last executing test programs: 2.829863813s ago: executing program 0 (id=317): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) recvmmsg$auto(0x3, 0x0, 0x10000, 0xffe, 0x0) 2.65214906s ago: executing program 0 (id=321): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x02', 0x80000002) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 1.59547416s ago: executing program 1 (id=332): socket(0x28, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 1.330108334s ago: executing program 1 (id=335): socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xfa3, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) 1.218533013s ago: executing program 3 (id=336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_MS_ADDRESS={0x8}, @GTPA_VERSION={0x8, 0x2, 0xd}, @GTPA_LINK={0x8, 0x1, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x80) 1.139750106s ago: executing program 1 (id=337): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24020000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf251400000005001900090000000800140040"], 0x24}, 0x1, 0x0, 0x0, 0x44845}, 0x20000041) r0 = socket(0xa, 0x2, 0x3a) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r0, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) 1.065390383s ago: executing program 3 (id=338): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b47, 0x1) 886.901742ms ago: executing program 3 (id=340): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) fcntl$auto(0xff80000000000000, 0x409, 0x13) mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x11, 0x8000000000000000, 0x8000) 858.733019ms ago: executing program 2 (id=341): close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x17) 734.942295ms ago: executing program 2 (id=342): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000", @ANYBLOB="7600279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfc2, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 686.790391ms ago: executing program 3 (id=343): mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x45, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 591.183968ms ago: executing program 0 (id=344): close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ppoll$auto(&(0x7f0000000000)={r0, 0xf25f}, 0x5, 0x0, 0x0, 0x8) 572.313476ms ago: executing program 2 (id=345): r0 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x8000000028000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 518.332264ms ago: executing program 1 (id=346): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_HUGEPAGE(0x0, 0x80000001, 0xe) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x4f20, 0x0, 0x5, 0x7) 464.315077ms ago: executing program 0 (id=347): socket(0x2a, 0x2, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYBLOB="01", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) recvfrom$auto(r0, &(0x7f0000000000), 0xfffffffffffffff5, 0xaa, 0x0, 0x0) 438.984741ms ago: executing program 3 (id=348): mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x5393, r0) 334.385853ms ago: executing program 0 (id=349): r0 = socket(0x2, 0x1, 0x106) setreuid$auto(0xffffffffffffffff, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4) 329.991097ms ago: executing program 1 (id=350): memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) 250.841697ms ago: executing program 3 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdc00, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) 246.840913ms ago: executing program 2 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) 128.588027ms ago: executing program 0 (id=353): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002) 104.284324ms ago: executing program 1 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x203, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_LINK={0x8, 0x1, 0x1}, @GTPA_VERSION={0x8, 0x2, 0xdcd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 44.491071ms ago: executing program 2 (id=355): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) 0s ago: executing program 2 (id=356): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x92106401, r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 80.892899][ T5824] cgroup: Unknown subsys name 'net' [ 81.080961][ T5824] cgroup: Unknown subsys name 'cpuset' [ 