? proc_self_get_link+0xe5/0x180 [ 130.280029][ T6552] ? proc_self_get_link+0xe5/0x180 [ 130.280050][ T6552] ? __task_pid_nr_ns+0x399/0x470 [ 130.280073][ T6552] proc_self_get_link+0xe5/0x180 [ 130.280094][ T6552] ? __pfx_proc_self_get_link+0x10/0x10 [ 130.280116][ T6552] pick_link+0x72f/0xfe0 [ 130.280144][ T6552] step_into_slowpath+0x58a/0x820 [ 130.280166][ T6552] ? __pfx_step_into_slowpath+0x10/0x10 [ 130.280194][ T6552] link_path_walk+0xd5e/0x1910 [ 130.280230][ T6552] path_openat+0x1ce/0x1d60 [ 130.280270][ T6552] do_file_open+0x23e/0x4a0 [ 130.280297][ T6552] ? __pfx_do_file_open+0x10/0x10 [ 130.280340][ T6552] ? alloc_fd+0x654/0x6d0 [ 130.280366][ T6552] do_sys_openat2+0x115/0x200 [ 130.280392][ T6552] ? __se_sys_futex+0x3a8/0x450 [ 130.280410][ T6552] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.280439][ T6552] ? rcu_is_watching+0x16/0xb0 [ 130.280469][ T6552] __x64_sys_openat+0x138/0x170 [ 130.280500][ T6552] do_syscall_64+0x166/0x520 [ 130.280526][ T6552] ? trace_irq_disable+0x3b/0x140 [ 130.280549][ T6552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.280567][ T6552] ? clear_bhb_loop+0x70/0xc0 [ 130.280589][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.280607][ T6552] RIP: 0033:0x7f58f423e98e [ 130.280624][ T6552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.280645][ T6552] RSP: 002b:00007f58f24d5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.280665][ T6552] RAX: ffffffffffffffda RBX: 00007f58f24d66c0 RCX: 00007f58f423e98e [ 130.280679][ T6552] RDX: 0000000000000002 RSI: 00007f58f24d5f90 RDI: ffffffffffffff9c [ 130.280692][ T6552] RBP: 00007f58f431506b R08: 0000000000000000 R09: 0000000000000000 [ 130.280703][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.280715][ T6552] R13: 00007f58f4506038 R14: 00007f58f4505fa0 R15: 00007ffd50feab18 [ 130.280744][ T6552] [ 130.338171][ T6554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.301'. [ 130.433445][ T6554] netlink: 32 bytes leftover after parsing attributes in process `syz.3.301'. [ 130.922654][ T998] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 131.095891][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.116194][ T5316] usb 1-1: USB disconnect, device number 4 [ 131.253511][ T5316] usblp0: removed [ 131.809555][ T6578] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.809633][ T6578] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 131.849819][ T6584] FAULT_INJECTION: forcing a failure. [ 131.849819][ T6584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.849856][ T6584] CPU: 1 UID: 0 PID: 6584 Comm: syz.2.314 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 131.849882][ T6584] Tainted: [L]=SOFTLOCKUP [ 131.849889][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.849900][ T6584] Call Trace: [ 131.849910][ T6584] [ 131.849919][ T6584] dump_stack_lvl+0xe8/0x150 [ 131.849951][ T6584] should_fail_ex+0x46b/0x600 [ 131.849981][ T6584] _copy_from_user+0x2d/0xb0 [ 131.850007][ T6584] __se_sys_prlimit64+0x12f/0xbc0 [ 131.850038][ T6584] ? __se_sys_futex+0x3a8/0x450 [ 131.850059][ T6584] ? __pfx___se_sys_prlimit64+0x10/0x10 [ 131.850085][ T6584] ? rcu_is_watching+0x16/0xb0 [ 131.850123][ T6584] do_syscall_64+0x166/0x520 [ 131.850149][ T6584] ? trace_irq_disable+0x3b/0x140 [ 131.850171][ T6584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.850190][ T6584] ? clear_bhb_loop+0x70/0xc0 [ 131.850214][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.850233][ T6584] RIP: 0033:0x7f58f427e159 [ 131.850251][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.850266][ T6584] RSP: 002b:00007f58f24d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 131.850287][ T6584] RAX: ffffffffffffffda RBX: 00007f58f4505fa0 RCX: 00007f58f427e159 [ 131.850301][ T6584] RDX: 0000200000000140 RSI: 000000000000000e RDI: 0000000000000000 [ 131.850313][ T6584] RBP: 00007f58f431506b R08: 0000000000000000 R09: 0000000000000000 [ 131.850324][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.850335][ T6584] R13: 00007f58f4506038 R14: 00007f58f4505fa0 R15: 00007ffd50feab18 [ 131.850365][ T6584] [ 132.125887][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.395851][ T998] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.560896][ T998] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 132.579885][ T998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.713512][ T998] usb 4-1: config 0 descriptor?? [ 132.860684][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860789][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.025986][ T998] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 133.165927][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.549763][ T998] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 133.549799][ T998] [drm] Initialized udl on minor 1 [ 134.207188][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 134.301455][ T6630] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 135.247675][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.385642][ T6658] input: syz1 as /devices/virtual/input/input8 [ 135.862554][ T6661] pim6reg1: entered promiscuous mode [ 135.862584][ T6661] pim6reg1: entered allmulticast mode [ 136.237955][ T9] kernel write not supported for file /tomoyo/query (pid: 9 comm: kworker/0:0) [ 136.298713][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.486610][ T5712] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.841871][ T5712] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 136.859289][ T5712] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.859320][ T5712] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.873354][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.873379][ T5712] usb 2-1: Product: syz [ 136.873391][ T5712] usb 2-1: Manufacturer: syz [ 136.873404][ T5712] usb 2-1: SerialNumber: syz [ 136.975890][ T5572] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.126817][ T5572] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 137.128074][ T5572] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.128123][ T5572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.128143][ T5572] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.128164][ T5572] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.128220][ T5572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.322781][ T5712] symbolserial 2-1:1.0: symbol converter detected [ 137.327510][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.817957][ T5712] usb 2-1: symbol converter now attached to ttyUSB0 [ 138.012713][ T5712] usb 2-1: USB disconnect, device number 5 [ 138.245934][ T37] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.366217][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.391219][ T5572] gud 1-1:1.0: USB-1: Failed to add properties (ret=-71) [ 138.391269][ T5572] gud 1-1:1.0: Failed to get connectors (error=-71) [ 138.391303][ T5572] gud 1-1:1.0: probe with driver gud failed with error -71 [ 138.461362][ T37] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 138.462963][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.596362][ T37] usb 5-1: config 0 descriptor?? [ 138.601267][ T5712] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 138.634755][ T5572] usb 1-1: USB disconnect, device number 5 [ 138.693141][ T5712] symbolserial 2-1:1.0: device disconnected [ 138.783320][ T998] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 138.829558][ T37] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 138.839797][ T998] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 139.041579][ T998] usb 4-1: USB disconnect, device number 6 [ 139.175634][ T37] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 139.175660][ T37] [drm] Initialized udl on minor 2 [ 139.232321][ T37] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.232706][ T37] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 139.263175][ T37] usb 5-1: USB disconnect, device number 2 [ 139.406912][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.447113][ T5712] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.557396][ T6713] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 139.557418][ T6713] netlink: 'syz.0.364': attribute type 2 has an invalid length. [ 139.605872][ T5712] usb 2-1: Using ep0 maxpacket: 16 [ 139.615877][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.615922][ T5712] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 139.650355][ T5712] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 139.650383][ T5712] usb 2-1: config 127 has no interface number 0 [ 139.650413][ T5712] usb 2-1: config 127 interface 124 has no altsetting 0 [ 139.661481][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.661504][ T5712] usb 2-1: Product: syz [ 139.661517][ T5712] usb 2-1: Manufacturer: syz [ 139.661529][ T5712] usb 2-1: SerialNumber: syz [ 140.273368][ T6728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.371'. [ 140.436573][ T37] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 140.446844][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 140.586792][ T37] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 140.588576][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 140.588603][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt [ 140.588635][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.639926][ T37] usb 5-1: config 0 descriptor?? [ 140.641386][ T6726] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.641739][ T6726] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 140.697175][ T37] usb 5-1: probing VID:PID(0424:012C) [ 140.703601][ T37] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 81 [ 140.703627][ T37] usb 5-1: vub300 ignoring EndPoint(0) 81 [ 140.703648][ T37] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 04 [ 140.703665][ T37] usb 5-1: vub300 ignoring EndPoint(1) 04 [ 140.703679][ T37] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 140.750541][ T37] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 140.845477][ T5712] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 140.913303][ T998] usb 5-1: USB disconnect, device number 3 [ 141.036076][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.148625][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.206267][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 141.219026][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 141.250868][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 141.250896][ T10] usb 4-1: config 0 has no interface number 0 [ 141.250936][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 141.259630][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.259654][ T10] usb 4-1: Product: syz [ 141.259719][ T10] usb 4-1: Manufacturer: syz [ 141.259734][ T10] usb 4-1: SerialNumber: syz [ 141.324968][ T10] usb 4-1: config 0 descriptor?? [ 141.353961][ T5712] usb 2-1: failed to restore interface 124 altsetting 11 (error=-71) [ 141.488738][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.679069][ T5712] usb 2-1: USB disconnect, device number 6 [ 141.996381][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 141.996413][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 142.048306][ T4898] Bluetooth: hci1: command 0x2016 tx timeout [ 142.230065][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 142.230098][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 142.230113][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 142.230379][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 142.263899][ T10] usb 4-1: USB disconnect, device number 7 [ 142.535901][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.642874][ T6779] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 142.769262][ T5572] kernel write not supported for file /dummy_udc (pid: 5572 comm: kworker/1:4) [ 143.565899][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.736574][ T6806] FAULT_INJECTION: forcing a failure. [ 143.736574][ T6806] name failslab, interval 1, probability 0, space 0, times 0 [ 143.736611][ T6806] CPU: 1 UID: 0 PID: 6806 Comm: syz.3.404 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 143.736635][ T6806] Tainted: [L]=SOFTLOCKUP [ 143.736641][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.736651][ T6806] Call Trace: [ 143.736659][ T6806] [ 143.736668][ T6806] dump_stack_lvl+0xe8/0x150 [ 143.736701][ T6806] should_fail_ex+0x46b/0x600 [ 143.736727][ T6806] ? __d_alloc+0x37/0x6f0 [ 143.736749][ T6806] should_failslab+0xa8/0x100 [ 143.736795][ T6806] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 143.736824][ T6806] ? __d_alloc+0x37/0x6f0 [ 143.736851][ T6806] __d_alloc+0x37/0x6f0 [ 143.736876][ T6806] d_alloc_pseudo+0x21/0xc0 [ 143.736899][ T6806] alloc_path_pseudo+0x107/0x220 [ 143.736930][ T6806] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 143.736967][ T6806] alloc_file_pseudo+0xa8/0x1e0 [ 143.736997][ T6806] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 143.737035][ T6806] anon_inode_getfd+0xc8/0x200 [ 143.737065][ T6806] map_create+0x7f8/0x1e20 [ 143.737095][ T6806] ? __pfx_map_create+0x10/0x10 [ 143.737128][ T6806] ? bpf_lsm_bpf+0x9/0x20 [ 143.737147][ T6806] ? security_bpf+0x7e/0x2d0 [ 143.737170][ T6806] __sys_bpf+0xaea/0xd90 [ 143.737202][ T6806] ? __pfx___sys_bpf+0x10/0x10 [ 143.737232][ T6806] ? do_futex+0x3e7/0x4e0 [ 143.737278][ T6806] ? rcu_is_watching+0x16/0xb0 [ 143.737321][ T6806] __x64_sys_bpf+0xba/0xd0 [ 143.737348][ T6806] do_syscall_64+0x166/0x520 [ 143.737373][ T6806] ? trace_irq_disable+0x3b/0x140 [ 143.737397][ T6806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.737416][ T6806] ? clear_bhb_loop+0x70/0xc0 [ 143.737439][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.737457][ T6806] RIP: 0033:0x7f6599ace159 [ 143.737478][ T6806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.737494][ T6806] RSP: 002b:00007f6597d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.737515][ T6806] RAX: ffffffffffffffda RBX: 00007f6599d55fa0 RCX: 00007f6599ace159 [ 143.737529][ T6806] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 143.737542][ T6806] RBP: 00007f6599b6506b R08: 0000000000000000 R09: 0000000000000000 [ 143.737554][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.737565][ T6806] R13: 00007f6599d56038 R14: 00007f6599d55fa0 R15: 00007ffeb6cd7378 [ 143.737596][ T6806] [ 144.559674][ T6810] smpboot: CPU 1 is now offline [ 144.605823][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.650145][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.687353][ T6836] jffs2: notice: (6836) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 146.175574][ T6858] FAULT_INJECTION: forcing a failure. [ 146.175574][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 146.175606][ T6858] CPU: 0 UID: 0 PID: 6858 Comm: syz.0.427 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 146.175620][ T6858] Tainted: [L]=SOFTLOCKUP [ 146.175624][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.175630][ T6858] Call Trace: [ 146.175635][ T6858] [ 146.175639][ T6858] dump_stack_lvl+0xe8/0x150 [ 146.175658][ T6858] should_fail_ex+0x46b/0x600 [ 146.175674][ T6858] should_failslab+0xa8/0x100 [ 146.175691][ T6858] __kmalloc_noprof+0xfb/0x790 [ 146.175705][ T6858] ? prepare_creds+0x30/0x820 [ 146.175716][ T6858] ? security_prepare_creds+0x52/0x360 [ 146.175728][ T6858] ? security_prepare_creds+0x52/0x360 [ 146.175746][ T6858] security_prepare_creds+0x52/0x360 [ 146.175762][ T6858] prepare_creds+0x57d/0x820 [ 146.175775][ T6858] keyctl_assume_authority+0x68/0x230 [ 146.175789][ T6858] __se_sys_keyctl+0x67b/0x9d0 [ 146.175802][ T6858] ? __pfx___se_sys_keyctl+0x10/0x10 [ 146.175816][ T6858] ? __pfx_do_futex+0x10/0x10 [ 146.175826][ T6858] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 146.175841][ T6858] ? __se_sys_futex+0x3a8/0x450 [ 146.175855][ T6858] ? rcu_is_watching+0x16/0xb0 [ 146.175873][ T6858] ? __x64_sys_keyctl+0x20/0xc0 [ 146.175886][ T6858] do_syscall_64+0x166/0x520 [ 146.175899][ T6858] ? trace_irq_disable+0x3b/0x140 [ 146.175912][ T6858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.175922][ T6858] ? clear_bhb_loop+0x70/0xc0 [ 146.175933][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.175943][ T6858] RIP: 0033:0x7f94ab86e159 [ 146.175953][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.175961][ T6858] RSP: 002b:00007f94a9ac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 146.175973][ T6858] RAX: ffffffffffffffda RBX: 00007f94abaf5fa0 RCX: 00007f94ab86e159 [ 146.175980][ T6858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 146.175985][ T6858] RBP: 00007f94ab90506b R08: 0000000000000000 R09: 0000000000000000 [ 146.175991][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.175997][ T6858] R13: 00007f94abaf6038 R14: 00007f94abaf5fa0 R15: 00007ffd39bf3188 [ 146.176012][ T6858] [ 146.205905][ T5590] Bluetooth: hci1: command 0x2016 tx timeout [ 146.686015][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.838311][ T6872] FAULT_INJECTION: forcing a failure. [ 146.838311][ T6872] name failslab, interval 1, probability 0, space 0, times 0 [ 146.838335][ T6872] CPU: 0 UID: 0 PID: 6872 Comm: syz.4.434 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 146.838349][ T6872] Tainted: [L]=SOFTLOCKUP [ 146.838353][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.838359][ T6872] Call Trace: [ 146.838364][ T6872] [ 146.838368][ T6872] dump_stack_lvl+0xe8/0x150 [ 146.838388][ T6872] should_fail_ex+0x46b/0x600 [ 146.838403][ T6872] should_failslab+0xa8/0x100 [ 146.838420][ T6872] __kmalloc_cache_noprof+0xa1/0x680 [ 146.838433][ T6872] ? sctp_endpoint_new+0xe1/0xa70 [ 146.838450][ T6872] ? sctp_endpoint_new+0xe1/0xa70 [ 146.838465][ T6872] sctp_endpoint_new+0xe1/0xa70 [ 146.838480][ T6872] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 146.838501][ T6872] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 146.838521][ T6872] sctp_init_sock+0x94e/0x1380 [ 146.838533][ T6872] ? sock_init_data_uid+0x688/0x8d0 [ 146.838548][ T6872] inet_create+0xd2c/0x1000 [ 146.838560][ T6872] ? inet_create+0x9d/0x1000 [ 146.838573][ T6872] __sock_create+0x4b3/0x9d0 [ 146.838590][ T6872] __sys_socket+0xd6/0x1b0 [ 146.838605][ T6872] __x64_sys_socket+0x7a/0x90 [ 146.838618][ T6872] do_syscall_64+0x166/0x520 [ 146.838632][ T6872] ? trace_irq_disable+0x3b/0x140 [ 146.838644][ T6872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.838654][ T6872] ? clear_bhb_loop+0x70/0xc0 [ 146.838665][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.838675][ T6872] RIP: 0033:0x7f5c35d3e159 [ 146.838685][ T6872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.838694][ T6872] RSP: 002b:00007f5c33f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 146.838705][ T6872] RAX: ffffffffffffffda RBX: 00007f5c35fc5fa0 RCX: 00007f5c35d3e159 [ 146.838712][ T6872] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 0000000000000002 [ 146.838718][ T6872] RBP: 00007f5c35dd506b R08: 0000000000000000 R09: 0000000000000000 [ 146.838724][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.838729][ T6872] R13: 00007f5c35fc6038 R14: 00007f5c35fc5fa0 R15: 00007fff26c5aad8 [ 146.838744][ T6872] [ 147.472939][ T6892] FAULT_INJECTION: forcing a failure. [ 147.472939][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 147.472964][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.0.442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 147.472978][ T6892] Tainted: [L]=SOFTLOCKUP [ 147.472982][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.472988][ T6892] Call Trace: [ 147.472993][ T6892] [ 147.472998][ T6892] dump_stack_lvl+0xe8/0x150 [ 147.473017][ T6892] should_fail_ex+0x46b/0x600 [ 147.473034][ T6892] should_failslab+0xa8/0x100 [ 147.473050][ T6892] ? prepare_creds+0x30/0x820 [ 147.473063][ T6892] kmem_cache_alloc_noprof+0x9e/0x690 [ 147.473076][ T6892] ? prepare_creds+0x30/0x820 [ 147.473090][ T6892] prepare_creds+0x30/0x820 [ 147.473103][ T6892] keyctl_set_reqkey_keyring+0x7e/0x1d0 [ 147.473118][ T6892] __se_sys_keyctl+0x667/0x9d0 [ 147.473131][ T6892] ? __pfx___se_sys_keyctl+0x10/0x10 [ 147.473145][ T6892] ? __pfx_do_futex+0x10/0x10 [ 147.473155][ T6892] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 147.473170][ T6892] ? __se_sys_futex+0x3a8/0x450 [ 147.473183][ T6892] ? rcu_is_watching+0x16/0xb0 [ 147.473200][ T6892] ? __x64_sys_keyctl+0x20/0xc0 [ 147.473214][ T6892] do_syscall_64+0x166/0x520 [ 147.473227][ T6892] ? trace_irq_disable+0x3b/0x140 [ 147.473239][ T6892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.473250][ T6892] ? clear_bhb_loop+0x70/0xc0 [ 147.473262][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.473272][ T6892] RIP: 0033:0x7f94ab86e159 [ 147.473282][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.473290][ T6892] RSP: 002b:00007f94a9ac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 147.473302][ T6892] RAX: ffffffffffffffda RBX: 00007f94abaf5fa0 RCX: 00007f94ab86e159 [ 147.473308][ T6892] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 147.473314][ T6892] RBP: 00007f94ab90506b R08: 0000000000000000 R09: 0000000000000000 [ 147.473320][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.473325][ T6892] R13: 00007f94abaf6038 R14: 00007f94abaf5fa0 R15: 00007ffd39bf3188 [ 147.473341][ T6892] [ 147.726000][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.711964][ T6930] FAULT_INJECTION: forcing a failure. [ 148.711964][ T6930] name failslab, interval 1, probability 0, space 0, times 0 [ 148.712058][ T6930] CPU: 0 UID: 0 PID: 6930 Comm: syz.4.457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 148.712073][ T6930] Tainted: [L]=SOFTLOCKUP [ 148.712077][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.712083][ T6930] Call Trace: [ 148.712088][ T6930] [ 148.712093][ T6930] dump_stack_lvl+0xe8/0x150 [ 148.712113][ T6930] should_fail_ex+0x46b/0x600 [ 148.712129][ T6930] should_failslab+0xa8/0x100 [ 148.712144][ T6930] ? security_file_alloc+0x34/0x310 [ 148.712157][ T6930] kmem_cache_alloc_noprof+0x9e/0x690 [ 148.712169][ T6930] ? rcu_is_watching+0x16/0xb0 [ 148.712183][ T6930] ? security_file_alloc+0x34/0x310 [ 148.712194][ T6930] ? alloc_empty_file+0x5b/0x1d0 [ 148.712210][ T6930] security_file_alloc+0x34/0x310 [ 148.712222][ T6930] init_file+0x96/0x2d0 [ 148.712236][ T6930] alloc_empty_file+0x74/0x1d0 [ 148.712250][ T6930] dentry_open+0x44/0xa0 [ 148.712263][ T6930] vfs_open_tree+0x311/0x3d0 [ 148.712277][ T6930] ? __pfx_vfs_open_tree+0x10/0x10 [ 148.712293][ T6930] __x64_sys_open_tree+0x96/0x110 [ 148.712309][ T6930] do_syscall_64+0x166/0x520 [ 148.712322][ T6930] ? trace_irq_disable+0x3b/0x140 [ 148.712333][ T6930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.712343][ T6930] ? clear_bhb_loop+0x70/0xc0 [ 148.712355][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.712373][ T6930] RIP: 0033:0x7f5c35d3e159 [ 148.712384][ T6930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.712392][ T6930] RSP: 002b:00007f5c33f96028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 148.712405][ T6930] RAX: ffffffffffffffda RBX: 00007f5c35fc5fa0 RCX: 00007f5c35d3e159 [ 148.712412][ T6930] RDX: 0000000000001900 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 148.712418][ T6930] RBP: 00007f5c35dd506b R08: 0000000000000000 R09: 0000000000000000 [ 148.712424][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.712430][ T6930] R13: 00007f5c35fc6038 R14: 00007f5c35fc5fa0 R15: 00007fff26c5aad8 [ 148.712446][ T6930] [ 148.767646][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 149.806063][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.065845][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.256399][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 150.257628][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.258686][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 150.258717][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.258735][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.258747][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.258759][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.258780][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.845875][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 151.219975][ T6972] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 151.370629][ T9] usb 5-1: USB disconnect, device number 4 [ 151.855849][ T9] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 151.885938][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.006829][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 152.009077][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 152.009093][ T9] usb 3-1: config 0 has no interface number 0 [ 152.009116][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.009128][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 152.009140][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 152.009152][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 152.009164][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 152.009177][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.009198][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.033151][ T9] usb 3-1: config 0 descriptor?? [ 152.034014][ T6985] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.034276][ T6985] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.218235][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 