last executing test programs: 4m40.61127427s ago: executing program 3 (id=10): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = eventfd2(0x8, 0x0) read(r3, 0x0, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x2) recvmmsg(r1, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d06, &(0x7f0000000500)="0000020000000000000002") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000040000"], 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000340)=0x7, 0x4) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r6, 0xee309000) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000003c0)=0x86, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000640)={0xa, 0x4e1f, 0xffffffff, @loopback, 0x6}, 0x1c) 4m40.274264767s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/lru_gen\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000440)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x707, 0x2, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20080804}, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000600)=""/9, &(0x7f0000000640)=0x9) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x800, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) 4m36.76602517s ago: executing program 3 (id=12): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x12a) io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m34.72762451s ago: executing program 3 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd4(r0, &(0x7f0000000540)={[0xc000000000000000]}, 0x8, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./proc\x00', 0x80) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000780), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x22) fchown(r4, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xffffffd3) setresuid(0x0, 0xee00, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x408, 0x103) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1, &(0x7f0000000980), 0x0, 0x40080}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000009c0)=0x3, 0xac5) syz_clone3(&(0x7f0000000a00)={0x23800000, &(0x7f0000000a80), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m28.444032705s ago: executing program 3 (id=18): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = eventfd2(0x8, 0x0) read(r3, 0x0, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x2) recvmmsg(r1, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d06, &(0x7f0000000500)="0000020000000000000002") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000040000"], 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000340)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000003c0)=0x86, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000640)={0xa, 0x4e1f, 0xffffffff, @loopback, 0x6}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000680)=0x5, 0x4) 4m24.995028718s ago: executing program 32 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/lru_gen\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000440)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x707, 0x2, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20080804}, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000600)=""/9, &(0x7f0000000640)=0x9) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x800, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) 4m22.168543506s ago: executing program 3 (id=21): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x0, 0x6}}], 0x58}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m17.867505007s ago: executing program 3 (id=25): unshare(0x62040200) 4m0.229513704s ago: executing program 33 (id=25): unshare(0x62040200) 11.290187923s ago: executing program 4 (id=297): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f00000006c0)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x95}], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.214367451s ago: executing program 4 (id=298): syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002100)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) io_pgetevents(0x0, 0x3, 0x4, &(0x7f0000000380)=[{}, {}, {}, {}], &(0x7f0000000440)={r5, r6+10000000}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x6]}, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fddb9f258202000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9.882811859s ago: executing program 4 (id=300): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) 9.6456281s ago: executing program 0 (id=301): ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af83, 0x0) 9.433151088s ago: executing program 0 (id=302): add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x1d8, 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x100102, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000002000000732a80ff00000000632ac8ff00000000180200000a0000010000000000000000180200000a00000100"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000940)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/242, 0xf2, 0x2e) mprotect(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1) 8.09667497s ago: executing program 0 (id=303): r0 = socket$inet_tcp(0x2, 0x1, 0x6) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x9, 0xb7a4, 0x0, 0x5a1, 0x1, 0xb66a, 0x2, 0x80000000, 0x1}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x7, 0x2, [0x7, 0x349]}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 6.347869785s ago: executing program 2 (id=306): syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002100)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) clock_gettime(0x0, &(0x7f0000000400)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fddb9f258202000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.282089394s ago: executing program 4 (id=307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, &(0x7f00000004c0)) 6.168305824s ago: executing program 0 (id=308): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f00000001c0), 0xffffffffffffff58, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) shutdown(r6, 0x1) 4.494362328s ago: executing program 2 (id=309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x6, 0x3}]}}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0xd}}}}}}, 0x0) 4.419617374s ago: executing program 2 (id=310): ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af83, 0x0) 4.209021552s ago: executing program 2 (id=311): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f00000001c0), 0xffffffffffffff58, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) recvfrom(r6, &(0x7f0000000240)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) 3.83840999s ago: executing program 4 (id=312): mprotect(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1) 1.767841046s ago: executing program 2 (id=313): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000040000000e0000004042000000000022ed29364dd6dcbc92de068a1edfad28a435076d96c770065e3922edfd45fde798380c9a783e90ce4dd248dae67cc0b78c76bf22827c75b8fe109d26f48fdc02ce034d51f82156f13d16ba1793274a9db4c88bf96503fe2b6603e750dd6613a36ca2141a1c6c836d133bcca543534880f7acc2a66c2d2a01bb9373e45b25d84b1d6642d9ec1cdd18146819596f", @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000dc0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000200)=0x1000000, 0x4) 1.401922749s ago: executing program 0 (id=314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd28, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4007}, 0x24004080) 1.180372075s ago: executing program 4 (id=315): r0 = socket$inet_tcp(0x2, 0x1, 0x6) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x9, 0xb7a4, 0x0, 0x5a1, 0x1, 0xb66a, 0x2, 0x80000000, 0x1}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r3, 0x7, 0x2, [0x7, 0x349]}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 937.455748ms ago: executing program 0 (id=316): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000580)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000002880)={&(0x7f00000028c0)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000002940)=[{&(0x7f0000002980), 0x1000}], 0x1, &(0x7f00000029c0)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 0s ago: executing program 2 (id=317): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f00000001c0), 0xffffffffffffff58, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) recvfrom(r6, &(0x7f0000000240)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 91.625182][ T5596] cgroup: Unknown subsys name 'net' [ 91.848126][ T5596] cgroup: Unknown subsys name 'cpuset' [ 91.911490][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.288417][ T9] cfg80211: failed to load regulatory.db [ 94.065322][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.951442][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.986430][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.001147][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.026934][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.038780][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.048942][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.071268][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.072439][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.082366][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.082694][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.086192][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.095747][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.096549][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.100573][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.107711][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.111456][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.111796][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.112309][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.114702][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.117259][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.149542][ T4925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.152270][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.154262][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.171909][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.203719][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.695142][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.705272][ T5608] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 98.730645][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.792873][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.855452][ T5612] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 98.857438][ T5611] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 99.222187][ T61] Bluetooth: hci0: command tx timeout [ 99.381045][ T5620] Bluetooth: hci2: command tx timeout [ 99.381259][ T61] Bluetooth: hci4: command tx timeout [ 99.461301][ T61] Bluetooth: hci3: command tx timeout [ 99.471167][ T61] Bluetooth: hci1: command tx timeout [ 99.527336][ T5610] infiniband rxe0: set active [ 99.527363][ T5610] infiniband rxe0: added rxe_eth0 [ 99.532455][ T5609] rxe0: rxe_newlink: already configured on rxe_eth0 [ 99.597390][ T1242] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.693675][ T5610] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 99.693719][ T5610] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 99.693774][ T5610] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 99.894904][ T5610] RDS/IB: rxe0: added [ 99.909569][ T5610] smc: adding ib device rxe0 with port count 1 [ 99.909752][ T5610] smc: ib device rxe0 port 1 has no pnetid [ 99.951992][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.004641][ T5609] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.084257][ T1242] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.481345][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.131812][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.303880][ T61] Bluetooth: hci0: command tx timeout [ 101.457530][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.459961][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.460194][ T5608] bridge_slave_0: entered allmulticast mode [ 101.461016][ T5620] Bluetooth: hci2: command tx timeout [ 101.461127][ T61] Bluetooth: hci4: command tx timeout [ 101.497435][ T5608] bridge_slave_0: entered promiscuous mode [ 101.530923][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.531046][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.531183][ T5611] bridge_slave_0: entered allmulticast mode [ 101.532860][ T5611] bridge_slave_0: entered promiscuous mode [ 101.535172][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.535295][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.535456][ T5608] bridge_slave_1: entered allmulticast mode [ 101.537440][ T5608] bridge_slave_1: entered promiscuous mode [ 101.543926][ T5620] Bluetooth: hci3: command tx timeout [ 101.544024][ T61] Bluetooth: hci1: command tx timeout [ 101.552132][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.659291][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.659404][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.659532][ T5611] bridge_slave_1: entered allmulticast mode [ 101.671761][ T5611] bridge_slave_1: entered promiscuous mode [ 101.829196][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.829377][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.829571][ T5612] bridge_slave_0: entered allmulticast mode [ 101.855334][ T5612] bridge_slave_0: entered promiscuous mode [ 101.899903][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.931130][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.931568][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.932125][ T5612] bridge_slave_1: entered allmulticast mode [ 101.934777][ T5612] bridge_slave_1: entered promiscuous mode [ 101.975122][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.991442][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.046738][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.179942][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.214541][ T5608] team0: Port device team_slave_0 added [ 102.231961][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.262874][ T5611] team0: Port device team_slave_0 added [ 102.277884][ T5608] team0: Port device team_slave_1 added [ 102.308173][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.316661][ T5611] team0: Port device team_slave_1 added [ 102.444614][ T5612] team0: Port device team_slave_0 added [ 102.476039][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.476091][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.476129][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.542396][ T5612] team0: Port device team_slave_1 added [ 102.543422][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.543437][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.543467][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.550610][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.550629][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.550660][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.665947][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.665968][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.665999][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.048567][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.048596][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.048620][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.107509][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.107537][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.107560][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.276897][ T5608] hsr_slave_0: entered promiscuous mode [ 103.278433][ T5608] hsr_slave_1: entered promiscuous mode [ 103.315129][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.315274][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.315476][ T5609] bridge_slave_0: entered allmulticast mode [ 103.318236][ T5609] bridge_slave_0: entered promiscuous mode [ 103.362284][ T5611] hsr_slave_0: entered promiscuous mode [ 103.364329][ T5611] hsr_slave_1: entered promiscuous mode [ 103.365134][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 103.365163][ T5611] Cannot create hsr debugfs directory [ 103.367245][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.367350][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.367482][ T5609] bridge_slave_1: entered allmulticast mode [ 103.369191][ T5609] bridge_slave_1: entered promiscuous mode [ 103.381274][ T61] Bluetooth: hci0: command tx timeout [ 103.508562][ T5612] hsr_slave_0: entered promiscuous mode [ 103.509495][ T5612] hsr_slave_1: entered promiscuous mode [ 103.510138][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 103.510163][ T5612] Cannot create hsr debugfs directory [ 103.541026][ T5620] Bluetooth: hci2: command tx timeout [ 103.541520][ T61] Bluetooth: hci4: command tx timeout [ 103.581802][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.620989][ T61] Bluetooth: hci1: command tx timeout [ 103.621027][ T61] Bluetooth: hci3: command tx timeout [ 103.626601][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.773135][ T5609] team0: Port device team_slave_0 added [ 103.815151][ T5609] team0: Port device team_slave_1 added [ 104.169534][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.169551][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.169572][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.249213][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.249233][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.249266][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.599972][ T5609] hsr_slave_0: entered promiscuous mode [ 104.608085][ T5609] hsr_slave_1: entered promiscuous mode [ 104.608902][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 104.608917][ T5609] Cannot create hsr debugfs directory [ 104.922114][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.951285][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.952198][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.952420][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.952627][ T5610] bridge_slave_0: entered allmulticast mode [ 104.954515][ T5610] bridge_slave_0: entered promiscuous mode [ 105.012299][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.035775][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.037529][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.037654][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.037837][ T5610] bridge_slave_1: entered allmulticast mode [ 105.039990][ T5610] bridge_slave_1: entered promiscuous mode [ 105.111954][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.156655][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.208122][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.247984][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.304554][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.341347][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.456477][ T5610] team0: Port device team_slave_0 added [ 105.461684][ T5620] Bluetooth: hci0: command tx timeout [ 105.493247][ T5610] team0: Port device team_slave_1 added [ 105.569554][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.585011][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.586346][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.586358][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.586379][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.593328][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.622305][ T5620] Bluetooth: hci4: command tx timeout [ 105.622411][ T5620] Bluetooth: hci2: command tx timeout [ 105.687140][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.688551][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.688568][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.688615][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.701230][ T61] Bluetooth: hci3: command tx timeout [ 105.701270][ T61] Bluetooth: hci1: command tx timeout [ 105.713046][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.766263][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.818694][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.845180][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.977838][ T5610] hsr_slave_0: entered promiscuous mode [ 105.978820][ T5610] hsr_slave_1: entered promiscuous mode [ 105.979498][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 105.979523][ T5610] Cannot create hsr debugfs directory [ 106.253691][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.289290][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.323458][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.364574][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.386580][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.429932][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.473966][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.515480][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.697668][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.738178][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.765936][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.805809][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.838893][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.866321][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.872918][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.911148][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.104456][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.138713][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.166502][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.186034][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.231143][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.236996][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.269401][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.282501][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.324324][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.389586][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.431944][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.459498][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.459685][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.563843][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.563972][ T1384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.636631][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.674862][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.695528][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.695710][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.779019][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.779147][ T1384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.858135][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.888731][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.921834][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.921982][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.001629][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.001775][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.126481][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.194845][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.195021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.256197][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.256393][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.270552][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.472263][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.553223][ T1914] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.553527][ T1914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.657444][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.666875][ T3271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.690394][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.090048][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.191795][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.196267][ T5608] veth0_vlan: entered promiscuous mode [ 110.257852][ T5608] veth1_vlan: entered promiscuous mode [ 110.483394][ T5611] veth0_vlan: entered promiscuous mode [ 110.491893][ T5612] veth0_vlan: entered promiscuous mode [ 110.500357][ T5608] veth0_macvtap: entered promiscuous mode [ 110.536174][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.563362][ T5608] veth1_macvtap: entered promiscuous mode [ 110.586399][ T5611] veth1_vlan: entered promiscuous mode [ 110.609732][ T5612] veth1_vlan: entered promiscuous mode [ 110.676987][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.735813][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.750506][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.843456][ T5611] veth0_macvtap: entered promiscuous mode [ 110.888641][ T5611] veth1_macvtap: entered promiscuous mode [ 110.902980][ T5612] veth0_macvtap: entered promiscuous mode [ 111.002871][ T5612] veth1_macvtap: entered promiscuous mode [ 111.279031][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.314583][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.484692][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.506889][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.645259][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.670611][ T5610] veth0_vlan: entered promiscuous mode [ 111.698963][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.698993][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.003449][ T5610] veth1_vlan: entered promiscuous mode [ 112.102595][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.102622][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.263972][ T5609] veth0_vlan: entered promiscuous mode [ 112.626671][ T5609] veth1_vlan: entered promiscuous mode [ 112.699385][ T1384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.699405][ T1384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.778002][ T5610] veth0_macvtap: entered promiscuous mode [ 112.841778][ T5610] veth1_macvtap: entered promiscuous mode [ 112.848039][ T3329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.848062][ T3329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.883410][ T5608] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.997758][ T3329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.997785][ T3329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.173340][ T5609] veth0_macvtap: entered promiscuous mode [ 113.189641][ T3329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.189666][ T3329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.209232][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.314781][ T3328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.557793][ T5609] veth1_macvtap: entered promiscuous mode [ 113.570713][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.028628][ T5842] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1'. [ 115.885780][ T1384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.888634][ T1384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.889646][ T1384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.621096][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.722179][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.724704][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.434885][ T1384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.434911][ T1384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.705683][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.705715][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.323352][ T3329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.335225][ T1384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.335252][ T1384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.474944][ T3329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.477585][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.506600][ T1050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.783862][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.784480][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.694261][ T3328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698361][ T3279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698415][ T3279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698456][ T3279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698495][ T3279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698550][ T3279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698588][ T3279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698625][ T3279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698662][ T3279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.698715][ T3279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.091919][ T3329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.091951][ T3329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.940467][ T5887] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.788180][ T5918] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.585467][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.585571][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.020186][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.049855][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.067968][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.130191][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.159501][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 142.540848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.010844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.020867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.030877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.040858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.050858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.060881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.070859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.080866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.090860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.010749][ T5620] Bluetooth: hci5: command tx timeout [ 145.606450][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.897579][ T5620] Bluetooth: hci5: command tx timeout [ 147.770971][ T5969] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.559218][ T5939] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.982076][ T5620] Bluetooth: hci5: command tx timeout [ 149.850843][ T5986] Zero length message leads to an empty skb [ 153.211848][ T5620] Bluetooth: hci5: command tx timeout [ 162.499225][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.047547][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.101417][ T6017] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.471906][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.477638][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.503292][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.505173][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.775090][ T5620] Bluetooth: hci2: command tx timeout [ 167.857530][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.39'. [ 169.297167][ T5620] Bluetooth: hci2: command tx timeout [ 169.857638][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.914146][ T61] Bluetooth: hci2: command tx timeout [ 171.956397][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.941843][ T61] Bluetooth: hci2: command tx timeout [ 174.034069][ T6018] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.372758][ T12] bridge_slave_1: left allmulticast mode [ 176.372874][ T12] bridge_slave_1: left promiscuous mode [ 176.379734][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.602450][ T12] bridge_slave_0: left allmulticast mode [ 181.602491][ T12] bridge_slave_0: left promiscuous mode [ 181.602740][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.717842][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 192.331703][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.411788][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.403114][ T12] bond0 (unregistering): Released all slaves [ 193.741101][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.741238][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.741455][ T5939] bridge_slave_0: entered allmulticast mode [ 193.744102][ T5939] bridge_slave_0: entered promiscuous mode [ 196.214926][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.215070][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.215278][ T5939] bridge_slave_1: entered allmulticast mode [ 196.246955][ T5939] bridge_slave_1: entered promiscuous mode [ 196.768328][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.772977][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.797039][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.797132][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.317591][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.663315][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.721919][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.723583][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.741123][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.101051][ T5620] Bluetooth: hci4: command tx timeout [ 210.048490][ T5620] Bluetooth: hci4: command tx timeout [ 210.417706][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 212.102442][ T5620] Bluetooth: hci4: command tx timeout [ 218.070816][ T5620] Bluetooth: hci4: command tx timeout [ 219.452562][ T6255] netlink: 260 bytes leftover after parsing attributes in process `syz.2.84'. [ 222.351929][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 222.352118][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 223.106134][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.106327][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.106587][ T6018] bridge_slave_0: entered allmulticast mode [ 223.132556][ T6018] bridge_slave_0: entered promiscuous mode [ 223.136064][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.136313][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.136780][ T6018] bridge_slave_1: entered allmulticast mode [ 223.139488][ T6018] bridge_slave_1: entered promiscuous mode [ 223.234683][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.251549][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.300945][ T4925] Bluetooth: hci1: command 0x0406 tx timeout [ 223.331733][ T6018] team0: Port device team_slave_0 added [ 223.336324][ T6018] team0: Port device team_slave_1 added [ 223.407728][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.407747][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.407778][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.447071][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.447090][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.447121][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.642307][ T6018] hsr_slave_0: entered promiscuous mode [ 223.644391][ T6018] hsr_slave_1: entered promiscuous mode [ 223.645403][ T6018] debugfs: 'hsr0' already exists in 'hsr' [ 223.645423][ T6018] Cannot create hsr debugfs directory [ 224.098386][ T6296] overlayfs: failed to resolve './file1': -2 [ 224.838483][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.867473][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.879255][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.888156][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.889733][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.942405][ T61] Bluetooth: hci5: command tx timeout [ 228.133214][ T36] audit: type=1400 audit(1793549729.699:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6319 comm="syz.4.94" src=65532 dest=20002 netif=wpan0 [ 230.571346][ T61] Bluetooth: hci5: command tx timeout [ 230.898079][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 231.028276][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.99'. [ 231.093362][ T6174] rxe_eth0 speed is unknown, defaulting to 1000 [ 231.391690][ T6350] overlayfs: failed to resolve './file1': -2 [ 233.784976][ T61] Bluetooth: hci5: command tx timeout [ 235.077951][ T6370] input: syz0 as /devices/virtual/input/input6 [ 235.871861][ T61] Bluetooth: hci5: command tx timeout [ 236.110901][ T36] audit: type=1400 audit(1793549737.589:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6367 comm="syz.2.106" src=65532 dest=20002 netif=wpan0 [ 237.336753][ T6381] input: syz0 as /devices/virtual/input/input7 [ 240.299023][ T6305] rxe_eth0 speed is unknown, defaulting to 1000 [ 241.545069][ T12] hsr_slave_0: left promiscuous mode [ 241.581005][ T12] hsr_slave_1: left promiscuous mode [ 241.600545][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.625598][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.664722][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.664760][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.973342][ T12] veth1_macvtap: left promiscuous mode [ 241.973568][ T12] veth0_macvtap: left promiscuous mode [ 241.974010][ T12] veth1_vlan: left promiscuous mode [ 241.977312][ T12] veth0_vlan: left promiscuous mode [ 243.438831][ T6427] netlink: 56 bytes leftover after parsing attributes in process `syz.0.116'. [ 246.369037][ T6449] input: syz0 as /devices/virtual/input/input8 [ 251.160835][ T6463] 0x000000000003-0x000000010001 : "" [ 251.862317][ T12] team0 (unregistering): Port device team_slave_1 removed [ 251.916186][ T6463] ftl_cs: FTL header corrupt! [ 252.025547][ T6463] FAULT_INJECTION: forcing a failure. [ 252.025547][ T6463] name failslab, interval 1, probability 0, space 0, times 1 [ 252.025630][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.4.126 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.025665][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 252.025690][ T6463] Call Trace: [ 252.025700][ T6463] [ 252.025720][ T6463] dump_stack_lvl+0xe8/0x150 [ 252.025791][ T6463] should_fail_ex+0x447/0x5e0 [ 252.025833][ T6463] should_failslab+0xa8/0x100 [ 252.025863][ T6463] ? __kernfs_new_node+0xe7/0xa70 [ 252.025892][ T6463] kmem_cache_alloc_noprof+0x99/0x680 [ 252.025936][ T6463] ? __kernfs_new_node+0xe7/0xa70 [ 252.025973][ T6463] __kernfs_new_node+0xe7/0xa70 [ 252.026008][ T6463] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.026051][ T6463] ? __pfx___kernfs_new_node+0x10/0x10 [ 252.026083][ T6463] ? lock_acquire+0x115/0x350 [ 252.026146][ T6463] ? kernfs_root+0x1c/0x230 [ 252.026179][ T6463] ? kernfs_root+0x1c/0x230 [ 252.026205][ T6463] ? kernfs_root+0x1c/0x230 [ 252.026228][ T6463] ? kernfs_root+0x1c/0x230 [ 252.026261][ T6463] kernfs_new_node+0xeb/0x140 [ 252.026294][ T6463] __kernfs_create_file+0x4b/0x2e0 [ 252.026332][ T6463] sysfs_add_file_mode_ns+0x237/0x300 [ 252.026397][ T6463] internal_create_group+0x679/0x1180 [ 252.026440][ T6463] ? kernfs_create_dir_ns+0x1c0/0x220 [ 252.026476][ T6463] ? __pfx_internal_create_group+0x10/0x10 [ 252.026508][ T6463] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 252.026557][ T6463] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 252.026582][ T6463] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 252.026614][ T6463] sysfs_create_groups+0x59/0x120 [ 252.026644][ T6463] kobject_add_internal+0x673/0xce0 [ 252.026687][ T6463] kobject_add+0x163/0x240 [ 252.026719][ T6463] ? kobject_add+0x163/0x240 [ 252.026770][ T6463] ? __pfx_kobject_add+0x10/0x10 [ 252.026828][ T6463] ? __kasan_kmalloc+0x93/0xb0 [ 252.026869][ T6463] ? kobject_create_and_add+0x58/0x230 [ 252.026922][ T6463] blk_register_queue+0x83/0x4f0 [ 252.026991][ T6463] ? kobject_create_and_add+0x16f/0x230 [ 252.027062][ T6463] __add_disk+0x6b8/0xdb0 [ 252.027110][ T6463] add_disk_fwnode+0x100/0x3a0 [ 252.027163][ T6463] add_mtd_blktrans_dev+0xe81/0x14c0 [ 252.027214][ T6463] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 252.027273][ T6463] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 252.027298][ T6463] ? mtdblock_add_mtd+0x57/0x240 [ 252.027337][ T6463] mtdblock_add_mtd+0x18a/0x240 [ 252.027371][ T6463] blktrans_notify_add+0x9f/0xf0 [ 252.027407][ T6463] add_mtd_device+0x117f/0x17b0 [ 252.027450][ T6463] ? __pfx_add_mtd_device+0x10/0x10 [ 252.027487][ T6463] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 252.027534][ T6463] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 252.027581][ T6463] mtd_add_partition+0x388/0x590 [ 252.027614][ T6463] ? __pfx_mtd_add_partition+0x10/0x10 [ 252.027659][ T6463] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 252.027691][ T6463] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 252.027755][ T6463] mtdchar_ioctl+0x14fd/0x1bc0 [ 252.027790][ T6463] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 252.027837][ T6463] ? kasan_quarantine_put+0xbb/0x1f0 [ 252.027885][ T6463] ? tomoyo_path_number_perm+0x219/0x5f0 [ 252.027919][ T6463] ? tomoyo_path_number_perm+0x219/0x5f0 [ 252.027958][ T6463] ? __lock_acquire+0x747/0x2de0 [ 252.028014][ T6463] ? do_futex+0x3e7/0x4e0 [ 252.028080][ T6463] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 252.028108][ T6463] ? mutex_lock_nested+0x14d/0x1d0 [ 252.028140][ T6463] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 252.028172][ T6463] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 252.028200][ T6463] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 252.028229][ T6463] __se_sys_ioctl+0xff/0x170 [ 252.028269][ T6463] do_syscall_64+0x166/0x520 [ 252.028295][ T6463] ? trace_irq_disable+0x3b/0x140 [ 252.028321][ T6463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.028346][ T6463] ? clear_bhb_loop+0x70/0xc0 [ 252.028376][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.028412][ T6463] RIP: 0033:0x7f474987f559 [ 252.028445][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.028467][ T6463] RSP: 002b:00007f4747ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.028493][ T6463] RAX: ffffffffffffffda RBX: 00007f4749b05fa0 RCX: 00007f474987f559 [ 252.028512][ T6463] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 252.028527][ T6463] RBP: 00007f4749916b50 R08: 0000000000000000 R09: 0000000000000000 [ 252.028543][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.028557][ T6463] R13: 00007f4749b06038 R14: 00007f4749b05fa0 R15: 00007ffeab413578 [ 252.028596][ T6463] [ 252.035725][ T6463] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock1) [ 252.103688][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.670557][ T6460] netlink: 260 bytes leftover after parsing attributes in process `syz.0.124'. [ 253.218346][ T6410] pim6reg: entered allmulticast mode [ 253.268193][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 253.309430][ T6410] pim6reg: left allmulticast mode [ 253.404773][ T6472] 0x000000000003-0x000000010001 : "" [ 253.435003][ T6472] ftl_cs: FTL header corrupt! [ 253.473510][ T6472] FAULT_INJECTION: forcing a failure. [ 253.473510][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 253.473549][ T6472] CPU: 0 UID: 0 PID: 6472 Comm: syz.4.128 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 253.473577][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 253.473592][ T6472] Call Trace: [ 253.473601][ T6472] [ 253.473611][ T6472] dump_stack_lvl+0xe8/0x150 [ 253.473660][ T6472] should_fail_ex+0x447/0x5e0 [ 253.473694][ T6472] ? alloc_inode+0x6a/0x1b0 [ 253.473725][ T6472] should_failslab+0xa8/0x100 [ 253.473769][ T6472] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 253.473810][ T6472] ? alloc_inode+0x6a/0x1b0 [ 253.473846][ T6472] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 253.473880][ T6472] alloc_inode+0x6a/0x1b0 [ 253.473914][ T6472] new_inode+0x1f/0x170 [ 253.473952][ T6472] __debugfs_create_file+0xb8/0x400 [ 253.473989][ T6472] debugfs_create_file_full+0x3f/0x60 [ 253.474024][ T6472] blk_register_queue+0x1c3/0x4f0 [ 253.474068][ T6472] __add_disk+0x6b8/0xdb0 [ 253.474114][ T6472] add_disk_fwnode+0x100/0x3a0 [ 253.474157][ T6472] add_mtd_blktrans_dev+0xe81/0x14c0 [ 253.474203][ T6472] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 253.474258][ T6472] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 253.474283][ T6472] ? mtdblock_add_mtd+0x57/0x240 [ 253.474322][ T6472] mtdblock_add_mtd+0x18a/0x240 [ 253.474356][ T6472] blktrans_notify_add+0x9f/0xf0 [ 253.474387][ T6472] add_mtd_device+0x117f/0x17b0 [ 253.474430][ T6472] ? __pfx_add_mtd_device+0x10/0x10 [ 253.474468][ T6472] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 253.474510][ T6472] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 253.474562][ T6472] mtd_add_partition+0x388/0x590 [ 253.474595][ T6472] ? __pfx_mtd_add_partition+0x10/0x10 [ 253.474642][ T6472] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 253.474675][ T6472] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 253.474749][ T6472] mtdchar_ioctl+0x14fd/0x1bc0 [ 253.474785][ T6472] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 253.474829][ T6472] ? kasan_quarantine_put+0xbb/0x1f0 [ 253.474873][ T6472] ? tomoyo_path_number_perm+0x219/0x5f0 [ 253.474907][ T6472] ? tomoyo_path_number_perm+0x219/0x5f0 [ 253.474942][ T6472] ? __lock_acquire+0x747/0x2de0 [ 253.474997][ T6472] ? do_futex+0x3e7/0x4e0 [ 253.475055][ T6472] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 253.475097][ T6472] ? mutex_lock_nested+0x14d/0x1d0 [ 253.475127][ T6472] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 253.475159][ T6472] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 253.475192][ T6472] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 253.475231][ T6472] __se_sys_ioctl+0xff/0x170 [ 253.475260][ T6472] do_syscall_64+0x166/0x520 [ 253.475285][ T6472] ? trace_irq_disable+0x3b/0x140 [ 253.475309][ T6472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.475334][ T6472] ? clear_bhb_loop+0x70/0xc0 [ 253.475370][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.475398][ T6472] RIP: 0033:0x7f474987f559 [ 253.475421][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.475441][ T6472] RSP: 002b:00007f4747ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.475465][ T6472] RAX: ffffffffffffffda RBX: 00007f4749b05fa0 RCX: 00007f474987f559 [ 253.475482][ T6472] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 253.475498][ T6472] RBP: 00007f4749916b50 R08: 0000000000000000 R09: 0000000000000000 [ 253.475511][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.475524][ T6472] R13: 00007f4749b06038 R14: 00007f4749b05fa0 R15: 00007ffeab413578 [ 253.475559][ T6472] [ 253.479548][ T6472] debugfs: out of free dentries, can not create file 'error_injection' [ 254.631432][ T6482] input: syz0 as /devices/virtual/input/input9 [ 259.948303][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 260.265529][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.288315][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.289801][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.341297][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.343642][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.413977][ T10] usb 3-1: device not accepting address 2, error -71 [ 260.723436][ T6511] 0x000000000003-0x000000010001 : "" [ 261.799512][ T6511] ftl_cs: FTL header corrupt! [ 262.632475][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.632568][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.770035][ T6511] FAULT_INJECTION: forcing a failure. [ 262.770035][ T6511] name failslab, interval 1, probability 0, space 0, times 0 [ 262.770085][ T6511] CPU: 1 UID: 0 PID: 6511 Comm: syz.2.138 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.770111][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 262.770126][ T6511] Call Trace: [ 262.770135][ T6511] [ 262.770146][ T6511] dump_stack_lvl+0xe8/0x150 [ 262.770193][ T6511] should_fail_ex+0x447/0x5e0 [ 262.770227][ T6511] should_failslab+0xa8/0x100 [ 262.770251][ T6511] ? __kernfs_new_node+0xe7/0xa70 [ 262.770278][ T6511] kmem_cache_alloc_noprof+0x99/0x680 [ 262.770315][ T6511] ? __kernfs_new_node+0xe7/0xa70 [ 262.770347][ T6511] __kernfs_new_node+0xe7/0xa70 [ 262.770373][ T6511] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 262.770408][ T6511] ? __pfx___kernfs_new_node+0x10/0x10 [ 262.770433][ T6511] ? lock_acquire+0x115/0x350 [ 262.770466][ T6511] ? kernfs_root+0x1c/0x230 [ 262.770496][ T6511] ? kernfs_root+0x1c/0x230 [ 262.770520][ T6511] ? kernfs_root+0x1c/0x230 [ 262.770541][ T6511] ? kernfs_root+0x1c/0x230 [ 262.770571][ T6511] kernfs_new_node+0xeb/0x140 [ 262.770603][ T6511] __kernfs_create_file+0x4b/0x2e0 [ 262.770639][ T6511] sysfs_add_file_mode_ns+0x237/0x300 [ 262.770682][ T6511] internal_create_group+0x679/0x1180 [ 262.770725][ T6511] ? kernfs_create_dir_ns+0x1c0/0x220 [ 262.770757][ T6511] ? __pfx_internal_create_group+0x10/0x10 [ 262.770791][ T6511] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 262.770816][ T6511] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 262.770836][ T6511] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 262.770863][ T6511] sysfs_create_groups+0x59/0x120 [ 262.770891][ T6511] kobject_add_internal+0x673/0xce0 [ 262.770932][ T6511] kobject_add+0x163/0x240 [ 262.770964][ T6511] ? kobject_add+0x163/0x240 [ 262.770997][ T6511] ? __pfx_kobject_add+0x10/0x10 [ 262.771030][ T6511] ? __kasan_kmalloc+0x93/0xb0 [ 262.771055][ T6511] ? kobject_create_and_add+0x58/0x230 [ 262.771089][ T6511] blk_register_queue+0x83/0x4f0 [ 262.771123][ T6511] ? kobject_create_and_add+0x16f/0x230 [ 262.771160][ T6511] __add_disk+0x6b8/0xdb0 [ 262.771206][ T6511] add_disk_fwnode+0x100/0x3a0 [ 262.771246][ T6511] add_mtd_blktrans_dev+0xe81/0x14c0 [ 262.771289][ T6511] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 262.771356][ T6511] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 262.771388][ T6511] ? mtdblock_add_mtd+0x57/0x240 [ 262.771501][ T6511] mtdblock_add_mtd+0x18a/0x240 [ 262.771596][ T6511] blktrans_notify_add+0x9f/0xf0 [ 262.771637][ T6511] add_mtd_device+0x117f/0x17b0 [ 262.771719][ T6511] ? __pfx_add_mtd_device+0x10/0x10 [ 262.771776][ T6511] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 262.771826][ T6511] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 262.771879][ T6511] mtd_add_partition+0x388/0x590 [ 262.771909][ T6511] ? __pfx_mtd_add_partition+0x10/0x10 [ 262.771951][ T6511] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 262.771983][ T6511] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 262.772041][ T6511] mtdchar_ioctl+0x14fd/0x1bc0 [ 262.772075][ T6511] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 262.772119][ T6511] ? kasan_quarantine_put+0xbb/0x1f0 [ 262.772164][ T6511] ? tomoyo_path_number_perm+0x219/0x5f0 [ 262.772199][ T6511] ? tomoyo_path_number_perm+0x219/0x5f0 [ 262.772236][ T6511] ? __lock_acquire+0x747/0x2de0 [ 262.772287][ T6511] ? do_futex+0x3e7/0x4e0 [ 262.772340][ T6511] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 262.772365][ T6511] ? mutex_lock_nested+0x14d/0x1d0 [ 262.772396][ T6511] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 262.772428][ T6511] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 262.772454][ T6511] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 262.772478][ T6511] __se_sys_ioctl+0xff/0x170 [ 262.772505][ T6511] do_syscall_64+0x166/0x520 [ 262.772530][ T6511] ? trace_irq_disable+0x3b/0x140 [ 262.772554][ T6511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.772578][ T6511] ? clear_bhb_loop+0x70/0xc0 [ 262.772606][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.772632][ T6511] RIP: 0033:0x7f67279bf559 [ 262.772655][ T6511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.772674][ T6511] RSP: 002b:00007f6725c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.772701][ T6511] RAX: ffffffffffffffda RBX: 00007f6727c45fa0 RCX: 00007f67279bf559 [ 262.772718][ T6511] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 262.772733][ T6511] RBP: 00007f6727a56b50 R08: 0000000000000000 R09: 0000000000000000 [ 262.772747][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.772762][ T6511] R13: 00007f6727c46038 R14: 00007f6727c45fa0 R15: 00007ffde9e44be8 [ 262.772822][ T6511] [ 263.002857][ T61] Bluetooth: hci2: command tx timeout [ 263.089301][ T6511] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock3) [ 264.708272][ T6521] netlink: 260 bytes leftover after parsing attributes in process `syz.4.136'. [ 265.061332][ T5623] Bluetooth: hci2: command tx timeout [ 265.425753][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.427285][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.427497][ T6305] bridge_slave_0: entered allmulticast mode [ 265.457028][ T6305] bridge_slave_0: entered promiscuous mode [ 265.478992][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.479282][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.479486][ T6305] bridge_slave_1: entered allmulticast mode [ 265.509730][ T6305] bridge_slave_1: entered promiscuous mode [ 265.627147][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 268.570651][ T5623] Bluetooth: hci2: command tx timeout [ 268.724729][ T6565] 0x000000000003-0x000000010001 : "" [ 268.788017][ T6565] ftl_cs: FTL header corrupt! [ 268.788256][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.931136][ T6305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.987134][ T6305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.258673][ T6576] 0x000000000003-0x000000010001 : "" [ 269.339798][ T6576] ftl_cs: FTL header corrupt! [ 270.842249][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.171810][ T6305] team0: Port device team_slave_0 added [ 272.180333][ T6305] team0: Port device team_slave_1 added [ 272.188431][ T5623] Bluetooth: hci2: command tx timeout [ 275.471251][ T6584] netlink: 260 bytes leftover after parsing attributes in process `syz.0.150'. [ 277.559689][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.559711][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.559741][ T6305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.598552][ T6600] 0x000000000003-0x000000010001 : "" [ 277.656020][ T6305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.656039][ T6305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.656063][ T6305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.727474][ T6600] ftl_cs: FTL header corrupt! [ 277.837886][ T6600] FAULT_INJECTION: forcing a failure. [ 277.837886][ T6600] name failslab, interval 1, probability 0, space 0, times 0 [ 277.837944][ T6600] CPU: 1 UID: 0 PID: 6600 Comm: syz.2.153 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 277.837980][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.837994][ T6600] Call Trace: [ 277.838004][ T6600] [ 277.838014][ T6600] dump_stack_lvl+0xe8/0x150 [ 277.838062][ T6600] should_fail_ex+0x447/0x5e0 [ 277.838098][ T6600] should_failslab+0xa8/0x100 [ 277.838126][ T6600] ? __kernfs_new_node+0xe7/0xa70 [ 277.838156][ T6600] kmem_cache_alloc_noprof+0x99/0x680 [ 277.838195][ T6600] ? __kernfs_new_node+0xe7/0xa70 [ 277.838239][ T6600] __kernfs_new_node+0xe7/0xa70 [ 277.838268][ T6600] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.838305][ T6600] ? __pfx___kernfs_new_node+0x10/0x10 [ 277.838331][ T6600] ? lock_acquire+0x115/0x350 [ 277.838368][ T6600] ? kernfs_root+0x1c/0x230 [ 277.838401][ T6600] ? kernfs_root+0x1c/0x230 [ 277.838427][ T6600] ? kernfs_root+0x1c/0x230 [ 277.838451][ T6600] ? kernfs_root+0x1c/0x230 [ 277.838483][ T6600] kernfs_new_node+0xeb/0x140 [ 277.838516][ T6600] __kernfs_create_file+0x4b/0x2e0 [ 277.838554][ T6600] sysfs_add_file_mode_ns+0x237/0x300 [ 277.838601][ T6600] internal_create_group+0x679/0x1180 [ 277.838638][ T6600] ? kernfs_create_dir_ns+0x1c0/0x220 [ 277.838674][ T6600] ? __pfx_internal_create_group+0x10/0x10 [ 277.838699][ T6600] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 277.838723][ T6600] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 277.838757][ T6600] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 277.838791][ T6600] sysfs_create_groups+0x59/0x120 [ 277.838821][ T6600] kobject_add_internal+0x673/0xce0 [ 277.838865][ T6600] kobject_add+0x163/0x240 [ 277.838899][ T6600] ? kobject_add+0x163/0x240 [ 277.838934][ T6600] ? __pfx_kobject_add+0x10/0x10 [ 277.838968][ T6600] ? __kasan_kmalloc+0x93/0xb0 [ 277.838999][ T6600] ? kobject_create_and_add+0x58/0x230 [ 277.839037][ T6600] blk_register_queue+0x83/0x4f0 [ 277.839073][ T6600] ? kobject_create_and_add+0x16f/0x230 [ 277.839112][ T6600] __add_disk+0x6b8/0xdb0 [ 277.839158][ T6600] add_disk_fwnode+0x100/0x3a0 [ 277.839201][ T6600] add_mtd_blktrans_dev+0xe81/0x14c0 [ 277.839254][ T6600] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 277.839314][ T6600] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 277.839340][ T6600] ? mtdblock_add_mtd+0x57/0x240 [ 277.839379][ T6600] mtdblock_add_mtd+0x18a/0x240 [ 277.839414][ T6600] blktrans_notify_add+0x9f/0xf0 [ 277.839446][ T6600] add_mtd_device+0x117f/0x17b0 [ 277.839488][ T6600] ? __pfx_add_mtd_device+0x10/0x10 [ 277.839526][ T6600] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 277.839569][ T6600] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 277.839620][ T6600] mtd_add_partition+0x388/0x590 [ 277.839653][ T6600] ? __pfx_mtd_add_partition+0x10/0x10 [ 277.839704][ T6600] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 277.839737][ T6600] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 277.839801][ T6600] mtdchar_ioctl+0x14fd/0x1bc0 [ 277.839836][ T6600] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 277.839883][ T6600] ? kasan_quarantine_put+0xbb/0x1f0 [ 277.839933][ T6600] ? tomoyo_path_number_perm+0x219/0x5f0 [ 277.839967][ T6600] ? tomoyo_path_number_perm+0x219/0x5f0 [ 277.840006][ T6600] ? __lock_acquire+0x747/0x2de0 [ 277.840062][ T6600] ? do_futex+0x3e7/0x4e0 [ 277.840121][ T6600] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.840149][ T6600] ? mutex_lock_nested+0x14d/0x1d0 [ 277.840181][ T6600] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 277.840213][ T6600] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 277.840249][ T6600] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 277.840278][ T6600] __se_sys_ioctl+0xff/0x170 [ 277.840308][ T6600] do_syscall_64+0x166/0x520 [ 277.840335][ T6600] ? trace_irq_disable+0x3b/0x140 [ 277.840360][ T6600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.840385][ T6600] ? clear_bhb_loop+0x70/0xc0 [ 277.840416][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.840440][ T6600] RIP: 0033:0x7f67279bf559 [ 277.840462][ T6600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.840482][ T6600] RSP: 002b:00007f6725c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.840508][ T6600] RAX: ffffffffffffffda RBX: 00007f6727c45fa0 RCX: 00007f67279bf559 [ 277.840526][ T6600] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 277.840542][ T6600] RBP: 00007f6727a56b50 R08: 0000000000000000 R09: 0000000000000000 [ 277.840557][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.840572][ T6600] R13: 00007f6727c46038 R14: 00007f6727c45fa0 R15: 00007ffde9e44be8 [ 277.840611][ T6600] [ 277.878547][ T6600] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock6) [ 281.949008][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.246882][ T6505] rxe_eth0 speed is unknown, defaulting to 1000 [ 282.461435][ T6618] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5608] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6618] [ 283.024142][ T6620] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 283.143421][ T6625] 0x000000000003-0x000000010001 : "" [ 283.331123][ T6625] ftl_cs: FTL header corrupt! [ 283.413469][ T6632] FAULT_INJECTION: forcing a failure. [ 283.413469][ T6632] name failslab, interval 1, probability 0, space 0, times 0 [ 283.413514][ T6632] CPU: 0 UID: 0 PID: 6632 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 283.413547][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 283.413563][ T6632] Call Trace: [ 283.413573][ T6632] [ 283.413585][ T6632] dump_stack_lvl+0xe8/0x150 [ 283.413634][ T6632] should_fail_ex+0x447/0x5e0 [ 283.413675][ T6632] should_failslab+0xa8/0x100 [ 283.413710][ T6632] __kvmalloc_node_noprof+0x171/0x880 [ 283.413739][ T6632] ? kasan_save_track+0x4f/0x80 [ 283.413765][ T6632] ? kasan_save_free_info+0x40/0x50 [ 283.413800][ T6632] ? __kasan_slab_free+0x5c/0x80 [ 283.413837][ T6632] ? bpf_check_cfg+0x14f/0x4860 [ 283.413868][ T6632] ? bpf_check_cfg+0x14f/0x4860 [ 283.413897][ T6632] ? __x64_sys_bpf+0xba/0xd0 [ 283.413931][ T6632] bpf_check_cfg+0x14f/0x4860 [ 283.413994][ T6632] ? __pfx_bpf_check_cfg+0x10/0x10 [ 283.414021][ T6632] ? lockdep_hardirqs_on+0x7b/0x110 [ 283.414055][ T6632] ? kfree+0x1c5/0x6d0 [ 283.414091][ T6632] ? bpf_prog_calc_tag+0x310/0x370 [ 283.414123][ T6632] ? vfree+0x46d/0x4f0 [ 283.414163][ T6632] ? bpf_prog_calc_tag+0x310/0x370 [ 283.414194][ T6632] ? resolve_func_ptrs+0xc7a/0xe50 [ 283.414233][ T6632] ? check_and_resolve_insns+0x231a/0x28e0 [ 283.414282][ T6632] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 283.414317][ T6632] ? check_subprogs+0x413/0x540 [ 283.414355][ T6632] ? add_kfuncs+0x251/0x2e0 [ 283.414396][ T6632] bpf_check+0x2958/0x34e0 [ 283.414444][ T6632] ? ktime_get_with_offset+0x93/0x2d0 [ 283.414472][ T6632] ? ktime_get_with_offset+0x93/0x2d0 [ 283.414500][ T6632] ? __pfx_bpf_check+0x10/0x10 [ 283.414539][ T6632] ? bpf_obj_name_cpy+0x194/0x1e0 [ 283.414584][ T6632] bpf_prog_load+0x14da/0x1c60 [ 283.414633][ T6632] ? __pfx_bpf_prog_load+0x10/0x10 [ 283.414697][ T6632] __sys_bpf+0xd86/0xe00 [ 283.414741][ T6632] ? __pfx___sys_bpf+0x10/0x10 [ 283.414779][ T6632] ? do_futex+0x3e7/0x4e0 [ 283.414866][ T6632] ? rcu_is_watching+0x16/0xb0 [ 283.414905][ T6632] __x64_sys_bpf+0xba/0xd0 [ 283.414939][ T6632] do_syscall_64+0x166/0x520 [ 283.414968][ T6632] ? trace_irq_disable+0x3b/0x140 [ 283.414997][ T6632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.415024][ T6632] ? clear_bhb_loop+0x70/0xc0 [ 283.415056][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.415083][ T6632] RIP: 0033:0x7f77bb55f559 [ 283.415110][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.415132][ T6632] RSP: 002b:00007f77b97b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.415162][ T6632] RAX: ffffffffffffffda RBX: 00007f77bb7e5fa0 RCX: 00007f77bb55f559 [ 283.415182][ T6632] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 283.415200][ T6632] RBP: 00007f77bb5f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 283.415216][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.415232][ T6632] R13: 00007f77bb7e6038 R14: 00007f77bb7e5fa0 R15: 00007fff1d4dc248 [ 283.415272][ T6632] [ 283.816528][ T6305] hsr_slave_0: entered promiscuous mode [ 283.819898][ T6305] hsr_slave_1: entered promiscuous mode [ 283.839552][ T6305] debugfs: 'hsr0' already exists in 'hsr' [ 283.839578][ T6305] Cannot create hsr debugfs directory [ 284.123962][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.554851][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.571616][ T6651] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 285.612250][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.614108][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.615459][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.616832][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.961120][ T6653] 0x000000000003-0x000000010001 : "" [ 286.539796][ T6653] ftl_cs: FTL header corrupt! [ 286.566386][ T6653] FAULT_INJECTION: forcing a failure. [ 286.566386][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 286.566426][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: syz.0.165 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 286.566454][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 286.566469][ T6653] Call Trace: [ 286.566479][ T6653] [ 286.566489][ T6653] dump_stack_lvl+0xe8/0x150 [ 286.566536][ T6653] should_fail_ex+0x447/0x5e0 [ 286.566574][ T6653] should_failslab+0xa8/0x100 [ 286.566603][ T6653] ? __kernfs_new_node+0xe7/0xa70 [ 286.566633][ T6653] kmem_cache_alloc_noprof+0x99/0x680 [ 286.566671][ T6653] ? __kernfs_new_node+0xe7/0xa70 [ 286.566707][ T6653] __kernfs_new_node+0xe7/0xa70 [ 286.566735][ T6653] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 286.566771][ T6653] ? __pfx___kernfs_new_node+0x10/0x10 [ 286.566797][ T6653] ? lock_acquire+0x115/0x350 [ 286.566833][ T6653] ? kernfs_root+0x1c/0x230 [ 286.566873][ T6653] ? kernfs_root+0x1c/0x230 [ 286.566898][ T6653] ? kernfs_root+0x1c/0x230 [ 286.566922][ T6653] ? kernfs_root+0x1c/0x230 [ 286.566954][ T6653] kernfs_new_node+0xeb/0x140 [ 286.566988][ T6653] __kernfs_create_file+0x4b/0x2e0 [ 286.567026][ T6653] sysfs_add_file_mode_ns+0x237/0x300 [ 286.567073][ T6653] internal_create_group+0x679/0x1180 [ 286.567115][ T6653] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.567147][ T6653] ? __pfx_internal_create_group+0x10/0x10 [ 286.567173][ T6653] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 286.567203][ T6653] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 286.567235][ T6653] sysfs_create_groups+0x59/0x120 [ 286.567271][ T6653] device_add_attrs+0x12c/0x600 [ 286.567300][ T6653] ? __pfx_device_add_attrs+0x10/0x10 [ 286.567321][ T6653] ? kobject_put+0x50f/0x550 [ 286.567361][ T6653] ? device_add_class_symlinks+0x222/0x240 [ 286.567397][ T6653] device_add+0x488/0xb80 [ 286.567423][ T6653] __add_disk+0x517/0xdb0 [ 286.567471][ T6653] add_disk_fwnode+0x100/0x3a0 [ 286.567513][ T6653] add_mtd_blktrans_dev+0xe81/0x14c0 [ 286.567559][ T6653] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 286.567613][ T6653] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 286.567639][ T6653] ? mtdblock_add_mtd+0x57/0x240 [ 286.567678][ T6653] mtdblock_add_mtd+0x18a/0x240 [ 286.567712][ T6653] blktrans_notify_add+0x9f/0xf0 [ 286.567749][ T6653] add_mtd_device+0x117f/0x17b0 [ 286.567791][ T6653] ? __pfx_add_mtd_device+0x10/0x10 [ 286.567829][ T6653] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 286.567871][ T6653] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.567924][ T6653] mtd_add_partition+0x388/0x590 [ 286.567957][ T6653] ? __pfx_mtd_add_partition+0x10/0x10 [ 286.568002][ T6653] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 286.568035][ T6653] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 286.568099][ T6653] mtdchar_ioctl+0x14fd/0x1bc0 [ 286.568135][ T6653] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 286.568183][ T6653] ? kasan_quarantine_put+0xbb/0x1f0 [ 286.568232][ T6653] ? tomoyo_path_number_perm+0x219/0x5f0 [ 286.568267][ T6653] ? tomoyo_path_number_perm+0x219/0x5f0 [ 286.568306][ T6653] ? __lock_acquire+0x747/0x2de0 [ 286.568363][ T6653] ? do_futex+0x3e7/0x4e0 [ 286.568431][ T6653] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 286.568458][ T6653] ? mutex_lock_nested+0x14d/0x1d0 [ 286.568490][ T6653] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 286.568522][ T6653] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 286.568550][ T6653] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 286.568579][ T6653] __se_sys_ioctl+0xff/0x170 [ 286.568608][ T6653] do_syscall_64+0x166/0x520 [ 286.568634][ T6653] ? trace_irq_disable+0x3b/0x140 [ 286.568659][ T6653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.568683][ T6653] ? clear_bhb_loop+0x70/0xc0 [ 286.568713][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.568736][ T6653] RIP: 0033:0x7f77bb55f559 [ 286.568759][ T6653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.568780][ T6653] RSP: 002b:00007f77b97b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.568807][ T6653] RAX: ffffffffffffffda RBX: 00007f77bb7e5fa0 RCX: 00007f77bb55f559 [ 286.568825][ T6653] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000005 [ 286.568841][ T6653] RBP: 00007f77bb5f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 286.568856][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.568871][ T6653] R13: 00007f77bb7e6038 R14: 00007f77bb7e5fa0 R15: 00007fff1d4dc248 [ 286.568911][ T6653] [ 291.296026][ T5623] Bluetooth: hci4: command tx timeout [ 291.732819][ T6683] netlink: 388 bytes leftover after parsing attributes in process `syz.2.169'. [ 293.125844][ T6688] netlink: 260 bytes leftover after parsing attributes in process `syz.4.168'. [ 294.228528][ T6700] FAULT_INJECTION: forcing a failure. [ 294.228528][ T6700] name failslab, interval 1, probability 0, space 0, times 0 [ 294.228591][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.0.170 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 294.228624][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 294.228640][ T6700] Call Trace: [ 294.228651][ T6700] [ 294.228662][ T6700] dump_stack_lvl+0xe8/0x150 [ 294.228714][ T6700] should_fail_ex+0x447/0x5e0 [ 294.228755][ T6700] should_failslab+0xa8/0x100 [ 294.228790][ T6700] __kvmalloc_node_noprof+0x171/0x880 [ 294.228819][ T6700] ? kasan_save_track+0x4f/0x80 [ 294.228848][ T6700] ? bpf_check_cfg+0x1c4/0x4860 [ 294.228874][ T6700] ? bpf_check_cfg+0x1c4/0x4860 [ 294.228910][ T6700] bpf_check_cfg+0x1c4/0x4860 [ 294.228980][ T6700] ? __pfx_bpf_check_cfg+0x10/0x10 [ 294.229007][ T6700] ? lockdep_hardirqs_on+0x7b/0x110 [ 294.229043][ T6700] ? kfree+0x1c5/0x6d0 [ 294.229078][ T6700] ? bpf_prog_calc_tag+0x310/0x370 [ 294.229115][ T6700] ? vfree+0x46d/0x4f0 [ 294.229156][ T6700] ? bpf_prog_calc_tag+0x310/0x370 [ 294.229188][ T6700] ? resolve_func_ptrs+0xc7a/0xe50 [ 294.229230][ T6700] ? check_and_resolve_insns+0x231a/0x28e0 [ 294.229287][ T6700] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 294.229322][ T6700] ? check_subprogs+0x413/0x540 [ 294.229361][ T6700] ? add_kfuncs+0x251/0x2e0 [ 294.229403][ T6700] bpf_check+0x2958/0x34e0 [ 294.229452][ T6700] ? ktime_get_with_offset+0x93/0x2d0 [ 294.229481][ T6700] ? ktime_get_with_offset+0x93/0x2d0 [ 294.229509][ T6700] ? __pfx_bpf_check+0x10/0x10 [ 294.229549][ T6700] ? bpf_obj_name_cpy+0x194/0x1e0 [ 294.229596][ T6700] bpf_prog_load+0x14da/0x1c60 [ 294.229646][ T6700] ? __pfx_bpf_prog_load+0x10/0x10 [ 294.229712][ T6700] __sys_bpf+0xd86/0xe00 [ 294.229754][ T6700] ? __pfx___sys_bpf+0x10/0x10 [ 294.229793][ T6700] ? do_futex+0x458/0x4e0 [ 294.229863][ T6700] ? rcu_is_watching+0x16/0xb0 [ 294.229902][ T6700] __x64_sys_bpf+0xba/0xd0 [ 294.229936][ T6700] do_syscall_64+0x166/0x520 [ 294.229965][ T6700] ? trace_irq_disable+0x3b/0x140 [ 294.229993][ T6700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.230020][ T6700] ? clear_bhb_loop+0x70/0xc0 [ 294.230053][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.230080][ T6700] RIP: 0033:0x7f77bb55f559 [ 294.230105][ T6700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.230128][ T6700] RSP: 002b:00007f77b97b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.230157][ T6700] RAX: ffffffffffffffda RBX: 00007f77bb7e5fa0 RCX: 00007f77bb55f559 [ 294.230178][ T6700] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 294.230195][ T6700] RBP: 00007f77bb5f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 294.230212][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.230229][ T6700] R13: 00007f77bb7e6038 R14: 00007f77bb7e5fa0 R15: 00007fff1d4dc248 [ 294.230301][ T6700] [ 294.294908][ T5623] Bluetooth: hci4: command tx timeout [ 294.314999][ T6701] 0x000000000003-0x000000010001 : "" [ 294.398627][ T6701] ftl_cs: FTL header corrupt! [ 297.292522][ T5623] Bluetooth: hci4: command tx timeout [ 297.388411][ T6717] 0x000000000003-0x000000010001 : "" [ 297.422898][ T6717] ftl_cs: FTL header corrupt! [ 299.030815][ T6647] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.301300][ T5623] Bluetooth: hci4: command tx timeout [ 299.841292][ T12] bridge_slave_1: left allmulticast mode [ 299.841332][ T12] bridge_slave_1: left promiscuous mode [ 299.841588][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.984269][ T12] bridge_slave_0: left allmulticast mode [ 299.984310][ T12] bridge_slave_0: left promiscuous mode [ 299.989914][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.036944][ T6749] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.180' sets config #0 [ 300.038648][ T6749] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.180' sets config #1 [ 300.284370][ T12] bridge_slave_1: left allmulticast mode [ 300.284411][ T12] bridge_slave_1: left promiscuous mode [ 300.284672][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.470410][ T12] bridge_slave_0: left allmulticast mode [ 300.470451][ T12] bridge_slave_0: left promiscuous mode [ 300.496828][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.679995][ T6756] 0x000000000003-0x000000010001 : "" [ 300.702784][ T6756] ftl_cs: FTL header corrupt! [ 300.739845][ T6756] FAULT_INJECTION: forcing a failure. [ 300.739845][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 300.739887][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.2.181 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 300.739914][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 300.739929][ T6756] Call Trace: [ 300.739938][ T6756] [ 300.739956][ T6756] dump_stack_lvl+0xe8/0x150 [ 300.740003][ T6756] should_fail_ex+0x447/0x5e0 [ 300.740047][ T6756] should_failslab+0xa8/0x100 [ 300.740076][ T6756] ? __kernfs_new_node+0xe7/0xa70 [ 300.740105][ T6756] kmem_cache_alloc_noprof+0x99/0x680 [ 300.740144][ T6756] ? __kernfs_new_node+0xe7/0xa70 [ 300.740180][ T6756] __kernfs_new_node+0xe7/0xa70 [ 300.740208][ T6756] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 300.740245][ T6756] ? __pfx___kernfs_new_node+0x10/0x10 [ 300.740271][ T6756] ? lock_acquire+0x115/0x350 [ 300.740308][ T6756] ? kernfs_root+0x1c/0x230 [ 300.740341][ T6756] ? kernfs_root+0x1c/0x230 [ 300.740366][ T6756] ? kernfs_root+0x1c/0x230 [ 300.740390][ T6756] ? kernfs_root+0x1c/0x230 [ 300.740421][ T6756] kernfs_new_node+0xeb/0x140 [ 300.740454][ T6756] __kernfs_create_file+0x4b/0x2e0 [ 300.740491][ T6756] sysfs_add_file_mode_ns+0x237/0x300 [ 300.740537][ T6756] internal_create_group+0x679/0x1180 [ 300.740575][ T6756] ? kernfs_create_dir_ns+0x1c0/0x220 [ 300.740611][ T6756] ? __pfx_internal_create_group+0x10/0x10 [ 300.740636][ T6756] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 300.740661][ T6756] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 300.740691][ T6756] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 300.740721][ T6756] sysfs_create_groups+0x59/0x120 [ 300.740753][ T6756] kobject_add_internal+0x673/0xce0 [ 300.740795][ T6756] kobject_add+0x163/0x240 [ 300.740828][ T6756] ? kobject_add+0x163/0x240 [ 300.740863][ T6756] ? __pfx_kobject_add+0x10/0x10 [ 300.740897][ T6756] ? __kasan_kmalloc+0x93/0xb0 [ 300.740927][ T6756] ? kobject_create_and_add+0x58/0x230 [ 300.740974][ T6756] blk_register_queue+0x83/0x4f0 [ 300.741011][ T6756] ? kobject_create_and_add+0x16f/0x230 [ 300.741051][ T6756] __add_disk+0x6b8/0xdb0 [ 300.741098][ T6756] add_disk_fwnode+0x100/0x3a0 [ 300.741139][ T6756] add_mtd_blktrans_dev+0xe81/0x14c0 [ 300.741191][ T6756] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 300.741245][ T6756] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 300.741269][ T6756] ? mtdblock_add_mtd+0x57/0x240 [ 300.741308][ T6756] mtdblock_add_mtd+0x18a/0x240 [ 300.741342][ T6756] blktrans_notify_add+0x9f/0xf0 [ 300.741381][ T6756] add_mtd_device+0x117f/0x17b0 [ 300.741422][ T6756] ? __pfx_add_mtd_device+0x10/0x10 [ 300.741459][ T6756] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 300.741501][ T6756] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 300.741551][ T6756] mtd_add_partition+0x388/0x590 [ 300.741584][ T6756] ? __pfx_mtd_add_partition+0x10/0x10 [ 300.741628][ T6756] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 300.741661][ T6756] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 300.741723][ T6756] mtdchar_ioctl+0x14fd/0x1bc0 [ 300.741758][ T6756] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 300.741804][ T6756] ? kasan_quarantine_put+0xbb/0x1f0 [ 300.741851][ T6756] ? tomoyo_path_number_perm+0x219/0x5f0 [ 300.741886][ T6756] ? tomoyo_path_number_perm+0x219/0x5f0 [ 300.741924][ T6756] ? __lock_acquire+0x747/0x2de0 [ 300.741988][ T6756] ? do_futex+0x3e7/0x4e0 [ 300.742049][ T6756] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 300.742075][ T6756] ? mutex_lock_nested+0x14d/0x1d0 [ 300.742106][ T6756] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 300.742137][ T6756] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 300.742164][ T6756] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 300.742192][ T6756] __se_sys_ioctl+0xff/0x170 [ 300.742221][ T6756] do_syscall_64+0x166/0x520 [ 300.742245][ T6756] ? trace_irq_disable+0x3b/0x140 [ 300.742270][ T6756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.742295][ T6756] ? clear_bhb_loop+0x70/0xc0 [ 300.742324][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.742347][ T6756] RIP: 0033:0x7f67279bf559 [ 300.742369][ T6756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.742390][ T6756] RSP: 002b:00007f6725c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.742416][ T6756] RAX: ffffffffffffffda RBX: 00007f6727c45fa0 RCX: 00007f67279bf559 [ 300.742433][ T6756] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 300.742450][ T6756] RBP: 00007f6727a56b50 R08: 0000000000000000 R09: 0000000000000000 [ 300.742466][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.742481][ T6756] R13: 00007f6727c46038 R14: 00007f6727c45fa0 R15: 00007ffde9e44be8 [ 300.742518][ T6756] [ 301.185018][ T12] bridge_slave_1: left allmulticast mode [ 301.185134][ T12] bridge_slave_1: left promiscuous mode [ 301.185823][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.247654][ T6756] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock11) [ 301.489724][ T12] bridge_slave_0: left allmulticast mode [ 301.489764][ T12] bridge_slave_0: left promiscuous mode [ 301.490018][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.159742][ T6766] 0x000000000003-0x000000010001 : "" [ 302.192503][ T6766] ftl_cs: FTL header corrupt! [ 302.978006][ T6769] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 304.869940][ T12] bond0 (unregistering): Released all slaves [ 305.750189][ T6788] 0x000000000003-0x000000010001 : "" [ 305.783225][ T6788] ftl_cs: FTL header corrupt! [ 305.810425][ T6788] FAULT_INJECTION: forcing a failure. [ 305.810425][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 305.810466][ T6788] CPU: 1 UID: 0 PID: 6788 Comm: syz.4.190 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 305.810494][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.810507][ T6788] Call Trace: [ 305.810517][ T6788] [ 305.810526][ T6788] dump_stack_lvl+0xe8/0x150 [ 305.810575][ T6788] should_fail_ex+0x447/0x5e0 [ 305.810613][ T6788] should_failslab+0xa8/0x100 [ 305.810642][ T6788] ? __kernfs_new_node+0xe7/0xa70 [ 305.810671][ T6788] kmem_cache_alloc_noprof+0x99/0x680 [ 305.810712][ T6788] ? __kernfs_new_node+0xe7/0xa70 [ 305.810747][ T6788] __kernfs_new_node+0xe7/0xa70 [ 305.810774][ T6788] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 305.810809][ T6788] ? __pfx___kernfs_new_node+0x10/0x10 [ 305.810836][ T6788] ? lock_acquire+0x115/0x350 [ 305.810873][ T6788] ? kernfs_root+0x1c/0x230 [ 305.810906][ T6788] ? kernfs_root+0x1c/0x230 [ 305.810932][ T6788] ? kernfs_root+0x1c/0x230 [ 305.810955][ T6788] ? kernfs_root+0x1c/0x230 [ 305.810994][ T6788] kernfs_new_node+0xeb/0x140 [ 305.811028][ T6788] __kernfs_create_file+0x4b/0x2e0 [ 305.811067][ T6788] sysfs_add_file_mode_ns+0x237/0x300 [ 305.811116][ T6788] internal_create_group+0x679/0x1180 [ 305.811155][ T6788] ? kernfs_create_dir_ns+0x1c0/0x220 [ 305.811192][ T6788] ? __pfx_internal_create_group+0x10/0x10 [ 305.811218][ T6788] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 305.811243][ T6788] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 305.811268][ T6788] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 305.811301][ T6788] sysfs_create_groups+0x59/0x120 [ 305.811332][ T6788] kobject_add_internal+0x673/0xce0 [ 305.811376][ T6788] kobject_add+0x163/0x240 [ 305.811410][ T6788] ? kobject_add+0x163/0x240 [ 305.811446][ T6788] ? __pfx_kobject_add+0x10/0x10 [ 305.811480][ T6788] ? __kasan_kmalloc+0x93/0xb0 [ 305.811509][ T6788] ? kobject_create_and_add+0x58/0x230 [ 305.811548][ T6788] blk_register_queue+0x83/0x4f0 [ 305.811583][ T6788] ? kobject_create_and_add+0x16f/0x230 [ 305.811621][ T6788] __add_disk+0x6b8/0xdb0 [ 305.811669][ T6788] add_disk_fwnode+0x100/0x3a0 [ 305.811710][ T6788] add_mtd_blktrans_dev+0xe81/0x14c0 [ 305.811754][ T6788] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 305.811807][ T6788] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 305.811831][ T6788] ? mtdblock_add_mtd+0x57/0x240 [ 305.811867][ T6788] mtdblock_add_mtd+0x18a/0x240 [ 305.811901][ T6788] blktrans_notify_add+0x9f/0xf0 [ 305.811931][ T6788] add_mtd_device+0x117f/0x17b0 [ 305.811972][ T6788] ? __pfx_add_mtd_device+0x10/0x10 [ 305.812017][ T6788] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 305.812060][ T6788] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 305.812110][ T6788] mtd_add_partition+0x388/0x590 [ 305.812142][ T6788] ? __pfx_mtd_add_partition+0x10/0x10 [ 305.812186][ T6788] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 305.812218][ T6788] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 305.812278][ T6788] mtdchar_ioctl+0x14fd/0x1bc0 [ 305.812312][ T6788] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 305.812355][ T6788] ? kasan_quarantine_put+0xbb/0x1f0 [ 305.812402][ T6788] ? tomoyo_path_number_perm+0x219/0x5f0 [ 305.812437][ T6788] ? tomoyo_path_number_perm+0x219/0x5f0 [ 305.812475][ T6788] ? __lock_acquire+0x747/0x2de0 [ 305.812531][ T6788] ? do_futex+0x3e7/0x4e0 [ 305.812588][ T6788] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 305.812614][ T6788] ? mutex_lock_nested+0x14d/0x1d0 [ 305.812646][ T6788] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 305.812677][ T6788] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 305.812704][ T6788] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 305.812731][ T6788] __se_sys_ioctl+0xff/0x170 [ 305.812759][ T6788] do_syscall_64+0x166/0x520 [ 305.812784][ T6788] ? trace_irq_disable+0x3b/0x140 [ 305.812809][ T6788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.812833][ T6788] ? clear_bhb_loop+0x70/0xc0 [ 305.812863][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.812887][ T6788] RIP: 0033:0x7f474987f559 [ 305.812910][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.812930][ T6788] RSP: 002b:00007f4747ad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.812957][ T6788] RAX: ffffffffffffffda RBX: 00007f4749b05fa0 RCX: 00007f474987f559 [ 305.812975][ T6788] RDX: 0000200000000200 RSI: 0000000000001269 RDI: 0000000000000004 [ 305.813001][ T6788] RBP: 00007f4749916b50 R08: 0000000000000000 R09: 0000000000000000 [ 305.813016][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.813030][ T6788] R13: 00007f4749b06038 R14: 00007f4749b05fa0 R15: 00007ffeab413578 [ 305.813067][ T6788] [ 305.909163][ T6788] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock13) [ 306.434740][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.593924][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.680219][ T12] bond0 (unregistering): Released all slaves [ 309.937390][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.062464][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.104463][ T6815] 0x000000000003-0x000000010001 : "" [ 310.134171][ T6815] ftl_cs: FTL header corrupt! [ 310.162568][ T12] bond0 (unregistering): Released all slaves [ 310.754626][ T6822] FAULT_INJECTION: forcing a failure. [ 310.754626][ T6822] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 310.754682][ T6822] CPU: 0 UID: 0 PID: 6822 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 310.754710][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 310.754724][ T6822] Call Trace: [ 310.754734][ T6822] [ 310.754744][ T6822] dump_stack_lvl+0xe8/0x150 [ 310.754792][ T6822] should_fail_ex+0x447/0x5e0 [ 310.754828][ T6822] _copy_from_user+0x2d/0xb0 [ 310.754861][ T6822] __sys_bpf+0x2e7/0xe00 [ 310.754902][ T6822] ? __pfx___sys_bpf+0x10/0x10 [ 310.754936][ T6822] ? do_futex+0x3e7/0x4e0 [ 310.755002][ T6822] ? rcu_is_watching+0x16/0xb0 [ 310.755039][ T6822] __x64_sys_bpf+0xba/0xd0 [ 310.755070][ T6822] do_syscall_64+0x166/0x520 [ 310.755097][ T6822] ? trace_irq_disable+0x3b/0x140 [ 310.755122][ T6822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.755146][ T6822] ? clear_bhb_loop+0x70/0xc0 [ 310.755176][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.755201][ T6822] RIP: 0033:0x7f77bb55f559 [ 310.755223][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.755242][ T6822] RSP: 002b:00007f77b97b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.755268][ T6822] RAX: ffffffffffffffda RBX: 00007f77bb7e5fa0 RCX: 00007f77bb55f559 [ 310.755286][ T6822] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 310.755301][ T6822] RBP: 00007f77bb5f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 310.755316][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.755330][ T6822] R13: 00007f77bb7e6038 R14: 00007f77bb7e5fa0 R15: 00007fff1d4dc248 [ 310.755367][ T6822] [ 311.805505][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.882880][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.947604][ T12] bond0 (unregistering): Released all slaves [ 312.647532][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 313.122472][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.122705][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.122933][ T6505] bridge_slave_0: entered allmulticast mode [ 313.134085][ T6505] bridge_slave_0: entered promiscuous mode [ 313.254489][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.254629][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.254840][ T6505] bridge_slave_1: entered allmulticast mode [ 313.264732][ T6505] bridge_slave_1: entered promiscuous mode [ 314.485086][ T6505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.605211][ T6505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.038510][ T6505] team0: Port device team_slave_0 added [ 315.130218][ T6505] team0: Port device team_slave_1 added [ 317.097550][ T6505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.097571][ T6505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.097602][ T6505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.352190][ T6505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.352211][ T6505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.352263][ T6505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.416844][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 319.714429][ T6889] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 319.763832][ T6893] 0x000000000003-0x000000010001 : "" [ 319.800210][ T6893] ftl_cs: FTL header corrupt! [ 320.200190][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.240725][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.243573][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.248242][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.276726][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.184068][ T6907] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5611] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6907] [ 322.420895][ T61] Bluetooth: hci5: command tx timeout [ 322.671000][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.671078][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.706039][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.709244][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.722457][ T61] Bluetooth: hci5: command tx timeout [ 325.847077][ T6647] bridge_slave_0: entered allmulticast mode [ 325.866522][ T6647] bridge_slave_0: entered promiscuous mode [ 326.296070][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.296206][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.296434][ T6647] bridge_slave_1: entered allmulticast mode [ 326.518235][ T6647] bridge_slave_1: entered promiscuous mode [ 327.668617][ T6948] fuse: Unknown parameter 'user_i00000000000000000000' [ 329.006874][ T6949] netlink: 260 bytes leftover after parsing attributes in process `syz.0.220'. [ 329.017343][ T61] Bluetooth: hci5: command tx timeout [ 329.463803][ T6647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.505500][ T6647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.295395][ T61] Bluetooth: hci5: command tx timeout [ 332.273767][ T6979] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5608] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6979] [ 332.277583][ T6647] team0: Port device team_slave_0 added [ 332.313417][ T6647] team0: Port device team_slave_1 added [ 332.313498][ T6896] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.853381][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.853402][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.853433][ T6647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.869870][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.869890][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.869921][ T6647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.381406][ T12] hsr_slave_0: left promiscuous mode [ 335.445674][ T12] hsr_slave_1: left promiscuous mode [ 335.446980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.488366][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.113481][ T12] hsr_slave_0: left promiscuous mode [ 336.153348][ T12] hsr_slave_1: left promiscuous mode [ 336.159366][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.159398][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.234565][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.234629][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.941714][ T12] veth1_macvtap: left promiscuous mode [ 337.941835][ T12] veth0_macvtap: left promiscuous mode [ 337.942610][ T12] veth1_vlan: left promiscuous mode [ 337.942810][ T12] veth0_vlan: left promiscuous mode [ 344.208969][ T12] team0 (unregistering): Port device team_slave_1 removed [ 344.287087][ T12] team0 (unregistering): Port device team_slave_0 removed [ 345.599870][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.626578][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.627747][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.629169][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.629928][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.840995][ T61] Bluetooth: hci2: command tx timeout [ 349.024338][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 349.713127][ T7073] overlayfs: failed to resolve './file2': -2 [ 350.900864][ T61] Bluetooth: hci2: command tx timeout [ 351.225718][ T12] team0 (unregistering): Port device team_slave_1 removed [ 352.526189][ T12] team0 (unregistering): Port device team_slave_0 removed [ 352.725027][ T36] audit: type=1326 audit(1793549854.309:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f474987f559 code=0x7ffc0000 [ 352.725525][ T36] audit: type=1326 audit(1793549854.309:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f474987f559 code=0x7ffc0000 [ 352.728606][ T36] audit: type=1326 audit(1793549854.309:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f474987f559 code=0x7ffc0000 [ 352.730492][ T36] audit: type=1326 audit(1793549854.309:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f474987f559 code=0x7ffc0000 [ 352.730625][ T36] audit: type=1326 audit(1793549854.309:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f474987f559 code=0x7ffc0000 [ 352.980828][ T61] Bluetooth: hci2: command tx timeout [ 353.606497][ T7089] process 'syz.4.249' launched './file0' with NULL argv: empty string added [ 355.141413][ T61] Bluetooth: hci2: command tx timeout [ 356.775372][ T7050] rxe_eth0 speed is unknown, defaulting to 1000 [ 358.949234][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.949423][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.949641][ T6896] bridge_slave_0: entered allmulticast mode [ 359.001992][ T6896] bridge_slave_0: entered promiscuous mode [ 359.007338][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.007555][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.007734][ T6896] bridge_slave_1: entered allmulticast mode [ 359.040009][ T6896] bridge_slave_1: entered promiscuous mode [ 360.517338][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.557919][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.738743][ T6896] team0: Port device team_slave_0 added [ 360.756207][ T6896] team0: Port device team_slave_1 added [ 361.134310][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 