last executing test programs: 1m32.74430087s ago: executing program 0 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c824}, 0x0) 1m32.512725804s ago: executing program 1 (id=43): r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/sys/kernel/core_pattern\x00', 0x101941, 0x100) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000009c0)=ANY=[], 0x28) 1m32.338224539s ago: executing program 1 (id=45): syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x6c, 0x0, @private1, @private2, [], "3e39f832a6318487"}}}}}}}, 0x0) 1m32.230201984s ago: executing program 1 (id=47): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m32.066644394s ago: executing program 0 (id=48): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 1m31.981866314s ago: executing program 1 (id=49): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m31.423260173s ago: executing program 1 (id=51): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r0, &(0x7f0000001800), 0xfe46) 1m31.099722342s ago: executing program 0 (id=52): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60004004}, 0x0) 1m30.897668558s ago: executing program 0 (id=54): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r5 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 1m29.578939901s ago: executing program 0 (id=56): r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/sys/kernel/core_pattern\x00', 0x101941, 0x100) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000009c0)=ANY=[], 0x28) 1m25.390018441s ago: executing program 1 (id=69): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x161) 1m25.180027371s ago: executing program 32 (id=69): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x161) 1m25.097270992s ago: executing program 0 (id=74): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x0, 0x10, &(0x7f0000000b00), 0xfffffffffffffd00}, 0x48) 1m23.774637779s ago: executing program 33 (id=74): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x0, 0x10, &(0x7f0000000b00), 0xfffffffffffffd00}, 0x48) 3.735031587s ago: executing program 2 (id=523): add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x110, 0xffffffffffffffff) 3.698114629s ago: executing program 6 (id=524): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x11, 0x7, r2, 0x1, 0x0, 0x6, @local}, 0x14) 3.43654594s ago: executing program 6 (id=528): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 3.382760347s ago: executing program 2 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cc00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.247295744s ago: executing program 2 (id=533): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002340)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x7}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 3.198957334s ago: executing program 4 (id=534): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x24440, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000080)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x7f, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e23, 0x13865532, @private1, 0x43}}, 0x0, 0x0, 0x1d, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cdd6945d296a285852ef69992da867f406182d70b47773434b834940000ad628d62a3b45bb98872fb0200"}, 0xd8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000940)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000007c0)=[{&(0x7f0000000800)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 3.134093538s ago: executing program 6 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001640)={0x24, 0x2d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@generic="cbd30d11"]}, @typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.201318362s ago: executing program 4 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x1f, 0x15, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.074789718s ago: executing program 2 (id=541): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000640)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r0}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r0, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000740)={0x16, 0x98, 0xfa00, {0x0, 0x4, r0, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 1.998189706s ago: executing program 4 (id=542): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.927616122s ago: executing program 3 (id=543): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c41, 0x0) r1 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x20, 0x7, 0x1, r0, 0x0, 0x0, 0x8, 0x0, 0x1, r1}]) 1.82510143s ago: executing program 2 (id=544): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$rds(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002e40)={0x1, &(0x7f0000002e80)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.770013135s ago: executing program 4 (id=545): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 1.769541559s ago: executing program 6 (id=547): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000001580)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, &(0x7f0000001640), &(0x7f0000001680)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x16}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 1.66411104s ago: executing program 3 (id=548): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004840)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004a00)=""/154, 0x9a}, {&(0x7f0000004ac0)=""/4148, 0x1034}, {&(0x7f0000005b00)=""/225, 0xe1}, {&(0x7f0000005c00)=""/160, 0xa0}, {&(0x7f0000005cc0)=""/201, 0xc9}, {&(0x7f0000005dc0)=""/170, 0xaa}, {&(0x7f0000005e80)=""/185, 0xb9}], 0x7}, 0x12102) 1.660562473s ago: executing program 2 (id=549): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000002540)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r0, 0x0, 0x0) 1.601322253s ago: executing program 4 (id=551): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000300)=0x8000007, 0x4) recvmmsg(r1, &(0x7f0000000340), 0x4000000000000c9, 0x0, 0x0) 1.582209168s ago: executing program 3 (id=552): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b40500000000000071106600000000001f010000000000009500000000000000"], &(0x7f0000000900)='GPL\x00', 0x6, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x4}, 0x8, 0x10, &(0x7f0000000a80), 0x10}, 0x29) 1.454599554s ago: executing program 6 (id=553): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x0, 0x10, &(0x7f0000000b00), 0xfffffffffffffd00}, 0x48) 1.422389782s ago: executing program 3 (id=555): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000ac0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf0b, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.304463668s ago: executing program 3 (id=557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x40, 0x5}]}}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0xfffffffe, 0x98c6}, @generic={0x1, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x9, 0x1]}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1.1993406s ago: executing program 5 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x40) write(r0, &(0x7f0000000340)='27', 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 1.161732871s ago: executing program 6 (id=559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x22102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000300)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x1) 1.126345531s ago: executing program 5 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="09000000050000000080000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.073406264s ago: executing program 3 (id=561): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 954.11063ms ago: executing program 5 (id=562): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004840)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004a00)=""/154, 0x9a}, {&(0x7f0000004ac0)=""/4148, 0x1034}, {&(0x7f0000005b00)=""/225, 0xe1}, {&(0x7f0000005c00)=""/160, 0xa0}, {&(0x7f0000005cc0)=""/201, 0xc9}, {&(0x7f0000005dc0)=""/170, 0xaa}, {&(0x7f0000005e80)=""/185, 0xb9}, {&(0x7f0000005f40)=""/132, 0x84}, {&(0x7f0000006000)=""/146, 0x92}, {&(0x7f00000060c0)=""/4095, 0xfff}, {&(0x7f00000070c0)=""/103, 0x67}], 0xb}, 0x12102) 772.534198ms ago: executing program 5 (id=563): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/features\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000500)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000002640)=0x0, &(0x7f0000002680)=0x0, &(0x7f00000026c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000002700)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) 552.525281ms ago: executing program 4 (id=564): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x1000}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./trace\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f00000008c0)='*ub:*v', 0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) setrlimit(0x5, &(0x7f0000000800)={0x7, 0x8001}) 442.188404ms ago: executing program 5 (id=565): openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40200, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2000090, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 5 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x0, "ff0f000000000001f5a72d866b0000000000f0ffdefe00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 74.708704][ T5602] cgroup: Unknown subsys name 'net' [ 74.949281][ T5602] cgroup: Unknown subsys name 'cpuset' [ 75.005274][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.623162][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.057968][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.113628][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.122340][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.123010][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.146029][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.155784][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.169079][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.173066][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.176259][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.177432][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.177547][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.179385][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.179513][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.179712][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.188167][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.189915][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.193022][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.200726][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.201103][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.202973][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.204182][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.266945][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.325760][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.360113][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.361111][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.465504][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.473271][ T5615] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 80.478247][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 80.485466][ T5614] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 80.518164][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.538577][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.174532][ T5616] infiniband rxe0: set active [ 81.174554][ T5616] infiniband rxe0: added rxe_eth0 [ 81.227762][ T62] Bluetooth: hci2: command tx timeout [ 81.239939][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.294978][ T5616] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 81.295013][ T5616] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 81.295049][ T5616] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 81.304819][ T62] Bluetooth: hci1: command tx timeout [ 81.304936][ T62] Bluetooth: hci0: command tx timeout [ 81.384783][ T4931] Bluetooth: hci3: command tx timeout [ 81.451054][ T5616] RDS/IB: rxe0: added [ 81.451416][ T5616] smc: adding ib device rxe0 with port count 1 [ 81.451515][ T5616] smc: ib device rxe0 port 1 has no pnetid [ 81.465531][ T62] Bluetooth: hci4: command tx timeout [ 81.497684][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.549004][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.557413][ T1004] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.102971][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.536904][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.829063][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.830485][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.831716][ T5617] bridge_slave_0: entered allmulticast mode [ 82.856570][ T5617] bridge_slave_0: entered promiscuous mode [ 82.884834][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.884938][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.885078][ T5615] bridge_slave_0: entered allmulticast mode [ 82.886924][ T5615] bridge_slave_0: entered promiscuous mode [ 82.888760][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.889913][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.890030][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.890179][ T5617] bridge_slave_1: entered allmulticast mode [ 82.892579][ T5617] bridge_slave_1: entered promiscuous mode [ 82.893905][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.894031][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.894171][ T5613] bridge_slave_0: entered allmulticast mode [ 82.949617][ T5613] bridge_slave_0: entered promiscuous mode [ 82.991840][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.992208][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.992375][ T5615] bridge_slave_1: entered allmulticast mode [ 83.015417][ T5615] bridge_slave_1: entered promiscuous mode [ 83.039608][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.039676][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.039775][ T5613] bridge_slave_1: entered allmulticast mode [ 83.043431][ T5613] bridge_slave_1: entered promiscuous mode [ 83.179157][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.234241][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.248577][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.251684][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.291285][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.306439][ T4931] Bluetooth: hci2: command tx timeout [ 83.311397][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.311597][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.312006][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.312137][ T5614] bridge_slave_0: entered allmulticast mode [ 83.318305][ T5614] bridge_slave_0: entered promiscuous mode [ 83.383144][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.383245][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.383340][ T5614] bridge_slave_1: entered allmulticast mode [ 83.384576][ T5614] bridge_slave_1: entered promiscuous mode [ 83.386734][ T4931] Bluetooth: hci0: command tx timeout [ 83.386763][ T4931] Bluetooth: hci1: command tx timeout [ 83.431334][ T5617] team0: Port device team_slave_0 added [ 83.459038][ T5615] team0: Port device team_slave_0 added [ 83.462158][ T5617] team0: Port device team_slave_1 added [ 83.463740][ T5613] team0: Port device team_slave_0 added [ 83.465393][ T62] Bluetooth: hci3: command tx timeout [ 83.499754][ T5615] team0: Port device team_slave_1 added [ 83.516434][ T5613] team0: Port device team_slave_1 added [ 83.519141][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.519299][ T5616] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.544745][ T62] Bluetooth: hci4: command tx timeout [ 83.621062][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.642434][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.642452][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.642477][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.690414][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.690432][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.690456][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.693446][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.693461][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.693487][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.699596][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.699611][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.699636][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.720803][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.720821][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.720845][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.742804][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.742820][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.742846][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.747369][ T5614] team0: Port device team_slave_0 added [ 83.776592][ T5614] team0: Port device team_slave_1 added [ 83.896905][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.896923][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.896947][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.910276][ T5617] hsr_slave_0: entered promiscuous mode [ 83.911827][ T5617] hsr_slave_1: entered promiscuous mode [ 83.952590][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.952608][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.952632][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.968323][ T5613] hsr_slave_0: entered promiscuous mode [ 83.969628][ T5613] hsr_slave_1: entered promiscuous mode [ 83.970634][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 83.970669][ T5613] Cannot create hsr debugfs directory [ 83.980606][ T5615] hsr_slave_0: entered promiscuous mode [ 83.982300][ T5615] hsr_slave_1: entered promiscuous mode [ 83.983119][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 83.983134][ T5615] Cannot create hsr debugfs directory [ 84.771432][ T5614] hsr_slave_0: entered promiscuous mode [ 84.772178][ T5614] hsr_slave_1: entered promiscuous mode [ 84.772715][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 84.772733][ T5614] Cannot create hsr debugfs directory [ 85.382533][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.386066][ T62] Bluetooth: hci2: command tx timeout [ 85.433179][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.449552][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.464808][ T62] Bluetooth: hci1: command tx timeout [ 85.464842][ T62] Bluetooth: hci0: command tx timeout [ 85.491050][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.505817][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.538099][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.545793][ T4931] Bluetooth: hci3: command tx timeout [ 85.575264][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.608925][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.624785][ T4931] Bluetooth: hci4: command tx timeout [ 85.769364][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.769435][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.769736][ T5616] bridge_slave_0: entered allmulticast mode [ 85.771126][ T5616] bridge_slave_0: entered promiscuous mode [ 85.802139][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.808458][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.812106][ T5616] bridge_slave_1: entered allmulticast mode [ 85.821357][ T5616] bridge_slave_1: entered promiscuous mode [ 85.859090][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.897841][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.920607][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.960249][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.964080][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.965346][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.000503][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.018547][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.046727][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.077828][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.138232][ T5616] team0: Port device team_slave_0 added [ 86.148934][ T5616] team0: Port device team_slave_1 added [ 86.209874][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.209893][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.209910][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.245335][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.245351][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.245376][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.288588][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.327702][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.428783][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.467670][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.489207][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.519071][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.559986][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.597836][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.641048][ T5616] hsr_slave_0: entered promiscuous mode [ 86.641821][ T5616] hsr_slave_1: entered promiscuous mode [ 86.642353][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 86.642370][ T5616] Cannot create hsr debugfs directory [ 86.780093][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.820680][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.859648][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.869390][ T1253] cfg80211: failed to load regulatory.db [ 