152.535152][ T9] usb 3-1: USB disconnect, device number 2 [ 152.535249][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 152.657087][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 152.780159][ T7011] Invalid argument reading file caps for ./file0 [ 152.925890][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.947845][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 153.151582][ T7024] FAULT_INJECTION: forcing a failure. [ 153.151582][ T7024] name failslab, interval 1, probability 0, space 0, times 0 [ 153.151608][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.1.497 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 153.151629][ T7024] Tainted: [L]=SOFTLOCKUP [ 153.151633][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.151639][ T7024] Call Trace: [ 153.151644][ T7024] [ 153.151649][ T7024] dump_stack_lvl+0xe8/0x150 [ 153.151668][ T7024] should_fail_ex+0x46b/0x600 [ 153.151685][ T7024] should_failslab+0xa8/0x100 [ 153.151701][ T7024] __kvmalloc_node_noprof+0x176/0x890 [ 153.151716][ T7024] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 153.151729][ T7024] ? io_alloc_cache_init+0x42/0x140 [ 153.151742][ T7024] ? io_alloc_cache_init+0x42/0x140 [ 153.151758][ T7024] io_alloc_cache_init+0x42/0x140 [ 153.151772][ T7024] io_ring_ctx_alloc+0x518/0xba0 [ 153.151786][ T7024] io_uring_create+0x50/0x990 [ 153.151798][ T7024] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 153.151812][ T7024] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 153.151824][ T7024] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 153.151845][ T7024] ? rcu_is_watching+0x16/0xb0 [ 153.151865][ T7024] do_syscall_64+0x166/0x520 [ 153.151878][ T7024] ? trace_irq_disable+0x3b/0x140 [ 153.151890][ T7024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.151909][ T7024] ? clear_bhb_loop+0x70/0xc0 [ 153.151921][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.151931][ T7024] RIP: 0033:0x7fccfc46e159 [ 153.151941][ T7024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.151950][ T7024] RSP: 002b:00007fccfa6c5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 153.151962][ T7024] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007fccfc46e159 [ 153.151969][ T7024] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000654c [ 153.151975][ T7024] RBP: 00007fccfc50506b R08: 0000000000000000 R09: 0000000000000000 [ 153.151981][ T7024] R10: 0000200000000300 R11: 0000000000000206 R12: 0000000000000000 [ 153.151987][ T7024] R13: 0000200000000300 R14: 0000000000000000 R15: 00007ffd121fb3b8 [ 153.152003][ T7024] [ 153.555895][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.708935][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 153.711565][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.711584][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.711604][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.733183][ T9] usb 2-1: config 0 descriptor?? [ 153.966137][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.209963][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 154.209989][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 154.210004][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 154.210018][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 154.210032][ T9] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 154.301384][ T9] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 154.601093][ T9] playstation 0003:054C:0DF2.0002: Invalid reportID received, expected 9 got 0 [ 154.601123][ T9] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 154.601152][ T9] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 154.601159][ T9] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 154.766253][ T9] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -22 [ 154.883635][ T9] usb 2-1: USB disconnect, device number 7 [ 155.005836][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 155.738893][ T7086] input: syz1 as /devices/virtual/input/input9 [ 155.738914][ T7086] input: failed to attach handler leds to device input9, error: -6 [ 156.045850][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.085848][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.296548][ T7134] netlink: 'syz.2.542': attribute type 83 has an invalid length. [ 158.125854][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.541933][ T7159] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 158.961650][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'. [ 159.167127][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 159.294481][ T7176] Invalid argument reading file caps for ./file0 [ 159.533567][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 159.533585][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 159.906207][ T7189] Invalid argument reading file caps for ./file0 [ 160.209689][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 161.248806][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.289245][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.561986][ T7239] IPVS: Scheduler module ip_vs_ not found [ 163.083397][ T7246] syz.1.587 (7246) used obsolete PPPIOCDETACH ioctl [ 163.326023][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 164.149071][ T7288] loop4: detected capacity change from 0 to 7 [ 164.348047][ T7295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.366047][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 164.378212][ T7288] Dev loop4: unable to read RDB block 7 [ 164.378242][ T7288] loop4: unable to read partition table [ 164.379912][ T7288] loop4: partition table beyond EOD, truncated [ 164.379936][ T7288] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.409590][ T7295] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 164.452234][ T4950] Dev loop4: unable to read RDB block 7 [ 164.452263][ T4950] loop4: unable to read partition table [ 164.452384][ T4950] loop4: partition table beyond EOD, truncated [ 165.409101][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 166.446717][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 166.862519][ T7328] FAULT_INJECTION: forcing a failure. [ 166.862519][ T7328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.862545][ T7328] CPU: 0 UID: 0 PID: 7328 Comm: syz.4.621 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 166.862567][ T7328] Tainted: [L]=SOFTLOCKUP [ 166.862571][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.862577][ T7328] Call Trace: [ 166.862582][ T7328] [ 166.862587][ T7328] dump_stack_lvl+0xe8/0x150 [ 166.862608][ T7328] should_fail_ex+0x46b/0x600 [ 166.862624][ T7328] set_fd_set+0x3a/0xa0 [ 166.862639][ T7328] core_sys_select+0x9c3/0xb40 [ 166.862660][ T7328] ? __pfx_core_sys_select+0x10/0x10 [ 166.862685][ T7328] ? __pfx_set_user_sigmask+0x10/0x10 [ 166.862700][ T7328] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 166.862715][ T7328] __se_sys_pselect6+0x267/0x320 [ 166.862731][ T7328] ? __pfx___se_sys_pselect6+0x10/0x10 [ 166.862750][ T7328] ? __x64_sys_pselect6+0x21/0xf0 [ 166.862764][ T7328] do_syscall_64+0x166/0x520 [ 166.862777][ T7328] ? trace_irq_disable+0x3b/0x140 [ 166.862789][ T7328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.862799][ T7328] ? clear_bhb_loop+0x70/0xc0 [ 166.862810][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.862820][ T7328] RIP: 0033:0x7f5c35d3e159 [ 166.862830][ T7328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.862839][ T7328] RSP: 002b:00007f5c33f96028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 166.862850][ T7328] RAX: ffffffffffffffda RBX: 00007f5c35fc5fa0 RCX: 00007f5c35d3e159 [ 166.862857][ T7328] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 166.862863][ T7328] RBP: 00007f5c35dd506b R08: 0000200000000280 R09: 0000000000000000 [ 166.862869][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.862875][ T7328] R13: 00007f5c35fc6038 R14: 00007f5c35fc5fa0 R15: 00007fff26c5aad8 [ 166.862893][ T7328] [ 167.435858][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.485963][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.567293][ T7324] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 167.567319][ T7324] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 167.567330][ T7324] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 167.569268][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 167.569279][ T36] audit: type=1800 audit(1789527507.676:26): pid=7324 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.619" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 167.596963][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 167.597477][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 167.602493][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 167.602508][ T10] usb 4-1: config 0 has no interface number 0 [ 167.602533][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.602546][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 167.608745][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.608760][ T10] usb 4-1: Product: syz [ 167.608768][ T10] usb 4-1: Manufacturer: syz [ 167.608775][ T10] usb 4-1: SerialNumber: syz [ 167.624812][ T10] usb 4-1: config 0 descriptor?? [ 167.631047][ T7349] FAULT_INJECTION: forcing a failure. [ 167.631047][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 167.631070][ T7349] CPU: 0 UID: 0 PID: 7349 Comm: syz.1.631 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.631084][ T7349] Tainted: [L]=SOFTLOCKUP [ 167.631088][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.631094][ T7349] Call Trace: [ 167.631098][ T7349] [ 167.631103][ T7349] dump_stack_lvl+0xe8/0x150 [ 167.631123][ T7349] should_fail_ex+0x46b/0x600 [ 167.631139][ T7349] should_failslab+0xa8/0x100 [ 167.631154][ T7349] ? mas_alloc_nodes+0x291/0x350 [ 167.631167][ T7349] kmem_cache_alloc_noprof+0x9e/0x690 [ 167.631180][ T7349] ? mas_alloc_nodes+0x291/0x350 [ 167.631196][ T7349] mas_alloc_nodes+0x291/0x350 [ 167.631212][ T7349] mas_preallocate+0x42d/0x840 [ 167.631229][ T7349] ? __pfx_mas_preallocate+0x10/0x10 [ 167.631245][ T7349] ? anon_vma_name+0x61/0x210 [ 167.631260][ T7349] ? __mas_set_range+0x11a/0x3a0 [ 167.631272][ T7349] __split_vma+0x2f3/0xa00 [ 167.631283][ T7349] ? __lock_acquire+0x747/0x2de0 [ 167.631298][ T7349] ? __pfx___split_vma+0x10/0x10 [ 167.631311][ T7349] ? __kernel_text_address+0xd/0x30 [ 167.631322][ T7349] ? unwind_get_return_address+0x4d/0x90 [ 167.631338][ T7349] vma_modify+0x8b7/0x2060 [ 167.631360][ T7349] vma_modify_name+0x2a4/0x360 [ 167.631376][ T7349] ? __pfx_vma_modify_name+0x10/0x10 [ 167.631401][ T7349] ? anon_vma_name+0x61/0x210 [ 167.631416][ T7349] madvise_vma_behavior+0x1840/0x4160 [ 167.631435][ T7349] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 167.631454][ T7349] ? lock_acquire+0x115/0x350 [ 167.631478][ T7349] ? lock_acquire+0x115/0x350 [ 167.631494][ T7349] ? lock_acquire+0x115/0x350 [ 167.631507][ T7349] ? __lock_acquire+0x747/0x2de0 [ 167.631524][ T7349] ? is_bpf_text_address+0x292/0x2b0 [ 167.631539][ T7349] ? is_bpf_text_address+0x26/0x2b0 [ 167.631555][ T7349] ? kernel_text_address+0xa5/0xe0 [ 167.631566][ T7349] ? __kernel_text_address+0xd/0x30 [ 167.631579][ T7349] ? lock_acquire+0x115/0x350 [ 167.631603][ T7349] ? mas_prev_slot+0xb79/0xc00 [ 167.631625][ T7349] ? find_vma_prev+0x123/0x1b0 [ 167.631638][ T7349] ? __pfx_find_vma_prev+0x10/0x10 [ 167.631659][ T7349] madvise_walk_vmas+0x576/0xb00 [ 167.631682][ T7349] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 167.631696][ T7349] ? madvise_lock+0x1ad/0x2e0 [ 167.631713][ T7349] set_anon_vma_name+0x324/0x380 [ 167.631733][ T7349] __se_sys_prctl+0x13a7/0x1910 [ 167.631747][ T7349] ? __pfx___se_sys_prctl+0x10/0x10 [ 167.631761][ T7349] ? __x64_sys_prctl+0x20/0xc0 [ 167.631773][ T7349] do_syscall_64+0x166/0x520 [ 167.631785][ T7349] ? trace_irq_disable+0x3b/0x140 [ 167.631797][ T7349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.631806][ T7349] ? clear_bhb_loop+0x70/0xc0 [ 167.631818][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.631828][ T7349] RIP: 0033:0x7fccfc46e159 [ 167.631839][ T7349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.631847][ T7349] RSP: 002b:00007fccfa6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 167.631858][ T7349] RAX: ffffffffffffffda RBX: 00007fccfc6f5fa0 RCX: 00007fccfc46e159 [ 167.631865][ T7349] RDX: 0000200000ffc000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 167.631871][ T7349] RBP: 00007fccfc50506b R08: 0000200000000b40 R09: 0000000000000000 [ 167.631877][ T7349] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 167.631883][ T7349] R13: 00007fccfc6f6038 R14: 00007fccfc6f5fa0 R15: 00007ffd121fb3b8 [ 167.631899][ T7349] [ 168.297008][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 168.354091][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input10 [ 168.525834][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.657147][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.677817][ T5591] kernel read not supported for file bpf-prog (pid: 5591 comm: kworker/0:3) [ 168.724220][ T10] usb 4-1: USB disconnect, device number 8 [ 168.817095][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 168.818525][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 168.820056][ T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 168.820070][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.820080][ T9] usb 2-1: config 0 has no interface number 0 [ 168.831710][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.831726][ T9] usb 2-1: Product: syz [ 168.831733][ T9] usb 2-1: Manufacturer: syz [ 168.831740][ T9] usb 2-1: SerialNumber: syz [ 168.850881][ T9] usb 2-1: config 0 descriptor?? [ 168.913522][ T9] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 168.913560][ T9] uvcvideo 2-1:0.105: No valid video chain found. [ 169.073364][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 169.152889][ T9] usb 2-1: USB disconnect, device number 8 [ 169.565848][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 169.985980][ T7390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.084594][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 170.084616][ T7395] netlink: 'syz.4.648': attribute type 29 has an invalid length. [ 170.084624][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 170.235693][ T7390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.606105][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.729923][ T7407] bond0: invalid NS target ff00:: specified for addition [ 170.729942][ T7407] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 171.646683][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 171.861845][ T5712] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 171.917136][ T7415] ceph: No mds server is up or the cluster is laggy [ 171.993835][ T7438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.666'. [ 171.997289][ T5712] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 172.369526][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 172.413486][ T7448] FAULT_INJECTION: forcing a failure. [ 172.413486][ T7448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.413510][ T7448] CPU: 0 UID: 0 PID: 7448 Comm: syz.1.670 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 172.413524][ T7448] Tainted: [L]=SOFTLOCKUP [ 172.413527][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.413533][ T7448] Call Trace: [ 172.413538][ T7448] [ 172.413543][ T7448] dump_stack_lvl+0xe8/0x150 [ 172.413563][ T7448] should_fail_ex+0x46b/0x600 [ 172.413579][ T7448] _copy_from_user+0x2d/0xb0 [ 172.413593][ T7448] __x64_sys_setrlimit+0xcc/0x150 [ 172.413605][ T7448] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 172.413621][ T7448] do_syscall_64+0x166/0x520 [ 172.413634][ T7448] ? trace_irq_disable+0x3b/0x140 [ 172.413647][ T7448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.413657][ T7448] ? clear_bhb_loop+0x70/0xc0 [ 172.413669][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.413680][ T7448] RIP: 0033:0x7fccfc46e159 [ 172.413689][ T7448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.413698][ T7448] RSP: 002b:00007fccfa6c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 172.413709][ T7448] RAX: ffffffffffffffda RBX: 00007fccfc6f5fa0 RCX: 00007fccfc46e159 [ 172.413717][ T7448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0040000000000008 [ 172.413723][ T7448] RBP: 00007fccfc50506b R08: 0000000000000000 R09: 0000000000000000 [ 172.413729][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.413734][ T7448] R13: 00007fccfc6f6038 R14: 00007fccfc6f5fa0 R15: 00007ffd121fb3b8 [ 172.413749][ T7448] [ 172.453091][ T7450] FAULT_INJECTION: forcing a failure. [ 172.453091][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 172.453124][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.0.671 