81.090096][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.548116][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.544181][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.552219][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.560112][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.569824][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.573158][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.578083][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.592192][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.601123][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.608429][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.609049][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.623091][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.630368][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.639547][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.643542][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.654487][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.665198][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.673547][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.680668][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.689607][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.698274][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.150922][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 85.238792][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 85.344412][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 85.364392][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.470200][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.478116][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.485572][ T5834] bridge_slave_0: entered allmulticast mode [ 85.492901][ T5834] bridge_slave_0: entered promiscuous mode [ 85.528431][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.535723][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.543699][ T5834] bridge_slave_1: entered allmulticast mode [ 85.550789][ T5834] bridge_slave_1: entered promiscuous mode [ 85.569131][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.576276][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.583857][ T5838] bridge_slave_0: entered allmulticast mode [ 85.590982][ T5838] bridge_slave_0: entered promiscuous mode [ 85.618594][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.625780][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.633216][ T5838] bridge_slave_1: entered allmulticast mode [ 85.640216][ T5838] bridge_slave_1: entered promiscuous mode [ 85.685468][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.726178][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.744323][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.751607][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.758939][ T5835] bridge_slave_0: entered allmulticast mode [ 85.765961][ T5835] bridge_slave_0: entered promiscuous mode [ 85.775518][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.794765][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.802024][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.809970][ T5836] bridge_slave_0: entered allmulticast mode [ 85.817231][ T5836] bridge_slave_0: entered promiscuous mode [ 85.824588][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.831918][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.839174][ T5835] bridge_slave_1: entered allmulticast mode [ 85.846162][ T5835] bridge_slave_1: entered promiscuous mode [ 85.854679][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.874164][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.881314][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.888874][ T5836] bridge_slave_1: entered allmulticast mode [ 85.895883][ T5836] bridge_slave_1: entered promiscuous mode [ 85.924226][ T5834] team0: Port device team_slave_0 added [ 85.963252][ T5834] team0: Port device team_slave_1 added [ 85.981773][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.992765][ T5838] team0: Port device team_slave_0 added [ 86.011117][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.022928][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.033583][ T5838] team0: Port device team_slave_1 added [ 86.052678][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.083046][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.090118][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.116820][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.168698][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.175659][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.202193][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.224479][ T5835] team0: Port device team_slave_0 added [ 86.231193][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.238293][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.264639][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.288393][ T5836] team0: Port device team_slave_0 added [ 86.296728][ T5835] team0: Port device team_slave_1 added [ 86.303521][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.310575][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.337055][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.350427][ T5836] team0: Port device team_slave_1 added [ 86.429856][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.436841][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.463128][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.475988][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.483468][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.509522][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.525782][ T5834] hsr_slave_0: entered promiscuous mode [ 86.532800][ T5834] hsr_slave_1: entered promiscuous mode [ 86.539991][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.547019][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.573808][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.604290][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.611445][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.637928][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.666746][ T5838] hsr_slave_0: entered promiscuous mode [ 86.673095][ T5838] hsr_slave_1: entered promiscuous mode [ 86.678304][ T5844] Bluetooth: hci1: command tx timeout [ 86.679597][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 86.690036][ T5838] Cannot create hsr debugfs directory [ 86.747593][ T5844] Bluetooth: hci3: command tx timeout [ 86.747628][ T5157] Bluetooth: hci0: command tx timeout [ 86.759418][ T5851] Bluetooth: hci2: command tx timeout [ 86.827761][ T5835] hsr_slave_0: entered promiscuous mode [ 86.834544][ T5835] hsr_slave_1: entered promiscuous mode [ 86.841245][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 86.847654][ T5835] Cannot create hsr debugfs directory [ 86.895435][ T5836] hsr_slave_0: entered promiscuous mode [ 86.903266][ T5836] hsr_slave_1: entered promiscuous mode [ 86.910343][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 86.916110][ T5836] Cannot create hsr debugfs directory [ 87.367927][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.381474][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.405579][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.416031][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.468577][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.492135][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.510516][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.532874][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.620533][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.635720][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.648914][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.660418][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.761896][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.782964][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.793482][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.814765][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.871926][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.934999][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.955145][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.985837][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.993222][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.017004][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.030545][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.037738][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.060148][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.067362][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.090420][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.113564][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.120778][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.161135][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.201135][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.208409][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.247453][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.254621][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.291696][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.370931][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.413357][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.421551][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.491332][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.498618][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.620341][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.762568][ T5157] Bluetooth: hci1: command tx timeout [ 88.804079][ T5834] veth0_vlan: entered promiscuous mode [ 88.821946][ T5834] veth1_vlan: entered promiscuous mode [ 88.828741][ T5851] Bluetooth: hci2: command tx timeout [ 88.834261][ T5157] Bluetooth: hci0: command tx timeout [ 88.840900][ T5851] Bluetooth: hci3: command tx timeout [ 88.916334][ T5834] veth0_macvtap: entered promiscuous mode [ 88.942720][ T5834] veth1_macvtap: entered promiscuous mode [ 88.976616][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.044923][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.070595][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.086323][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.110942][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.118463][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.128984][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.138889][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.152744][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.207080][ T5838] veth0_vlan: entered promiscuous mode [ 89.254450][ T5838] veth1_vlan: entered promiscuous mode [ 89.322625][ T5836] veth0_vlan: entered promiscuous mode [ 89.347685][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.362026][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.385769][ T5835] veth0_vlan: entered promiscuous mode [ 89.394065][ T5836] veth1_vlan: entered promiscuous mode [ 89.430176][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.446250][ T5835] veth1_vlan: entered promiscuous mode [ 89.454103][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.476775][ T5838] veth0_macvtap: entered promiscuous mode [ 89.517020][ T5838] veth1_macvtap: entered promiscuous mode [ 89.530210][ T5836] veth0_macvtap: entered promiscuous mode [ 89.548196][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.563605][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.583488][ T5836] veth1_macvtap: entered promiscuous mode [ 89.595194][ T5835] veth0_macvtap: entered promiscuous mode [ 89.612994][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.655570][ T5835] veth1_macvtap: entered promiscuous mode [ 89.704605][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.718931][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.729933][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.746041][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.755564][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.770151][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.786914][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.826827][ T1106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.845404][ T1106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.855563][ T1106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.882840][ T1106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.937888][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.021488][ T1106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.033201][ T1106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.055802][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.072728][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.137454][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.146156][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.224782][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.270088][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.278171][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.286330][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.371959][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.380674][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.483716][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.533196][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.560812][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.568764][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.828966][ T5851] Bluetooth: hci1: command tx timeout [ 90.907698][ T5157] Bluetooth: hci0: command tx timeout [ 90.908102][ T5844] Bluetooth: hci2: command tx timeout [ 90.913338][ T5851] Bluetooth: hci3: command tx timeout [ 91.960721][ T9] cfg80211: failed to load regulatory.db [ 92.031556][ T5983] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.907585][ T5851] Bluetooth: hci1: command tx timeout [ 92.987616][ T5157] Bluetooth: hci0: command tx timeout [ 92.990371][ T5844] Bluetooth: hci2: command tx timeout [ 92.997266][ T5851] Bluetooth: hci3: command tx timeout [ 93.028973][ T6013] sctp: [Deprecated]: syz.0.36 (pid 6013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.028973][ T6013] Use struct sctp_sack_info instead [ 93.244128][ T6021] capability: warning: `syz.1.39' uses 32-bit capabilities (legacy support in use) [ 93.667483][ T6031] FAULT_INJECTION: forcing a failure. [ 93.667483][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 93.721239][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz.1.44 Not tainted syzkaller #0 PREEMPT(full) [ 93.721277][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.721297][ T6031] Call Trace: [ 93.721306][ T6031] [ 93.721316][ T6031] dump_stack_lvl+0x16c/0x1f0 [ 93.721358][ T6031] should_fail_ex+0x512/0x640 [ 93.721384][ T6031] ? __kmalloc_noprof+0xca/0x870 [ 93.721423][ T6031] should_failslab+0xc2/0x120 [ 93.721456][ T6031] __kmalloc_noprof+0xdd/0x870 [ 93.721495][ T6031] ? __lock_acquire+0x433/0x22f0 [ 93.721518][ T6031] ? sk_prot_alloc+0x1a8/0x2a0 [ 93.721556][ T6031] ? sk_prot_alloc+0x1a8/0x2a0 [ 93.721586][ T6031] sk_prot_alloc+0x1a8/0x2a0 [ 93.721620][ T6031] sk_alloc+0x36/0xb80 [ 93.721645][ T6031] pptp_create+0x32/0x340 [ 93.721680][ T6031] pppox_create+0x15c/0x2c0 [ 93.721715][ T6031] __sock_create+0x339/0x8a0 [ 93.721767][ T6031] __sys_socket+0x153/0x2d0 [ 93.721802][ T6031] ? __pfx___sys_socket+0x10/0x10 [ 93.721838][ T6031] ? xfd_validate_state+0x61/0x180 [ 93.721884][ T6031] __x64_sys_socket+0x72/0xb0 [ 93.721916][ T6031] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.721945][ T6031] do_syscall_64+0xcd/0xf80 [ 93.721976][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.722000][ T6031] RIP: 0033:0x7f665fb8f7c9 [ 93.722020][ T6031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.722050][ T6031] RSP: 002b:00007f66609dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 93.722075][ T6031] RAX: ffffffffffffffda RBX: 00007f665fde5fa0 RCX: 00007f665fb8f7c9 [ 93.722093][ T6031] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000018 [ 93.722108][ T6031] RBP: 00007f665fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.722123][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.722139][ T6031] R13: 00007f665fde6038 R14: 00007f665fde5fa0 R15: 00007ffde0da7fd8 [ 93.722175][ T6031] [ 93.978423][ T6037] ovs_: entered promiscuous mode [ 94.550108][ T6052] Zero length message leads to an empty skb [ 97.526576][ T6133] syz.2.88 uses obsolete (PF_INET,SOCK_PACKET) [ 98.290755][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 99.028378][ T6177] zswap: compressor not available [ 99.099601][ T6192] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 99.106382][ T6192] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 99.727315][ T6213] process 'syz.3.122' launched ':,' with NULL argv: empty string added [ 100.408695][ T6239] netlink: 'syz.3.131': attribute type 2 has an invalid length. [ 101.664794][ T6277] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 102.322223][ T6302] netlink: 346 bytes leftover after parsing attributes in process `syz.3.161'. [ 103.266291][ T6330] FAULT_INJECTION: forcing a failure. [ 103.266291][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 103.327245][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.0.172 Not tainted syzkaller #0 PREEMPT(full) [ 103.327281][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.327296][ T6330] Call Trace: [ 103.327304][ T6330] [ 103.327314][ T6330] dump_stack_lvl+0x16c/0x1f0 [ 103.327350][ T6330] should_fail_ex+0x512/0x640 [ 103.327378][ T6330] ? __kmalloc_node_noprof+0xcd/0x890 [ 103.327408][ T6330] should_failslab+0xc2/0x120 [ 103.327444][ T6330] __kmalloc_node_noprof+0xe0/0x890 [ 103.327469][ T6330] ? alloc_slab_obj_exts+0x43/0xf0 [ 103.327502][ T6330] ? alloc_inode+0x86/0x240 [ 103.327530][ T6330] ? alloc_slab_obj_exts+0x43/0xf0 [ 103.327563][ T6330] alloc_slab_obj_exts+0x43/0xf0 [ 103.327598][ T6330] new_slab+0x283/0x360 [ 103.327633][ T6330] ___slab_alloc+0xee7/0x1cd0 [ 103.327669][ T6330] ? sk_prot_alloc+0x60/0x2a0 [ 103.327715][ T6330] ? sk_prot_alloc+0x60/0x2a0 [ 103.327747][ T6330] ? __slab_alloc.constprop.0+0x63/0x110 [ 103.327782][ T6330] __slab_alloc.constprop.0+0x63/0x110 [ 103.327823][ T6330] kmem_cache_alloc_noprof+0x43f/0x720 [ 103.327861][ T6330] ? sk_prot_alloc+0x60/0x2a0 [ 103.327898][ T6330] ? sk_prot_alloc+0x60/0x2a0 [ 103.327927][ T6330] ? find_held_lock+0x2b/0x80 [ 103.327958][ T6330] sk_prot_alloc+0x60/0x2a0 [ 103.328000][ T6330] sk_alloc+0x36/0xb80 [ 103.328028][ T6330] inet6_create+0x381/0x12b0 [ 103.328064][ T6330] ? inet6_create+0x7f/0x12b0 [ 103.328101][ T6330] __sock_create+0x339/0x8a0 [ 103.328141][ T6330] __sys_socket+0x153/0x2d0 [ 103.328176][ T6330] ? __pfx___sys_socket+0x10/0x10 [ 103.328210][ T6330] ? xfd_validate_state+0x61/0x180 [ 103.328245][ T6330] ? __pfx_ksys_write+0x10/0x10 [ 103.328283][ T6330] __x64_sys_socket+0x72/0xb0 [ 103.328316][ T6330] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.328345][ T6330] do_syscall_64+0xcd/0xf80 [ 103.328377][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.328402][ T6330] RIP: 0033:0x7fcda1d8f7c9 [ 103.328423][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.328447][ T6330] RSP: 002b:00007fcda2bae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 103.328472][ T6330] RAX: ffffffffffffffda RBX: 00007fcda1fe5fa0 RCX: 00007fcda1d8f7c9 [ 103.328489][ T6330] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 103.328505][ T6330] RBP: 00007fcda1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.328520][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.328536][ T6330] R13: 00007fcda1fe6038 R14: 00007fcda1fe5fa0 R15: 00007ffc10b445d8 [ 103.328573][ T6330] [ 103.328676][ T6330] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.419643][ T6372] netlink: 338 bytes leftover after parsing attributes in process `syz.3.190'. [ 104.765047][ T6386] random: crng reseeded on system resumption [ 106.256304][ T6436] FAULT_INJECTION: forcing a failure. [ 106.256304][ T6436] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 106.270623][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.2.218 Not tainted syzkaller #0 PREEMPT(full) [ 106.270658][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.270673][ T6436] Call Trace: [ 106.270681][ T6436] [ 106.270691][ T6436] dump_stack_lvl+0x16c/0x1f0 [ 106.270728][ T6436] should_fail_ex+0x512/0x640 [ 106.270761][ T6436] should_fail_alloc_page+0xe7/0x130 [ 106.270798][ T6436] prepare_alloc_pages+0x3c2/0x610 [ 106.270828][ T6436] ? trace_sched_exit_tp+0xd1/0x110 [ 106.270863][ T6436] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 106.270921][ T6436] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.270964][ T6436] ? __lock_acquire+0x433/0x22f0 [ 106.271013][ T6436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.271050][ T6436] ? policy_nodemask+0xea/0x4e0 [ 106.271086][ T6436] alloc_pages_mpol+0x1fb/0x550 [ 106.271120][ T6436] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 106.271148][ T6436] ? __futex_wait+0x24b/0x2f0 [ 106.271182][ T6436] ? __pfx___futex_wait+0x10/0x10 [ 106.271219][ T6436] ___kmalloc_large_node+0xed/0x160 [ 106.271256][ T6436] __kmalloc_large_node_noprof+0x1c/0x70 [ 106.271292][ T6436] __kmalloc_noprof.cold+0xc/0x62 [ 106.271328][ T6436] ? iovec_from_user+0x108/0x140 [ 106.271362][ T6436] ? iovec_from_user+0x108/0x140 [ 106.271387][ T6436] iovec_from_user+0x108/0x140 [ 106.271419][ T6436] __import_iovec+0x88/0x650 [ 106.271464][ T6436] import_iovec+0x86/0xb0 [ 106.271496][ T6436] __do_sys_process_madvise+0x121/0x3c0 [ 106.271532][ T6436] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 106.271565][ T6436] ? __pfx_do_futex+0x10/0x10 [ 106.271626][ T6436] do_syscall_64+0xcd/0xf80 [ 106.271656][ T6436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.271680][ T6436] RIP: 0033:0x7f379ed8f7c9 [ 106.271699][ T6436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.271723][ T6436] RSP: 002b:00007f379fce3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 106.271748][ T6436] RAX: ffffffffffffffda RBX: 00007f379efe5fa0 RCX: 00007f379ed8f7c9 [ 106.271765][ T6436] RDX: 00000000000002e5 RSI: 0000000000000000 RDI: ffffffffffffffff [ 106.271780][ T6436] RBP: 00007f379ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.271796][ T6436] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 106.271811][ T6436] R13: 00007f379efe6038 R14: 00007f379efe5fa0 R15: 00007ffc76e0c708 [ 106.271847][ T6436] [ 106.549787][ T6438] netlink: 334 bytes leftover after parsing attributes in process `syz.1.217'. [ 107.293058][ T5851] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 107.554029][ T6480] hugetlbfs: syz.2.237 (6480): Using mlock ulimits for SHM_HUGETLB is obsolete [ 109.583370][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'. [ 110.856805][ T6593] FAULT_INJECTION: forcing a failure. [ 110.856805][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 110.921997][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.3.285 Not tainted syzkaller #0 PREEMPT(full) [ 110.922033][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.922049][ T6593] Call Trace: [ 110.922057][ T6593] [ 110.922068][ T6593] dump_stack_lvl+0x16c/0x1f0 [ 110.922104][ T6593] should_fail_ex+0x512/0x640 [ 110.922131][ T6593] ? __kmalloc_noprof+0xca/0x870 [ 110.922172][ T6593] should_failslab+0xc2/0x120 [ 110.922206][ T6593] __kmalloc_noprof+0xdd/0x870 [ 110.922241][ T6593] ? sk_prot_alloc+0x1a8/0x2a0 [ 110.922278][ T6593] ? sk_prot_alloc+0x1a8/0x2a0 [ 110.922307][ T6593] sk_prot_alloc+0x1a8/0x2a0 [ 110.922341][ T6593] sk_alloc+0x36/0xb80 [ 110.922368][ T6593] mctp_pf_create+0xe8/0x360 [ 110.922397][ T6593] __sock_create+0x339/0x8a0 [ 110.922437][ T6593] __sys_socket+0x153/0x2d0 [ 110.922472][ T6593] ? __pfx___sys_socket+0x10/0x10 [ 110.922506][ T6593] ? xfd_validate_state+0x61/0x180 [ 110.922541][ T6593] ? __pfx_ksys_write+0x10/0x10 [ 110.922578][ T6593] __x64_sys_socket+0x72/0xb0 [ 110.922611][ T6593] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.922645][ T6593] do_syscall_64+0xcd/0xf80 [ 110.922676][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.922703][ T6593] RIP: 0033:0x7efd9718f7c9 [ 110.922725][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.922753][ T6593] RSP: 002b:00007efd9807f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 110.922778][ T6593] RAX: ffffffffffffffda RBX: 00007efd973e5fa0 RCX: 00007efd9718f7c9 [ 110.922795][ T6593] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 110.922810][ T6593] RBP: 00007efd97213f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.922826][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.922841][ T6593] R13: 00007efd973e6038 R14: 00007efd973e5fa0 R15: 00007ffeacf79768 [ 110.922877][ T6593] [ 111.265256][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 111.796160][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 112.293751][ T6635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.304'. [ 112.475539][ T6639] FAULT_INJECTION: forcing a failure. [ 112.475539][ T6639] name failslab, interval 1, probability 0, space 0, times 0 [ 112.505303][ T6639] CPU: 0 UID: 0 PID: 6639 