86.893260][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.914553][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.947989][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.974032][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.007113][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.168517][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.357312][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.429495][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.429740][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.463417][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.466153][ T4931] Bluetooth: hci2: command tx timeout [ 87.490055][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.494154][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.508792][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.539210][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.544594][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.544862][ T4931] Bluetooth: hci0: command tx timeout [ 87.544888][ T4931] Bluetooth: hci1: command tx timeout [ 87.572389][ T1238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.574358][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.607643][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.613786][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.624865][ T62] Bluetooth: hci3: command tx timeout [ 87.660733][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.705023][ T62] Bluetooth: hci4: command tx timeout [ 87.728078][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.755621][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.773118][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.773241][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.825043][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.825310][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.891925][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.904133][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.942596][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.942718][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.013637][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.013804][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.074634][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.104214][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.104343][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.165061][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.167229][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.353038][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.538656][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.586761][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.593731][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.679614][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.679733][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.030177][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.460597][ T5617] veth0_vlan: entered promiscuous mode [ 89.509183][ T5617] veth1_vlan: entered promiscuous mode [ 89.553771][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.687858][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.733711][ T5617] veth0_macvtap: entered promiscuous mode [ 89.787756][ T5617] veth1_macvtap: entered promiscuous mode [ 89.870160][ T5615] veth0_vlan: entered promiscuous mode [ 89.894905][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.922037][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.960733][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.961264][ T5615] veth1_vlan: entered promiscuous mode [ 90.059943][ T5614] veth0_vlan: entered promiscuous mode [ 90.207200][ T5614] veth1_vlan: entered promiscuous mode [ 90.362177][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.404235][ T5615] veth0_macvtap: entered promiscuous mode [ 90.463899][ T5613] veth0_vlan: entered promiscuous mode [ 90.482912][ T5615] veth1_macvtap: entered promiscuous mode [ 90.533758][ T5613] veth1_vlan: entered promiscuous mode [ 90.617892][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.617919][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.678742][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.710540][ T5614] veth0_macvtap: entered promiscuous mode [ 90.734447][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.788467][ T5614] veth1_macvtap: entered promiscuous mode [ 90.803055][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.803086][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.948883][ T5613] veth0_macvtap: entered promiscuous mode [ 90.967279][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.090167][ T5613] veth1_macvtap: entered promiscuous mode [ 91.098423][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.288516][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.357424][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.357447][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.433838][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.481238][ T5616] veth0_vlan: entered promiscuous mode [ 91.562423][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.564609][ T5816] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.571044][ T5832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'. [ 91.589372][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.589391][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.718473][ T5616] veth1_vlan: entered promiscuous mode [ 92.282504][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.282527][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.667264][ T5616] veth0_macvtap: entered promiscuous mode [ 92.789738][ T5616] veth1_macvtap: entered promiscuous mode [ 92.805108][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.805127][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.928765][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.928786][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.970793][ T5856] pimreg1: tun_chr_ioctl cmd 1074025677 [ 92.971014][ T5856] pimreg1: linktype set to 775 [ 93.043317][ T5861] netlink: 'syz.0.10': attribute type 20 has an invalid length. [ 93.437180][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.447818][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.447839][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.505346][ T1238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.505930][ T1238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.506204][ T1238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.535291][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.946771][ T1242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951513][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951545][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951564][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951584][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951603][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951621][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951639][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951657][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951676][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951694][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951713][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951732][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951763][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951791][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.951849][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.992021][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.837972][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.837995][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.218884][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.218908][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.294751][ T5902] netlink: 'syz.2.22': attribute type 2 has an invalid length. [ 96.759381][ T5913] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 97.043782][ T5918] Bluetooth: MGMT ver 1.23 [ 97.426332][ T5925] ======================================================= [ 97.426332][ T5925] WARNING: The mand mount option has been deprecated and [ 97.426332][ T5925] and is ignored by this kernel. Remove the mand [ 97.426332][ T5925] option from the mount to silence this warning. [ 97.426332][ T5925] ======================================================= [ 99.146687][ T62] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 99.148346][ T4931] Bluetooth: hci2: command 0x0401 tx timeout [ 100.755508][ T5982] FAULT_INJECTION: forcing a failure. [ 100.755508][ T5982] name failslab, interval 1, probability 0, space 0, times 1 [ 100.755572][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 100.755596][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 100.755615][ T5982] Call Trace: [ 100.755624][ T5982] [ 100.755633][ T5982] dump_stack_lvl+0xe8/0x150 [ 100.755678][ T5982] should_fail_ex+0x447/0x5e0 [ 100.755712][ T5982] should_failslab+0xa8/0x100 [ 100.755741][ T5982] __kmalloc_noprof+0xf6/0x790 [ 100.755760][ T5982] ? kernfs_fop_write_iter+0x158/0x540 [ 100.755791][ T5982] ? kernfs_fop_write_iter+0x158/0x540 [ 100.755828][ T5982] kernfs_fop_write_iter+0x158/0x540 [ 100.755864][ T5982] vfs_write+0x61e/0xbb0 [ 100.755907][ T5982] ? __pfx_vfs_write+0x10/0x10 [ 100.755942][ T5982] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.755973][ T5982] ? mutex_lock_nested+0x14d/0x1d0 [ 100.756002][ T5982] ? fdget_pos+0x11e/0x160 [ 100.756041][ T5982] ksys_write+0x156/0x270 [ 100.756067][ T5982] ? __pfx_ksys_write+0x10/0x10 [ 100.756100][ T5982] do_syscall_64+0x166/0x520 [ 100.756122][ T5982] ? trace_irq_disable+0x3b/0x140 [ 100.756143][ T5982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.756165][ T5982] ? clear_bhb_loop+0x70/0xc0 [ 100.756192][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.756211][ T5982] RIP: 0033:0x7ff5144afb19 [ 100.756240][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.756258][ T5982] RSP: 002b:00007ff512706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.756285][ T5982] RAX: ffffffffffffffda RBX: 00007ff514735fa0 RCX: 00007ff5144afb19 [ 100.756308][ T5982] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: 0000000000000007 [ 100.756321][ T5982] RBP: 00007ff514547b70 R08: 0000000000000000 R09: 0000000000000000 [ 100.756335][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.756347][ T5982] R13: 00007ff514736038 R14: 00007ff514735fa0 R15: 00007ffe615dc1e8 [ 100.756382][ T5982] [ 103.831866][ T6002] FAULT_INJECTION: forcing a failure. [ 103.831866][ T6002] name failslab, interval 1, probability 0, space 0, times 0 [ 103.831889][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.2.62 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.831903][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 103.831910][ T6002] Call Trace: [ 103.831914][ T6002] [ 103.831919][ T6002] dump_stack_lvl+0xe8/0x150 [ 103.831943][ T6002] should_fail_ex+0x447/0x5e0 [ 103.831961][ T6002] should_failslab+0xa8/0x100 [ 103.831977][ T6002] __kmalloc_cache_noprof+0x9c/0x670 [ 103.831989][ T6002] ? ptp_open+0xd0/0x480 [ 103.832001][ T6002] ? ptp_open+0xd0/0x480 [ 103.832016][ T6002] ptp_open+0xd0/0x480 [ 103.832032][ T6002] ? __pfx_ptp_open+0x10/0x10 [ 103.832045][ T6002] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 103.832056][ T6002] ? posix_clock_open+0xb5/0x230 [ 103.832069][ T6002] ? posix_clock_open+0xb5/0x230 [ 103.832085][ T6002] posix_clock_open+0x150/0x230 [ 103.832100][ T6002] chrdev_open+0x4dc/0x600 [ 103.832114][ T6002] ? __pfx_chrdev_open+0x10/0x10 [ 103.832126][ T6002] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 103.832142][ T6002] ? __pfx_chrdev_open+0x10/0x10 [ 103.832154][ T6002] do_dentry_open+0x841/0x1410 [ 103.832173][ T6002] vfs_open_consume+0x4a/0x360 [ 103.832185][ T6002] ? path_openat+0x16e6/0x2100 [ 103.832197][ T6002] path_openat+0x1701/0x2100 [ 103.832218][ T6002] do_file_open+0x23e/0x4a0 [ 103.832227][ T6002] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 103.832243][ T6002] ? __pfx_do_file_open+0x10/0x10 [ 103.832266][ T6002] ? alloc_fd+0x6b2/0x760 [ 103.832287][ T6002] do_sys_openat2+0x115/0x200 [ 103.832300][ T6002] ? __se_sys_futex+0x3a8/0x450 [ 103.832315][ T6002] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.832334][ T6002] ? __pfx___se_sys_futex+0x10/0x10 [ 103.832352][ T6002] __x64_sys_openat+0x138/0x170 [ 103.832369][ T6002] do_syscall_64+0x166/0x520 [ 103.832381][ T6002] ? trace_irq_disable+0x3b/0x140 [ 103.832392][ T6002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.832403][ T6002] ? clear_bhb_loop+0x70/0xc0 [ 103.832416][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.832427][ T6002] RIP: 0033:0x7fa7bd44fb19 [ 103.832439][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.832448][ T6002] RSP: 002b:00007fa7bb6a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.832461][ T6002] RAX: ffffffffffffffda RBX: 00007fa7bd6d5fa0 RCX: 00007fa7bd44fb19 [ 103.832468][ T6002] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 103.832476][ T6002] RBP: 00007fa7bd4e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 103.832482][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.832489][ T6002] R13: 00007fa7bd6d6038 R14: 00007fa7bd6d5fa0 R15: 00007ffec88f09b8 [ 103.832506][ T6002] [ 106.042067][ T1240] IPVS: starting estimator thread 0... [ 106.129406][ T6012] IPVS: using max 9 ests per chain, 21600 per kthread [ 106.246014][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 106.246083][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 106.834543][ T4931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.975859][ T4931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.128940][ T4931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.226964][ T4931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.324479][ T4931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.835883][ T1241] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.141549][ T4931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.160181][ T4931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.162598][ T4931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.172353][ T4931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.173065][ T4931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.545349][ T62] Bluetooth: hci1: command tx timeout [ 109.720733][ T6067] FAULT_INJECTION: forcing a failure. [ 109.720733][ T6067] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 109.720771][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.3.84 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.720797][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.720809][ T6067] Call Trace: [ 109.720816][ T6067] [ 109.720825][ T6067] dump_stack_lvl+0xe8/0x150 [ 109.720867][ T6067] should_fail_ex+0x447/0x5e0 [ 109.720900][ T6067] prepare_alloc_pages+0x21e/0x650 [ 109.720934][ T6067] __alloc_frozen_pages_noprof+0x1a1/0x440 [ 109.720963][ T6067] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.721000][ T6067] ? trace_kmalloc+0x2a/0xf0 [ 109.721024][ T6067] alloc_pages_mpol+0xd4/0x280 [ 109.721055][ T6067] alloc_pages_noprof+0xd2/0x2f0 [ 109.721083][ T6067] ? __pfx_mempool_alloc_pages+0x10/0x10 [ 109.721113][ T6067] mempool_init_node+0x21f/0x510 [ 109.721149][ T6067] ? __pfx_mempool_free_pages+0x10/0x10 [ 109.721177][ T6067] ? __pfx_mempool_alloc_pages+0x10/0x10 [ 109.721204][ T6067] mempool_init_noprof+0x3a/0x50 [ 109.721235][ T6067] dm_integrity_ctr+0x235f/0x5e10 [ 109.721291][ T6067] ? __pfx_dm_integrity_ctr+0x10/0x10 [ 109.721319][ T6067] ? rcu_needs_cpu+0x20/0xb0 [ 109.721350][ T6067] ? skip_spaces+0x8a/0xa0 [ 109.721381][ T6067] ? dm_split_args+0x50b/0x5d0 [ 109.721406][ T6067] ? up_read+0x34/0x180 [ 109.721437][ T6067] dm_table_add_target+0x58d/0xc70 [ 109.721476][ T6067] table_load+0x325/0x8a0 [ 109.721506][ T6067] ? __pfx_table_load+0x10/0x10 [ 109.721545][ T6067] dm_ctl_ioctl+0x9ec/0xe10 [ 109.721574][ T6067] ? __pfx_table_load+0x10/0x10 [ 109.721595][ T6067] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 109.721648][ T6067] ? __fget_files+0x2a/0x420 [ 109.721682][ T6067] ? bpf_lsm_file_ioctl+0x9/0x20 [ 109.721713][ T6067] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 109.721733][ T6067] __se_sys_ioctl+0xff/0x170 [ 109.721760][ T6067] do_syscall_64+0x166/0x520 [ 109.721784][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.721805][ T6067] ? clear_bhb_loop+0x70/0xc0 [ 109.721832][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.721853][ T6067] RIP: 0033:0x7ff5144afb19 [ 109.721871][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.721888][ T6067] RSP: 002b:00007ff512706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.721911][ T6067] RAX: ffffffffffffffda RBX: 00007ff514735fa0 RCX: 00007ff5144afb19 [ 109.721927][ T6067] RDX: 0000200000000180 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 109.721941][ T6067] RBP: 00007ff514547b70 R08: 0000000000000000 R09: 0000000000000000 [ 109.721954][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.721967][ T6067] R13: 00007ff514736038 R14: 00007ff514735fa0 R15: 00007ffe615dc1e8 [ 109.722001][ T6067] [ 109.735797][ T6067] device-mapper: table: 248:0: integrity: Cannot allocate mempool (-ENOMEM) [ 109.735829][ T6067] device-mapper: ioctl: error adding target to table [ 110.039441][ T1241] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.307678][ T6071] bond1 (unregistering): Released all slaves [ 110.924080][ T1241] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.082618][ T6028] rxe_eth0 speed is unknown, defaulting to 1000 [ 111.386021][ T62] Bluetooth: hci4: command tx timeout [ 111.479037][ T6095] FAULT_INJECTION: forcing a failure. [ 111.479037][ T6095] name failslab, interval 1, probability 0, space 0, times 0 [ 111.479071][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.3.93 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.479094][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 111.479106][ T6095] Call Trace: [ 111.479114][ T6095] [ 111.479123][ T6095] dump_stack_lvl+0xe8/0x150 [ 111.479163][ T6095] should_fail_ex+0x447/0x5e0 [ 111.479196][ T6095] should_failslab+0xa8/0x100 [ 111.479226][ T6095] __kmalloc_noprof+0xf6/0x790 [ 111.479248][ T6095] ? sk_prot_alloc+0xe7/0x210 [ 111.479267][ T6095] ? sk_prot_alloc+0xe7/0x210 [ 111.479295][ T6095] sk_prot_alloc+0xe7/0x210 [ 111.479312][ T6095] ? sk_alloc+0x27/0x390 [ 111.479333][ T6095] sk_alloc+0x3a/0x390 [ 111.479350][ T6095] ? __pfx_rt_read_lock+0x10/0x10 [ 111.479387][ T6095] bt_sock_alloc+0x3b/0x330 [ 111.479416][ T6095] hci_sock_create+0xa3/0x1c0 [ 111.479453][ T6095] bt_sock_create+0x163/0x240 [ 111.479484][ T6095] __sock_create+0x4b5/0xac0 [ 111.479532][ T6095] __sys_socket+0xd6/0x1b0 [ 111.479560][ T6095] __x64_sys_socket+0x7a/0x90 [ 111.479589][ T6095] do_syscall_64+0x166/0x520 [ 111.479613][ T6095] ? trace_irq_disable+0x3b/0x140 [ 111.479635][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.479656][ T6095] ? clear_bhb_loop+0x70/0xc0 [ 111.479681][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.479701][ T6095] RIP: 0033:0x7ff5144afb19 [ 111.479721][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.479740][ T6095] RSP: 002b:00007ff512705fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 111.479763][ T6095] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff5144afb19 [ 111.479778][ T6095] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 111.479790][ T6095] RBP: 00007ff514547b70 R08: 0000000000000000 R09: 0000000000000000 [ 111.479803][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.479814][ T6095] R13: 00007ff514736038 R14: 00007ff514735fa0 R15: 00007ffe615dc1e8 [ 111.479846][ T6095] [ 111.627077][ T62] Bluetooth: hci1: command tx timeout [ 111.856240][ T1241] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.864078][ T6121] sock: sock_set_timeout: `syz.2.101' (pid 6121) tries to set negative timeout [ 112.169679][ T6048] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.292035][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 113.468718][ T62] Bluetooth: hci4: command tx timeout [ 113.641201][ T1241] bridge_slave_1: left allmulticast mode [ 113.641279][ T1241] bridge_slave_1: left promiscuous mode [ 113.674581][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.707561][ T62] Bluetooth: hci1: command tx timeout [ 114.006318][ T1241] bridge_slave_0: left allmulticast mode [ 114.006343][ T1241] bridge_slave_0: left promiscuous mode [ 114.008692][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.198307][ T36] audit: type=1326 audit(1793798371.326:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 114.198533][ T36] audit: type=1326 audit(1793798371.326:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 114.198744][ T36] audit: type=1326 audit(1793798371.326:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 114.198890][ T36] audit: type=1326 audit(1793798371.326:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7bd41034e code=0x7ffc0000 [ 114.199407][ T36] audit: type=1326 audit(1793798371.346:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 114.199581][ T36] audit: type=1326 audit(1793798371.346:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 114.199722][ T36] audit: type=1326 audit(1793798371.386:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 114.199947][ T36] audit: type=1326 audit(1793798371.386:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 114.200166][ T36] audit: type=1326 audit(1793798371.386:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 114.200577][ T36] audit: type=1326 audit(1793798371.396:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.2.