last executing test programs: 2m4.412909969s ago: executing program 3 (id=344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023a23f7d3d36028c250000000a0001007770616e3000000005002a00140000000c000500"], 0x34}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) 2m2.458576058s ago: executing program 3 (id=363): syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x401}}}, 0x7) 2m1.963842149s ago: executing program 3 (id=374): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200090581", @ANYRESDEC=0x0], 0x0) 2m0.962750601s ago: executing program 3 (id=383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, 0x0, 0x28) 2m0.931913825s ago: executing program 3 (id=384): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) pwritev2(r0, &(0x7f0000000640)=[{&(0x7f0000000400)='B', 0x1}], 0x1, 0x2db, 0x6, 0xb4) 2m0.862512692s ago: executing program 3 (id=386): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2m0.330497936s ago: executing program 4 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, 0x40, 0x107, 0x70bd2e, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0xff, 0x0, 0x1, [@typed={0x14, 0xe1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0x4c000) 2m0.317723637s ago: executing program 4 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') openat(r3, &(0x7f0000000080)='auth.unix.ip/channel\x00', 0x2, 0x0) 1m59.427403728s ago: executing program 4 (id=409): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) close(0x3) 1m59.393012682s ago: executing program 4 (id=410): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000004c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) madvise(&(0x7f000076e000/0x11000)=nil, 0x11000, 0x15) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x0, 0x0, 0x2b49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) r3 = syz_clone(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x4}) timer_settime(0x0, 0x1, &(0x7f0000000200), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='usb2512b 0x2', 0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x2, &(0x7f0000000380)=""/95) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) readv(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000075000/0x3000)=nil, 0x3000, 0x0, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x40000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, r5, 0x76bdd000) 1m59.225526689s ago: executing program 4 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read(r0, &(0x7f0000002ac0)=""/256, 0x100) 1m59.187608752s ago: executing program 4 (id=413): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1m45.88547433s ago: executing program 32 (id=386): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1m44.120421131s ago: executing program 33 (id=413): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1m22.515376606s ago: executing program 5 (id=716): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write(r0, &(0x7f00000004c0)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) 1m21.20877139s ago: executing program 5 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xfeffffff, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m20.32173499s ago: executing program 5 (id=739): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 1m19.654302968s ago: executing program 5 (id=743): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) 1m19.556775968s ago: executing program 5 (id=746): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r1 = getpid() prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000700), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x2, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x50000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 1m18.65655289s ago: executing program 5 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0xa888, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 1m3.628085564s ago: executing program 34 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0xa888, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 2.670039407s ago: executing program 2 (id=1224): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 2.627317082s ago: executing program 2 (id=1225): syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705"], 0x0) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='udp 2', 0x5) 2.05409511s ago: executing program 2 (id=1227): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r0, &(0x7f0000000100)='27', 0x2) syz_open_dev$vim2m(&(0x7f00000001c0), 0x55ac, 0x2) 2.05349278s ago: executing program 2 (id=1228): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x4e22, 0x0, @rand_addr, 0x7fffffa}, 0x1c) sendmmsg(r1, &(0x7f00000009c0), 0x4ff, 0x0) 1.898774496s ago: executing program 2 (id=1229): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000003400)={0x0, 0x6000, &(0x7f0000003440)=[{&(0x7f0000003480)='U', 0xa00120}], 0x1}, 0x3) 1.728578953s ago: executing program 7 (id=1231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xbffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004015}, 0x40488d0) 1.724893994s ago: executing program 0 (id=1232): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '7\f[', 0x0, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local}}}}, 0x0) 1.689045898s ago: executing program 1 (id=1234): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000002c0), 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0x4}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40051}, 0x0) socket$inet(0x2, 0x2, 0x1) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r4, &(0x7f00000006c0)=""/28, 0x1c) 1.194872928s ago: executing program 7 (id=1236): syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182cfffe800000000000000000"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890001"], 0x0) 1.193544738s ago: executing program 0 (id=1237): syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705"], 0x0) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='udp 2', 0x5) 1.180235839s ago: executing program 7 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000580)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.141447123s ago: executing program 7 (id=1240): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) listen(0xffffffffffffffff, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 1.134914224s ago: executing program 6 (id=1241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x4e22, 0x0, @rand_addr, 0x7fffffa}, 0x1c) sendmmsg(r1, &(0x7f00000009c0), 0x4ff, 0x0) 696.015679ms ago: executing program 1 (id=1242): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x39db77225c63fa4c) 678.946731ms ago: executing program 2 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) openat$ptp0(0xffffffffffffff9c, 0x0, 0x242, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x44, r4, 0x1, 0x70bd25, 0x25dfdc02, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x109, 0x6, 0x4, 0xf, 0xf, 0x100, 0x6]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x3404c816) 591.297999ms ago: executing program 0 (id=1244): openat$sndseq(0xffffff9c, 0x0, 0x20280) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 590.936369ms ago: executing program 1 (id=1245): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 562.443253ms ago: executing program 1 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x8080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)='\'', 0x1}], 0x1}, 0x4005) 555.399093ms ago: executing program 6 (id=1247): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, 0x0, &(0x7f00000004c0)) 248.826005ms ago: executing program 7 (id=1248): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '7\f[', 0x0, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local}}}}, 0x0) 235.591386ms ago: executing program 0 (id=1249): mount(0x0, &(0x7f0000001140)='./sys\x00', &(0x7f0000001180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000001200)='lz4hc', 0x5) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) 218.969068ms ago: executing program 6 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10d) write(r0, &(0x7f0000000300)='10', 0x2) unshare(0x6000480) 193.33739ms ago: executing program 6 (id=1251): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) socket(0x1e, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x55ac, 0x2) 173.183942ms ago: executing program 6 (id=1252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8084) 161.782593ms ago: executing program 0 (id=1253): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8241, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4010) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x880}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8884}, 0x0) 138.478876ms ago: executing program 6 (id=1254): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000003400)={0x0, 0x6000, &(0x7f0000003440)=[{&(0x7f0000003480)='U', 0xa00120}], 0x1}, 0x3) 96.52196ms ago: executing program 0 (id=1255): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000002c0), 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0x4}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40051}, 0x0) socket$inet(0x2, 0x2, 0x1) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r4, &(0x7f00000006c0)=""/28, 0x1c) 34.444947ms ago: executing program 1 (id=1256): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x39db77225c63fa4c) 26.915127ms ago: executing program 7 (id=1257): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='udp 2', 0x5) 0s ago: executing program 1 (id=1258): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) listen(0xffffffffffffffff, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) kernel console output (not intermixed with test programs): [ 110.814905][ T4344] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.817677][ T4344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.911233][ T6260] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.940629][ T6260] wg1 speed is unknown, defaulting to 1000 [ 111.166094][ T6260] chnl_net:caif_netlink_parms(): no params data found [ 111.254645][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.263445][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.267548][ T6260] device bridge_slave_0 entered promiscuous mode [ 111.270063][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.280870][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.287797][ T6260] device bridge_slave_1 entered promiscuous mode [ 111.333299][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.336552][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.367505][ T6260] team0: Port device team_slave_0 added [ 111.369789][ T6260] team0: Port device team_slave_1 added [ 111.398436][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.399907][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.415788][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.419216][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.420661][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.425695][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.449920][ T6284] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 111.459171][ T6285] device-mapper: clone: Destination device (ram5) discard unsupported: Disabling discard passdown. [ 111.502893][ T6284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.554350][ T6287] bond1: (slave veth3): Enslaving as an active interface with a down link [ 111.599292][ T6260] device hsr_slave_0 entered promiscuous mode [ 111.637076][ T6260] device hsr_slave_1 entered promiscuous mode [ 111.693608][ T6284] bond1: (slave dummy0): making interface the new active one [ 111.702355][ T6284] device dummy0 entered promiscuous mode [ 111.708881][ T6284] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 111.725658][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 111.926949][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.928778][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.991754][ T3942] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 112.004346][ T3942] ldm_validate_privheads(): Disk read failed. [ 112.005753][ T3942] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 112.010329][ T3942] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 112.011926][ T3942] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 112.013535][ T3942] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 112.026021][ T3942] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 112.033338][ T27] audit: type=1326 audit(113.015:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.037424][ T3942] loop5: [ 112.041508][ T3942] loop5: partition table partially beyond EOD, truncated [ 112.051891][ T6260] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.096879][ T6260] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.129663][ T6260] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.207224][ T6260] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.314982][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.315355][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.328862][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.330472][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.332491][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.335893][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.345185][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.347527][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.349478][ T522] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.351114][ T522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.357350][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.364775][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.371570][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.378944][ T522] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.380487][ T522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.388181][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.395396][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.405922][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.419010][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.429732][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.435896][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.442935][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.450893][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.457540][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.481370][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.483657][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.500515][ T6260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.616793][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.621999][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.623690][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.688956][ T4342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.694912][ T4342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.697599][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.699944][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.702637][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 112.704787][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.766315][ T27] audit: type=1326 audit(113.745:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.771372][ T27] audit: type=1326 audit(113.745:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.797653][ T27] audit: type=1326 audit(113.745:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.806436][ T27] audit: type=1326 audit(113.745:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.810872][ T27] audit: type=1326 audit(113.745:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.815384][ T27] audit: type=1326 audit(113.745:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.841022][ T6335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.843156][ T6335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.866987][ T27] audit: type=1326 audit(113.745:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.874822][ T27] audit: type=1326 audit(113.745:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.881356][ T6321] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.884425][ T27] audit: type=1326 audit(113.745:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.0.548" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff889854a8 code=0x7fc00000 [ 112.889466][ T4342] Bluetooth: hci5: command 0x0409 tx timeout [ 112.919853][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.922016][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.931799][ T6338] overlayfs: invalid redirect (./file2) [ 112.956291][ C1] net_ratelimit: 49 callbacks suppressed [ 112.957735][ T6321] wg1 speed is unknown, defaulting to 1000 [ 112.978594][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.980627][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.982937][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.984959][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.993922][ T6260] device veth0_vlan entered promiscuous mode [ 112.998312][ T6260] device veth1_vlan entered promiscuous mode [ 113.022505][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 113.024524][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 113.029896][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.031913][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.034623][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.036642][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.040963][ T6260] device veth0_macvtap entered promiscuous mode [ 113.043773][ T6260] device veth1_macvtap entered promiscuous mode [ 113.073703][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.075848][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.078316][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.082224][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.084276][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.089517][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.091812][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.093863][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.093881][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.098640][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.101418][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.105998][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.107924][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.109567][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.111487][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.130050][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.132346][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.134389][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.136928][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.136936][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.141391][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.143313][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.145664][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.151287][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.153537][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.157129][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.162461][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.164372][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.181840][ T6260] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.183944][ T6260] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.185626][ T6260] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.190566][ T6260] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.259514][ T6321] chnl_net:caif_netlink_parms(): no params data found [ 113.274982][ T5187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.276998][ T5187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.296088][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.314669][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.319635][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.332221][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.481442][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.481487][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.490056][ T6321] device bridge_slave_0 entered promiscuous mode [ 113.495137][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.495174][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.502124][ T6321] device bridge_slave_1 entered promiscuous mode [ 113.573974][ T6321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.585396][ T6321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.644556][ T6321] team0: Port device team_slave_0 added [ 113.658073][ T6321] team0: Port device team_slave_1 added [ 113.702486][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.708649][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.721937][ T6321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.732050][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.734646][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.744659][ T6321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.871764][ T6321] device hsr_slave_0 entered promiscuous mode [ 113.908999][ T6321] device hsr_slave_1 entered promiscuous mode [ 113.949808][ T6321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.951705][ T6321] Cannot create hsr debugfs directory [ 114.002735][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.004711][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.245203][ T6321] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.288220][ T6321] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.340961][ T6321] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.390053][ T6321] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.529562][ T6321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.561041][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.563874][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.579024][ T6321] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.591424][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.595434][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.598294][ T4640] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.599672][ T4640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.606801][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.611543][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.613571][ T4640] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.614808][ T4640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.617036][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.641423][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.643530][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.645486][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.656040][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.671989][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.676670][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.682917][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.692157][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.697276][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.699295][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.709324][ T6321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.713796][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.716367][ T4342] Bluetooth: hci1: command 0x0409 tx timeout [ 114.794036][ T6371] device syzkaller0 entered promiscuous mode [ 114.956811][ T4342] Bluetooth: hci5: command 0x041b tx timeout [ 115.026084][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.027878][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.035098][ T6321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.593687][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.595561][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.609552][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.611567][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.614586][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.620053][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.630919][ T6321] device veth0_vlan entered promiscuous mode [ 115.642751][ T6321] device veth1_vlan entered promiscuous mode [ 115.659651][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 115.661572][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 115.663303][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.672235][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.677880][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.681671][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.686717][ T6321] device veth0_macvtap entered promiscuous mode [ 115.690626][ T6321] device veth1_macvtap entered promiscuous mode [ 115.702067][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.709130][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.714495][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.720041][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.724221][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.728431][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.732292][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.736685][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.756583][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.758501][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.760754][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.762928][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.797491][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.799215][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.801098][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.802791][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.805080][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.809924][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.811901][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.813851][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.820995][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.823047][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.825056][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.839794][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.844377][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.851033][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.852911][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.854860][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.868449][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.871229][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.878903][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.882258][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.886192][ T6321] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.888205][ T6321] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.890128][ T6321] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.891862][ T6321] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.983292][ T4640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.984940][ T4640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.987890][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 115.990038][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.011680][ T4680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.011697][ T4680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.025744][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.986336][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 117.046786][ T4342] Bluetooth: hci5: command 0x040f tx timeout [ 117.192226][ T6407] device syzkaller0 entered promiscuous mode [ 117.237797][ T6412] netlink: 20 bytes leftover after parsing attributes in process `syz.6.578'. [ 118.006335][ C1] net_ratelimit: 136 callbacks suppressed [ 118.095832][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.110987][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.839707][ T6437] ERROR: device name not specified. [ 118.876411][ C0] ipvlan_process_outbound: 3 callbacks suppressed [ 119.041604][ T4344] Bluetooth: hci1: command 0x040f tx timeout [ 119.126374][ T4342] Bluetooth: hci5: command 0x0419 tx timeout [ 119.300867][ T6447] tipc: Started in network mode [ 119.302075][ T6447] tipc: Node identity 7f000001, cluster identity 4711 [ 119.306527][ T6447] tipc: New replicast peer: 127.0.0.1 [ 119.308349][ T6447] tipc: Enabled bearer , priority 10 [ 119.520170][ T6449] FAULT_INJECTION: forcing a failure. [ 119.520170][ T6449] name failslab, interval 1, probability 5, space 0, times 9997 [ 119.542988][ T6449] CPU: 1 PID: 6449 Comm: syz.0.592 Not tainted syzkaller #0 [ 119.544497][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 119.546556][ T6449] Call trace: [ 119.547277][ T6449] dump_backtrace+0x1c4/0x1f0 [ 119.548309][ T6449] show_stack+0x2c/0x3c [ 119.549170][ T6449] __dump_stack+0x30/0x40 [ 119.550071][ T6449] dump_stack_lvl+0xf4/0x15c [ 119.551035][ T6449] dump_stack+0x1c/0x5c [ 119.551882][ T6449] should_fail_ex+0x3cc/0x524 [ 119.552817][ T6449] __should_failslab+0xc0/0x11c [ 119.553784][ T6449] should_failslab+0x10/0x28 [ 119.554707][ T6449] __kmem_cache_alloc_node+0x7c/0x318 [ 119.555805][ T6449] kmalloc_trace+0x48/0x94 [ 119.556775][ T6449] vicodec_open+0xe4/0x9b0 [ 119.557783][ T6449] v4l2_open+0x1a8/0x2bc [ 119.558711][ T6449] chrdev_open+0x3d0/0x51c [ 119.559730][ T6449] do_dentry_open+0x738/0xf8c [ 119.560833][ T6449] vfs_open+0x7c/0x90 [ 119.561739][ T6449] path_openat+0x1fc0/0x27a0 [ 119.562775][ T6449] do_filp_open+0x198/0x38c [ 119.563737][ T6449] do_sys_openat2+0x134/0x3fc [ 119.564779][ T6449] __arm64_sys_openat+0x11c/0x150 [ 119.565853][ T6449] invoke_syscall+0x98/0x290 [ 119.566846][ T6449] el0_svc_common+0x13c/0x258 [ 119.567855][ T6449] do_el0_svc+0x5c/0x134 [ 119.568828][ T6449] el0_svc+0x58/0x12c [ 119.569710][ T6449] el0t_64_sync_handler+0x84/0xf0 [ 119.570832][ T6449] el0t_64_sync+0x18c/0x190 [ 119.698211][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.714301][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.977694][ T4714] logitech-hidpp-device 0005:046D:B012.0003: Device not connected [ 120.452174][ T4714] tipc: Node number set to 2130706433 [ 120.480025][ T6474] FAULT_INJECTION: forcing a failure. [ 120.480025][ T6474] name failslab, interval 1, probability 5, space 0, times 9996 [ 120.516036][ T6474] CPU: 0 PID: 6474 Comm: syz.6.602 Not tainted syzkaller #0 [ 120.517645][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 120.520028][ T6474] Call trace: [ 120.520800][ T6474] dump_backtrace+0x1c4/0x1f0 [ 120.521875][ T6474] show_stack+0x2c/0x3c [ 120.522790][ T6474] __dump_stack+0x30/0x40 [ 120.523729][ T6474] dump_stack_lvl+0xf4/0x15c [ 120.524707][ T6474] dump_stack+0x1c/0x5c [ 120.525683][ T6474] should_fail_ex+0x3cc/0x524 [ 120.526713][ T6474] __should_failslab+0xc0/0x11c [ 120.527889][ T6474] should_failslab+0x10/0x28 [ 120.528988][ T6474] __kmem_cache_alloc_node+0x7c/0x318 [ 120.530284][ T6474] __kmalloc_node+0xc8/0x184 [ 120.531378][ T6474] kvmalloc_node+0x88/0x1d4 [ 120.532408][ T6474] xt_replace_table+0x1c4/0x79c [ 120.533521][ T6474] xt_register_table+0x134/0x3c0 [ 120.534710][ T6474] ip6t_register_table+0x13c/0x5f0 [ 120.535700][ T6474] ip6table_mangle_table_init+0x4c/0x78 [ 120.536847][ T6474] xt_find_table_lock+0x2c8/0x394 [ 120.537878][ T6474] do_ip6t_get_ctl+0x9c8/0x13d0 [ 120.538891][ T6474] nf_getsockopt+0x254/0x274 [ 120.539876][ T6474] ipv6_getsockopt+0x2c4/0x3f4 [ 120.540899][ T6474] udpv6_getsockopt+0x94/0xac [ 120.540919][ T6474] sock_common_getsockopt+0xa8/0xc4 [ 120.540935][ T6474] __sys_getsockopt+0x1e0/0x474 [ 120.540942][ T6474] __arm64_sys_getsockopt+0xc0/0xdc [ 120.543018][ T6474] invoke_syscall+0x98/0x290 [ 120.545014][ T6474] el0_svc_common+0x13c/0x258 [ 120.546896][ T6474] do_el0_svc+0x5c/0x134 [ 120.546928][ T6474] el0_svc+0x58/0x12c [ 120.546941][ T6474] el0t_64_sync_handler+0x84/0xf0 [ 120.548480][ T6474] el0t_64_sync+0x18c/0x190 [ 121.008977][ T6486] FAULT_INJECTION: forcing a failure. [ 121.008977][ T6486] name failslab, interval 1, probability 5, space 0, times 9995 [ 121.032692][ T6486] CPU: 0 PID: 6486 Comm: syz.5.607 Not tainted syzkaller #0 [ 121.034198][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 121.036281][ T6486] Call trace: [ 121.037000][ T6486] dump_backtrace+0x1c4/0x1f0 [ 121.038035][ T6486] show_stack+0x2c/0x3c [ 121.038964][ T6486] __dump_stack+0x30/0x40 [ 121.039939][ T6486] dump_stack_lvl+0xf4/0x15c [ 121.040981][ T6486] dump_stack+0x1c/0x5c [ 121.041932][ T6486] should_fail_ex+0x3cc/0x524 [ 121.042952][ T6486] __should_failslab+0xc0/0x11c [ 121.044093][ T6486] should_failslab+0x10/0x28 [ 121.045117][ T6486] __kmem_cache_alloc_node+0x7c/0x318 [ 121.046302][ T6486] kmalloc_trace+0x48/0x94 [ 121.047278][ T6486] v4l2_fh_open+0x70/0x20c [ 121.048228][ T6486] v4l2_open+0x1a8/0x2bc [ 121.049148][ T6486] chrdev_open+0x3d0/0x51c [ 121.050096][ T6486] do_dentry_open+0x738/0xf8c [ 121.051108][ T6486] vfs_open+0x7c/0x90 [ 121.051955][ T6486] path_openat+0x1fc0/0x27a0 [ 121.052965][ T6486] do_filp_open+0x198/0x38c [ 121.053899][ T6486] do_sys_openat2+0x134/0x3fc [ 121.054877][ T6486] __arm64_sys_openat+0x11c/0x150 [ 121.055953][ T6486] invoke_syscall+0x98/0x290 [ 121.056971][ T6486] el0_svc_common+0x13c/0x258 [ 121.058022][ T6486] do_el0_svc+0x5c/0x134 [ 121.058945][ T6486] el0_svc+0x58/0x12c [ 121.059843][ T6486] el0t_64_sync_handler+0x84/0xf0 [ 121.060975][ T6486] el0t_64_sync+0x18c/0x190 [ 121.116552][ T4344] Bluetooth: hci1: command 0x0419 tx timeout [ 121.233145][ T6490] process 'syz.0.609' launched '/dev/fd/4/./file7/file0' with NULL argv: empty string added [ 121.315168][ T6490] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 121.911522][ T4342] Bluetooth: hci0: command 0x0409 tx timeout [ 122.784433][ T6510] FAULT_INJECTION: forcing a failure. [ 122.784433][ T6510] name failslab, interval 1, probability 5, space 0, times 9994 [ 122.787583][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 122.787593][ T27] audit: type=1807 audit(123.765:74): UNKNOWN=a res=0 [ 122.791391][ T6510] CPU: 0 PID: 6510 Comm: syz.6.616 Not tainted syzkaller #0 [ 122.792994][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 122.795154][ T6510] Call trace: [ 122.795803][ T6510] dump_backtrace+0x1c4/0x1f0 [ 122.796810][ T6510] show_stack+0x2c/0x3c [ 122.796827][ T6510] __dump_stack+0x30/0x40 [ 122.796842][ T6510] dump_stack_lvl+0xf4/0x15c [ 122.796851][ T6510] dump_stack+0x1c/0x5c [ 122.796858][ T6510] should_fail_ex+0x3cc/0x524 [ 122.796869][ T6510] __should_failslab+0xc0/0x11c [ 122.796878][ T6510] should_failslab+0x10/0x28 [ 122.796886][ T6510] kmem_cache_alloc+0x88/0x310 [ 122.796895][ T6510] audit_log_start+0x128/0x7c4 [ 122.796901][ T6510] integrity_audit_message+0x10c/0x3ac [ 122.796910][ T6510] integrity_audit_msg+0x60/0x7c [ 122.796917][ T6510] ima_parse_add_rule+0x3a6c/0x3d64 [ 122.796927][ T6510] ima_write_policy+0x27c/0x3f4 [ 122.796935][ T6510] vfs_write+0x2a8/0x7c8 [ 122.796941][ T6510] ksys_write+0x12c/0x228 [ 122.800449][ T6510] __arm64_sys_write+0x7c/0x90 [ 122.802218][ T6510] invoke_syscall+0x98/0x290 [ 122.804115][ T6510] el0_svc_common+0x13c/0x258 [ 122.806198][ T6510] do_el0_svc+0x5c/0x134 [ 122.808278][ T6510] el0_svc+0x58/0x12c [ 122.808295][ T6510] el0t_64_sync_handler+0x84/0xf0 [ 122.808305][ T6510] el0t_64_sync+0x18c/0x190 [ 122.809927][ T6510] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 122.811246][ T6510] audit: out of memory in audit_log_start [ 122.814809][ T6509] ima: policy update failed [ 122.816047][ T27] audit: type=1802 audit(123.795:75): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.616" res=0 errno=0 [ 123.036262][ C0] net_ratelimit: 92 callbacks suppressed [ 123.196847][ T4342] Bluetooth: hci1: command 0x0405 tx timeout [ 123.449035][ T6537] gfs2: not a GFS2 filesystem [ 123.744110][ T6540] Bluetooth: MGMT ver 1.22 [ 123.820877][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.826213][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.916289][ T4344] Bluetooth: hci0: command 0x041b tx timeout [ 123.957565][ T6548] device syzkaller0 entered promiscuous mode [ 124.398772][ T5511] device dummy0 left promiscuous mode [ 124.527480][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 124.547902][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 124.586609][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 124.609293][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 124.680636][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 124.703801][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 124.729159][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 125.494188][ T6575] using random self ethernet address [ 125.495477][ T6575] using random host ethernet address [ 125.549938][ T6575] usb0: HOST MAC f6:04:43:51:8f:31 [ 125.551217][ T6575] usb0: MAC 1a:45:4e:60:a4:02 [ 125.608829][ T6581] FAULT_INJECTION: forcing a failure. [ 125.608829][ T6581] name failslab, interval 1, probability 5, space 0, times 9993 [ 125.617340][ T6581] CPU: 1 PID: 6581 Comm: syz.6.642 Not tainted syzkaller #0 [ 125.618765][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 125.620771][ T6581] Call trace: [ 125.621362][ T6581] dump_backtrace+0x1c4/0x1f0 [ 125.622203][ T6581] show_stack+0x2c/0x3c [ 125.622912][ T6581] __dump_stack+0x30/0x40 [ 125.622935][ T6581] dump_stack_lvl+0xf4/0x15c [ 125.624627][ T6581] dump_stack+0x1c/0x5c [ 125.625335][ T6581] should_fail_ex+0x3cc/0x524 [ 125.626193][ T6581] __should_failslab+0xc0/0x11c [ 125.626216][ T6581] should_failslab+0x10/0x28 [ 125.628109][ T6581] __kmem_cache_alloc_node+0x7c/0x318 [ 125.629161][ T6581] kmalloc_trace+0x48/0x94 [ 125.630018][ T6581] copy_time_ns+0x120/0x3e0 [ 125.630897][ T6581] create_new_namespaces+0x380/0x604 [ 125.631927][ T6581] unshare_nsproxy_namespaces+0x108/0x160 [ 125.633167][ T6581] ksys_unshare+0x3f0/0x70c [ 125.634080][ T6581] __arm64_sys_unshare+0x3c/0x50 [ 125.635070][ T6581] invoke_syscall+0x98/0x290 [ 125.636012][ T6581] el0_svc_common+0x13c/0x258 [ 125.636980][ T6581] do_el0_svc+0x5c/0x134 [ 125.637869][ T6581] el0_svc+0x58/0x12c [ 125.638714][ T6581] el0t_64_sync_handler+0x84/0xf0 [ 125.639771][ T6581] el0t_64_sync+0x18c/0x190 [ 125.741549][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.743482][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.756312][ T48] Bluetooth: hci1: command 0x0c24 tx timeout [ 125.757831][ T4342] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 125.778439][ T6591] batman_adv: batadv0: Adding interface: syzkaller0 [ 125.779766][ T6591] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.785072][ T6591] batman_adv: batadv0: Interface activated: syzkaller0 [ 125.926557][ T2068] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.928089][ T2068] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.952526][ T6588] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 126.006298][ T4342] Bluetooth: hci0: command 0x040f tx timeout [ 126.023630][ T6588] batman_adv: batadv0: Removing interface: syzkaller0 [ 126.127929][ T6612] FAULT_INJECTION: forcing a failure. [ 126.127929][ T6612] name failslab, interval 1, probability 5, space 0, times 9992 [ 126.134271][ T6612] CPU: 0 PID: 6612 Comm: syz.2.651 Not tainted syzkaller #0 [ 126.135896][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 126.137989][ T6612] Call trace: [ 126.138771][ T6612] dump_backtrace+0x1c4/0x1f0 [ 126.139760][ T6612] show_stack+0x2c/0x3c [ 126.140677][ T6612] __dump_stack+0x30/0x40 [ 126.141612][ T6612] dump_stack_lvl+0xf4/0x15c [ 126.142633][ T6612] dump_stack+0x1c/0x5c [ 126.143469][ T6612] should_fail_ex+0x3cc/0x524 [ 126.144533][ T6612] __should_failslab+0xc0/0x11c [ 126.145635][ T6612] should_failslab+0x10/0x28 [ 126.146664][ T6612] __kmem_cache_alloc_node+0x7c/0x318 [ 126.147840][ T6612] __kmalloc_node+0xc8/0x184 [ 126.148867][ T6612] kvmalloc_node+0x88/0x1d4 [ 126.149852][ T6612] v4l2_ctrl_new+0x75c/0x1284 [ 126.150901][ T6612] v4l2_ctrl_new_custom+0x460/0x670 [ 126.152050][ T6612] vicodec_open+0x2c0/0x9b0 [ 126.152983][ T6612] v4l2_open+0x1a8/0x2bc [ 126.153880][ T6612] chrdev_open+0x3d0/0x51c [ 126.154841][ T6612] do_dentry_open+0x738/0xf8c [ 126.155889][ T6612] vfs_open+0x7c/0x90 [ 126.156787][ T6612] path_openat+0x1fc0/0x27a0 [ 126.157803][ T6612] do_filp_open+0x198/0x38c [ 126.158789][ T6612] do_sys_openat2+0x134/0x3fc [ 126.159797][ T6612] __arm64_sys_openat+0x11c/0x150 [ 126.160847][ T6612] invoke_syscall+0x98/0x290 [ 126.161831][ T6612] el0_svc_common+0x13c/0x258 [ 126.162832][ T6612] do_el0_svc+0x5c/0x134 [ 126.163708][ T6612] el0_svc+0x58/0x12c [ 126.164521][ T6612] el0t_64_sync_handler+0x84/0xf0 [ 126.165590][ T6612] el0t_64_sync+0x18c/0x190 [ 126.279812][ T6604] veth1: renamed from veth0_macvtap [ 126.299675][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 126.612736][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.614839][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.092074][ T6640] FAULT_INJECTION: forcing a failure. [ 127.092074][ T6640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 127.095055][ T6640] CPU: 0 PID: 6640 Comm: syz.6.660 Not tainted syzkaller #0 [ 127.095981][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.659'. [ 127.096504][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 127.096529][ T6640] Call trace: [ 127.096535][ T6640] dump_backtrace+0x1c4/0x1f0 [ 127.096548][ T6640] show_stack+0x2c/0x3c [ 127.096555][ T6640] __dump_stack+0x30/0x40 [ 127.096564][ T6640] dump_stack_lvl+0xf4/0x15c [ 127.096572][ T6640] dump_stack+0x1c/0x5c [ 127.096584][ T6640] should_fail_ex+0x3cc/0x524 [ 127.096592][ T6640] should_fail_alloc_page+0x74/0xb8 [ 127.096599][ T6640] prepare_alloc_pages+0x1b8/0x4f0 [ 127.096605][ T6640] __alloc_pages_bulk+0x120/0x83c [ 127.096611][ T6640] kasan_populate_vmalloc+0xc4/0x26c [ 127.096620][ T6640] alloc_vmap_area+0x1584/0x16c4 [ 127.096628][ T6640] __get_vm_area_node+0x178/0x31c [ 127.096636][ T6640] __vmalloc_node_range+0x1d4/0xe70 [ 127.096645][ T6640] dup_task_struct+0x4b0/0x7a8 [ 127.115894][ T6640] copy_process+0x4ec/0x38b4 [ 127.116889][ T6640] kernel_clone+0x1ec/0x938 [ 127.117838][ T6640] __arm64_sys_clone+0x15c/0x1c8 [ 127.118864][ T6640] invoke_syscall+0x98/0x290 [ 127.119829][ T6640] el0_svc_common+0x13c/0x258 [ 127.120837][ T6640] do_el0_svc+0x5c/0x134 [ 127.121781][ T6640] el0_svc+0x58/0x12c [ 127.122636][ T6640] el0t_64_sync_handler+0x84/0xf0 [ 127.123759][ T6640] el0t_64_sync+0x18c/0x190 [ 127.151240][ T6640] syz.6.660: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 127.154411][ T6640] CPU: 0 PID: 6640 Comm: syz.6.660 Not tainted syzkaller #0 [ 127.155808][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 127.157846][ T6640] Call trace: [ 127.158601][ T6640] dump_backtrace+0x1c4/0x1f0 [ 127.159695][ T6640] show_stack+0x2c/0x3c [ 127.160622][ T6640] __dump_stack+0x30/0x40 [ 127.161635][ T6640] dump_stack_lvl+0xf4/0x15c [ 127.162736][ T6640] dump_stack+0x1c/0x5c [ 127.163720][ T6640] warn_alloc+0x214/0x324 [ 127.164727][ T6640] __vmalloc_node_range+0x24c/0xe70 [ 127.165947][ T6640] dup_task_struct+0x4b0/0x7a8 [ 127.167052][ T6640] copy_process+0x4ec/0x38b4 [ 127.168122][ T6640] kernel_clone+0x1ec/0x938 [ 127.169113][ T6640] __arm64_sys_clone+0x15c/0x1c8 [ 127.170180][ T6640] invoke_syscall+0x98/0x290 [ 127.171191][ T6640] el0_svc_common+0x13c/0x258 [ 127.172181][ T6640] do_el0_svc+0x5c/0x134 [ 127.173070][ T6640] el0_svc+0x58/0x12c [ 127.173906][ T6640] el0t_64_sync_handler+0x84/0xf0 [ 127.174970][ T6640] el0t_64_sync+0x18c/0x190 [ 127.180501][ T6640] Mem-Info: [ 127.181155][ T6640] active_anon:6860 inactive_anon:0 isolated_anon:0 [ 127.181155][ T6640] active_file:14970 inactive_file:2147 isolated_file:0 [ 127.181155][ T6640] unevictable:768 dirty:348 writeback:0 [ 127.181155][ T6640] slab_reclaimable:15974 slab_unreclaimable:108706 [ 127.181155][ T6640] mapped:34839 shmem:1354 pagetables:715 [ 127.181155][ T6640] sec_pagetables:0 bounce:0 [ 127.181155][ T6640] kernel_misc_reclaimable:0 [ 127.181155][ T6640] free:1404662 free_pcp:4382 free_cma:7360 [ 127.200263][ T6640] Node 0 active_anon:27840kB inactive_anon:0kB active_file:59880kB inactive_file:8588kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:139756kB dirty:1392kB writeback:0kB shmem:5716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9536kB pagetables:2860kB sec_pagetables:0kB all_unreclaimable? no [ 127.206824][ T6640] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 127.213710][ T6640] lowmem_reserve[]: 0 0 3532 3532 3532 [ 127.214763][ T6640] Node 0 Normal free:2541784kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:27740kB inactive_anon:0kB active_file:59880kB inactive_file:8588kB unevictable:3072kB writepending:1392kB present:5242880kB managed:3620908kB mlocked:0kB bounce:0kB free_pcp:17212kB local_pcp:6080kB free_cma:0kB [ 127.224498][ T6640] lowmem_reserve[]: 0 0 0 0 0 [ 127.225471][ T6640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 127.228539][ T6640] Node 0 Normal: 231*4kB (UM) 458*8kB (ME) 271*16kB (UME) 204*32kB (UME) 244*64kB (UME) 51*128kB (UME) 29*256kB (UME) 8*512kB (ME) 8*1024kB (UME) 5*2048kB (ME) 604*4096kB (M) = 2541532kB [ 127.243560][ T6640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.245567][ T6640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 127.270156][ T6640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 127.272117][ T6640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 127.272148][ T6640] 20094 total pagecache pages [ 127.274896][ T6640] 0 pages in swap cache [ 127.275703][ T6640] Free swap = 124484kB [ 127.277387][ T6640] Total swap = 124996kB [ 127.278182][ T6640] 2097152 pages RAM [ 127.279048][ T6640] 0 pages HighMem/MovableOnly [ 127.280056][ T6640] 421877 pages reserved [ 127.280887][ T6640] 8192 pages cma reserved [ 127.281809][ T6640] 1 pages hwpoisoned [ 127.321300][ T6653] FAULT_INJECTION: forcing a failure. [ 127.321300][ T6653] name failslab, interval 1, probability 5, space 0, times 9991 [ 127.324350][ T6653] CPU: 0 PID: 6653 Comm: syz.5.662 Not tainted syzkaller #0 [ 127.325884][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 