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(full) [ 112.505341][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.505356][ T6639] Call Trace: [ 112.505365][ T6639] [ 112.505376][ T6639] dump_stack_lvl+0x16c/0x1f0 [ 112.505410][ T6639] should_fail_ex+0x512/0x640 [ 112.505436][ T6639] ? kmem_cache_alloc_noprof+0x62/0x720 [ 112.505477][ T6639] should_failslab+0xc2/0x120 [ 112.505508][ T6639] kmem_cache_alloc_noprof+0x75/0x720 [ 112.505545][ T6639] ? mas_preallocate+0xe6a/0x11f0 [ 112.505580][ T6639] ? mas_preallocate+0xe6a/0x11f0 [ 112.505606][ T6639] mas_preallocate+0xe6a/0x11f0 [ 112.505641][ T6639] ? __pfx_mas_preallocate+0x10/0x10 [ 112.505678][ T6639] ? vm_area_alloc+0x1f/0x160 [ 112.505713][ T6639] ? lockdep_init_map_type+0x5c/0x270 [ 112.505743][ T6639] __mmap_region+0x117f/0x2770 [ 112.505780][ T6639] ? __pfx___mmap_region+0x10/0x10 [ 112.505817][ T6639] ? rcu_is_watching+0x12/0xc0 [ 112.505851][ T6639] ? trace_sched_exit_tp+0xd1/0x110 [ 112.505879][ T6639] ? __schedule+0x1149/0x5de0 [ 112.505903][ T6639] ? __schedule+0x11dc/0x5de0 [ 112.505925][ T6639] ? rcu_is_watching+0x12/0xc0 [ 112.506036][ T6639] ? rcu_is_watching+0x12/0xc0 [ 112.506076][ T6639] mmap_region+0x1ab/0x3f0 [ 112.506098][ T6639] ? __get_unmapped_area+0x267/0x440 [ 112.506129][ T6639] do_mmap+0xa3e/0x1210 [ 112.506161][ T6639] ? __pfx_do_mmap+0x10/0x10 [ 112.506188][ T6639] ? __pfx_down_write_killable+0x10/0x10 [ 112.506226][ T6639] vm_mmap_pgoff+0x29e/0x470 [ 112.506259][ T6639] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 112.506285][ T6639] ? __sys_connect+0xe0/0x160 [ 112.506325][ T6639] ? __x64_sys_futex+0x1e0/0x4c0 [ 112.506350][ T6639] ? __x64_sys_futex+0x1e9/0x4c0 [ 112.506386][ T6639] ksys_mmap_pgoff+0x7d/0x5c0 [ 112.506413][ T6639] ? xfd_validate_state+0x61/0x180 [ 112.506449][ T6639] ? __pfx_ksys_write+0x10/0x10 [ 112.506484][ T6639] __x64_sys_mmap+0x125/0x190 [ 112.506511][ T6639] do_syscall_64+0xcd/0xf80 [ 112.506541][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.506566][ T6639] RIP: 0033:0x7efd9718f7c9 [ 112.506586][ T6639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.506609][ T6639] RSP: 002b:00007efd9807f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 112.506632][ T6639] RAX: ffffffffffffffda RBX: 00007efd973e5fa0 RCX: 00007efd9718f7c9 [ 112.506649][ T6639] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 112.506664][ T6639] RBP: 00007efd97213f91 R08: 0000000000000002 R09: 0000000800008000 [ 112.506680][ T6639] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 112.506696][ T6639] R13: 00007efd973e6038 R14: 00007efd973e5fa0 R15: 00007ffeacf79768 [ 112.506731][ T6639] [ 113.143907][ T5851] Bluetooth: hci2: unknown advertising packet type: 0xea [ 113.504319][ T6667] FAULT_INJECTION: forcing a failure. [ 113.504319][ T6667] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.558695][ T6667] CPU: 1 UID: 0 PID: 6667 Comm: syz.2.320 Not tainted syzkaller #0 PREEMPT(full) [ 113.558748][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.558763][ T6667] Call Trace: [ 113.558772][ T6667] [ 113.558783][ T6667] dump_stack_lvl+0x16c/0x1f0 [ 113.558819][ T6667] should_fail_ex+0x512/0x640 [ 113.558851][ T6667] _copy_from_user+0x2e/0xd0 [ 113.558890][ T6667] restore_altstack+0x93/0x170 [ 113.558917][ T6667] ? __pfx_restore_altstack+0x10/0x10 [ 113.558944][ T6667] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.558972][ T6667] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.559008][ T6667] ? _raw_spin_unlock_irq+0x2e/0x50 [ 113.559034][ T6667] ? set_current_blocked+0xdd/0x120 [ 113.559068][ T6667] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 113.559102][ T6667] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 113.559146][ T6667] do_syscall_64+0xcd/0xf80 [ 113.559178][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.559204][ T6667] RIP: 0033:0x7f379ed2b889 [ 113.559225][ T6667] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 113.559249][ T6667] RSP: 002b:00007f379fce2a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 113.559274][ T6667] RAX: ffffffffffffffda RBX: 00007f379efe5fa0 RCX: 00007f379ed2b889 [ 113.559291][ T6667] RDX: 00007f379fce2a80 RSI: 00007f379fce2bb0 RDI: 0000000000000011 [ 113.559306][ T6667] RBP: 00007f379ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 113.559319][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.559334][ T6667] R13: 00007f379efe6038 R14: 00007f379efe5fa0 R15: 00007ffc76e0c708 [ 113.559370][ T6667] [ 114.180696][ T6687] futex_wake_op: syz.1.329 tries to shift op by -2048; fix this program [ 114.222289][ T6687] 0x000000000001-0x000000020000 : "" [ 114.286478][ T6687] ftl_cs: FTL header corrupt! [ 115.709633][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 116.078897][ T6739] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 116.090851][ T6739] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 116.099286][ T6739] CPU: 0 UID: 0 PID: 