363.148625][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.148644][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.148671][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.627224][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.627245][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.627276][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.490099][ T61] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 367.325057][ T6896] hsr_slave_0: entered promiscuous mode [ 367.336731][ T6896] hsr_slave_1: entered promiscuous mode [ 367.353292][ T6896] debugfs: 'hsr0' already exists in 'hsr' [ 367.353321][ T6896] Cannot create hsr debugfs directory [ 367.377508][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 367.422212][ T7185] bridge_slave_1: left allmulticast mode [ 367.422250][ T7185] bridge_slave_1: left promiscuous mode [ 367.422808][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.772743][ T7185] bridge_slave_0: left allmulticast mode [ 367.772785][ T7185] bridge_slave_0: left promiscuous mode [ 367.773066][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.906126][ T3329] IPVS: starting estimator thread 0... [ 368.047520][ T7191] IPVS: using max 11 ests per chain, 26400 per kthread [ 369.374477][ T61] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 369.504740][ T61] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 372.650873][ T1728] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 372.861097][ T12] bridge_slave_1: left allmulticast mode [ 372.861128][ T12] bridge_slave_1: left promiscuous mode [ 372.861328][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.872057][ T1728] usb 1-1: Using ep0 maxpacket: 32 [ 372.907276][ T1728] usb 1-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 372.986126][ T1728] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 372.986153][ T1728] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 372.986177][ T1728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 373.025681][ T1728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.025705][ T1728] usb 1-1: Product: syz [ 373.025716][ T1728] usb 1-1: Manufacturer: syz [ 373.025727][ T1728] usb 1-1: SerialNumber: syz [ 373.172934][ T12] bridge_slave_0: left allmulticast mode [ 373.172982][ T12] bridge_slave_0: left promiscuous mode [ 373.173482][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.405474][ T1728] usb 1-1: config 0 descriptor?? [ 375.137266][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 375.163992][ T1728] gs_usb 1-1:0.0: Couldn't send data format (err=-32) [ 375.164042][ T1728] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 375.859058][ T61] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 376.290819][ T12] bridge_slave_1: left allmulticast mode [ 376.290858][ T12] bridge_slave_1: left promiscuous mode [ 376.291106][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.356823][ T1728] usb 1-1: USB disconnect, device number 2 [ 376.556676][ T12] bridge_slave_0: left allmulticast mode [ 376.556716][ T12] bridge_slave_0: left promiscuous mode [ 376.586709][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.933786][ T12] bridge_slave_1: left allmulticast mode [ 376.933840][ T12] bridge_slave_1: left promiscuous mode [ 376.934151][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.105207][ T12] bridge_slave_0: left allmulticast mode [ 377.105248][ T12] bridge_slave_0: left promiscuous mode [ 377.105509][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.374923][ T7255] capability: warning: `syz.0.283' uses deprecated v2 capabilities in a way that may be insecure [ 378.699039][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 379.205843][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.379675][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.482394][ T12] bond0 (unregistering): Released all slaves [ 382.737312][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.782613][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.786202][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.787476][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.800147][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.939234][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.074782][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.170451][ T12] bond0 (unregistering): Released all slaves [ 384.110460][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.110546][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.758082][ T5623] Bluetooth: hci4: command tx timeout [ 386.170817][ T1728] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 386.256139][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.330797][ T1728] usb 3-1: Using ep0 maxpacket: 32 [ 386.331667][ T1728] usb 3-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 386.355357][ T1728] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 386.355380][ T1728] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 386.355398][ T1728] usb 3-1: config 0 interface 0 has no altsetting 0 [ 386.388689][ T1728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.388721][ T1728] usb 3-1: Product: syz [ 386.388738][ T1728] usb 3-1: Manufacturer: syz [ 386.388755][ T1728] usb 3-1: SerialNumber: syz [ 386.429082][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.454516][ T1728] usb 3-1: config 0 descriptor?? [ 386.548010][ T12] bond0 (unregistering): Released all slaves [ 387.151424][ T61] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 387.780834][ T61] Bluetooth: hci4: command tx timeout [ 387.808293][ T1728] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 388.098793][ T1728] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 388.099723][ T1728] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 388.099748][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 389.728217][ T5906] usb 3-1: USB disconnect, device number 4 [ 389.863213][ T61] Bluetooth: hci4: command tx timeout [ 389.947014][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 390.159730][ T7309] bridge_slave_1: left allmulticast mode [ 390.159775][ T7309] bridge_slave_1: left promiscuous mode [ 390.160086][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.949802][ T61] Bluetooth: hci4: command tx timeout [ 392.739447][ T7309] bridge_slave_0: left allmulticast mode [ 392.739489][ T7309] bridge_slave_0: left promiscuous mode [ 392.739784][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.055598][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'. [ 397.742390][ T7266] rxe_eth0 speed is unknown, defaulting to 1000 [ 398.435410][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.435608][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.435822][ T7050] bridge_slave_0: entered allmulticast mode [ 398.448983][ T7050] bridge_slave_0: entered promiscuous mode [ 398.466899][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.467136][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.467335][ T7050] bridge_slave_1: entered allmulticast mode [ 398.477207][ T7050] bridge_slave_1: entered promiscuous mode [ 401.104590][ T7050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.233987][ T7050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.649338][ T7050] team0: Port device team_slave_0 added [ 402.213229][ T7050] team0: Port device team_slave_1 added [ 402.234458][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 402.386322][ T7392] bridge_slave_1: left allmulticast mode [ 402.386366][ T7392] bridge_slave_1: left promiscuous mode [ 402.387049][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.725286][ T7392] bridge_slave_0: left allmulticast mode [ 402.725328][ T7392] bridge_slave_0: left promiscuous mode [ 402.725609][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.256646][ T7397] krxrpcio/0 (7397) used greatest stack depth: 17160 bytes left [ 403.943712][ T27] ------------[ cut here ]------------ [ 403.943729][ T27] atomic_read(&sk->sk_rmem_alloc) [ 403.943747][ T27] WARNING: net/ipv4/af_inet.c:159 at inet_sock_destruct+0x616/0x750, CPU#1: rcuc/1/27 [ 403.964109][ T27] Modules linked in: [ 403.968072][ T27] CPU: 1 UID: 0 PID: 27 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 403.977455][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 403.987652][ T27] RIP: 0010:inet_sock_destruct+0x616/0x750 [ 403.993559][ T27] Code: 00 41 0f b6 74 24 12 48 c7 c7 00 eb 9f 8c 4c 89 e2 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 60 97 3a f7 e8 6b 08 db f7 90 <0f> 0b 90 e9 43 fe ff ff e8 5d 08 db f7 90 0f 0b 90 e9 76 fe ff ff [ 404.013264][ T27] RSP: 0018:ffffc90000a1fb28 EFLAGS: 00010293 [ 404.019373][ T27] RAX: ffffffff89ecd0b5 RBX: dffffc0000000000 RCX: ffff88801e6a8000 [ 404.027440][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.035504][ T27] RBP: 00000000000003c0 R08: 0000000000000000 R09: 0000000000000000 [ 404.043571][ T27] R10: dffffc0000000000 R11: ffffed100c9826f1 R12: ffff888064c135c0 [ 404.051733][ T27] R13: ffff888064c13ca0 R14: ffff888064c13780 R15: ffffffff908e6aa0 [ 404.059782][ T27] FS: 0000000000000000(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 404.068843][ T27] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.075533][ T27] CR2: 0000200000404030 CR3: 000000004dedc000 CR4: 00000000003526f0 [ 404.083647][ T27] Call Trace: [ 404.086988][ T27] [ 404.089984][ T27] ? __pfx_udp_destruct_sock+0x10/0x10 [ 404.095572][ T27] __sk_destruct+0x89/0xa30 [ 404.100145][ T27] ? __pfx___sk_destruct+0x10/0x10 [ 404.105375][ T27] ? rcu_cpu_kthread+0x217/0x1700 [ 404.110455][ T27] rcu_cpu_kthread+0xb2f/0x1700 [ 404.115449][ T27] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 404.120854][ T27] ? schedule+0x90/0x2b0 [ 404.125172][ T27] smpboot_thread_fn+0x5f8/0xb30 [ 404.130219][ T27] ? smpboot_thread_fn+0x4e/0xb30 [ 404.135371][ T27] kthread+0x38b/0x470 [ 404.139535][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 404.145124][ T27] ? __pfx_kthread+0x10/0x10 [ 404.149788][ T27] ret_from_fork+0x514/0xb70 [ 404.154481][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 404.159648][ T27] ? __switch_to+0xc78/0x1410 [ 404.164416][ T27] ? __pfx_kthread+0x10/0x10 [ 404.169094][ T27] ret_from_fork_asm+0x1a/0x30 [ 404.173970][ T27] [ 404.177042][ T27] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 404.184360][ T27] CPU: 1 UID: 0 PID: 27 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.193681][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 404.203794][ T27] Call Trace: [ 404.207117][ T27] [ 404.210084][ T27] vpanic+0x26f/0x710 [ 404.214113][ T27] panic+0xc5/0xd0 [ 404.217896][ T27] ? __pfx_panic+0x10/0x10 [ 404.222366][ T27] ? ret_from_fork_asm+0x1a/0x30 [ 404.227354][ T27] __warn+0x315/0x4c0 [ 404.231371][ T27] ? inet_sock_destruct+0x616/0x750 [ 404.236624][ T27] ? inet_sock_destruct+0x616/0x750 [ 404.241870][ T27] __report_bug+0x276/0x570 [ 404.246413][ T27] ? kasan_save_track+0x3e/0x80 [ 404.251294][ T27] ? kasan_save_free_info+0x40/0x50 [ 404.256537][ T27] ? __kasan_slab_free+0x5c/0x80 [ 404.261530][ T27] ? inet_sock_destruct+0x616/0x750 [ 404.266794][ T27] ? __pfx___report_bug+0x10/0x10 [ 404.271899][ T27] ? inet_sock_destruct+0x616/0x750 [ 404.277141][ T27] report_bug+0x16b/0x220 [ 404.281514][ T27] ? inet_sock_destruct+0x616/0x750 [ 404.287235][ T27] ? inet_sock_destruct+0x618/0x750 [ 404.292489][ T27] handle_bug+0x9c/0x200 [ 404.296796][ T27] exc_invalid_op+0x1a/0x50 [ 404.301343][ T27] asm_exc_invalid_op+0x1a/0x20 [ 404.306231][ T27] RIP: 0010:inet_sock_destruct+0x616/0x750 [ 404.312086][ T27] Code: 00 41 0f b6 74 24 12 48 c7 c7 00 eb 9f 8c 4c 89 e2 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 60 97 3a f7 e8 6b 08 db f7 90 <0f> 0b 90 e9 43 fe ff ff e8 5d 08 db f7 90 0f 0b 90 e9 76 fe ff ff [ 404.331739][ T27] RSP: 0018:ffffc90000a1fb28 EFLAGS: 00010293 [ 404.337876][ T27] RAX: ffffffff89ecd0b5 RBX: dffffc0000000000 RCX: ffff88801e6a8000 [ 404.345902][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.353903][ T27] RBP: 00000000000003c0 R08: 0000000000000000 R09: 0000000000000000 [ 404.361952][ T27] R10: dffffc0000000000 R11: ffffed100c9826f1 R12: ffff888064c135c0 [ 404.369952][ T27] R13: ffff888064c13ca0 R14: ffff888064c13780 R15: ffffffff908e6aa0 [ 404.377955][ T27] ? inet_sock_destruct+0x615/0x750 [ 404.383200][ T27] ? inet_sock_destruct+0x615/0x750 [ 404.388428][ T27] ? __pfx_udp_destruct_sock+0x10/0x10 [ 404.393942][ T27] __sk_destruct+0x89/0xa30 [ 404.398466][ T27] ? __pfx___sk_destruct+0x10/0x10 [ 404.403602][ T27] ? rcu_cpu_kthread+0x217/0x1700 [ 404.408648][ T27] rcu_cpu_kthread+0xb2f/0x1700 [ 404.413546][ T27] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 404.418860][ T27] ? schedule+0x90/0x2b0 [ 404.423153][ T27] smpboot_thread_fn+0x5f8/0xb30 [ 404.428120][ T27] ? smpboot_thread_fn+0x4e/0xb30 [ 404.433174][ T27] kthread+0x38b/0x470 [ 404.437265][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 404.442762][ T27] ? __pfx_kthread+0x10/0x10 [ 404.447380][ T27] ret_from_fork+0x514/0xb70 [ 404.451996][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 404.457132][ T27] ? __switch_to+0xc78/0x1410 [ 404.461835][ T27] ? __pfx_kthread+0x10/0x10 [ 404.466452][ T27] ret_from_fork_asm+0x1a/0x30 [ 404.471256][ T27] [ 404.474912][ T27] Kernel Offset: disabled [ 404.479254][ T27] Rebooting in 86400 seconds..