127.328061][ T6653] Call trace: [ 127.328792][ T6653] dump_backtrace+0x1c4/0x1f0 [ 127.329846][ T6653] show_stack+0x2c/0x3c [ 127.330750][ T6653] __dump_stack+0x30/0x40 [ 127.331641][ T6653] dump_stack_lvl+0xf4/0x15c [ 127.332602][ T6653] dump_stack+0x1c/0x5c [ 127.333493][ T6653] should_fail_ex+0x3cc/0x524 [ 127.334508][ T6653] __should_failslab+0xc0/0x11c [ 127.335543][ T6653] should_failslab+0x10/0x28 [ 127.336533][ T6653] kmem_cache_alloc+0x88/0x310 [ 127.337700][ T6653] zswap_frontswap_store+0x38c/0x11f4 [ 127.338992][ T6653] __frontswap_store+0x260/0x410 [ 127.340107][ T6653] swap_writepage+0x110/0x198 [ 127.341157][ T6653] shrink_folio_list+0x2520/0x4528 [ 127.342207][ T6653] reclaim_pages+0x580/0x7a4 [ 127.343136][ T6653] madvise_cold_or_pageout_pte_range+0x141c/0x1890 [ 127.344484][ T6653] walk_pgd_range+0x800/0xfcc [ 127.345463][ T6653] __walk_page_range+0x120/0x54c [ 127.346487][ T6653] walk_page_range+0x314/0x4ac [ 127.347473][ T6653] do_madvise+0x1a6c/0x2b24 [ 127.348448][ T6653] __arm64_sys_madvise+0xa4/0xc0 [ 127.349560][ T6653] invoke_syscall+0x98/0x290 [ 127.350603][ T6653] el0_svc_common+0x13c/0x258 [ 127.351549][ T6653] do_el0_svc+0x5c/0x134 [ 127.352545][ T6653] el0_svc+0x58/0x12c [ 127.353499][ T6653] el0t_64_sync_handler+0x84/0xf0 [ 127.354552][ T6653] el0t_64_sync+0x18c/0x190 [ 127.492478][ T4707] libceph: connect (1)[c::]:6789 error -101 [ 127.493890][ T4707] libceph: mon0 (1)[c::]:6789 connect error [ 127.525605][ T6667] overlayfs: overlapping lowerdir path [ 127.755909][ T4707] libceph: connect (1)[c::]:6789 error -101 [ 127.757933][ T4707] libceph: mon0 (1)[c::]:6789 connect error [ 127.836429][ C1] ipvlan_process_outbound: 1 callbacks suppressed [ 128.076291][ C1] net_ratelimit: 73 callbacks suppressed [ 128.266546][ T4707] libceph: connect (1)[c::]:6789 error -101 [ 128.267854][ T4707] libceph: mon0 (1)[c::]:6789 connect error [ 128.317381][ T6648] ceph: No mds server is up or the cluster is laggy [ 128.852068][ T6690] syz.5.667 (6690): drop_caches: 2 [ 129.900741][ T6733] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 130.310512][ T6742] smc: removing ib device syz2 [ 130.370604][ T6743] 9pnet_fd: Insufficient options for proto=fd [ 130.552957][ T6740] device veth0_macvtap left promiscuous mode [ 131.759518][ T6785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.694'. [ 132.036537][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.097260][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.171191][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.198296][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.538066][ T6818] netlink: 'syz.2.702': attribute type 8 has an invalid length. [ 133.063726][ T4714] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 133.098119][ T4716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 133.104931][ T4716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 133.114431][ T4714] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 133.116277][ C1] net_ratelimit: 67 callbacks suppressed [ 133.264997][ T6843] FAULT_INJECTION: forcing a failure. [ 133.264997][ T6843] name failslab, interval 1, probability 5, space 0, times 9990 [ 133.284405][ T6843] CPU: 1 PID: 6843 Comm: syz.2.708 Not tainted syzkaller #0 [ 133.285967][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 133.288002][ T6843] Call trace: [ 133.288645][ T6843] dump_backtrace+0x1c4/0x1f0 [ 133.289586][ T6843] show_stack+0x2c/0x3c [ 133.290412][ T6843] __dump_stack+0x30/0x40 [ 133.291277][ T6843] dump_stack_lvl+0xf4/0x15c [ 133.292169][ T6843] dump_stack+0x1c/0x5c [ 133.292999][ T6843] should_fail_ex+0x3cc/0x524 [ 133.293966][ T6843] __should_failslab+0xc0/0x11c [ 133.294936][ T6843] should_failslab+0x10/0x28 [ 133.295854][ T6843] slab_pre_alloc_hook+0x6c/0x31c [ 133.296844][ T6843] kmem_cache_alloc_lru+0x60/0x284 [ 133.297811][ T6843] __d_alloc+0x40/0x68c [ 133.298641][ T6843] d_alloc_parallel+0x80/0x1178 [ 133.299655][ T6843] __lookup_slow+0x114/0x38c [ 133.300650][ T6843] lookup_slow+0x60/0x84 [ 133.301535][ T6843] link_path_walk+0x818/0xcd8 [ 133.302546][ T6843] path_openat+0x1c0/0x27a0 [ 133.303455][ T6843] do_filp_open+0x198/0x38c [ 133.304327][ T6843] do_sys_openat2+0x134/0x3fc [ 133.305242][ T6843] __arm64_sys_openat+0x11c/0x150 [ 133.306232][ T6843] invoke_syscall+0x98/0x290 [ 133.307098][ T6843] el0_svc_common+0x13c/0x258 [ 133.308039][ T6843] do_el0_svc+0x5c/0x134 [ 133.308926][ T6843] el0_svc+0x58/0x12c [ 133.309683][ T6843] el0t_64_sync_handler+0x84/0xf0 [ 133.310638][ T6843] el0t_64_sync+0x18c/0x190 [ 133.367205][ T4716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 133.369199][ T4716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 133.864928][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.876931][ T4714] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 133.879052][ T4714] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 133.895403][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.905438][ T6829] ceph: No mds server is up or the cluster is laggy [ 133.925214][ T6835] ceph: No mds server is up or the cluster is laggy [ 134.451805][ T6866] FAULT_INJECTION: forcing a failure. [ 134.451805][ T6866] name failslab, interval 1, probability 5, space 0, times 9989 [ 134.471947][ T6866] CPU: 0 PID: 6866 Comm: syz.0.718 Not tainted syzkaller #0 [ 134.473515][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 134.475954][ T6866] Call trace: [ 134.476749][ T6866] dump_backtrace+0x1c4/0x1f0 [ 134.477864][ T6866] show_stack+0x2c/0x3c [ 134.478765][ T6866] __dump_stack+0x30/0x40 [ 134.479686][ T6866] dump_stack_lvl+0xf4/0x15c [ 134.480729][ T6866] dump_stack+0x1c/0x5c [ 134.481668][ T6866] should_fail_ex+0x3cc/0x524 [ 134.482700][ T6866] __should_failslab+0xc0/0x11c [ 134.483890][ T6866] should_failslab+0x10/0x28 [ 134.484907][ T6866] kmem_cache_alloc+0x88/0x310 [ 134.486024][ T6866] __kernfs_new_node+0xec/0x5fc [ 134.487210][ T6866] kernfs_new_node+0x120/0x230 [ 134.488301][ T6866] __kernfs_create_file+0x60/0x2e0 [ 134.489482][ T6866] cgroup_addrm_files+0x670/0xaac [ 134.490616][ T6866] css_populate_dir+0x168/0x330 [ 134.491777][ T6866] cgroup_mkdir+0x940/0xcf8 [ 134.492822][ T6866] kernfs_iop_mkdir+0x118/0x164 [ 134.493959][ T6866] vfs_mkdir+0x314/0x4d8 [ 134.494956][ T6866] do_mkdirat+0x1b8/0x3ec [ 134.495892][ T6866] __arm64_sys_mkdirat+0x90/0xa8 [ 134.496965][ T6866] invoke_syscall+0x98/0x290 [ 134.497967][ T6866] el0_svc_common+0x13c/0x258 [ 134.499024][ T6866] do_el0_svc+0x5c/0x134 [ 134.500036][ T6866] el0_svc+0x58/0x12c [ 134.501005][ T6866] el0t_64_sync_handler+0x84/0xf0 [ 134.502102][ T6866] el0t_64_sync+0x18c/0x190 [ 134.652299][ T6866] cgroup: cgroup_addrm_files: failed to add cgroup.clone_children, err=-12 [ 134.892738][ T6881] Dropped outbound packet type=8100 [ 134.904740][ T27] audit: type=1326 audit(135.885:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa67854a8 code=0x7ffc0000 [ 134.912091][ T27] audit: type=1326 audit(135.895:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa67854a8 code=0x7ffc0000 [ 134.917399][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.919283][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.924128][ T27] audit: type=1326 audit(135.895:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa67854a8 code=0x7ffc0000 [ 135.319069][ T6884] netlink: 288 bytes leftover after parsing attributes in process `syz.1.723'. [ 135.326105][ T6861] nvme nvme1: rdma connection establishment failed (-512) [ 135.343735][ T27] audit: type=1326 audit(135.895:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffa67854a8 code=0x7ffc0000 [ 135.362378][ T27] audit: type=1326 audit(135.895:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa67854a8 code=0x7ffc0000 [ 135.374761][ T27] audit: type=1326 audit(135.905:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa676832c code=0x7ffc0000 [ 135.380864][ T27] audit: type=1326 audit(135.905:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa67850d0 code=0x7ffc0000 [ 135.404147][ T27] audit: type=1326 audit(135.905:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa67850d0 code=0x7ffc0000 [ 135.449950][ T27] audit: type=1326 audit(136.395:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa67854a8 code=0x7ffc0000 [ 135.465582][ T27] audit: type=1326 audit(136.395:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.2.724" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa67854a8 code=0x7ffc0000 [ 135.732462][ T4342] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 136.022814][ T6914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.735'. [ 136.291551][ T6920] loop7: detected capacity change from 0 to 16384 [ 137.211474][ T6945] netlink: 288 bytes leftover after parsing attributes in process `syz.6.744'. [ 138.051867][ T6953] device syzkaller0 entered promiscuous mode [ 138.075869][ T6960] Cannot find add_set index 0 as target [ 139.143833][ T6978] jffs2: notice: (6978) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.065903][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.067999][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.328647][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.765'. [ 143.343261][ T7020] Cannot find add_set index 0 as target [ 152.929783][ T6986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.758'. [ 152.944554][ T6998] netlink: 288 bytes leftover after parsing attributes in process `syz.2.760'. [ 153.005060][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.017462][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.076006][ T7057] FAULT_INJECTION: forcing a failure. [ 153.076006][ T7057] name failslab, interval 1, probability 5, space 0, times 10000 [ 153.091262][ T7057] CPU: 1 PID: 7057 Comm: syz.6.781 Not tainted syzkaller #0 [ 153.092808][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 153.094944][ T7057] Call trace: [ 153.095686][ T7057] dump_backtrace+0x1c4/0x1f0 [ 153.096668][ T7057] show_stack+0x2c/0x3c [ 153.097547][ T7057] __dump_stack+0x30/0x40 [ 153.098445][ T7057] dump_stack_lvl+0xf4/0x15c [ 153.099383][ T7057] dump_stack+0x1c/0x5c [ 153.100253][ T7057] should_fail_ex+0x3cc/0x524 [ 153.101251][ T7057] __should_failslab+0xc0/0x11c [ 153.102365][ T7057] should_failslab+0x10/0x28 [ 153.103463][ T7057] __kmem_cache_alloc_node+0x7c/0x318 [ 153.104675][ T7057] kmalloc_trace+0x48/0x94 [ 153.105635][ T7057] tomoyo_find_next_domain+0x128/0x160c [ 153.106897][ T7057] tomoyo_bprm_check_security+0xdc/0x130 [ 153.108188][ T7057] security_bprm_check+0x6c/0xa8 [ 153.109320][ T7057] bprm_execve+0x8b8/0x1588 [ 153.110284][ T7057] do_execveat_common+0x668/0x7fc [ 153.111312][ T7057] __arm64_sys_execveat+0xd8/0xf4 [ 153.112375][ T7057] invoke_syscall+0x98/0x290 [ 153.113379][ T7057] el0_svc_common+0x13c/0x258 [ 153.114462][ T7057] do_el0_svc+0x5c/0x134 [ 153.115455][ T7057] el0_svc+0x58/0x12c [ 153.116333][ T7057] el0t_64_sync_handler+0x84/0xf0 [ 153.117473][ T7057] el0t_64_sync+0x18c/0x190 [ 153.199327][ T4344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.202768][ T4344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.207119][ T4344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.210075][ T4344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.211928][ T4344] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.213627][ T4344] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.657665][ T7081] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 153.669134][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.743790][ T7089] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 154.732672][ T7089] sched: RT throttling activated [ 155.048197][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.112622][ T7101] random: crng reseeded on system resumption [ 155.159470][ T7062] rxe_eth0 speed is unknown, defaulting to 1000 [ 155.449034][ T4344] Bluetooth: hci6: command 0x0409 tx timeout [ 155.520039][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.551418][ T7112] FAULT_INJECTION: forcing a failure. [ 155.551418][ T7112] name failslab, interval 1, probability 5, space 0, times 9999 [ 155.562861][ T7112] CPU: 1 PID: 7112 Comm: syz.0.793 Not tainted syzkaller #0 [ 155.564504][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 155.566847][ T7112] Call trace: [ 155.567595][ T7112] dump_backtrace+0x1c4/0x1f0 [ 155.568627][ T7112] show_stack+0x2c/0x3c [ 155.569499][ T7112] __dump_stack+0x30/0x40 [ 155.570433][ T7112] dump_stack_lvl+0xf4/0x15c [ 155.571395][ T7112] dump_stack+0x1c/0x5c [ 155.572216][ T7112] should_fail_ex+0x3cc/0x524 [ 155.573147][ T7112] __should_failslab+0xc0/0x11c [ 155.574178][ T7112] should_failslab+0x10/0x28 [ 155.575218][ T7112] slab_pre_alloc_hook+0x6c/0x31c [ 155.576338][ T7112] kmem_cache_alloc_lru+0x60/0x284 [ 155.577471][ T7112] sock_alloc_inode+0x2c/0xcc [ 155.578508][ T7112] new_inode_pseudo+0x68/0x1cc [ 155.579585][ T7112] __sock_create+0x138/0x8a8 [ 155.580474][ T7112] sock_create_kern+0x4c/0x64 [ 155.581503][ T7112] smc_create+0x148/0x438 [ 155.582473][ T7112] __sock_create+0x448/0x8a8 [ 155.583523][ T7112] __sys_socket+0xc0/0x1b0 [ 155.584509][ T7112] __arm64_sys_socket+0x7c/0x94 [ 155.585583][ T7112] invoke_syscall+0x98/0x290 [ 155.586579][ T7112] el0_svc_common+0x13c/0x258 [ 155.587537][ T7112] do_el0_svc+0x5c/0x134 [ 155.588389][ T7112] el0_svc+0x58/0x12c [ 155.589195][ T7112] el0t_64_sync_handler+0x84/0xf0 [ 155.590259][ T7112] el0t_64_sync+0x18c/0x190 [ 155.616415][ T7112] net_ratelimit: 23 callbacks suppressed [ 155.616432][ T7112] socket: no more sockets [ 155.639747][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.647177][ T7062] chnl_net:caif_netlink_parms(): no params data found [ 155.668380][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.670156][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.672228][ T7062] device bridge_slave_0 entered promiscuous mode [ 155.675603][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.678156][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.680357][ T7062] device bridge_slave_1 entered promiscuous mode [ 155.688137][ T7062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.691757][ T7062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.701730][ T7062] team0: Port device team_slave_0 added [ 155.704163][ T7062] team0: Port device team_slave_1 added [ 155.710768][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.712298][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.718264][ T7062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.721429][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.722878][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.728895][ T7062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.767646][ T7062] device hsr_slave_0 entered promiscuous mode [ 155.806499][ T7062] device hsr_slave_1 entered promiscuous mode [ 155.847245][ T7062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.850511][ T7062] Cannot create hsr debugfs directory [ 155.963630][ T7062] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 156.657175][ T7062] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 156.688039][ T7142] FAULT_INJECTION: forcing a failure. [ 156.688039][ T7142] name failslab, interval 1, probability 5, space 0, times 9998 [ 156.690989][ T7142] CPU: 1 PID: 7142 Comm: syz.2.795 Not tainted syzkaller #0 [ 156.692500][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 