6739 Comm: syz.3.351 Not tainted syzkaller #0 PREEMPT(full) [ 116.108512][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.118596][ T6739] RIP: 0010:handshake_complete+0x31/0x390 [ 116.124342][ T6739] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 d4 fc 6f f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 dc 23 0e 00 48 b8 00 [ 116.143981][ T6739] RSP: 0018:ffffc900190774f8 EFLAGS: 00010206 [ 116.150076][ T6739] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000cd4a000 [ 116.158157][ T6739] RDX: 0000000000000005 RSI: ffffffff8b4d245c RDI: 0000000000000028 [ 116.166150][ T6739] RBP: ffffc900190775c0 R08: 0000000000000000 R09: ffffed10052d4d40 [ 116.174143][ T6739] R10: ffff8880296a6a03 R11: 0000000000000001 R12: 00000000fffffffb [ 116.182209][ T6739] R13: 0000000000000000 R14: ffff88802a220340 R15: ffff888031e34a00 [ 116.190184][ T6739] FS: 00007efd9807f6c0(0000) GS:ffff888124ba8000(0000) knlGS:0000000000000000 [ 116.199115][ T6739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.205704][ T6739] CR2: 000000110c4287a6 CR3: 0000000031806000 CR4: 00000000003526f0 [ 116.213676][ T6739] Call Trace: [ 116.216949][ T6739] [ 116.219876][ T6739] handshake_nl_accept_doit+0x2dc/0x910 [ 116.225435][ T6739] genl_family_rcv_msg_doit+0x209/0x2f0 [ 116.230989][ T6739] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.237067][ T6739] ? __dev_queue_xmit+0xaf1/0x4330 [ 116.242182][ T6739] ? genl_get_cmd+0x194/0x580 [ 116.246865][ T6739] ? bpf_lsm_capable+0x9/0x10 [ 116.251588][ T6739] ? security_capable+0x7e/0x260 [ 116.256637][ T6739] genl_rcv_msg+0x55c/0x800 [ 116.261241][ T6739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.266361][ T6739] ? __pfx_handshake_nl_accept_doit+0x10/0x10 [ 116.272602][ T6739] netlink_rcv_skb+0x158/0x420 [ 116.277383][ T6739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.282446][ T6739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.287740][ T6739] ? netlink_deliver_tap+0x1ae/0xd30 [ 116.293047][ T6739] genl_rcv+0x28/0x40 [ 116.297207][ T6739] netlink_unicast+0x5aa/0x870 [ 116.301980][ T6739] ? __pfx_netlink_unicast+0x10/0x10 [ 116.307364][ T6739] netlink_sendmsg+0x8c8/0xdd0 [ 116.312150][ T6739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.317470][ T6739] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 116.323551][ T6739] ____sys_sendmsg+0xa5d/0xc30 [ 116.328326][ T6739] ? copy_msghdr_from_user+0x10a/0x160 [ 116.333785][ T6739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.339074][ T6739] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.344363][ T6739] ___sys_sendmsg+0x134/0x1d0 [ 116.349035][ T6739] ? find_held_lock+0x2b/0x80 [ 116.353932][ T6739] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.359132][ T6739] ? __lock_acquire+0x433/0x22f0 [ 116.364086][ T6739] __sys_sendmsg+0x16d/0x220 [ 116.368677][ T6739] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.373787][ T6739] ? __x64_sys_futex+0x1e0/0x4c0 [ 116.378730][ T6739] do_syscall_64+0xcd/0xf80 [ 116.383234][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.389120][ T6739] RIP: 0033:0x7efd9718f7c9 [ 116.393527][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.413129][ T6739] RSP: 002b:00007efd9807f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.421542][ T6739] RAX: ffffffffffffffda RBX: 00007efd973e5fa0 RCX: 00007efd9718f7c9 [ 116.429507][ T6739] RDX: 000000002004881c RSI: 0000200000000580 RDI: 0000000000000003 [ 116.437469][ T6739] RBP: 00007efd97213f91 R08: 0000000000000000 R09: 0000000000000000 [ 116.445434][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.453398][ T6739] R13: 00007efd973e6038 R14: 00007efd973e5fa0 R15: 00007ffeacf79768 [ 116.461552][ T6739] [ 116.464565][ T6739] Modules linked in: [ 116.471928][ T6739] ---[ end trace 0000000000000000 ]--- [ 116.523953][ T6739] RIP: 0010:handshake_complete+0x31/0x390 [ 116.529798][ T6739] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 d4 fc 6f f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 dc 23 0e 00 48 b8 00 [ 116.581322][ T6739] RSP: 0018:ffffc900190774f8 EFLAGS: 00010206 [ 116.588707][ T6739] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000cd4a000 [ 116.596841][ T6739] RDX: 0000000000000005 RSI: ffffffff8b4d245c RDI: 0000000000000028 [ 116.607570][ T6739] RBP: ffffc900190775c0 R08: 0000000000000000 R09: ffffed10052d4d40 [ 116.615717][ T6739] R10: ffff8880296a6a03 R11: 0000000000000001 R12: 00000000fffffffb [ 116.625795][ T6739] R13: 0000000000000000 R14: ffff88802a220340 R15: ffff888031e34a00 [ 116.640742][ T6739] FS: 00007efd9807f6c0(0000) GS:ffff888124ca8000(0000) knlGS:0000000000000000 [ 116.650796][ T6739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.657512][ T6739] CR2: 0000001b31a18ff8 CR3: 0000000031806000 CR4: 00000000003526f0 [ 116.666230][ T6739] Kernel panic - not syncing: Fatal exception [ 116.672854][ T6739] Kernel Offset: disabled [ 116.677209][ T6739] Rebooting in 86400 seconds..