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 172.453139][ T7450] Tainted: [L]=SOFTLOCKUP [ 172.453143][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.453150][ T7450] Call Trace: [ 172.453154][ T7450] [ 172.453159][ T7450] dump_stack_lvl+0xe8/0x150 [ 172.453178][ T7450] should_fail_ex+0x46b/0x600 [ 172.453194][ T7450] should_failslab+0xa8/0x100 [ 172.453211][ T7450] __kmalloc_cache_noprof+0xa1/0x680 [ 172.453225][ T7450] ? proc_thread_self_get_link+0xfc/0x190 [ 172.453237][ T7450] ? proc_thread_self_get_link+0xfc/0x190 [ 172.453249][ T7450] ? __task_pid_nr_ns+0x399/0x470 [ 172.453261][ T7450] proc_thread_self_get_link+0xfc/0x190 [ 172.453273][ T7450] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 172.453285][ T7450] pick_link+0x72f/0xfe0 [ 172.453302][ T7450] step_into_slowpath+0x58a/0x820 [ 172.453313][ T7450] ? __pfx_step_into_slowpath+0x10/0x10 [ 172.453328][ T7450] link_path_walk+0xd5e/0x1910 [ 172.453348][ T7450] path_openat+0x1ce/0x1d60 [ 172.453369][ T7450] do_file_open+0x23e/0x4a0 [ 172.453383][ T7450] ? __pfx_do_file_open+0x10/0x10 [ 172.453406][ T7450] ? alloc_fd+0x654/0x6d0 [ 172.453421][ T7450] do_sys_openat2+0x115/0x200 [ 172.453435][ T7450] ? __se_sys_futex+0x3a8/0x450 [ 172.453445][ T7450] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.453461][ T7450] ? rcu_is_watching+0x16/0xb0 [ 172.453477][ T7450] __x64_sys_openat+0x138/0x170 [ 172.453494][ T7450] do_syscall_64+0x166/0x520 [ 172.453507][ T7450] ? trace_irq_disable+0x3b/0x140 [ 172.453520][ T7450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.453530][ T7450] ? clear_bhb_loop+0x70/0xc0 [ 172.453541][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.453551][ T7450] RIP: 0033:0x7f94ab82e98e [ 172.453561][ T7450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.453569][ T7450] RSP: 002b:00007f94a9ac5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.453581][ T7450] RAX: ffffffffffffffda RBX: 00007f94a9ac66c0 RCX: 00007f94ab82e98e [ 172.453588][ T7450] RDX: 0000000000000002 RSI: 00007f94a9ac5f90 RDI: ffffffffffffff9c [ 172.453594][ T7450] RBP: 00007f94ab90506b R08: 0000000000000000 R09: 0000000000000000 [ 172.453600][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.453605][ T7450] R13: 00007f94abaf6038 R14: 00007f94abaf5fa0 R15: 00007ffd39bf3188 [ 172.453620][ T7450] [ 172.685862][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.828216][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 173.084714][ T4898] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 173.084736][ T4898] CPU: 0 UID: 0 PID: 4898 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.084752][ T4898] Tainted: [L]=SOFTLOCKUP [ 173.084755][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.084762][ T4898] Workqueue: hci4 hci_rx_work [ 173.084780][ T4898] Call Trace: [ 173.084785][ T4898] [ 173.084793][ T4898] dump_stack_lvl+0xe8/0x150 [ 173.084810][ T4898] sysfs_create_dir_ns+0x271/0x2a0 [ 173.084824][ T4898] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 173.084839][ T4898] ? rt_spin_unlock+0x165/0x200 [ 173.084853][ T4898] kobject_add_internal+0x62c/0xce0 [ 173.084868][ T4898] kobject_add+0x163/0x240 [ 173.084877][ T4898] ? rt_spin_unlock+0x159/0x200 [ 173.084891][ T4898] ? __pfx_kobject_add+0x10/0x10 [ 173.084905][ T4898] ? get_device_parent+0x370/0x3a0 [ 173.084921][ T4898] device_add+0x3fa/0xb80 [ 173.084943][ T4898] hci_conn_add_sysfs+0xd5/0x210 [ 173.084957][ T4898] le_conn_complete_evt+0xfe3/0x16d0 [ 173.084976][ T4898] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 173.084991][ T4898] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.085005][ T4898] ? rt_mutex_slowunlock+0x219/0x460 [ 173.085016][ T4898] ? skb_pull_data+0xf0/0x200 [ 173.085030][ T4898] hci_le_conn_complete_evt+0x187/0x470 [ 173.085047][ T4898] hci_event_packet+0x67a/0xf10 [ 173.085058][ T4898] ? reacquire_held_locks+0x117/0x1a0 [ 173.085075][ T4898] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 173.085087][ T4898] ? __pfx_hci_event_packet+0x10/0x10 [ 173.085098][ T4898] ? rt_spin_unlock+0x159/0x200 [ 173.085113][ T4898] ? hci_send_to_monitor+0xe2/0x590 [ 173.085129][ T4898] hci_rx_work+0x3ee/0x1020 [ 173.085144][ T4898] ? process_scheduled_works+0x97a/0x1630 [ 173.085158][ T4898] process_scheduled_works+0xc3d/0x1630 [ 173.085187][ T4898] ? __pfx_process_scheduled_works+0x10/0x10 [ 173.085204][ T4898] ? assign_work+0x3cf/0x5d0 [ 173.085219][ T4898] worker_thread+0xa47/0xfb0 [ 173.085247][ T4898] kthread+0x38b/0x470 [ 173.085257][ T4898] ? __pfx_worker_thread+0x10/0x10 [ 173.085269][ T4898] ? __pfx_kthread+0x10/0x10 [ 173.085279][ T4898] ret_from_fork+0x514/0xb70 [ 173.085291][ T4898] ? __pfx_ret_from_fork+0x10/0x10 [ 173.085301][ T4898] ? __switch_to+0xc89/0x1420 [ 173.085319][ T4898] ? __pfx_kthread+0x10/0x10 [ 173.085329][ T4898] ret_from_fork_asm+0x1a/0x30 [ 173.085348][ T4898] [ 173.085379][ T4898] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.085402][ T4898] Bluetooth: hci4: failed to register connection device [ 173.098040][ T4898] Bluetooth: hci4: link tx timeout [ 173.098222][ T4898] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 173.098610][ T4898] Bluetooth: hci4: link tx timeout [ 173.098618][ T4898] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.447777][ T7475] FAULT_INJECTION: forcing a failure. [ 173.447777][ T7475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.447802][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.2.683 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.447819][ T7475] Tainted: [L]=SOFTLOCKUP [ 173.447823][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.447829][ T7475] Call Trace: [ 173.447833][ T7475] [ 173.447838][ T7475] dump_stack_lvl+0xe8/0x150 [ 173.447857][ T7475] should_fail_ex+0x46b/0x600 [ 173.447874][ T7475] prepare_alloc_pages+0x223/0x650 [ 173.447900][ T7475] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 173.447917][ T7475] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.447933][ T7475] ? __pfx_policy_nodemask+0x10/0x10 [ 173.447951][ T7475] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 173.447965][ T7475] alloc_pages_mpol+0xd4/0x280 [ 173.447977][ T7475] alloc_pages_noprof+0xd2/0x2f0 [ 173.447988][ T7475] get_free_pages_noprof+0xf/0x80 [ 173.448001][ T7475] __kasan_populate_vmalloc+0x38/0x1c0 [ 173.448015][ T7475] ? rt_spin_unlock+0x165/0x200 [ 173.448027][ T7475] alloc_vmap_area+0xd1a/0x1420 [ 173.448048][ T7475] ? __pfx_alloc_vmap_area+0x10/0x10 [ 173.448059][ T7475] ? __get_vm_area_node+0x155/0x2f0 [ 173.448073][ T7475] __get_vm_area_node+0x200/0x2f0 [ 173.448087][ T7475] __vmalloc_node_range_noprof+0x343/0x1540 [ 173.448100][ T7475] ? copy_process+0x820/0x43f0 [ 173.448125][ T7475] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.448137][ T7475] ? rcu_is_watching+0x16/0xb0 [ 173.448152][ T7475] ? memcpy_and_pad+0x48/0x80 [ 173.448165][ T7475] __vmalloc_node_noprof+0xc2/0x100 [ 173.448176][ T7475] ? copy_process+0x820/0x43f0 [ 173.448187][ T7475] ? copy_process+0x820/0x43f0 [ 173.448200][ T7475] dup_task_struct+0x2c6/0xa00 [ 173.448213][ T7475] ? rt_spin_unlock+0x165/0x200 [ 173.448224][ T7475] copy_process+0x820/0x43f0 [ 173.448238][ T7475] ? futex_unqueue+0x22/0x240 [ 173.448255][ T7475] ? lock_acquire+0x115/0x350 [ 173.448274][ T7475] ? __pfx_copy_process+0x10/0x10 [ 173.448288][ T7475] ? _copy_from_user+0x94/0xb0 [ 173.448304][ T7475] kernel_clone+0x2d2/0x8d0 [ 173.448319][ T7475] ? __pfx_kernel_clone+0x10/0x10 [ 173.448330][ T7475] ? futex_wait+0x2a2/0x390 [ 173.448350][ T7475] __se_sys_clone3+0x33c/0x360 [ 173.448365][ T7475] ? __pfx___se_sys_clone3+0x10/0x10 [ 173.448377][ T7475] ? do_futex+0x3e7/0x4e0 [ 173.448408][ T7475] do_syscall_64+0x166/0x520 [ 173.448420][ T7475] ? trace_irq_disable+0x3b/0x140 [ 173.448431][ T7475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.448441][ T7475] ? clear_bhb_loop+0x70/0xc0 [ 173.448453][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.448462][ T7475] RIP: 0033:0x7f58f427e159 [ 173.448472][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.448481][ T7475] RSP: 002b:00007f58f24d5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 173.448492][ T7475] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f58f427e159 [ 173.448499][ T7475] RDX: 00007f58f24d5f10 RSI: 0000000000000058 RDI: 00007f58f24d5f10 [ 173.448505][ T7475] RBP: 00007f58f431506b R08: 0000000000000000 R09: 