156.694739][ T7142] Call trace: [ 156.695445][ T7142] dump_backtrace+0x1c4/0x1f0 [ 156.696475][ T7142] show_stack+0x2c/0x3c [ 156.697360][ T7142] __dump_stack+0x30/0x40 [ 156.698278][ T7142] dump_stack_lvl+0xf4/0x15c [ 156.699225][ T7142] dump_stack+0x1c/0x5c [ 156.700090][ T7142] should_fail_ex+0x3cc/0x524 [ 156.701093][ T7142] __should_failslab+0xc0/0x11c [ 156.702182][ T7142] should_failslab+0x10/0x28 [ 156.703197][ T7142] __kmem_cache_alloc_node+0x7c/0x318 [ 156.704386][ T7142] kmalloc_trace+0x48/0x94 [ 156.704838][ T7133] netlink: 60 bytes leftover after parsing attributes in process `syz.6.794'. [ 156.705364][ T7142] tomoyo_find_next_domain+0x128/0x160c [ 156.708548][ T7142] tomoyo_bprm_check_security+0xdc/0x130 [ 156.709763][ T7142] security_bprm_check+0x6c/0xa8 [ 156.710923][ T7142] bprm_execve+0x8b8/0x1588 [ 156.711946][ T7142] do_execveat_common+0x668/0x7fc [ 156.713094][ T7142] __arm64_sys_execveat+0xd8/0xf4 [ 156.714225][ T7142] invoke_syscall+0x98/0x290 [ 156.715258][ T7142] el0_svc_common+0x13c/0x258 [ 156.716307][ T7142] do_el0_svc+0x5c/0x134 [ 156.717144][ T7142] el0_svc+0x58/0x12c [ 156.717987][ T7142] el0t_64_sync_handler+0x84/0xf0 [ 156.719073][ T7142] el0t_64_sync+0x18c/0x190 [ 156.746859][ T7062] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 156.814113][ T7062] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 156.826803][ T7147] FAULT_INJECTION: forcing a failure. [ 156.826803][ T7147] name failslab, interval 1, probability 5, space 0, times 9997 [ 156.829564][ T7147] CPU: 0 PID: 7147 Comm: syz.2.797 Not tainted syzkaller #0 [ 156.831124][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 156.833394][ T7147] Call trace: [ 156.834128][ T7147] dump_backtrace+0x1c4/0x1f0 [ 156.835217][ T7147] show_stack+0x2c/0x3c [ 156.836177][ T7147] __dump_stack+0x30/0x40 [ 156.837181][ T7147] dump_stack_lvl+0xf4/0x15c [ 156.838247][ T7147] dump_stack+0x1c/0x5c [ 156.839207][ T7147] should_fail_ex+0x3cc/0x524 [ 156.840245][ T7147] __should_failslab+0xc0/0x11c [ 156.841317][ T7147] should_failslab+0x10/0x28 [ 156.842329][ T7147] kmem_cache_alloc+0x88/0x310 [ 156.843451][ T7147] dst_alloc+0xfc/0x16c [ 156.844368][ T7147] ip6_pol_route+0x988/0x1110 [ 156.845321][ T7147] ip6_pol_route_output+0x60/0x94 [ 156.846345][ T7147] fib6_rule_lookup+0x280/0x4c0 [ 156.847329][ T7147] ip6_route_output_flags_noref+0x254/0x314 [ 156.848617][ T7147] ip6_route_output_flags+0xe4/0x360 [ 156.849770][ T7147] ip6_dst_lookup_tail+0x16c/0x1374 [ 156.850912][ T7147] ip6_dst_lookup_flow+0x54/0xe0 [ 156.852012][ T7147] ip6_datagram_dst_update+0x5c8/0xac0 [ 156.853208][ T7147] __ip6_datagram_connect+0x83c/0xd14 [ 156.854349][ T7147] ip6_datagram_connect+0x40/0x64 [ 156.855379][ T7147] inet_dgram_connect+0x17c/0x354 [ 156.856400][ T7147] __sys_connect+0x28c/0x2b4 [ 156.857337][ T7147] __arm64_sys_connect+0x7c/0x94 [ 156.858327][ T7147] invoke_syscall+0x98/0x290 [ 156.859198][ T7147] el0_svc_common+0x13c/0x258 [ 156.860117][ T7147] do_el0_svc+0x5c/0x134 [ 156.860945][ T7147] el0_svc+0x58/0x12c [ 156.861722][ T7147] el0t_64_sync_handler+0x84/0xf0 [ 156.862672][ T7147] el0t_64_sync+0x18c/0x190 [ 156.933422][ T7154] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 157.560611][ T4344] Bluetooth: hci6: command 0x041b tx timeout [ 158.609797][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.619009][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.620763][ T5511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.627132][ T7062] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.696452][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.698459][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.700587][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.702068][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.703845][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.705772][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.707977][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.709546][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.714146][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.716063][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.720166][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.722294][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.734343][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.736391][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.743486][ T7062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.745556][ T7062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.754395][ T7195] random: crng reseeded on system resumption [ 158.761724][ T7192] FAULT_INJECTION: forcing a failure. [ 158.761724][ T7192] name failslab, interval 1, probability 5, space 0, times 10000 [ 158.764656][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.766822][ T7192] CPU: 1 PID: 7192 Comm: syz.0.807 Not tainted syzkaller #0 [ 158.768358][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 158.770305][ T7192] Call trace: [ 158.770946][ T7192] dump_backtrace+0x1c4/0x1f0 [ 158.771902][ T7192] show_stack+0x2c/0x3c [ 158.772748][ T7192] __dump_stack+0x30/0x40 [ 158.773646][ T7192] dump_stack_lvl+0xf4/0x15c [ 158.774603][ T7192] dump_stack+0x1c/0x5c [ 158.775473][ T7192] should_fail_ex+0x3cc/0x524 [ 158.776481][ T7192] __should_failslab+0xc0/0x11c [ 158.777556][ T7192] should_failslab+0x10/0x28 [ 158.778639][ T7192] __kmem_cache_alloc_node+0x7c/0x318 [ 158.779846][ T7192] kmalloc_trace+0x48/0x94 [ 158.780886][ T7192] tomoyo_find_next_domain+0x128/0x160c [ 158.782132][ T7192] tomoyo_bprm_check_security+0xdc/0x130 [ 158.783455][ T7192] security_bprm_check+0x6c/0xa8 [ 158.784621][ T7192] bprm_execve+0x8b8/0x1588 [ 158.785673][ T7192] do_execveat_common+0x668/0x7fc [ 158.786856][ T7192] __arm64_sys_execveat+0xd8/0xf4 [ 158.788067][ T7192] invoke_syscall+0x98/0x290 [ 158.789142][ T7192] el0_svc_common+0x13c/0x258 [ 158.790126][ T7192] do_el0_svc+0x5c/0x134 [ 158.791069][ T7192] el0_svc+0x58/0x12c [ 158.791849][ T7192] el0t_64_sync_handler+0x84/0xf0 [ 158.792966][ T7192] el0t_64_sync+0x18c/0x190 [ 158.795927][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.801173][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.802924][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.804763][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.807192][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.809111][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.521849][ T7204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.809'. [ 159.596750][ T4344] Bluetooth: hci6: command 0x040f tx timeout [ 159.778568][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.780788][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.782321][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.784623][ T7241] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 159.801399][ T7241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.872772][ T7241] bond1: (slave ip6erspan0): making interface the new active one [ 159.885708][ T7241] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 159.892935][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 159.985964][ T7258] device syzkaller1 entered promiscuous mode [ 160.375760][ T7276] FAULT_INJECTION: forcing a failure. [ 160.375760][ T7276] name fail_futex, interval 1, probability 0, space 0, times 0 [ 160.381156][ T7276] CPU: 1 PID: 7276 Comm: syz.6.820 Not tainted syzkaller #0 [ 160.382494][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 160.384499][ T7276] Call trace: [ 160.385146][ T7276] dump_backtrace+0x1c4/0x1f0 [ 160.386097][ T7276] show_stack+0x2c/0x3c [ 160.387015][ T7276] __dump_stack+0x30/0x40 [ 160.387972][ T7276] dump_stack_lvl+0xf4/0x15c [ 160.389058][ T7276] dump_stack+0x1c/0x5c [ 160.390026][ T7276] should_fail_ex+0x3cc/0x524 [ 160.391005][ T7276] should_fail+0x14/0x24 [ 160.391935][ T7276] get_futex_key+0x904/0xec0 [ 160.392978][ T7276] futex_wait_setup+0xbc/0x320 [ 160.394044][ T7276] futex_wait+0x178/0x488 [ 160.395017][ T7276] do_futex+0x2e8/0x340 [ 160.395962][ T7276] __arm64_sys_futex+0x390/0x414 [ 160.397070][ T7276] invoke_syscall+0x98/0x290 [ 160.398091][ T7276] el0_svc_common+0x13c/0x258 [ 160.399103][ T7276] do_el0_svc+0x5c/0x134 [ 160.400028][ T7276] el0_svc+0x58/0x12c [ 160.400932][ T7276] el0t_64_sync_handler+0x84/0xf0 [ 160.402062][ T7276] el0t_64_sync+0x18c/0x190 [ 160.894399][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.905893][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.039342][ T4342] Bluetooth: hci6: command 0x0419 tx timeout [ 162.286147][ T7303] device-mapper: table: 248:5: raid: 'raid10_format' is an invalid parameter for this RAID type (-EINVAL) [ 162.296364][ T7303] device-mapper: ioctl: error adding target to table [ 162.441837][ T7296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.823'. [ 162.461787][ T7062] device veth0_vlan entered promiscuous mode [ 162.465644][ T4344] Bluetooth: hci1: unexpected event for opcode 0x042e [ 162.473326][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.475203][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.483120][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.500714][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.511856][ T7062] device veth1_vlan entered promiscuous mode [ 162.540456][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 162.542479][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 162.544211][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.546057][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.561863][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.571975][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.624932][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.642126][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.663507][ T7062] device veth0_macvtap entered promiscuous mode [ 162.671642][ T7062] device veth1_macvtap entered promiscuous mode [ 162.736034][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.751769][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.753817][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.780652][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.792264][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.802389][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.804496][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.821090][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.827947][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.834885][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.844806][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.853151][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.862964][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.872133][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.885108][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.924037][ T39] device hsr_slave_0 left promiscuous mode [ 162.947598][ T39] device hsr_slave_1 left promiscuous mode [ 163.040189][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.041996][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.044051][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.045543][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.050244][ T39] device bridge_slave_1 left promiscuous mode [ 163.052136][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.079094][ T39] device bridge_slave_0 left promiscuous mode [ 163.080366][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.216416][ T39] device veth1_macvtap left promiscuous mode [ 163.217789][ T39] device veth0_macvtap left promiscuous mode [ 163.219150][ T39] device veth1_vlan left promiscuous mode [ 163.220422][ T39] device veth0_vlan left promiscuous mode [ 163.445540][ T7351] Cannot find add_set index 0 as target [ 164.584512][ T7382] netlink: 'syz.0.850': attribute type 11 has an invalid length. [ 166.550267][ T39] team0 (unregistering): Port device team_slave_1 removed [ 166.747388][ T39] team0 (unregistering): Port device team_slave_0 removed [ 166.926752][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.147801][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.718056][ T39] bond0 (unregistering): Released all slaves [ 168.988553][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.990799][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.992632][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.994551][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.997147][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.999350][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.001349][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.003291][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.005273][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.007672][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.009696][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.011721][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.013656][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.015653][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.017754][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.019849][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.022553][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.024026][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.025998][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.052062][ T7384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.067304][ T7384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.189781][ T7062] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.191654][ T7062] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.193468][ T7062] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.195540][ T7062] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.209723][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 169.410761][ T4680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.412502][ T4680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.414200][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.713371][ T7301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.714992][ T7301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.716756][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.203948][ T7440] syz.7.779 (7440): drop_caches: 2 [ 170.393761][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 170.395673][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 170.795904][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 170.866733][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 170.868523][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 170.886574][ T7444] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 172.991477][ T7444] ±ÿ: renamed from lo [ 173.164098][ T7489] FAULT_INJECTION: forcing a failure. [ 173.164098][ T7489] name fail_futex, interval 1, probability 0, space 0, times 0 [ 173.172875][ T7489] CPU: 1 PID: 7489 Comm: syz.7.876 Not tainted syzkaller #0 [ 173.174359][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 173.176543][ T7489] Call trace: [ 173.177323][ T7489] dump_backtrace+0x1c4/0x1f0 [ 173.178425][ T7489] show_stack+0x2c/0x3c [ 173.179388][ T7489] __dump_stack+0x30/0x40 [ 173.180379][ T7489] dump_stack_lvl+0xf4/0x15c [ 173.181419][ T7489] dump_stack+0x1c/0x5c [ 173.182365][ T7489] should_fail_ex+0x3cc/0x524 [ 173.183442][ T7489] should_fail+0x14/0x24 [ 173.184416][ T7489] get_futex_key+0x904/0xec0 [ 173.185506][ T7489] futex_wait_setup+0xbc/0x320 [ 173.186643][ T7489] futex_wait+0x178/0x488 [ 173.187642][ T7489] do_futex+0x2e8/0x340 [ 173.188501][ T7489] __arm64_sys_futex+0x390/0x414 [ 173.189502][ T7489] invoke_syscall+0x98/0x290 [ 173.190453][ T7489] el0_svc_common+0x13c/0x258 [ 173.191400][ T7489] do_el0_svc+0x5c/0x134 [ 173.192322][ T7489] el0_svc+0x58/0x12c [ 173.193163][ T7489] el0t_64_sync_handler+0x84/0xf0 [ 173.194234][ T7489] el0t_64_sync+0x18c/0x190 [ 173.767415][ T7517] ERROR: device name not specified. [ 173.970418][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.139213][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.281139][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.386074][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 174.609804][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.789530][ T7539] device syzkaller0 entered promiscuous mode [ 174.925661][ T7555] FAULT_INJECTION: forcing a failure. [ 174.925661][ T7555] name failslab, interval 1, probability 5, space 0, times 10000 [ 174.929045][ T7555] CPU: 1 PID: 7555 Comm: syz.1.898 Not tainted syzkaller #0 [ 174.930603][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 174.932779][ T7555] Call trace: [ 174.933512][ T7555] dump_backtrace+0x1c4/0x1f0 [ 174.934507][ T7555] show_stack+0x2c/0x3c [ 174.935459][ T7555] __dump_stack+0x30/0x40 [ 174.936478][ T7555] dump_stack_lvl+0xf4/0x15c [ 174.937557][ T7555] dump_stack+0x1c/0x5c [ 174.938511][ T7555] should_fail_ex+0x3cc/0x524 [ 174.939539][ T7555] __should_failslab+0xc0/0x11c [ 174.940641][ T7555] should_failslab+0x10/0x28 [ 174.941711][ T7555] kmem_cache_alloc+0x88/0x310 [ 174.942836][ T7555] security_inode_alloc+0x38/0x11c [ 174.943993][ T7555] inode_init_always+0x6c8/0xb28 [ 174.945074][ T7555] new_inode_pseudo+0x7c/0x1cc [ 174.946057][ T7555] new_inode+0x38/0x174 [ 174.946834][ T7555] shmem_get_inode+0x2cc/0xa8c [ 174.947744][ T7555] shmem_mknod+0x64/0x1c4 [ 174.948640][ T7555] shmem_mkdir+0x38/0x78 [ 174.949507][ T7555] vfs_mkdir+0x314/0x4d8 [ 174.950451][ T7555] do_mkdirat+0x1b8/0x3ec [ 174.951434][ T7555] __arm64_sys_mkdirat+0x90/0xa8 [ 174.952575][ T7555] invoke_syscall+0x98/0x290 [ 174.953558][ T7555] el0_svc_common+0x13c/0x258 [ 174.954584][ T7555] do_el0_svc+0x5c/0x134 [ 174.955520][ T7555] el0_svc+0x58/0x12c [ 174.956423][ T7555] el0t_64_sync_handler+0x84/0xf0 [ 174.957558][ T7555] el0t_64_sync+0x18c/0x190 [ 174.991930][ T7557] netlink: 48 bytes leftover after parsing attributes in process `syz.7.886'. [ 175.290530][ T7555] FAULT_INJECTION: forcing a failure. [ 175.290530][ T7555] name failslab, interval 1, probability 5, space 0, times 9999 [ 175.295469][ T7555] CPU: 0 PID: 7555 Comm: syz.1.898 Not tainted syzkaller #0 [ 175.296926][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 175.299022][ T7555] Call trace: [ 175.299732][ T7555] dump_backtrace+0x1c4/0x1f0 [ 175.300777][ T7555] show_stack+0x2c/0x3c [ 175.301720][ T7555] __dump_stack+0x30/0x40 [ 175.302737][ T7555] dump_stack_lvl+0xf4/0x15c [ 175.303775][ T7555] dump_stack+0x1c/0x5c [ 175.304720][ T7555] should_fail_ex+0x3cc/0x524 [ 175.305764][ T7555] __should_failslab+0xc0/0x11c [ 175.306837][ T7555] should_failslab+0x10/0x28 [ 175.307793][ T7555] slab_pre_alloc_hook+0x6c/0x31c [ 175.308903][ T7555] kmem_cache_alloc_lru+0x60/0x284 [ 175.309987][ T7555] __d_alloc+0x40/0x68c [ 175.310850][ T7555] d_alloc_parallel+0x80/0x1178 [ 175.311829][ T7555] path_openat+0x6f8/0x27a0 [ 175.312779][ T7555] do_filp_open+0x198/0x38c [ 175.313730][ T7555] do_sys_openat2+0x134/0x3fc [ 175.314740][ T7555] __arm64_sys_openat+0x11c/0x150 [ 175.315791][ T7555] invoke_syscall+0x98/0x290 [ 175.316729][ T7555] el0_svc_common+0x13c/0x258 [ 175.317722][ T7555] do_el0_svc+0x5c/0x134 [ 175.318628][ T7555] el0_svc+0x58/0x12c [ 175.319493][ T7555] el0t_64_sync_handler+0x84/0xf0 [ 175.320594][ T7555] el0t_64_sync+0x18c/0x190 [ 175.342384][ T7555] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 175.344535][ T7555] FAULT_INJECTION: forcing a failure. [ 175.344535][ T7555] name failslab, interval 1, probability 5, space 0, times 9998 [ 175.347814][ T7555] CPU: 0 PID: 7555 Comm: syz.1.898 Not tainted syzkaller #0 [ 175.349273][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 175.351585][ T7555] Call trace: [ 175.352350][ T7555] dump_backtrace+0x1c4/0x1f0 [ 175.353437][ T7555] show_stack+0x2c/0x3c [ 175.354325][ T7555] __dump_stack+0x30/0x40 [ 175.355274][ T7555] dump_stack_lvl+0xf4/0x15c [ 175.356294][ T7555] dump_stack+0x1c/0x5c [ 175.357190][ T7555] should_fail_ex+0x3cc/0x524 [ 175.358194][ T7555] __should_failslab+0xc0/0x11c [ 175.359272][ T7555] should_failslab+0x10/0x28 [ 175.360330][ T7555] kmem_cache_alloc_node+0x8c/0x344 [ 175.361488][ T7555] __alloc_skb+0x128/0x728 [ 175.362523][ T7555] rtmsg_fib+0xcc/0x388 [ 175.363474][ T7555] fib_table_delete+0xa18/0xcb8 [ 175.364614][ T7555] fib_magic+0x294/0x344 [ 175.365593][ T7555] fib_del_ifaddr+0xda4/0x11c4 [ 175.366725][ T7555] fib_inetaddr_event+0xb4/0x1f8 [ 175.367816][ T7555] blocking_notifier_call_chain+0xf4/0x19c [ 175.369196][ T7555] __inet_del_ifa+0x7ac/0xeb8 [ 175.370328][ T7555] inetdev_event+0x440/0x12dc [ 175.371473][ T7555] raw_notifier_call_chain+0xd8/0x168 [ 175.372723][ T7555] call_netdevice_notifiers_mtu+0x120/0x1b4 [ 175.373994][ T7555] dev_set_mtu_ext+0x3a4/0x528 [ 175.374980][ T7555] do_setlink+0x72c/0x2158 [ 175.375894][ T7555] rtnl_setlink+0x314/0x408 [ 175.376784][ T7555] rtnetlink_rcv_msg+0x694/0xcc4 [ 175.377833][ T7555] netlink_rcv_skb+0x220/0x3ec [ 175.378836][ T7555] rtnetlink_rcv+0x28/0x38 [ 175.379828][ T7555] netlink_unicast+0x5fc/0x80c [ 175.380893][ T7555] netlink_sendmsg+0x6f0/0x9d8 [ 175.382033][ T7555] sock_write_iter+0x268/0x368 [ 175.383122][ T7555] do_iter_write+0x520/0x93c [ 175.384163][ T7555] do_writev+0x200/0x3d0 [ 175.385120][ T7555] __arm64_sys_writev+0x80/0x94 [ 175.386155][ T7555] invoke_syscall+0x98/0x290 [ 175.387139][ T7555] el0_svc_common+0x13c/0x258 [ 175.388140][ T7555] do_el0_svc+0x5c/0x134 [ 175.389025][ T7555] el0_svc+0x58/0x12c [ 175.389851][ T7555] el0t_64_sync_handler+0x84/0xf0 [ 175.390934][ T7555] el0t_64_sync+0x18c/0x190 [ 175.427575][ T7555] FAULT_INJECTION: forcing a failure. [ 175.427575][ T7555] name failslab, interval 1, probability 5, space 0, times 9997 [ 175.436476][ T7555] CPU: 1 PID: 7555 Comm: syz.1.898 Not tainted syzkaller #0 [ 175.438127][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 175.440453][ T7555] Call trace: [ 175.441212][ T7555] dump_backtrace+0x1c4/0x1f0 [ 175.442225][ T7555] show_stack+0x2c/0x3c [ 175.443113][ T7555] __dump_stack+0x30/0x40 [ 175.443963][ T7555] dump_stack_lvl+0xf4/0x15c [ 175.444963][ T7555] dump_stack+0x1c/0x5c [ 175.445853][ T7555] should_fail_ex+0x3cc/0x524 [ 175.446920][ T7555] __should_failslab+0xc0/0x11c [ 175.448090][ T7555] should_failslab+0x10/0x28 [ 175.449020][ T7555] __kmem_cache_alloc_node+0x7c/0x318 [ 175.450132][ T7555] __kmalloc+0xc4/0x180 [ 175.450911][ T7555] tnode_new+0xbc/0x318 [ 175.451729][ T7555] resize+0x6d0/0x251c [ 175.452512][ T7555] fib_remove_alias+0x270/0x3c4 [ 175.453477][ T7555] fib_table_delete+0xa64/0xcb8 [ 175.454463][ T7555] fib_magic+0x294/0x344 [ 175.455287][ T7555] fib_del_ifaddr+0xe28/0x11c4 [ 175.456250][ T7555] fib_inetaddr_event+0xb4/0x1f8 [ 175.457273][ T7555] blocking_notifier_call_chain+0xf4/0x19c [ 175.458418][ T7555] __inet_del_ifa+0x7ac/0xeb8 [ 175.459337][ T7555] inetdev_event+0x440/0x12dc [ 175.460234][ T7555] raw_notifier_call_chain+0xd8/0x168 [ 175.461237][ T7555] call_netdevice_notifiers_mtu+0x120/0x1b4 [ 175.462378][ T7555] dev_set_mtu_ext+0x3a4/0x528 [ 175.463319][ T7555] do_setlink+0x72c/0x2158 [ 175.464149][ T7555] rtnl_setlink+0x314/0x408 [ 175.465033][ T7555] rtnetlink_rcv_msg+0x694/0xcc4 [ 175.466098][ T7555] netlink_rcv_skb+0x220/0x3ec [ 175.467143][ T7555] rtnetlink_rcv+0x28/0x38 [ 175.468145][ T7555] netlink_unicast+0x5fc/0x80c [ 175.469128][ T7555] netlink_sendmsg+0x6f0/0x9d8 [ 175.470157][ T7555] sock_write_iter+0x268/0x368 [ 175.471195][ T7555] do_iter_write+0x520/0x93c [ 175.472149][ T7555] do_writev+0x200/0x3d0 [ 175.473048][ T7555] __arm64_sys_writev+0x80/0x94 [ 175.474108][ T7555] invoke_syscall+0x98/0x290 [ 175.475129][ T7555] el0_svc_common+0x13c/0x258 [ 175.476115][ T7555] do_el0_svc+0x5c/0x134 [ 175.477053][ T7555] el0_svc+0x58/0x12c [ 175.477946][ T7555] el0t_64_sync_handler+0x84/0xf0 [ 175.479033][ T7555] el0t_64_sync+0x18c/0x190 [ 176.442027][ T4344] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 176.442053][ T4342] Bluetooth: hci5: command 0x1003 tx timeout [ 177.408123][ T7627] netlink: 48 bytes leftover after parsing attributes in process `syz.0.903'. [ 177.686716][ T7630] FAULT_INJECTION: forcing a failure. [ 177.686716][ T7630] name failslab, interval 1, probability 5, space 0, times 10000 [ 177.696344][ T7630] CPU: 0 PID: 7630 Comm: syz.6.904 Not tainted syzkaller #0 [ 177.697897][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 177.700047][ T7630] Call trace: [ 177.700723][ T7630] dump_backtrace+0x1c4/0x1f0 [ 177.701799][ T7630] show_stack+0x2c/0x3c [ 177.702729][ T7630] __dump_stack+0x30/0x40 [ 177.703739][ T7630] dump_stack_lvl+0xf4/0x15c [ 177.704771][ T7630] dump_stack+0x1c/0x5c [ 177.705693][ T7630] should_fail_ex+0x3cc/0x524 [ 177.706725][ T7630] __should_failslab+0xc0/0x11c [ 177.707760][ T7630] should_failslab+0x10/0x28 [ 177.708837][ T7630] __kmem_cache_alloc_node+0x7c/0x318 [ 177.710065][ T7630] __kmalloc+0xc4/0x180 [ 177.711025][ T7630] __list_lru_init+0xa4/0x50c [ 177.712123][ T7630] alloc_super+0x63c/0x840 [ 177.713162][ T7630] sget_fc+0x28c/0x658 [ 177.714126][ T7630] kernfs_get_tree+0x168/0x688 [ 177.715246][ T7630] sysfs_get_tree+0x4c/0x124 [ 177.716212][ T7630] vfs_get_tree+0x90/0x278 [ 177.717186][ T7630] do_new_mount+0x228/0x818 [ 177.718190][ T7630] path_mount+0x5ac/0xe6c [ 177.719183][ T7630] __arm64_sys_mount+0x4a0/0x5a0 [ 177.720292][ T7630] invoke_syscall+0x98/0x290 [ 177.721331][ T7630] el0_svc_common+0x13c/0x258 [ 177.722385][ T7630] do_el0_svc+0x5c/0x134 [ 177.723324][ T7630] el0_svc+0x58/0x12c [ 177.724214][ T7630] el0t_64_sync_handler+0x84/0xf0 [ 177.725233][ T7630] el0t_64_sync+0x18c/0x190 [ 178.233235][ T7630] netlink: 'syz.6.904': attribute type 4 has an invalid length. [ 178.282647][ T4769] libceph: connect (2)127.0.0.1:6789 error -101 [ 178.283963][ T4769] libceph: ceph_tcp_connect failed: -101 [ 178.285436][ T4769] libceph: mon0 (2)127.0.0.1:6789 connect error [ 178.420472][ T7672] netlink: 'syz.6.916': attribute type 1 has an invalid length. [ 178.450197][ T7672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.495604][ T7674] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.504349][ T7672] bond1: (slave veth3): Enslaving as an active interface with a down link [ 178.540853][ T7672] bond1: (slave dummy0): making interface the new active one [ 178.543837][ T7672] device dummy0 entered promiscuous mode [ 178.546566][ T4763] libceph: connect (2)127.0.0.1:6789 error -101 [ 178.548151][ T4763] libceph: ceph_tcp_connect failed: -101 [ 178.549417][ T4763] libceph: mon0 (2)127.0.0.1:6789 connect error [ 178.551899][ T7672] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 178.609472][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 178.829377][ T7702] netlink: 48 bytes leftover after parsing attributes in process `syz.2.921'. [ 179.080428][ T4763] libceph: connect (2)127.0.0.1:6789 error -101 [ 179.081878][ T4763] libceph: ceph_tcp_connect failed: -101 [ 179.083049][ T4763] libceph: mon0 (2)127.0.0.1:6789 connect error [ 179.091564][ T7654] ceph: No mds server is up or the cluster is laggy [ 179.240334][ T22] libceph: connect (2)127.0.0.1:6789 error -101 [ 179.241823][ T22] libceph: ceph_tcp_connect failed: -101 [ 179.243118][ T22] libceph: mon0 (2)127.0.0.1:6789 connect error [ 179.421442][ T7729] FAULT_INJECTION: forcing a failure. [ 179.421442][ T7729] name failslab, interval 1, probability 5, space 0, times 10000 [ 179.425472][ T7729] CPU: 0 PID: 7729 Comm: syz.7.926 Not tainted syzkaller #0 [ 179.427002][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 179.429083][ T7729] Call trace: [ 179.429744][ T7729] dump_backtrace+0x1c4/0x1f0 [ 179.430701][ T7729] show_stack+0x2c/0x3c [ 179.431567][ T7729] __dump_stack+0x30/0x40 [ 179.432447][ T7729] dump_stack_lvl+0xf4/0x15c [ 179.433402][ T7729] dump_stack+0x1c/0x5c [ 179.434245][ T7729] should_fail_ex+0x3cc/0x524 [ 179.435140][ T7729] __should_failslab+0xc0/0x11c [ 179.436093][ T7729] should_failslab+0x10/0x28 [ 179.437190][ T7729] __kmem_cache_alloc_node+0x7c/0x318 [ 179.438230][ T7729] kmalloc_trace+0x48/0x94 [ 179.439113][ T7729] kernfs_get_tree+0x84/0x688 [ 179.440022][ T7729] sysfs_get_tree+0x4c/0x124 [ 179.440912][ T7729] vfs_get_tree+0x90/0x278 [ 179.441767][ T7729] do_new_mount+0x228/0x818 [ 179.442649][ T7729] path_mount+0x5ac/0xe6c [ 179.443506][ T7729] __arm64_sys_mount+0x4a0/0x5a0 [ 179.444495][ T7729] invoke_syscall+0x98/0x290 [ 179.445355][ T7729] el0_svc_common+0x13c/0x258 [ 179.446279][ T7729] do_el0_svc+0x5c/0x134 [ 179.447173][ T7729] el0_svc+0x58/0x12c [ 179.447970][ T7729] el0t_64_sync_handler+0x84/0xf0 [ 179.448994][ T7729] el0t_64_sync+0x18c/0x190 [ 179.506429][ T4409] libceph: connect (2)127.0.0.1:6789 error -101 [ 179.507976][ T4409] libceph: ceph_tcp_connect failed: -101 [ 179.509280][ T4409] libceph: mon0 (2)127.0.0.1:6789 connect error [ 179.669304][ T7740] netlink: 'syz.7.926': attribute type 4 has an invalid length. [ 179.683940][ T7754] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 179.698833][ T7754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.705753][ T7756] bond2: (slave veth3): Enslaving as an active interface with a down link [ 180.016415][ T4409] libceph: connect (2)127.0.0.1:6789 error -101 [ 180.017827][ T4409] libceph: ceph_tcp_connect failed: -101 [ 180.018975][ T4409] libceph: mon0 (2)127.0.0.1:6789 connect error [ 180.054502][ T7754] team0: Port device dummy0 removed [ 180.055726][ T7704] ceph: No mds server is up or the cluster is laggy [ 180.073553][ T7754] bond2: (slave dummy0): Enslaving as an active interface with a down link [ 180.078412][ T39] device hsr_slave_0 left promiscuous mode [ 180.107157][ T39] device hsr_slave_1 left promiscuous mode [ 180.210748][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.212329][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.214710][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.218023][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.222294][ T39] device bridge_slave_1 left promiscuous mode [ 180.226038][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.592268][ T39] device bridge_slave_0 left promiscuous mode [ 180.593655][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.687847][ T7788] overlayfs: invalid redirect (./file2) [ 180.746587][ T39] device veth1_macvtap left promiscuous mode [ 180.747784][ T39] device veth0_macvtap left promiscuous mode [ 180.749219][ T39] device veth1_vlan left promiscuous mode [ 180.750485][ T39] device veth0_vlan left promiscuous mode [ 181.057276][ T7805] device-mapper: clone metadata: Superblock check failed: magic 1623043, expected 2331148132 [ 181.059461][ T7805] device-mapper: block manager: superblock validator check failed for block 0 [ 181.061251][ T7805] device-mapper: clone metadata: Failed to read_lock superblock [ 181.159863][ T7805] device-mapper: table: 248:0: clone: Failed to load metadata (-EILSEQ) [ 181.161773][ T7805] device-mapper: ioctl: error adding target to table [ 181.225259][ T7810] FAULT_INJECTION: forcing a failure. [ 181.225259][ T7810] name fail_futex, interval 1, probability 0, space 0, times 0 [ 181.286345][ T7810] CPU: 1 PID: 7810 Comm: syz.6.947 Not tainted syzkaller #0 [ 181.287903][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 181.290119][ T7810] Call trace: [ 181.290839][ T7810] dump_backtrace+0x1c4/0x1f0 [ 181.291897][ T7810] show_stack+0x2c/0x3c [ 181.292793][ T7810] __dump_stack+0x30/0x40 [ 181.293794][ T7810] dump_stack_lvl+0xf4/0x15c [ 181.294866][ T7810] dump_stack+0x1c/0x5c [ 181.295856][ T7810] should_fail_ex+0x3cc/0x524 [ 181.296983][ T7810] should_fail+0x14/0x24 [ 181.298012][ T7810] get_futex_key+0x904/0xec0 [ 181.299110][ T7810] futex_wait_setup+0xbc/0x320 [ 181.300178][ T7810] futex_wait+0x178/0x488 [ 181.301127][ T7810] do_futex+0x2e8/0x340 [ 181.302006][ T7810] __arm64_sys_futex+0x390/0x414 [ 181.303115][ T7810] invoke_syscall+0x98/0x290 [ 181.304109][ T7810] el0_svc_common+0x13c/0x258 [ 181.305128][ T7810] do_el0_svc+0x5c/0x134 [ 181.306007][ T7810] el0_svc+0x58/0x12c [ 181.306845][ T7810] el0t_64_sync_handler+0x84/0xf0 [ 181.307940][ T7810] el0t_64_sync+0x18c/0x190 [ 181.655990][ T7818] syz.2.946 (7818): drop_caches: 2 [ 181.742797][ T4763] libceph: connect (2)127.0.0.1:6789 error -101 [ 181.744292][ T4763] libceph: ceph_tcp_connect failed: -101 [ 181.745613][ T4763] libceph: mon0 (2)127.0.0.1:6789 connect error [ 181.851019][ T7829] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 182.245492][ T4763] libceph: connect (2)127.0.0.1:6789 error -101 [ 182.267523][ T4763] libceph: ceph_tcp_connect failed: -101 [ 182.268876][ T4763] libceph: mon0 (2)127.0.0.1:6789 connect error [ 182.733781][ T7822] ceph: No mds server is up or the cluster is laggy [ 182.778451][ T4344] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 183.516996][ T4680] net_ratelimit: 23 callbacks suppressed [ 183.544024][ T7857] Cannot find add_set index 0 as target [ 183.782074][ T7868] FAULT_INJECTION: forcing a failure. [ 183.782074][ T7868] name fail_futex, interval 1, probability 0, space 0, times 0 [ 183.784820][ T7868] CPU: 1 PID: 7868 Comm: syz.6.964 Not tainted syzkaller #0 [ 183.786394][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 183.788740][ T7868] Call trace: [ 183.789515][ T7868] dump_backtrace+0x1c4/0x1f0 [ 183.790627][ T7868] show_stack+0x2c/0x3c [ 183.791516][ T7868] __dump_stack+0x30/0x40 [ 183.792483][ T7868] dump_stack_lvl+0xf4/0x15c [ 183.793533][ T7868] dump_stack+0x1c/0x5c [ 183.794475][ T7868] should_fail_ex+0x3cc/0x524 [ 183.795550][ T7868] should_fail+0x14/0x24 [ 183.796523][ T7868] get_futex_key+0x904/0xec0 [ 183.797563][ T7868] futex_wake+0x10c/0x458 [ 183.798551][ T7868] do_futex+0x2c4/0x340 [ 183.799442][ T7868] mm_release+0x190/0x274 [ 183.800389][ T7868] exit_mm_release+0x30/0x40 [ 183.801424][ T7868] exit_mm+0x50/0x290 [ 183.802339][ T7868] do_exit+0x4d0/0x19ac [ 183.803271][ T7868] do_group_exit+0x198/0x238 [ 183.804263][ T7868] get_signal+0x11f4/0x133c [ 183.805268][ T7868] do_notify_resume+0x364/0x2c84 [ 183.806374][ T7868] el0_svc+0x9c/0x12c [ 183.807262][ T7868] el0t_64_sync_handler+0x84/0xf0 [ 183.808382][ T7868] el0t_64_sync+0x18c/0x190 [ 184.185638][ T7870] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 185.824539][ T39] team0 (unregistering): Port device team_slave_1 removed [ 186.027811][ T39] team0 (unregistering): Port device team_slave_0 removed [ 186.187043][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.408619][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.799409][ T4344] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 186.801331][ T4344] Bluetooth: hci3: Injecting HCI hardware error event [ 186.802927][ T4344] Bluetooth: hci3: hardware error 0x00 [ 187.358535][ T2068] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.359926][ T2068] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.937550][ T39] bond0 (unregistering): Released all slaves [ 188.227349][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.229257][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.242319][ T7907] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 188.636261][ C1] net_ratelimit: 57 callbacks suppressed [ 188.955184][ T4344] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 189.010962][ T7923] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 189.772502][ T114] libceph: connect (2)127.0.0.1:6789 error -101 [ 189.774104][ T114] libceph: ceph_tcp_connect failed: -101 [ 189.778093][ T114] libceph: mon0 (2)127.0.0.1:6789 connect error [ 189.780838][ T114] libceph: connect (2)127.0.0.1:6789 error -101 [ 189.783298][ T114] libceph: ceph_tcp_connect failed: -101 [ 189.786373][ T114] libceph: mon0 (2)127.0.0.1:6789 connect error [ 189.993397][ T7952] ERROR: device name not specified. [ 190.046443][ T114] libceph: connect (2)127.0.0.1:6789 error -101 [ 190.047826][ T114] libceph: ceph_tcp_connect failed: -101 [ 190.049153][ T114] libceph: mon0 (2)127.0.0.1:6789 connect error [ 190.587069][ T7932] ceph: No mds server is up or the cluster is laggy [ 191.446487][ T4412] libceph: connect (2)127.0.0.1:6789 error -101 [ 191.447909][ T4412] libceph: ceph_tcp_connect failed: -101 [ 191.449170][ T4412] libceph: mon0 (2)127.0.0.1:6789 connect error [ 191.961670][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.963647][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.036394][ T7968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.991'. [ 192.043695][ T4680] device dummy0 left promiscuous mode [ 192.330926][ T7978] FAULT_INJECTION: forcing a failure. [ 192.330926][ T7978] name failslab, interval 1, probability 5, space 0, times 10000 [ 192.336572][ T7978] CPU: 1 PID: 7978 Comm: syz.6.995 Not tainted syzkaller #0 [ 192.338259][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 192.340529][ T7978] Call trace: [ 192.341207][ T7978] dump_backtrace+0x1c4/0x1f0 [ 192.342338][ T7978] show_stack+0x2c/0x3c [ 192.343356][ T7978] __dump_stack+0x30/0x40 [ 192.344321][ T7978] dump_stack_lvl+0xf4/0x15c [ 192.345337][ T7978] dump_stack+0x1c/0x5c [ 192.346286][ T7978] should_fail_ex+0x3cc/0x524 [ 192.347331][ T7978] __should_failslab+0xc0/0x11c [ 192.348419][ T7978] should_failslab+0x10/0x28 [ 192.349453][ T7978] __kmem_cache_alloc_node+0x7c/0x318 [ 192.350623][ T7978] kmalloc_trace+0x48/0x94 [ 192.351596][ T7978] vicodec_open+0xe4/0x9b0 [ 192.352537][ T7978] v4l2_open+0x1a8/0x2bc [ 192.353449][ T7978] chrdev_open+0x3d0/0x51c [ 192.354381][ T7978] do_dentry_open+0x738/0xf8c [ 192.355400][ T7978] vfs_open+0x7c/0x90 [ 192.356234][ T7978] path_openat+0x1fc0/0x27a0 [ 192.357184][ T7978] do_filp_open+0x198/0x38c [ 192.358123][ T7978] do_sys_openat2+0x134/0x3fc [ 192.359132][ T7978] __arm64_sys_openat+0x11c/0x150 [ 192.360224][ T7978] invoke_syscall+0x98/0x290 [ 192.361226][ T7978] el0_svc_common+0x13c/0x258 [ 192.362251][ T7978] do_el0_svc+0x5c/0x134 [ 192.363131][ T7978] el0_svc+0x58/0x12c [ 192.363915][ T7978] el0t_64_sync_handler+0x84/0xf0 [ 192.364896][ T7978] el0t_64_sync+0x18c/0x190 [ 192.800501][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.829711][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.931104][ T8006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1006'. [ 193.292018][ T8013] Cannot find add_set index 0 as target [ 193.676279][ C1] net_ratelimit: 49 callbacks suppressed [ 193.693390][ T4707] libceph: connect (2)127.0.0.1:6789 error -101 [ 193.694923][ T4707] libceph: ceph_tcp_connect failed: -101 [ 193.696139][ T4707] libceph: mon0 (2)127.0.0.1:6789 connect error [ 193.734281][ T8037] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 193.801351][ T8043] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.893858][ T8049] FAULT_INJECTION: forcing a failure. [ 193.893858][ T8049] name failslab, interval 1, probability 5, space 0, times 9999 [ 193.906871][ T8049] CPU: 1 PID: 8049 Comm: syz.7.1010 Not tainted syzkaller #0 [ 193.908382][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 193.908413][ T8049] Call trace: [ 193.908418][ T8049] dump_backtrace+0x1c4/0x1f0 [ 193.912310][ T8049] show_stack+0x2c/0x3c [ 193.913218][ T8049] __dump_stack+0x30/0x40 [ 193.914126][ T8049] dump_stack_lvl+0xf4/0x15c [ 193.915152][ T8049] dump_stack+0x1c/0x5c [ 193.916095][ T8049] should_fail_ex+0x3cc/0x524 [ 193.917079][ T8049] __should_failslab+0xc0/0x11c [ 193.918165][ T8049] should_failslab+0x10/0x28 [ 193.919161][ T8049] __kmem_cache_alloc_node+0x7c/0x318 [ 193.920287][ T8049] kmalloc_trace+0x48/0x94 [ 193.921230][ T8049] vicodec_open+0xe4/0x9b0 [ 193.922190][ T8049] v4l2_open+0x1a8/0x2bc [ 193.923146][ T8049] chrdev_open+0x3d0/0x51c [ 193.924086][ T8049] do_dentry_open+0x738/0xf8c [ 193.925096][ T8049] vfs_open+0x7c/0x90 [ 193.926012][ T8049] path_openat+0x1fc0/0x27a0 [ 193.927018][ T8049] do_filp_open+0x198/0x38c [ 193.928024][ T8049] do_sys_openat2+0x134/0x3fc [ 193.929088][ T8049] __arm64_sys_openat+0x11c/0x150 [ 193.930174][ T8049] invoke_syscall+0x98/0x290 [ 193.931166][ T8049] el0_svc_common+0x13c/0x258 [ 193.932182][ T8049] do_el0_svc+0x5c/0x134 [ 193.933060][ T8049] el0_svc+0x58/0x12c [ 193.933956][ T8049] el0t_64_sync_handler+0x84/0xf0 [ 193.935087][ T8049] el0t_64_sync+0x18c/0x190 [ 193.945811][ T8048] ERROR: device name not specified. [ 193.966708][ T4707] libceph: connect (2)127.0.0.1:6789 error -101 [ 193.968163][ T4707] libceph: ceph_tcp_connect failed: -101 [ 193.969340][ T4707] libceph: mon0 (2)127.0.0.1:6789 connect error [ 194.142683][ T8061] Cannot find add_set index 0 as target [ 194.476563][ T4714] libceph: connect (2)127.0.0.1:6789 error -101 [ 194.478021][ T4714] libceph: ceph_tcp_connect failed: -101 [ 194.479287][ T4714] libceph: mon0 (2)127.0.0.1:6789 connect error [ 194.500646][ T8031] ceph: No mds server is up or the cluster is laggy [ 194.641391][ T8078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1018'. [ 195.041388][ T8087] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 195.064903][ T8089] FAULT_INJECTION: forcing a failure. [ 195.064903][ T8089] name failslab, interval 1, probability 5, space 0, times 9998 [ 195.077677][ T8089] CPU: 0 PID: 8089 Comm: syz.2.1022 Not tainted syzkaller #0 [ 195.079373][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 195.081598][ T8089] Call trace: [ 195.082300][ T8089] dump_backtrace+0x1c4/0x1f0 [ 195.083278][ T8089] show_stack+0x2c/0x3c [ 195.084175][ T8089] __dump_stack+0x30/0x40 [ 195.085245][ T8089] dump_stack_lvl+0xf4/0x15c [ 195.086294][ T8089] dump_stack+0x1c/0x5c [ 195.087222][ T8089] should_fail_ex+0x3cc/0x524 [ 195.088209][ T8089] __should_failslab+0xc0/0x11c [ 195.089236][ T8089] should_failslab+0x10/0x28 [ 195.090189][ T8089] __kmem_cache_alloc_node+0x7c/0x318 [ 195.091350][ T8089] kmalloc_trace+0x48/0x94 [ 195.092288][ T8089] vicodec_open+0xe4/0x9b0 [ 195.093230][ T8089] v4l2_open+0x1a8/0x2bc [ 195.094144][ T8089] chrdev_open+0x3d0/0x51c [ 195.095147][ T8089] do_dentry_open+0x738/0xf8c [ 195.096237][ T8089] vfs_open+0x7c/0x90 [ 195.097128][ T8089] path_openat+0x1fc0/0x27a0 [ 195.098179][ T8089] do_filp_open+0x198/0x38c [ 195.099172][ T8089] do_sys_openat2+0x134/0x3fc [ 195.100211][ T8089] __arm64_sys_openat+0x11c/0x150 [ 195.101312][ T8089] invoke_syscall+0x98/0x290 [ 195.102374][ T8089] el0_svc_common+0x13c/0x258 [ 195.103354][ T8089] do_el0_svc+0x5c/0x134 [ 195.104264][ T8089] el0_svc+0x58/0x12c [ 195.105099][ T8089] el0t_64_sync_handler+0x84/0xf0 [ 195.106193][ T8089] el0t_64_sync+0x18c/0x190 [ 195.119137][ T8096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.132714][ T8096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.612220][ T8122] FAULT_INJECTION: forcing a failure. [ 195.612220][ T8122] name failslab, interval 1, probability 5, space 0, times 9997 [ 195.615626][ T8122] CPU: 0 PID: 8122 Comm: syz.0.1030 Not tainted syzkaller #0 [ 195.617149][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 195.619218][ T8122] Call trace: [ 195.619894][ T8122] dump_backtrace+0x1c4/0x1f0 [ 195.620956][ T8122] show_stack+0x2c/0x3c [ 195.621883][ T8122] __dump_stack+0x30/0x40 [ 195.622868][ T8122] dump_stack_lvl+0xf4/0x15c [ 195.623967][ T8122] dump_stack+0x1c/0x5c [ 195.624945][ T8122] should_fail_ex+0x3cc/0x524 [ 195.626063][ T8122] __should_failslab+0xc0/0x11c [ 195.627229][ T8122] should_failslab+0x10/0x28 [ 195.628311][ T8122] __kmem_cache_alloc_node+0x7c/0x318 [ 195.629662][ T8122] kmalloc_trace+0x48/0x94 [ 195.630685][ T8122] v4l2_fh_open+0x70/0x20c [ 195.631726][ T8122] v4l2_open+0x1a8/0x2bc [ 195.632769][ T8122] chrdev_open+0x3d0/0x51c [ 195.633883][ T8122] do_dentry_open+0x738/0xf8c [ 195.634948][ T8122] vfs_open+0x7c/0x90 [ 195.635825][ T8122] path_openat+0x1fc0/0x27a0 [ 195.636826][ T8122] do_filp_open+0x198/0x38c [ 195.637811][ T8122] do_sys_openat2+0x134/0x3fc [ 195.638806][ T8122] __arm64_sys_openat+0x11c/0x150 [ 195.639874][ T8122] invoke_syscall+0x98/0x290 [ 195.640877][ T8122] el0_svc_common+0x13c/0x258 [ 195.641869][ T8122] do_el0_svc+0x5c/0x134 [ 195.641888][ T8122] el0_svc+0x58/0x12c [ 195.643672][ T8122] el0t_64_sync_handler+0x84/0xf0 [ 195.644782][ T8122] el0t_64_sync+0x18c/0x190 [ 195.998645][ T4344] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 196.001038][ T4344] CPU: 0 PID: 4344 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 196.002647][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 196.004905][ T4344] Workqueue: hci1 hci_rx_work [ 196.006015][ T4344] Call trace: [ 196.006761][ T4344] dump_backtrace+0x1c4/0x1f0 [ 196.007849][ T4344] show_stack+0x2c/0x3c [ 196.008763][ T4344] __dump_stack+0x30/0x40 [ 196.009712][ T4344] dump_stack_lvl+0xf4/0x15c [ 196.010751][ T4344] dump_stack+0x1c/0x5c [ 196.011673][ T4344] sysfs_create_dir_ns+0x244/0x264 [ 196.012761][ T4344] kobject_add_internal+0x5a8/0xb18 [ 196.013842][ T4344] kobject_add+0x144/0x20c [ 196.014756][ T4344] device_add+0x3dc/0xe4c [ 196.015644][ T4344] hci_conn_add_sysfs+0xb8/0x1bc [ 196.016658][ T4344] hci_conn_complete_evt+0x8b4/0x1250 [ 196.017759][ T4344] hci_event_packet+0x4f0/0xb30 [ 196.018797][ T4344] hci_rx_work+0x310/0xa70 [ 196.019723][ T4344] process_one_work+0x7e4/0x13bc [ 196.020707][ T4344] worker_thread+0x8cc/0xfe8 [ 196.021627][ T4344] kthread+0x254/0x2e0 [ 196.022414][ T4344] ret_from_fork+0x10/0x20 [ 196.026319][ T4344] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 196.028976][ T4344] Bluetooth: hci1: failed to register connection device [ 196.573716][ T8152] ERROR: device name not specified. [ 197.599705][ C0] ipvlan_process_outbound: 3 callbacks suppressed [ 198.665207][ T4344] Bluetooth: hci1: command 0x0409 tx timeout [ 198.693760][ T8215] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 198.751240][ T4763] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 198.759493][ T4342] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 198.876269][ C1] net_ratelimit: 63 callbacks suppressed [ 199.012737][ T4763] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 199.517044][ T4763] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 199.570478][ T8220] ceph: No mds server is up or the cluster is laggy [ 199.657306][ T8246] gfs2: not a GFS2 filesystem [ 200.100770][ T8265] FAULT_INJECTION: forcing a failure. [ 200.100770][ T8265] name failslab, interval 1, probability 5, space 0, times 