0000000000000058 [ 173.448512][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.448517][ T7475] R13: 00007f58f4506038 R14: 00007f58f4505fa0 R15: 00007ffd50feab18 [ 173.448533][ T7475] [ 173.448847][ T7475] syz.2.683: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 173.449057][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.2.683 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.449071][ T7475] Tainted: [L]=SOFTLOCKUP [ 173.449076][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.449081][ T7475] Call Trace: [ 173.449085][ T7475] [ 173.449090][ T7475] dump_stack_lvl+0xe8/0x150 [ 173.449108][ T7475] warn_alloc+0x24d/0x270 [ 173.449125][ T7475] ? lockdep_hardirqs_on+0x7b/0x110 [ 173.449141][ T7475] ? __pfx_warn_alloc+0x10/0x10 [ 173.449152][ T7475] ? kfree+0x1c5/0x6d0 [ 173.449169][ T7475] ? __get_vm_area_node+0x219/0x2f0 [ 173.449184][ T7475] __vmalloc_node_range_noprof+0x36b/0x1540 [ 173.449211][ T7475] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.449222][ T7475] ? rcu_is_watching+0x16/0xb0 [ 173.449238][ T7475] ? memcpy_and_pad+0x48/0x80 [ 173.449250][ T7475] __vmalloc_node_noprof+0xc2/0x100 [ 173.449262][ T7475] ? copy_process+0x820/0x43f0 [ 173.449273][ T7475] ? copy_process+0x820/0x43f0 [ 173.449286][ T7475] dup_task_struct+0x2c6/0xa00 [ 173.449298][ T7475] ? rt_spin_unlock+0x165/0x200 [ 173.449310][ T7475] copy_process+0x820/0x43f0 [ 173.449324][ T7475] ? futex_unqueue+0x22/0x240 [ 173.449341][ T7475] ? lock_acquire+0x115/0x350 [ 173.449360][ T7475] ? __pfx_copy_process+0x10/0x10 [ 173.449374][ T7475] ? _copy_from_user+0x94/0xb0 [ 173.449390][ T7475] kernel_clone+0x2d2/0x8d0 [ 173.449404][ T7475] ? __pfx_kernel_clone+0x10/0x10 [ 173.449416][ T7475] ? futex_wait+0x2a2/0x390 [ 173.449436][ T7475] __se_sys_clone3+0x33c/0x360 [ 173.449451][ T7475] ? __pfx___se_sys_clone3+0x10/0x10 [ 173.449463][ T7475] ? do_futex+0x3e7/0x4e0 [ 173.449493][ T7475] do_syscall_64+0x166/0x520 [ 173.449506][ T7475] ? trace_irq_disable+0x3b/0x140 [ 173.449517][ T7475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.449527][ T7475] ? clear_bhb_loop+0x70/0xc0 [ 173.449539][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.449548][ T7475] RIP: 0033:0x7f58f427e159 [ 173.449558][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.449565][ T7475] RSP: 002b:00007f58f24d5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 173.449575][ T7475] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f58f427e159 [ 173.449582][ T7475] RDX: 00007f58f24d5f10 RSI: 0000000000000058 RDI: 00007f58f24d5f10 [ 173.449588][ T7475] RBP: 00007f58f431506b R08: 0000000000000000 R09: 0000000000000058 [ 173.449594][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.449599][ T7475] R13: 00007f58f4506038 R14: 00007f58f4505fa0 R15: 00007ffd50feab18 [ 173.449614][ T7475] [ 173.463851][ T7475] Mem-Info: [ 173.463862][ T7475] active_anon:184 inactive_anon:6108 isolated_anon:0 [ 173.463862][ T7475] active_file:13933 inactive_file:44329 isolated_file:0 [ 173.463862][ T7475] unevictable:0 dirty:1066 writeback:0 [ 173.463862][ T7475] slab_reclaimable:11528 slab_unreclaimable:100914 [ 173.463862][ T7475] mapped:30050 shmem:520 pagetables:1340 [ 173.463862][ T7475] sec_pagetables:0 bounce:0 [ 173.463862][ T7475] kernel_misc_reclaimable:0 [ 173.463862][ T7475] free:1312619 free_pcp:3174 free_cma:0 [ 173.463900][ T7475] Node 0 active_anon:736kB inactive_anon:24432kB active_file:55536kB inactive_file:177316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120200kB dirty:4264kB writeback:0kB shmem:2080kB kernel_stack:12864kB pagetables:5200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.463925][ T7475] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:96kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 173.463949][ T7475] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.463979][ T7475] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 173.463998][ T7475] Node 0 DMA32 free:1307300kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:736kB inactive_anon:24432kB active_file:55536kB inactive_file:177316kB unevictable:0kB writepending:4264kB zspages:0kB present:3129332kB managed:2559152kB mlocked:0kB bounce:0kB free_pcp:12684kB local_pcp:12684kB free_cma:0kB [ 173.464028][ T7475] lowmem_reserve[]: 0 0 1 1 1 [ 173.464045][ T7475] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 173.464071][ T7475] lowmem_reserve[]: 0 0 0 0 0 [ 173.464087][ T7475] Node 1 Normal free:3927816kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.464114][ T7475] lowmem_reserve[]: 0 0 0 0 0 [ 173.464131][ T7475] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.464193][ T7475] Node 0 DMA32: 1003*4kB (UM) 237*8kB (UM) 133*16kB (UM) 664*32kB (UME) 207*64kB (UME) 97*128kB (UME) 44*256kB (UM) 16*512kB (M) 8*1024kB (UM) 2*2048kB (ME) 298*4096kB (UM) = 1307300kB [ 173.464271][ T7475] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 173.464319][ T7475] Node 1 Normal: 6*4kB (UM) 8*8kB (UM) 5*16kB (UM) 13*32kB (UM) 7*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3927816kB [ 173.464399][ T7475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.464408][ T7475] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.464415][ T7475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.464422][ T7475] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.464430][ T7475] 58778 total pagecache pages [ 173.464436][ T7475] 0 pages in swap cache [ 173.464440][ T7475] Free swap = 124996kB [ 173.464443][ T7475] Total swap = 124996kB [ 173.464447][ T7475] 2097051 pages RAM [ 173.464451][ T7475] 0 pages HighMem/MovableOnly [ 173.464454][ T7475] 425194 pages reserved [ 173.464458][ T7475] 0 pages cma reserved [ 173.726419][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.382448][ T7497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.765877][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.767422][ T7506] netlink: 252 bytes leftover after parsing attributes in process `syz.2.695'. [ 174.992894][ T7512] use of bytesused == 0 is deprecated and will be removed in the future, [ 174.992905][ T7512] use the actual size instead. [ 175.166721][ T5590] Bluetooth: hci4: command 0x0406 tx timeout [ 175.612878][ T7531] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.805885][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.816532][ T7540] netlink: 'syz.3.710': attribute type 5 has an invalid length. [ 175.816544][ T7540] netlink: 'syz.3.710': attribute type 9 has an invalid length. [ 175.816551][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 176.275852][ T5591] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.426467][ T5591] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 176.436545][ T5591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.436561][ T5591] usb 4-1: Product: syz [ 176.436568][ T5591] usb 4-1: Manufacturer: syz [ 176.436583][ T5591] usb 4-1: SerialNumber: syz [ 176.546859][ T5591] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 176.614818][ T5591] scsi host1: usb-storage 4-1:1.0 [ 176.644256][ T7560] CIFS: Attempting to mount //127.0.0.1/share [ 176.846661][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.133007][ T5591] ums_eneub6250: This driver only supports SD/MS cards. It does not support SM cards. [ 177.329728][ T5590] Bluetooth: hci4: command 0x0406 tx timeout [ 177.368494][ T5591] usb 4-1: USB disconnect, device number 9 [ 177.528314][ T7560] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 177.579428][ T7560] ------------[ cut here ]------------ [ 177.579438][ T7560] server->in_flight == 0 [ 177.579448][ T7560] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x125b/0x2b90, CPU#0: syz.2.718/7560 [ 182.251693][ T7560] Modules linked in: [ 182.255578][ T7560] CPU: 0 UID: 0 PID: 7560 Comm: syz.2.718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 182.266876][ T7560] Tainted: [L]=SOFTLOCKUP [ 182.271176][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.281234][ T7560] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 182.287048][ T7560] Code: de 83 e6 01 31 ff e8 44 cd c1 fe f6 c3 01 75 0a e8 2a c8 c1 fe e9 22 13 00 00 0f 1f 44 00 00 e8 1b c8 c1 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 1c dc 96 0c 01 0f 85 9e 03 00 00 e8 00 c8 c1 fe 49 [ 182.306656][ T7560] RSP: 0018:ffffc9000464f238 EFLAGS: 00010246 [ 182.312701][ T7560] RAX: ffffffff8304c4ce RBX: 1ffff11007c91489 RCX: ffff888024c0ddc0 [ 182.320679][ T7560] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.328650][ T7560] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 182.336618][ T7560] R10: dffffc0000000000 R11: ffffffff8304f240 R12: ffff88803e48a448 [ 182.344581][ T7560] R13: ffffc9000464f450 R14: ffff88803e48a000 R15: 0000000000000000 [ 182.352558][ T7560] FS: 00007f58f24d66c0(0000) GS:ffff888125bcb000(0000) knlGS:0000000000000000 [ 182.361482][ T7560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.368059][ T7560] CR2: 00007ffd39bf1da0 CR3: 0000000040568000 CR4: 00000000003526f0 [ 182.376041][ T7560] Call Trace: [ 182.379300][ T7560] [ 182.382216][ T7560] compound_send_recv+0x13ba/0x2b90 [ 182.387427][ T7560] ? __pfx_compound_send_recv+0x10/0x10 [ 182.392947][ T7560] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.397983][ T7560] ? rt_spin_unlock+0x159/0x200 [ 182.402818][ T7560] ? rt_spin_unlock+0x165/0x200 [ 182.407668][ T7560] cifs_send_recv+0x42/0x60 [ 182.412170][ T7560] SMB2_negotiate+0x164d/0x4030 [ 182.417038][ T7560] ? __pfx_SMB2_negotiate+0x10/0x10 [ 182.422224][ T7560] ? rt_spin_unlock+0x159/0x200 [ 182.427081][ T7560] cifs_negotiate_protocol+0x286/0x680 [ 182.432520][ T7560] cifs_get_smb_ses+0x1104/0x1ff0 [ 182.437552][ T7560] cifs_mount_get_session+0xf1/0x450 [ 182.442817][ T7560] dfs_mount_share+0x22e/0x9a0 [ 182.447585][ T7560] cifs_mount+0xcc/0xc00 [ 182.451809][ T7560] ? rt_spin_unlock+0x159/0x200 [ 182.456651][ T7560] ? __pfx_cifs_mount+0x10/0x10 [ 182.461481][ T7560] ? smb3_update_mnt_flags+0x2e8/0x420 [ 182.466936][ T7560] ? cifs_setup_cifs_sb+0x5ef/0x910 [ 182.472135][ T7560] cifs_smb3_do_mount+0x2e2/0x8c0 [ 182.477189][ T7560] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 182.482717][ T7560] ? mutex_lock_nested+0x152/0x1d0 [ 182.487828][ T7560] ? smb3_get_tree+0x2bf/0x400 [ 182.492572][ T7560] smb3_get_tree+0x2dd/0x400 [ 182.497164][ T7560] vfs_get_tree+0x92/0x2a0 [ 182.501559][ T7560] do_new_mount+0x319/0xdc0 [ 182.506063][ T7560] ? cap_capable+0x123/0x460 [ 182.510638][ T7560] ? __pfx_do_new_mount+0x10/0x10 [ 182.515640][ T7560] ? ns_capable+0x89/0xe0 [ 182.519971][ T7560] ? path_mount+0x647/0x1050 [ 182.524545][ T7560] ? user_path_at+0xd4/0x160 [ 182.529148][ T7560] __se_sys_mount+0x31d/0x420 [ 182.533808][ T7560] ? __pfx___se_sys_mount+0x10/0x10 [ 182.539013][ T7560] ? __x64_sys_mount+0x20/0xc0 [ 182.543754][ T7560] do_syscall_64+0x166/0x520 [ 182.548343][ T7560] ? trace_irq_disable+0x3b/0x140 [ 182.553344][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.559404][ T7560] ? clear_bhb_loop+0x70/0xc0 [ 182.564057][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.569944][ T7560] RIP: 0033:0x7f58f427e159 [ 182.574336][ T7560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.593951][ T7560] RSP: 002b:00007f58f24d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 182.602363][ T7560] RAX: ffffffffffffffda RBX: 00007f58f4505fa0 RCX: 00007f58f427e159 [ 182.610331][ T7560] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 182.618302][ T7560] RBP: 00007f58f431506b R08: 0000200000000400 R09: 0000000000000000 [ 182.626268][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.634215][ T7560] R13: 00007f58f4506038 R14: 00007f58f4505fa0 R15: 00007ffd50feab18 [ 182.642223][ T7560] [ 182.645318][ T7560] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.652576][ T7560] CPU: 0 UID: 0 PID: 7560 Comm: syz.2.718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 182.663829][ T7560] Tainted: [L]=SOFTLOCKUP [ 182.668126][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.678156][ T7560] Call Trace: [ 182.681418][ T7560] [ 182.684327][ T7560] vpanic+0x56d/0xa60 [ 182.688286][ T7560] ? __pfx__printk+0x10/0x10 [ 182.692859][ T7560] ? __pfx_vpanic+0x10/0x10 [ 182.697338][ T7560] ? is_bpf_text_address+0x292/0x2b0 [ 182.702601][ T7560] ? is_bpf_text_address+0x26/0x2b0 [ 182.707780][ T7560] panic+0xc5/0xd0 [ 182.711479][ T7560] ? __pfx_panic+0x10/0x10 [ 182.715877][ T7560] __warn+0x315/0x4c0 [ 182.719833][ T7560] ? smb2_add_credits+0x125b/0x2b90 [ 182.725046][ T7560] ? smb2_add_credits+0x125b/0x2b90 [ 182.730235][ T7560] __report_bug+0x276/0x570 [ 182.734718][ T7560] ? smb2_add_credits+0x125b/0x2b90 [ 182.739894][ T7560] ? __pfx___report_bug+0x10/0x10 [ 182.744895][ T7560] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 182.750768][ T7560] ? lock_acquire+0x115/0x350 [ 182.755422][ T7560] ? smb2_add_credits+0x125b/0x2b90 [ 182.760606][ T7560] report_bug+0x16b/0x220 [ 182.764913][ T7560] ? smb2_add_credits+0x125b/0x2b90 [ 182.770092][ T7560] ? smb2_add_credits+0x125d/0x2b90 [ 182.775265][ T7560] handle_bug+0x9c/0x200 [ 182.779481][ T7560] exc_invalid_op+0x1a/0x50 [ 182.783957][ T7560] asm_exc_invalid_op+0x1a/0x20 [ 182.788787][ T7560] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 182.794569][ T7560] Code: de 83 e6 01 31 ff e8 44 cd c1 fe f6 c3 01 75 0a e8 2a c8 c1 fe e9 22 13 00 00 0f 1f 44 00 00 e8 1b c8 c1 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 1c dc 96 0c 01 0f 85 9e 03 00 00 e8 00 c8 c1 fe 49 [ 182.814166][ T7560] RSP: 0018:ffffc9000464f238 EFLAGS: 00010246 [ 182.820227][ T7560] RAX: ffffffff8304c4ce RBX: 1ffff11007c91489 RCX: ffff888024c0ddc0 [ 182.828175][ T7560] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.836134][ T7560] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 182.844080][ T7560] R10: dffffc0000000000 R11: ffffffff8304f240 R12: ffff88803e48a448 [ 182.852026][ T7560] R13: ffffc9000464f450 R14: ffff88803e48a000 R15: 0000000000000000 [ 182.859980][ T7560] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 182.865856][ T7560] ? smb2_add_credits+0x3fe/0x2b90 [ 182.870948][ T7560] ? smb2_add_credits+0x3fe/0x2b90 [ 182.876047][ T7560] compound_send_recv+0x13ba/0x2b90 [ 182.881232][ T7560] ? __pfx_compound_send_recv+0x10/0x10 [ 182.886749][ T7560] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.891765][ T7560] ? rt_spin_unlock+0x159/0x200 [ 182.896610][ T7560] ? rt_spin_unlock+0x165/0x200 [ 182.901438][ T7560] cifs_send_recv+0x42/0x60 [ 182.906014][ T7560] SMB2_negotiate+0x164d/0x4030 [ 182.910862][ T7560] ? __pfx_SMB2_negotiate+0x10/0x10 [ 182.916045][ T7560] ? rt_spin_unlock+0x159/0x200 [ 182.920877][ T7560] cifs_negotiate_protocol+0x286/0x680 [ 182.926315][ T7560] cifs_get_smb_ses+0x1104/0x1ff0 [ 182.931323][ T7560] cifs_mount_get_session+0xf1/0x450 [ 182.936593][ T7560] dfs_mount_share+0x22e/0x9a0 [ 182.941342][ T7560] cifs_mount+0xcc/0xc00 [ 182.945564][ T7560] ? rt_spin_unlock+0x159/0x200 [ 182.950396][ T7560] ? __pfx_cifs_mount+0x10/0x10 [ 182.955222][ T7560] ? smb3_update_mnt_flags+0x2e8/0x420 [ 182.960658][ T7560] ? cifs_setup_cifs_sb+0x5ef/0x910 [ 182.965832][ T7560] cifs_smb3_do_mount+0x2e2/0x8c0 [ 182.970839][ T7560] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 182.976367][ T7560] ? mutex_lock_nested+0x152/0x1d0 [ 182.981463][ T7560] ? smb3_get_tree+0x2bf/0x400 [ 182.986203][ T7560] smb3_get_tree+0x2dd/0x400 [ 182.990856][ T7560] vfs_get_tree+0x92/0x2a0 [ 182.995248][ T7560] do_new_mount+0x319/0xdc0 [ 182.999734][ T7560] ? cap_capable+0x123/0x460 [ 183.004302][ T7560] ? __pfx_do_new_mount+0x10/0x10 [ 183.009301][ T7560] ? ns_capable+0x89/0xe0 [ 183.013610][ T7560] ? path_mount+0x647/0x1050 [ 183.018176][ T7560] ? user_path_at+0xd4/0x160 [ 183.022740][ T7560] __se_sys_mount+0x31d/0x420 [ 183.027408][ T7560] ? __pfx___se_sys_mount+0x10/0x10 [ 183.032617][ T7560] ? __x64_sys_mount+0x20/0xc0 [ 183.037464][ T7560] do_syscall_64+0x166/0x520 [ 183.042064][ T7560] ? trace_irq_disable+0x3b/0x140 [ 183.047070][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.053114][ T7560] ? clear_bhb_loop+0x70/0xc0 [ 183.057783][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.063651][ T7560] RIP: 0033:0x7f58f427e159 [ 183.068066][ T7560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.087646][ T7560] RSP: 002b:00007f58f24d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.096052][ T7560] RAX: ffffffffffffffda RBX: 00007f58f4505fa0 RCX: 00007f58f427e159 [ 183.104008][ T7560] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 183.111960][ T7560] RBP: 00007f58f431506b R08: 0000200000000400 R09: 0000000000000000 [ 183.119916][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.127877][ T7560] R13: 00007f58f4506038 R14: 00007f58f4505fa0 R15: 00007ffd50feab18 [ 183.135837][ T7560] [ 183.138918][ T7560] Kernel Offset: disabled [ 183.143244][ T7560] Rebooting in 86400 seconds..