9996 [ 200.103855][ T8265] CPU: 0 PID: 8265 Comm: syz.0.1069 Not tainted syzkaller #0 [ 200.105551][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 200.107880][ T8265] Call trace: [ 200.108625][ T8265] dump_backtrace+0x1c4/0x1f0 [ 200.109700][ T8265] show_stack+0x2c/0x3c [ 200.110652][ T8265] __dump_stack+0x30/0x40 [ 200.111660][ T8265] dump_stack_lvl+0xf4/0x15c [ 200.112756][ T8265] dump_stack+0x1c/0x5c [ 200.113672][ T8265] should_fail_ex+0x3cc/0x524 [ 200.114752][ T8265] __should_failslab+0xc0/0x11c [ 200.115806][ T8265] should_failslab+0x10/0x28 [ 200.116745][ T8265] __kmem_cache_alloc_node+0x7c/0x318 [ 200.117799][ T8265] __kmalloc+0xc4/0x180 [ 200.118664][ T8265] handler_new_ref+0x1dc/0x804 [ 200.119653][ T8265] v4l2_ctrl_new+0xdf8/0x1284 [ 200.120676][ T8265] v4l2_ctrl_new_custom+0x460/0x670 [ 200.121770][ T8265] vicodec_open+0x2c0/0x9b0 [ 200.122749][ T8265] v4l2_open+0x1a8/0x2bc [ 200.123682][ T8265] chrdev_open+0x3d0/0x51c [ 200.124675][ T8265] do_dentry_open+0x738/0xf8c [ 200.125686][ T8265] vfs_open+0x7c/0x90 [ 200.126556][ T8265] path_openat+0x1fc0/0x27a0 [ 200.127574][ T8265] do_filp_open+0x198/0x38c [ 200.128631][ T8265] do_sys_openat2+0x134/0x3fc [ 200.129597][ T8265] __arm64_sys_openat+0x11c/0x150 [ 200.130658][ T8265] invoke_syscall+0x98/0x290 [ 200.131748][ T8265] el0_svc_common+0x13c/0x258 [ 200.132864][ T8265] do_el0_svc+0x5c/0x134 [ 200.133813][ T8265] el0_svc+0x58/0x12c [ 200.134697][ T8265] el0t_64_sync_handler+0x84/0xf0 [ 200.135698][ T8265] el0t_64_sync+0x18c/0x190 [ 200.155377][ T4707] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 200.158412][ T4707] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 200.428940][ T4409] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 200.552366][ T8274] device syzkaller0 entered promiscuous mode [ 200.716432][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 200.887275][ T8261] ceph: No mds server is up or the cluster is laggy [ 200.987956][ T4707] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 202.631378][ T8339] md: array md0 already initialised! [ 202.654530][ T8339] md0: detected capacity change from 0 to 16384 [ 202.708797][ T8345] device syzkaller0 entered promiscuous mode [ 202.743691][ T8339] md0: detected capacity change from 16384 to 0 [ 202.745099][ T8339] md: md0 stopped. [ 202.796370][ T4342] Bluetooth: hci1: command 0x040f tx timeout [ 203.087569][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1097'. [ 203.393401][ T8380] FAULT_INJECTION: forcing a failure. [ 203.393401][ T8380] name failslab, interval 1, probability 5, space 0, times 9995 [ 203.407202][ T8380] CPU: 1 PID: 8380 Comm: syz.1.1101 Not tainted syzkaller #0 [ 203.408756][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 203.410966][ T8380] Call trace: [ 203.411670][ T8380] dump_backtrace+0x1c4/0x1f0 [ 203.412625][ T8380] show_stack+0x2c/0x3c [ 203.413524][ T8380] __dump_stack+0x30/0x40 [ 203.414475][ T8380] dump_stack_lvl+0xf4/0x15c [ 203.415491][ T8380] dump_stack+0x1c/0x5c [ 203.416416][ T8380] should_fail_ex+0x3cc/0x524 [ 203.417458][ T8380] __should_failslab+0xc0/0x11c [ 203.418457][ T8380] should_failslab+0x10/0x28 [ 203.419484][ T8380] __kmem_cache_alloc_node+0x7c/0x318 [ 203.420733][ T8380] __kmalloc+0xc4/0x180 [ 203.421687][ T8380] handler_new_ref+0x1dc/0x804 [ 203.422766][ T8380] v4l2_ctrl_new+0xdf8/0x1284 [ 203.423732][ T8380] v4l2_ctrl_new_custom+0x460/0x670 [ 203.424809][ T8380] vicodec_open+0x2c0/0x9b0 [ 203.425805][ T8380] v4l2_open+0x1a8/0x2bc [ 203.426659][ T8380] chrdev_open+0x3d0/0x51c [ 203.427623][ T8380] do_dentry_open+0x738/0xf8c [ 203.428665][ T8380] vfs_open+0x7c/0x90 [ 203.429519][ T8380] path_openat+0x1fc0/0x27a0 [ 203.430525][ T8380] do_filp_open+0x198/0x38c [ 203.431489][ T8380] do_sys_openat2+0x134/0x3fc [ 203.432454][ T8380] __arm64_sys_openat+0x11c/0x150 [ 203.433437][ T8380] invoke_syscall+0x98/0x290 [ 203.434382][ T8380] el0_svc_common+0x13c/0x258 [ 203.435343][ T8380] do_el0_svc+0x5c/0x134 [ 203.436248][ T8380] el0_svc+0x58/0x12c [ 203.437103][ T8380] el0t_64_sync_handler+0x84/0xf0 [ 203.437130][ T8380] el0t_64_sync+0x18c/0x190 [ 203.863416][ T8397] device syzkaller0 entered promiscuous mode [ 203.903296][ T8405] device syzkaller0 entered promiscuous mode [ 203.916274][ C1] net_ratelimit: 57 callbacks suppressed [ 204.078758][ T4412] libceph: connect (1)127.0.0.1:6789 error -101 [ 204.080279][ T4412] libceph: mon0 (1)127.0.0.1:6789 connect error [ 204.147779][ T4707] libceph: connect (1)127.0.0.1:6789 error -101 [ 204.149278][ T4707] libceph: mon0 (1)127.0.0.1:6789 connect error [ 204.152203][ T4707] libceph: connect (1)127.0.0.1:6789 error -101 [ 204.153735][ T4707] libceph: mon0 (1)127.0.0.1:6789 connect error [ 204.222752][ T8425] FAULT_INJECTION: forcing a failure. [ 204.222752][ T8425] name failslab, interval 1, probability 5, space 0, times 9994 [ 204.240032][ T8425] CPU: 0 PID: 8425 Comm: syz.0.1114 Not tainted syzkaller #0 [ 204.241564][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 204.243806][ T8425] Call trace: [ 204.244543][ T8425] dump_backtrace+0x1c4/0x1f0 [ 204.245596][ T8425] show_stack+0x2c/0x3c [ 204.246545][ T8425] __dump_stack+0x30/0x40 [ 204.247515][ T8425] dump_stack_lvl+0xf4/0x15c [ 204.248541][ T8425] dump_stack+0x1c/0x5c [ 204.249464][ T8425] should_fail_ex+0x3cc/0x524 [ 204.250468][ T8425] __should_failslab+0xc0/0x11c [ 204.251581][ T8425] should_failslab+0x10/0x28 [ 204.252602][ T8425] __kmem_cache_alloc_node+0x7c/0x318 [ 204.253807][ T8425] __kmalloc+0xc4/0x180 [ 204.254659][ T8425] handler_new_ref+0x1dc/0x804 [ 204.255638][ T8425] v4l2_ctrl_new+0xdf8/0x1284 [ 204.256623][ T8425] v4l2_ctrl_new_std+0x1f8/0x29c [ 204.257595][ T8425] vicodec_open+0x244/0x9b0 [ 204.258476][ T8425] v4l2_open+0x1a8/0x2bc [ 204.259365][ T8425] chrdev_open+0x3d0/0x51c [ 204.260268][ T8425] do_dentry_open+0x738/0xf8c [ 204.261245][ T8425] vfs_open+0x7c/0x90 [ 204.262107][ T8425] path_openat+0x1fc0/0x27a0 [ 204.263106][ T8425] do_filp_open+0x198/0x38c [ 204.264070][ T8425] do_sys_openat2+0x134/0x3fc [ 204.265050][ T8425] __arm64_sys_openat+0x11c/0x150 [ 204.266076][ T8425] invoke_syscall+0x98/0x290 [ 204.267096][ T8425] el0_svc_common+0x13c/0x258 [ 204.268167][ T8425] do_el0_svc+0x5c/0x134 [ 204.269105][ T8425] el0_svc+0x58/0x12c [ 204.270006][ T8425] el0t_64_sync_handler+0x84/0xf0 [ 204.271100][ T8425] el0t_64_sync+0x18c/0x190 [ 204.337903][ T4412] libceph: connect (1)127.0.0.1:6789 error -101 [ 204.339432][ T4412] libceph: mon0 (1)127.0.0.1:6789 connect error [ 204.456934][ T4714] libceph: connect (1)127.0.0.1:6789 error -101 [ 204.458654][ T4714] libceph: mon0 (1)127.0.0.1:6789 connect error [ 204.847570][ T4412] libceph: connect (1)127.0.0.1:6789 error -101 [ 204.849539][ T4412] libceph: mon0 (1)127.0.0.1:6789 connect error [ 204.876385][ T4344] Bluetooth: hci1: command 0x0409 tx timeout [ 204.915586][ T8450] device syzkaller0 entered promiscuous mode [ 204.926907][ T8419] ceph: No mds server is up or the cluster is laggy [ 204.927463][ T8412] ceph: No mds server is up or the cluster is laggy [ 204.967827][ T22] libceph: connect (1)127.0.0.1:6789 error -101 [ 204.969409][ T22] libceph: mon0 (1)127.0.0.1:6789 connect error [ 205.570968][ T8466] FAULT_INJECTION: forcing a failure. [ 205.570968][ T8466] name failslab, interval 1, probability 5, space 0, times 9993 [ 205.580041][ T8466] CPU: 0 PID: 8466 Comm: syz.0.1127 Not tainted syzkaller #0 [ 205.581504][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 205.583543][ T8466] Call trace: [ 205.584212][ T8466] dump_backtrace+0x1c4/0x1f0 [ 205.585104][ T8466] show_stack+0x2c/0x3c [ 205.585935][ T8466] __dump_stack+0x30/0x40 [ 205.586873][ T8466] dump_stack_lvl+0xf4/0x15c [ 205.587800][ T8466] dump_stack+0x1c/0x5c [ 205.588597][ T8466] should_fail_ex+0x3cc/0x524 [ 205.589527][ T8466] __should_failslab+0xc0/0x11c [ 205.590518][ T8466] should_failslab+0x10/0x28 [ 205.591492][ T8466] __kmem_cache_alloc_node+0x7c/0x318 [ 205.592684][ T8466] __kmalloc+0xc4/0x180 [ 205.593582][ T8466] handler_new_ref+0x1dc/0x804 [ 205.594601][ T8466] v4l2_ctrl_new+0xdf8/0x1284 [ 205.595609][ T8466] v4l2_ctrl_new_std+0x1f8/0x29c [ 205.596645][ T8466] vicodec_open+0x244/0x9b0 [ 205.597555][ T8466] v4l2_open+0x1a8/0x2bc [ 205.598474][ T8466] chrdev_open+0x3d0/0x51c [ 205.599409][ T8466] do_dentry_open+0x738/0xf8c [ 205.600410][ T8466] vfs_open+0x7c/0x90 [ 205.601271][ T8466] path_openat+0x1fc0/0x27a0 [ 205.602260][ T8466] do_filp_open+0x198/0x38c [ 205.603185][ T8466] do_sys_openat2+0x134/0x3fc [ 205.604139][ T8466] __arm64_sys_openat+0x11c/0x150 [ 205.605142][ T8466] invoke_syscall+0x98/0x290 [ 205.606056][ T8466] el0_svc_common+0x13c/0x258 [ 205.607024][ T8466] do_el0_svc+0x5c/0x134 [ 205.607918][ T8466] el0_svc+0x58/0x12c [ 205.608753][ T8466] el0t_64_sync_handler+0x84/0xf0 [ 205.609842][ T8466] el0t_64_sync+0x18c/0x190 [ 206.739749][ T4714] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 206.742107][ T4714] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 206.765871][ T8510] ceph: No mds server is up or the cluster is laggy [ 207.000249][ T4707] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 207.198461][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.203113][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.123305][ T22] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 208.159782][ T8573] ceph: No mds server is up or the cluster is laggy [ 208.724638][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.731953][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.036388][ C1] net_ratelimit: 56 callbacks suppressed [ 209.252719][ T8631] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.377563][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.385837][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.763262][ T8718] FAULT_INJECTION: forcing a failure. [ 210.763262][ T8718] name failslab, interval 1, probability 5, space 0, times 9992 [ 210.766111][ T8718] CPU: 1 PID: 8718 Comm: syz.7.1196 Not tainted syzkaller #0 [ 210.767584][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 210.769709][ T8718] Call trace: [ 210.770363][ T8718] dump_backtrace+0x1c4/0x1f0 [ 210.771410][ T8718] show_stack+0x2c/0x3c [ 210.772344][ T8718] __dump_stack+0x30/0x40 [ 210.773296][ T8718] dump_stack_lvl+0xf4/0x15c [ 210.774309][ T8718] dump_stack+0x1c/0x5c [ 210.775252][ T8718] should_fail_ex+0x3cc/0x524 [ 210.776284][ T8718] __should_failslab+0xc0/0x11c [ 210.777410][ T8718] should_failslab+0x10/0x28 [ 210.778473][ T8718] kmem_cache_alloc+0x88/0x310 [ 210.779554][ T8718] copy_mm+0x128/0x11e4 [ 210.780510][ T8718] copy_process+0x16d8/0x38b4 [ 210.781531][ T8718] kernel_clone+0x1ec/0x938 [ 210.782471][ T8718] __arm64_sys_clone+0x15c/0x1c8 [ 210.783537][ T8718] invoke_syscall+0x98/0x290 [ 210.784595][ T8718] el0_svc_common+0x13c/0x258 [ 210.784619][ T8718] do_el0_svc+0x5c/0x134 [ 210.785792][ T8718] el0_svc+0x58/0x12c [ 210.785814][ T8718] el0t_64_sync_handler+0x84/0xf0 [ 210.785828][ T8718] el0t_64_sync+0x18c/0x190 [ 211.850062][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.853184][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.018161][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.022772][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.236282][ C1] net_ratelimit: 63 callbacks suppressed [ 214.850623][ T8781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 215.043987][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1231'. [ 215.452869][ T8937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.460691][ T8937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.421806][ T8960] device syzkaller0 entered promiscuous mode [ 216.637545][ T8983] ------------[ cut here ]------------ [ 216.639053][ T8983] kernel BUG at net/sunrpc/svc.c:605! [ 216.640245][ T8983] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 216.640658][ C0] tcp_conntracks: [ 216.641794][ T8983] Modules linked in: [ 216.641808][ T8983] CPU: 1 PID: 8983 Comm: syz.7.1257 Not tainted syzkaller #0 [ 216.642559][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 216.643325][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 216.648002][ T8983] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 216.649733][ T8983] pc : svc_destroy+0x178/0x184 [ 216.650818][ T8983] lr : svc_destroy+0x178/0x184 [ 216.651901][ T8983] sp : ffff800023287930 [ 216.652829][ T8983] x29: ffff800023287930 x28: 1fffe0001b5c92df x27: ffff0000dd4b8000 [ 216.654612][ T8983] x26: dfff800000000000 x25: ffff700004650f2c x24: ffff800023287960 [ 216.656445][ T8983] x23: ffff0000dc1053c0 x22: dfff800000000000 x21: 0000000000000001 [ 216.658227][ T8983] x20: ffff0000f656b868 x19: ffff0000f656b850 x18: 1fffe00033c2597e [ 216.660001][ T8983] x17: ffff8000163dd000 x16: ffff8000082de324 x15: 000000000004ffff [ 216.661821][ T8983] x14: 0000000000000001 x13: 1fffe00033c25af0 x12: 0000000000080000 [ 216.663559][ T8983] x11: 000000000002bf18 x10: ffff800024309000 x9 : ffff800010f10bc8 [ 216.665178][ T8983] x8 : 000000000002bf19 x7 : ffff8000083bc6f0 x6 : 0000000000000000 [ 216.666636][ T8983] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 216.668370][ T8983] x2 : 0000000000000006 x1 : 0000000000000000 x0 : 0000000000000000 [ 216.670120][ T8983] dump_backtrace(regs = 000000009f57f122 tsk = 0000000000000000) [ 216.671768][ T8983] Call trace: [ 216.672451][ T8983] svc_destroy+0x178/0x184 [ 216.673433][ T8983] write_ports+0x850/0x9f0 [ 216.674382][ T8983] nfsctl_transaction_write+0x114/0x164 [ 216.675598][ T8983] vfs_write+0x2a8/0x7c8 [ 216.676299][ C0] nf_conntrack: normal packet for 00000000d7ae4b2f [ 216.676535][ T8983] ksys_write+0x12c/0x228 [ 216.677849][ C0] tcp_conntracks: [ 216.678724][ T8983] __arm64_sys_write+0x7c/0x90 [ 216.679485][ C0] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 216.680607][ T8983] invoke_syscall+0x98/0x290 [ 216.682806][ T8983] el0_svc_common+0x13c/0x258 [ 216.683948][ T8983] do_el0_svc+0x5c/0x134 [ 216.684963][ T8983] el0_svc+0x58/0x12c [ 216.685911][ T8983] el0t_64_sync_handler+0x84/0xf0 [ 216.687051][ T8983] el0t_64_sync+0x18c/0x190 [ 216.688085][ T8983] Code: 91026260 97c355e3 17ffffc8 97c3556e (d4210000) [ 216.689757][ T8983] ---[ end trace 0000000000000000 ]--- [ 216.752356][ T8987] kcov: kcov_start: t = ffff0000cf155400, size = 524288, area = ffff800023389000 [ 216.806787][ T8988] kcov: kcov_start: t = ffff0000e0973800, size = 524288, area = ffff80002470a000 [ 216.859772][ T8989] kcov: kcov_start: t = ffff0000d9353800, size = 524288, area = ffff800025bc9000 [ 217.019869][ T8990] kcov: kcov_start: t = ffff0000d9355400, size = 524288, area = ffff80002c4c2000 [ 217.022998][ T8990] nf_conntrack: clean_from_lists(00000000d5ab29c2) [ 217.024286][ T8990] nf_conntrack: nf_ct_destroy(00000000d5ab29c2) [ 217.025509][ T8990] nf_conntrack: nf_ct_destroy: returning ct=00000000d5ab29c2 to slab [ 217.027478][ T8990] nf_conntrack: clean_from_lists(0000000056c6e96d) [ 217.028777][ T8990] nf_conntrack: nf_ct_destroy(0000000056c6e96d) [ 217.030084][ T8990] nf_conntrack: nf_ct_destroy: returning ct=0000000056c6e96d to slab [ 217.065466][ T8983] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 217.066960][ T8983] SMP: stopping secondary CPUs [ 217.067975][ T8983] Kernel Offset: disabled [ 217.068858][ T8983] CPU features: 0x050000,000f0097,a65bfea7 [ 217.070071][ T8983] Memory Limit: none [ 217.402102][ T8983] Rebooting in 86400 seconds..