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 115.771263][ T62] Bluetooth: hci4: command tx timeout [ 115.881830][ T62] Bluetooth: hci1: command tx timeout [ 117.784907][ T62] Bluetooth: hci4: command tx timeout [ 117.792698][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.865297][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.887861][ T1241] bond0 (unregistering): Released all slaves [ 119.708358][ T6233] syzkaller0: entered promiscuous mode [ 119.708388][ T6233] syzkaller0: entered allmulticast mode [ 119.722928][ T6234] tipc: Started in network mode [ 119.722966][ T6234] tipc: Node identity aa49fe5b5b46, cluster identity 4711 [ 119.732893][ T6234] tipc: Enabled bearer , priority 0 [ 119.818759][ T6238] tipc: Resetting bearer [ 119.960073][ T6238] tipc: Disabling bearer [ 120.152862][ T6242] batman_adv: batadv0: Adding interface: syz_tun [ 120.152881][ T6242] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.152915][ T6242] batman_adv: batadv0: Interface activated: syz_tun [ 121.751873][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 122.113555][ T6292] capability: warning: `syz.4.156' uses deprecated v2 capabilities in a way that may be insecure [ 122.202206][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.202405][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.202606][ T6028] bridge_slave_0: entered allmulticast mode [ 122.227523][ T6028] bridge_slave_0: entered promiscuous mode [ 122.323450][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.323605][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.323875][ T6028] bridge_slave_1: entered allmulticast mode [ 122.370236][ T6028] bridge_slave_1: entered promiscuous mode [ 122.688512][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.694075][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.694351][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.697569][ T6048] bridge_slave_0: entered allmulticast mode [ 122.741503][ T6048] bridge_slave_0: entered promiscuous mode [ 122.798437][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.799707][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.799782][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.799892][ T6048] bridge_slave_1: entered allmulticast mode [ 122.838640][ T6048] bridge_slave_1: entered promiscuous mode [ 123.175246][ T1241] hsr_slave_0: left promiscuous mode [ 123.214944][ T1241] hsr_slave_1: left promiscuous mode [ 123.216566][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.216698][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.264389][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.264410][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.397775][ T1241] veth1_macvtap: left promiscuous mode [ 123.422723][ T1241] veth0_macvtap: left promiscuous mode [ 123.422909][ T1241] veth1_vlan: left promiscuous mode [ 123.423240][ T1241] veth0_vlan: left promiscuous mode [ 125.285942][ T1241] team0 (unregistering): Port device team_slave_1 removed [ 125.325379][ T1241] team0 (unregistering): Port device team_slave_0 removed [ 126.694246][ T6028] team0: Port device team_slave_0 added [ 126.710202][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.711919][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 126.763539][ T6028] team0: Port device team_slave_1 added [ 126.786961][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.882624][ T6364] FAULT_INJECTION: forcing a failure. [ 126.882624][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 126.882661][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: syz.2.182 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.882687][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.882699][ T6364] Call Trace: [ 126.882707][ T6364] [ 126.882717][ T6364] dump_stack_lvl+0xe8/0x150 [ 126.882759][ T6364] should_fail_ex+0x447/0x5e0 [ 126.882793][ T6364] should_failslab+0xa8/0x100 [ 126.882819][ T6364] ? alloc_empty_file+0x5b/0x1d0 [ 126.882845][ T6364] kmem_cache_alloc_noprof+0x99/0x680 [ 126.882880][ T6364] ? alloc_empty_file+0x5b/0x1d0 [ 126.882914][ T6364] alloc_empty_file+0x5b/0x1d0 [ 126.882942][ T6364] alloc_file_pseudo+0x110/0x1e0 [ 126.882969][ T6364] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 126.883004][ T6364] anon_inode_getfd+0xca/0x200 [ 126.883032][ T6364] bpf_prog_load+0x162a/0x1c60 [ 126.883083][ T6364] ? __pfx_bpf_prog_load+0x10/0x10 [ 126.883130][ T6364] __sys_bpf+0xd86/0xe00 [ 126.883160][ T6364] ? __pfx___sys_bpf+0x10/0x10 [ 126.883187][ T6364] ? do_futex+0x3e7/0x4e0 [ 126.883238][ T6364] ? rcu_is_watching+0x16/0xb0 [ 126.883265][ T6364] __x64_sys_bpf+0xba/0xd0 [ 126.883289][ T6364] do_syscall_64+0x166/0x520 [ 126.883310][ T6364] ? trace_irq_disable+0x3b/0x140 [ 126.883332][ T6364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.883353][ T6364] ? clear_bhb_loop+0x70/0xc0 [ 126.883378][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.883396][ T6364] RIP: 0033:0x7fa7bd44fb19 [ 126.883414][ T6364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.883430][ T6364] RSP: 002b:00007fa7bb6a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.883451][ T6364] RAX: ffffffffffffffda RBX: 00007fa7bd6d5fa0 RCX: 00007fa7bd44fb19 [ 126.883466][ T6364] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 126.883478][ T6364] RBP: 00007fa7bd4e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 126.883490][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.883502][ T6364] R13: 00007fa7bd6d6038 R14: 00007fa7bd6d5fa0 R15: 00007ffec88f09b8 [ 126.883536][ T6364] [ 127.126969][ T6367] netlink: 68 bytes leftover after parsing attributes in process `syz.3.183'. [ 127.235166][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.235184][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.235210][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.298471][ T6048] team0: Port device team_slave_0 added [ 127.299809][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.299823][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.299848][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.317587][ T6048] team0: Port device team_slave_1 added [ 127.530395][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.530412][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.530436][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.623677][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.623695][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.623722][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.682367][ T6028] hsr_slave_0: entered promiscuous mode [ 127.683592][ T6028] hsr_slave_1: entered promiscuous mode [ 127.710324][ T6028] debugfs: 'hsr0' already exists in 'hsr' [ 127.710419][ T6028] Cannot create hsr debugfs directory [ 128.578975][ T6048] hsr_slave_0: entered promiscuous mode [ 128.585463][ T6048] hsr_slave_1: entered promiscuous mode [ 128.586211][ T6048] debugfs: 'hsr0' already exists in 'hsr' [ 128.586228][ T6048] Cannot create hsr debugfs directory [ 129.509565][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 129.591735][ T6402] netlink: 68 bytes leftover after parsing attributes in process `syz.2.192'. [ 131.893465][ T1241] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.121643][ T6427] netlink: 68 bytes leftover after parsing attributes in process `syz.3.202'. [ 132.338665][ T36] audit: type=1326 audit(1793798389.546:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6432 comm="syz.3.206" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 132.338716][ T36] audit: type=1326 audit(1793798389.546:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6432 comm="syz.3.206" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 132.349352][ T36] audit: type=1326 audit(1793798389.546:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6432 comm="syz.3.206" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 132.349702][ T36] audit: type=1326 audit(1793798389.556:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6432 comm="syz.3.206" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 132.350791][ T36] audit: type=1326 audit(1793798389.556:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6432 comm="syz.3.206" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 133.231930][ T1348] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.248732][ T1348] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.346746][ T1241] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.157499][ T1241] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.217658][ T6028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.271946][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.373816][ T6456] bond1: Removing last arp target with arp_interval on [ 134.420271][ T6456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.531312][ T6028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.614299][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.681652][ T6028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.839137][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.982774][ T1241] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.135301][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 136.139935][ T6028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.188454][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.211033][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.228'. [ 136.211076][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.228'. [ 136.296035][ T36] audit: type=1326 audit(1793798393.506:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.4.229" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af6bdfb19 code=0x7ffc0000 [ 136.296177][ T36] audit: type=1326 audit(1793798393.506:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.4.229" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af6bdfb19 code=0x7ffc0000 [ 136.298873][ T36] audit: type=1326 audit(1793798393.506:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.4.229" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af6bdfb19 code=0x7ffc0000 [ 136.298920][ T36] audit: type=1326 audit(1793798393.506:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.4.229" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f7af6bdfb19 code=0x7ffc0000 [ 136.301175][ T36] audit: type=1326 audit(1793798393.506:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.4.229" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af6bdfb19 code=0x7ffc0000 [ 136.742392][ T6048] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 136.852007][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.872852][ T6048] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 136.933624][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.204952][ T6048] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.308956][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.319262][ T6048] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.340025][ T6048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.259713][ T6543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.238'. [ 138.259753][ T6543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.238'. [ 138.363256][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 138.395713][ T1241] bridge_slave_1: left allmulticast mode [ 138.395750][ T1241] bridge_slave_1: left promiscuous mode [ 138.395997][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.545833][ T1241] bridge_slave_0: left allmulticast mode [ 138.545871][ T1241] bridge_slave_0: left promiscuous mode [ 138.546054][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.525353][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.606515][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.628397][ T1241] bond0 (unregistering): Released all slaves [ 139.676570][ T6548] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 139.679356][ T6558] FAULT_INJECTION: forcing a failure. [ 139.679356][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 139.679399][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.4.243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.679456][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 139.679484][ T6558] Call Trace: [ 139.679502][ T6558] [ 139.679521][ T6558] dump_stack_lvl+0xe8/0x150 [ 139.679570][ T6558] should_fail_ex+0x447/0x5e0 [ 139.679603][ T6558] should_failslab+0xa8/0x100 [ 139.679631][ T6558] __kmalloc_noprof+0xf6/0x790 [ 139.679652][ T6558] ? tcf_idr_create+0x5d/0x6c0 [ 139.679682][ T6558] ? tcf_idr_create+0x5d/0x6c0 [ 139.679718][ T6558] tcf_idr_create+0x5d/0x6c0 [ 139.679749][ T6558] ? tcf_idr_check_alloc+0xc8/0x7f0 [ 139.679786][ T6558] tcf_idr_create_from_flags+0x60/0x80 [ 139.679823][ T6558] tcf_gact_init+0x3a2/0x900 [ 139.679853][ T6558] ? __pfx_tcf_gact_init+0x10/0x10 [ 139.679880][ T6558] ? __kasan_kmalloc+0x93/0xb0 [ 139.679904][ T6558] ? nla_memcpy+0x5b/0xc0 [ 139.679943][ T6558] tcf_action_init_1+0x4ba/0x740 [ 139.679971][ T6558] ? __pfx_tcf_action_init_1+0x10/0x10 [ 139.679991][ T6558] ? tc_action_load_ops+0x247/0x540 [ 139.680032][ T6558] ? __nla_parse+0x40/0x60 [ 139.680065][ T6558] tcf_action_init+0x31f/0xac0 [ 139.680097][ T6558] ? __pfx_tcf_action_init+0x10/0x10 [ 139.680140][ T6558] ? hook_capable+0x1c3/0x5e0 [ 139.680166][ T6558] ? __pfx___nla_validate_parse+0x10/0x10 [ 139.680195][ T6558] ? hook_capable+0x1c3/0x5e0 [ 139.680228][ T6558] ? __lock_acquire+0x747/0x2de0 [ 139.680296][ T6558] tc_ctl_action+0x44a/0xc80 [ 139.680321][ T6558] ? rcu_is_watching+0x16/0xb0 [ 139.680351][ T6558] ? __pfx_tc_ctl_action+0x10/0x10 [ 139.680431][ T6558] ? __pfx_tc_ctl_action+0x10/0x10 [ 139.680451][ T6558] rtnetlink_rcv_msg+0x7b9/0xc00 [ 139.680488][ T6558] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 139.680520][ T6558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.680555][ T6558] ? __copy_skb_header+0xa3/0x4a0 [ 139.680579][ T6558] ? __asan_memcpy+0x40/0x70 [ 139.680618][ T6558] netlink_rcv_skb+0x226/0x4a0 [ 139.680648][ T6558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.680683][ T6558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.680723][ T6558] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.680752][ T6558] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.680787][ T6558] netlink_unicast+0x90c/0xac0 [ 139.680831][ T6558] netlink_sendmsg+0x7f0/0xb20 [ 139.680867][ T6558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.680894][ T6558] ? __lock_acquire+0x747/0x2de0 [ 139.680929][ T6558] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 139.680958][ T6558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.680984][ T6558] sock_sendmsg_nosec+0x14e/0x190 [ 139.681014][ T6558] ____sys_sendmsg+0x565/0x870 [ 139.681045][ T6558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.681077][ T6558] ? import_iovec+0x73/0xa0 [ 139.681107][ T6558] ___sys_sendmsg+0x2a5/0x360 [ 139.681127][ T6558] ? __lock_acquire+0x747/0x2de0 [ 139.681164][ T6558] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.681190][ T6558] ? futex_wait+0x2a2/0x390 [ 139.681261][ T6558] ? __fget_files+0x3a8/0x420 [ 139.681290][ T6558] ? __fget_files+0x2a/0x420 [ 139.681330][ T6558] __x64_sys_sendmsg+0x1b7/0x290 [ 139.681356][ T6558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.681403][ T6558] do_syscall_64+0x166/0x520 [ 139.681426][ T6558] ? trace_irq_disable+0x3b/0x140 [ 139.681448][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.681470][ T6558] ? clear_bhb_loop+0x70/0xc0 [ 139.681497][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.681518][ T6558] RIP: 0033:0x7f7af6bdfb19 [ 139.681538][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.681556][ T6558] RSP: 002b:00007f7af4e2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.681579][ T6558] RAX: ffffffffffffffda RBX: 00007f7af6e65fa0 RCX: 00007f7af6bdfb19 [ 139.681595][ T6558] RDX: 0000000000000080 RSI: 0000200000000740 RDI: 0000000000000008 [ 139.681609][ T6558] RBP: 00007f7af6c77b70 R08: 0000000000000000 R09: 0000000000000000 [ 139.681622][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.681635][ T6558] R13: 00007f7af6e66038 R14: 00007f7af6e65fa0 R15: 00007ffeaa427718 [ 139.681670][ T6558] [ 139.922387][ T6028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.200038][ T6028] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.276748][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.276909][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.406225][ T6567] FAULT_INJECTION: forcing a failure. [ 140.406225][ T6567] name failslab, interval 1, probability 0, space 0, times 0 [ 140.406261][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.3.246 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.406286][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.406298][ T6567] Call Trace: [ 140.406307][ T6567] [ 140.406315][ T6567] dump_stack_lvl+0xe8/0x150 [ 140.406357][ T6567] should_fail_ex+0x447/0x5e0 [ 140.406391][ T6567] should_failslab+0xa8/0x100 [ 140.406417][ T6567] ? copy_sighand+0x50/0x230 [ 140.406448][ T6567] kmem_cache_alloc_noprof+0x99/0x680 [ 140.406474][ T6567] ? rt_spin_unlock+0x165/0x200 [ 140.406506][ T6567] ? copy_sighand+0x50/0x230 [ 140.406542][ T6567] copy_sighand+0x50/0x230 [ 140.406574][ T6567] copy_process+0x1e17/0x4510 [ 140.406616][ T6567] ? copy_process+0xd17/0x4510 [ 140.406661][ T6567] ? __pfx_copy_process+0x10/0x10 [ 140.406692][ T6567] ? futex_wait+0x2a2/0x390 [ 140.406729][ T6567] kernel_clone+0x2d2/0x8d0 [ 140.406763][ T6567] ? __pfx_kernel_clone+0x10/0x10 [ 140.406803][ T6567] ? do_futex+0x3e7/0x4e0 [ 140.406835][ T6567] __x64_sys_clone+0x1b6/0x230 [ 140.406869][ T6567] ? __pfx___x64_sys_clone+0x10/0x10 [ 140.406913][ T6567] ? rcu_is_watching+0x16/0xb0 [ 140.406951][ T6567] do_syscall_64+0x166/0x520 [ 140.406974][ T6567] ? trace_irq_disable+0x3b/0x140 [ 140.406996][ T6567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.407016][ T6567] ? clear_bhb_loop+0x70/0xc0 [ 140.407041][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.407062][ T6567] RIP: 0033:0x7ff5144afb19 [ 140.407081][ T6567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.407099][ T6567] RSP: 002b:00007ff512705fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 140.407121][ T6567] RAX: ffffffffffffffda RBX: 00007ff514735fa0 RCX: 00007ff5144afb19 [ 140.407137][ T6567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.407150][ T6567] RBP: 00007ff514547b70 R08: 0000000000000000 R09: 0000000000000000 [ 140.407163][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.407175][ T6567] R13: 00007ff514736038 R14: 00007ff514735fa0 R15: 00007ffe615dc1e8 [ 140.407214][ T6567] [ 140.482349][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.482474][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.848109][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.250'. [ 140.848162][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.250'. [ 141.169592][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.454394][ T6592] ip6tnl0 speed is unknown, defaulting to 1000 [ 141.608362][ T6592] ip6tnl0 speed is unknown, defaulting to 1000 [ 141.608865][ T6592] FAULT_INJECTION: forcing a failure. [ 141.608865][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 141.608894][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.2.254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.608919][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.608931][ T6592] Call Trace: [ 141.608939][ T6592] [ 141.608948][ T6592] dump_stack_lvl+0xe8/0x150 [ 141.608990][ T6592] should_fail_ex+0x447/0x5e0 [ 141.609023][ T6592] should_failslab+0xa8/0x100 [ 141.609049][ T6592] ? __kernfs_new_node+0xe7/0xa70 [ 141.609076][ T6592] kmem_cache_alloc_noprof+0x99/0x680 [ 141.609110][ T6592] ? __kernfs_new_node+0xe7/0xa70 [ 141.609142][ T6592] __kernfs_new_node+0xe7/0xa70 [ 141.609177][ T6592] ? __pfx___kernfs_new_node+0x10/0x10 [ 141.609201][ T6592] ? lock_acquire+0x115/0x350 [ 141.609232][ T6592] ? kernfs_root+0x1c/0x230 [ 141.609262][ T6592] ? kernfs_root+0x1c/0x230 [ 141.609285][ T6592] ? kernfs_root+0x1c/0x230 [ 141.609305][ T6592] ? kernfs_root+0x1c/0x230 [ 141.609337][ T6592] kernfs_new_node+0xeb/0x140 [ 141.609366][ T6592] __kernfs_create_file+0x4b/0x2e0 [ 141.609400][ T6592] sysfs_add_file_mode_ns+0x237/0x300 [ 141.609441][ T6592] internal_create_group+0x679/0x1180 [ 141.609478][ T6592] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 141.609508][ T6592] ? __pfx_internal_create_group+0x10/0x10 [ 141.609543][ T6592] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.609567][ T6592] ? up_write+0x5a/0x190 [ 141.609592][ T6592] sysfs_create_groups+0x59/0x120 [ 141.609618][ T6592] device_add_attrs+0x1b1/0x600 [ 141.609643][ T6592] ? __pfx_device_add_attrs+0x10/0x10 [ 141.609669][ T6592] ? device_add_class_symlinks+0x222/0x240 [ 141.609693][ T6592] device_add+0x488/0xb80 [ 141.609716][ T6592] ib_register_device+0xd55/0x1080 [ 141.609747][ T6592] ? __pfx_ib_register_device+0x10/0x10 [ 141.609793][ T6592] rxe_register_device+0x1e3/0x350 [ 141.609819][ T6592] rxe_net_add+0x81/0x110 [ 141.609843][ T6592] rxe_newlink+0xf4/0x1c0 [ 141.609874][ T6592] nldev_newlink+0x5be/0x650 [ 141.609907][ T6592] ? __pfx_nldev_newlink+0x10/0x10 [ 141.609934][ T6592] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.610049][ T6592] ? __pfx_hook_capable+0x10/0x10 [ 141.610078][ T6592] ? __pfx_hook_capable+0x10/0x10 [ 141.610118][ T6592] ? cap_capable+0x123/0x460 [ 141.610152][ T6592] ? security_capable+0x7e/0x2c0 [ 141.610177][ T6592] ? __pfx_nldev_newlink+0x10/0x10 [ 141.610205][ T6592] rdma_nl_rcv+0x6f6/0xa40 [ 141.610249][ T6592] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 141.610303][ T6592] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.610331][ T6592] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.610364][ T6592] netlink_unicast+0x90c/0xac0 [ 141.610407][ T6592] netlink_sendmsg+0x7f0/0xb20 [ 141.610441][ T6592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.610469][ T6592] ? __lock_acquire+0x747/0x2de0 [ 141.610504][ T6592] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 141.610545][ T6592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.610573][ T6592] sock_sendmsg_nosec+0x14e/0x190 [ 141.610605][ T6592] ____sys_sendmsg+0x565/0x870 [ 141.610636][ T6592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.610668][ T6592] ? import_iovec+0x73/0xa0 [ 141.610699][ T6592] ___sys_sendmsg+0x2a5/0x360 [ 141.610719][ T6592] ? __lock_acquire+0x747/0x2de0 [ 141.610756][ T6592] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.610781][ T6592] ? futex_wait+0x2a2/0x390 [ 141.610845][ T6592] ? __fget_files+0x3a8/0x420 [ 141.610874][ T6592] ? __fget_files+0x2a/0x420 [ 141.610914][ T6592] __x64_sys_sendmsg+0x1b7/0x290 [ 141.610939][ T6592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.610985][ T6592] do_syscall_64+0x166/0x520 [ 141.611008][ T6592] ? trace_irq_disable+0x3b/0x140 [ 141.611029][ T6592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.611050][ T6592] ? clear_bhb_loop+0x70/0xc0 [ 141.611076][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.611096][ T6592] RIP: 0033:0x7fa7bd44fb19 [ 141.611114][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.611131][ T6592] RSP: 002b:00007fa7bb6a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.611153][ T6592] RAX: ffffffffffffffda RBX: 00007fa7bd6d5fa0 RCX: 00007fa7bd44fb19 [ 141.611168][ T6592] RDX: 000000000000c000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 141.611181][ T6592] RBP: 00007fa7bd4e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 141.611194][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.611206][ T6592] R13: 00007fa7bd6d6038 R14: 00007fa7bd6d5fa0 R15: 00007ffec88f09b8 [ 141.611240][ T6592] [ 141.832783][ T6592] rxe_newlink: 1 callbacks suppressed [ 141.832803][ T6592] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 142.290207][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 142.299854][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.338529][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.339416][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.442272][ T6610] FAULT_INJECTION: forcing a failure. [ 142.442272][ T6610] name fail_futex, interval 1, probability 0, space 0, times 1 [ 142.442305][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.4.257 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.442329][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.442340][ T6610] Call Trace: [ 142.442348][ T6610] [ 142.442355][ T6610] dump_stack_lvl+0xe8/0x150 [ 142.442395][ T6610] should_fail_ex+0x447/0x5e0 [ 142.442426][ T6610] get_futex_key+0x893/0x1410 [ 142.442455][ T6610] ? futex_unqueue+0x22/0x240 [ 142.442480][ T6610] ? __pfx_get_futex_key+0x10/0x10 [ 142.442502][ T6610] ? __futex_wait+0x3c9/0x480 [ 142.442535][ T6610] futex_requeue+0x2a0/0x1ab0 [ 142.442581][ T6610] ? try_to_wake_up+0x854/0x1430 [ 142.442610][ T6610] ? __pfx_futex_requeue+0x10/0x10 [ 142.442646][ T6610] ? futex_wait+0x2a2/0x390 [ 142.442676][ T6610] ? __pfx_futex_wait+0x10/0x10 [ 142.442719][ T6610] do_futex+0x41b/0x4e0 [ 142.442750][ T6610] ? __pfx_do_futex+0x10/0x10 [ 142.442777][ T6610] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 142.442813][ T6610] __se_sys_futex+0x3a8/0x450 [ 142.442844][ T6610] ? __pfx___se_sys_futex+0x10/0x10 [ 142.442867][ T6610] ? rcu_is_watching+0x16/0xb0 [ 142.442896][ T6610] ? __x64_sys_futex+0x21/0xf0 [ 142.442920][ T6610] do_syscall_64+0x166/0x520 [ 142.442939][ T6610] ? trace_irq_disable+0x3b/0x140 [ 142.442961][ T6610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.442981][ T6610] ? clear_bhb_loop+0x70/0xc0 [ 142.443004][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.443025][ T6610] RIP: 0033:0x7f7af6bdfb19 [ 142.443044][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.443062][ T6610] RSP: 002b:00007f7af4e2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 142.443084][ T6610] RAX: ffffffffffffffda RBX: 00007f7af6e65fa0 RCX: 00007f7af6bdfb19 [ 142.443099][ T6610] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 142.443111][ T6610] RBP: 00007f7af6c77b70 R08: 0000000000000000 R09: 0000000000000000 [ 142.443126][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.443137][ T6610] R13: 00007f7af6e66038 R14: 00007f7af6e65fa0 R15: 00007ffeaa427718 [ 142.443168][ T6610] [ 142.572377][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.572515][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.072844][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.262'. [ 144.072886][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.262'. [ 144.715311][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 144.783558][ T1241] hsr_slave_0: left promiscuous mode [ 145.789329][ T1241] hsr_slave_1: left promiscuous mode [ 145.790554][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.790578][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.748323][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.748351][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.236919][ T1241] veth1_macvtap: left promiscuous mode [ 147.237030][ T1241] veth0_macvtap: left promiscuous mode [ 147.237292][ T1241] veth1_vlan: left promiscuous mode [ 147.237481][ T1241] veth0_vlan: left promiscuous mode [ 147.569829][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.273'. [ 147.569871][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 147.862768][ T6682] Zero length message leads to an empty skb [ 148.661040][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 148.837101][ T62] Bluetooth: hci0: command 0x2016 tx timeout [ 149.027765][ T1241] team0 (unregistering): Port device team_slave_1 removed [ 149.085484][ T1241] team0 (unregistering): Port device team_slave_0 removed [ 149.133966][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'. [ 149.134008][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 149.358383][ T6653] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.686860][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 150.952862][ T4931] Bluetooth: hci0: command 0x2016 tx timeout [ 151.082921][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 151.160049][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 152.256355][ T6713] dummy0: entered promiscuous mode [ 152.327213][ T6713] macvlan2: entered promiscuous mode [ 152.330552][ T6713] dummy0: left promiscuous mode [ 152.450798][ T6719] FAULT_INJECTION: forcing a failure. [ 152.450798][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 152.450820][ T6719] CPU: 0 UID: 0 PID: 6719 Comm: syz.3.290 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.450833][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.450840][ T6719] Call Trace: [ 152.450845][ T6719] [ 152.450849][ T6719] dump_stack_lvl+0xe8/0x150 [ 152.450876][ T6719] should_fail_ex+0x447/0x5e0 [ 152.450896][ T6719] should_failslab+0xa8/0x100 [ 152.450910][ T6719] ? sk_prot_alloc+0x57/0x210 [ 152.450921][ T6719] kmem_cache_alloc_noprof+0x99/0x680 [ 152.450942][ T6719] ? sk_prot_alloc+0x57/0x210 [ 152.450960][ T6719] sk_prot_alloc+0x57/0x210 [ 152.450970][ T6719] ? sk_alloc+0x27/0x390 [ 152.450981][ T6719] sk_alloc+0x3a/0x390 [ 152.450991][ T6719] ? pidfs_register_pid_gfp+0x168/0x1c0 [ 152.451012][ T6719] unix_create1+0xb0/0x7d0 [ 152.451025][ T6719] ? prepare_peercred+0x1d7/0x290 [ 152.451042][ T6719] unix_stream_connect+0x279/0x1000 [ 152.451061][ T6719] ? __pfx_unix_stream_connect+0x10/0x10 [ 152.451081][ T6719] ? bpf_lsm_socket_connect+0x9/0x20 [ 152.451100][ T6719] __sys_connect+0x32d/0x470 [ 152.451119][ T6719] ? __pfx___sys_connect+0x10/0x10 [ 152.451142][ T6719] ? __pfx_ksys_write+0x10/0x10 [ 152.451157][ T6719] __x64_sys_connect+0x7a/0x90 [ 152.451174][ T6719] do_syscall_64+0x166/0x520 [ 152.451194][ T6719] ? trace_irq_disable+0x3b/0x140 [ 152.451206][ T6719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.451221][ T6719] ? clear_bhb_loop+0x70/0xc0 [ 152.451236][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.451250][ T6719] RIP: 0033:0x7ff5144afb19 [ 152.451261][ T6719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.451270][ T6719] RSP: 002b:00007ff512706028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 152.451282][ T6719] RAX: ffffffffffffffda RBX: 00007ff514735fa0 RCX: 00007ff5144afb19 [ 152.451292][ T6719] RDX: 000000000000006e RSI: 00002000000004c0 RDI: 0000000000000003 [ 152.451299][ T6719] RBP: 00007ff514547b70 R08: 0000000000000000 R09: 0000000000000000 [ 152.451305][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.451312][ T6719] R13: 00007ff514736038 R14: 00007ff514735fa0 R15: 00007ffe615dc1e8 [ 152.451330][ T6719] [ 154.510223][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'. [ 154.510268][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 155.333344][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.671849][ T6048] veth0_vlan: entered promiscuous mode [ 155.700192][ T6048] veth1_vlan: entered promiscuous mode [ 155.760970][ T6048] veth0_macvtap: entered promiscuous mode [ 155.774556][ T6048] veth1_macvtap: entered promiscuous mode [ 155.815990][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.841756][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.961856][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 156.109278][ T1303] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.109972][ T1303] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.196887][ T1303] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.197280][ T1303] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.883603][ T4634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.883625][ T4634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.963034][ T6770] FAULT_INJECTION: forcing a failure. [ 156.963034][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 156.963067][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.4.301 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.963089][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 156.963100][ T6770] Call Trace: [ 156.963107][ T6770] [ 156.963115][ T6770] dump_stack_lvl+0xe8/0x150 [ 156.963155][ T6770] should_fail_ex+0x447/0x5e0 [ 156.963186][ T6770] should_failslab+0xa8/0x100 [ 156.963215][ T6770] kmem_cache_alloc_node_noprof+0xa7/0x660 [ 156.963250][ T6770] ? __alloc_skb+0x1db/0x7a0 [ 156.963278][ T6770] ? __alloc_skb+0x1db/0x7a0 [ 156.963313][ T6770] __alloc_skb+0x1db/0x7a0 [ 156.963345][ T6770] sock_wmalloc+0xb2/0x130 [ 156.963369][ T6770] unix_stream_connect+0x2c9/0x1000 [ 156.963404][ T6770] ? __pfx_unix_stream_connect+0x10/0x10 [ 156.963435][ T6770] ? bpf_lsm_socket_connect+0x9/0x20 [ 156.963460][ T6770] __sys_connect+0x32d/0x470 [ 156.963492][ T6770] ? __pfx___sys_connect+0x10/0x10 [ 156.963532][ T6770] ? rcu_is_watching+0x16/0xb0 [ 156.963576][ T6770] __x64_sys_connect+0x7a/0x90 [ 156.963615][ T6770] do_syscall_64+0x166/0x520 [ 156.963640][ T6770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.963660][ T6770] ? clear_bhb_loop+0x70/0xc0 [ 156.963684][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.963705][ T6770] RIP: 0033:0x7f7af6bdfb19 [ 156.963724][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.963741][ T6770] RSP: 002b:00007f7af4e2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 156.963764][ T6770] RAX: ffffffffffffffda RBX: 00007f7af6e65fa0 RCX: 00007f7af6bdfb19 [ 156.963779][ T6770] RDX: 000000000000006e RSI: 00002000000004c0 RDI: 0000000000000003 [ 156.963793][ T6770] RBP: 00007f7af6c77b70 R08: 0000000000000000 R09: 0000000000000000 [ 156.963805][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.963817][ T6770] R13: 00007f7af6e66038 R14: 00007f7af6e65fa0 R15: 00007ffeaa427718 [ 156.963849][ T6770] [ 156.964053][ T6028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.233955][ T6774] FAULT_INJECTION: forcing a failure. [ 157.233955][ T6774] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 157.233990][ T6774] CPU: 1 UID: 0 PID: 6774 Comm: syz.3.302 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.234013][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 157.234025][ T6774] Call Trace: [ 157.234034][ T6774] [ 157.234043][ T6774] dump_stack_lvl+0xe8/0x150 [ 157.234082][ T6774] should_fail_ex+0x447/0x5e0 [ 157.234116][ T6774] _copy_from_user+0x2d/0xb0 [ 157.234145][ T6774] __se_sys_rt_sigqueueinfo+0x345/0x4e0 [ 157.234172][ T6774] ? __pfx___se_sys_rt_sigqueueinfo+0x10/0x10 [ 157.234223][ T6774] do_syscall_64+0x166/0x520 [ 157.234246][ T6774] ? trace_irq_disable+0x3b/0x140 [ 157.234269][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.234290][ T6774] ? clear_bhb_loop+0x70/0xc0 [ 157.234315][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.234335][ T6774] RIP: 0033:0x7ff5144afb19 [ 157.234354][ T6774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.234371][ T6774] RSP: 002b:00007ff512706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 157.234392][ T6774] RAX: ffffffffffffffda RBX: 00007ff514735fa0 RCX: 00007ff5144afb19 [ 157.234408][ T6774] RDX: 0000200000000f00 RSI: 0000000000000021 RDI: 00000000000000e7 [ 157.234421][ T6774] RBP: 00007ff514547b70 R08: 0000000000000000 R09: 0000000000000000 [ 157.234434][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.234446][ T6774] R13: 00007ff514736038 R14: 00007ff514735fa0 R15: 00007ffe615dc1e8 [ 157.234479][ T6774] [ 157.504493][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.504513][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.768002][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.305'. [ 159.518114][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 159.743563][ T6028] veth0_vlan: entered promiscuous mode [ 159.802311][ T6028] veth1_vlan: entered promiscuous mode [ 159.864389][ T6028] veth0_macvtap: entered promiscuous mode [ 159.878068][ T6028] veth1_macvtap: entered promiscuous mode [ 159.904396][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.924446][ T6810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.066361][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.164938][ T4634] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.167658][ T774] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.167809][ T774] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.167851][ T774] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.015494][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.314'. [ 161.133935][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.133957][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.288746][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.288768][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.495873][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8 [ 162.333077][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 162.333097][ T36] audit: type=1326 audit(1793798419.536:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.335278][ T36] audit: type=1326 audit(1793798419.536:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.352766][ T36] audit: type=1326 audit(1793798419.556:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.368764][ T36] audit: type=1326 audit(1793798419.556:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.368813][ T36] audit: type=1326 audit(1793798419.556:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.369605][ T36] audit: type=1326 audit(1793798419.576:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.369645][ T36] audit: type=1326 audit(1793798419.576:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.371668][ T36] audit: type=1326 audit(1793798419.576:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.371710][ T36] audit: type=1326 audit(1793798419.576:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.377289][ T36] audit: type=1326 audit(1793798419.586:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.5.325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f492884fb19 code=0x7ffc0000 [ 162.437866][ T6872] FAULT_INJECTION: forcing a failure. [ 162.437866][ T6872] name failslab, interval 1, probability 0, space 0, times 0 [ 162.437899][ T6872] CPU: 1 UID: 0 PID: 6872 Comm: syz.5.325 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.437924][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.437936][ T6872] Call Trace: [ 162.437944][ T6872] [ 162.437952][ T6872] dump_stack_lvl+0xe8/0x150 [ 162.437992][ T6872] should_fail_ex+0x447/0x5e0 [ 162.438023][ T6872] should_failslab+0xa8/0x100 [ 162.438050][ T6872] __kmalloc_cache_noprof+0x9c/0x670 [ 162.438073][ T6872] ? audit_log_d_path+0xb8/0x1a0 [ 162.438099][ T6872] ? audit_log_d_path+0xb8/0x1a0 [ 162.438133][ T6872] audit_log_d_path+0xb8/0x1a0 [ 162.438162][ T6872] audit_log_d_path_exe+0x45/0x70 [ 162.438191][ T6872] audit_log_task+0x2be/0x3d0 [ 162.438222][ T6872] ? __pfx_audit_log_task+0x10/0x10 [ 162.438252][ T6872] ? futex_wait+0x2a2/0x390 [ 162.438287][ T6872] audit_seccomp+0x85/0x190 [ 162.438317][ T6872] __seccomp_filter+0xd18/0x1e90 [ 162.438352][ T6872] ? do_futex+0x3e7/0x4e0 [ 162.438377][ T6872] ? __pfx___seccomp_filter+0x10/0x10 [ 162.438405][ T6872] ? __pfx_do_futex+0x10/0x10 [ 162.438430][ T6872] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 162.438467][ T6872] ? __se_sys_futex+0x3a8/0x450 [ 162.438526][ T6872] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 162.438556][ T6872] do_syscall_64+0x11f/0x520 [ 162.438579][ T6872] ? trace_irq_disable+0x3b/0x140 [ 162.438602][ T6872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.438623][ T6872] ? clear_bhb_loop+0x70/0xc0 [ 162.438647][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.438667][ T6872] RIP: 0033:0x7f492884fb19 [ 162.438686][ T6872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.438703][ T6872] RSP: 002b:00007f4926aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 162.438724][ T6872] RAX: ffffffffffffffda RBX: 00007f4928ad5fa0 RCX: 00007f492884fb19 [ 162.438739][ T6872] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 162.438751][ T6872] RBP: 00007f49288e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 162.438764][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.438777][ T6872] R13: 00007f4928ad6038 R14: 00007f4928ad5fa0 R15: 00007fff69757508 [ 162.438808][ T6872] [ 162.651354][ T6876] FAULT_INJECTION: forcing a failure. [ 162.651354][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 162.651387][ T6876] CPU: 1 UID: 0 PID: 6876 Comm: syz.2.327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.651414][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.651426][ T6876] Call Trace: [ 162.651433][ T6876] [ 162.651441][ T6876] dump_stack_lvl+0xe8/0x150 [ 162.651481][ T6876] should_fail_ex+0x447/0x5e0 [ 162.651513][ T6876] should_failslab+0xa8/0x100 [ 162.651537][ T6876] ? alloc_empty_file+0x5b/0x1d0 [ 162.651562][ T6876] kmem_cache_alloc_noprof+0x99/0x680 [ 162.651594][ T6876] ? alloc_empty_file+0x5b/0x1d0 [ 162.651625][ T6876] alloc_empty_file+0x5b/0x1d0 [ 162.651652][ T6876] alloc_file_pseudo+0x110/0x1e0 [ 162.651680][ T6876] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 162.651717][ T6876] anon_inode_getfd+0xca/0x200 [ 162.651747][ T6876] bpf_prog_load+0x162a/0x1c60 [ 162.651786][ T6876] ? __pfx_bpf_prog_load+0x10/0x10 [ 162.651838][ T6876] __sys_bpf+0xd86/0xe00 [ 162.651871][ T6876] ? __pfx___sys_bpf+0x10/0x10 [ 162.651899][ T6876] ? do_futex+0x3e7/0x4e0 [ 162.651972][ T6876] ? rcu_is_watching+0x16/0xb0 [ 162.652030][ T6876] __x64_sys_bpf+0xba/0xd0 [ 162.652056][ T6876] do_syscall_64+0x166/0x520 [ 162.652079][ T6876] ? trace_irq_disable+0x3b/0x140 [ 162.652101][ T6876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.652122][ T6876] ? clear_bhb_loop+0x70/0xc0 [ 162.652148][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.652167][ T6876] RIP: 0033:0x7fa7bd44fb19 [ 162.652186][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.652203][ T6876] RSP: 002b:00007fa7bb6a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.652224][ T6876] RAX: ffffffffffffffda RBX: 00007fa7bd6d5fa0 RCX: 00007fa7bd44fb19 [ 162.652239][ T6876] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 162.652252][ T6876] RBP: 00007fa7bd4e7b70 R08: 0000000000000000 R09: 0000000000000000 [ 162.652264][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.652276][ T6876] R13: 00007fa7bd6d6038 R14: 00007fa7bd6d5fa0 R15: 00007ffec88f09b8 [ 162.652309][ T6876] [ 163.429017][ T62] Bluetooth: hci1: link tx timeout [ 163.429036][ T62] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.159777][ T6940] ucma_write: process 26 (syz.6.347) changed security contexts after opening file descriptor, this is not allowed. [ 164.836515][ T6966] overlayfs: failed to resolve 'obj_type=obj_type': -2 [ 165.421581][ T6994] overlay: Unknown parameter '/' [ 165.520555][ T6997] can0: slcan on ptm0. [ 165.545187][ T62] Bluetooth: hci1: command 0x0406 tx timeout [ 166.225611][ T6980] can0 (unregistered): slcan off ptm0. [ 166.436111][ T7017] rxe_eth0 speed is unknown, defaulting to 1000 [ 170.774989][ T7127] Bluetooth: MGMT ver 1.23 [ 170.775040][ T7127] Bluetooth: hci0: unsupported parameter 255 [ 170.775058][ T7127] Bluetooth: hci0: unsupported parameter 255 [ 174.013394][ T7167] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL) [ 174.013421][ T7167] device-mapper: ioctl: error adding target to table [ 174.336736][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 174.336755][ T36] audit: type=1326 audit(1793798431.546:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 174.339410][ T36] audit: type=1326 audit(1793798431.546:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 175.302406][ T7213] random: crng reseeded on system resumption [ 175.324965][ T36] audit: type=1326 audit(1793798431.626:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 175.325016][ T36] audit: type=1326 audit(1793798431.756:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 175.325054][ T36] audit: type=1326 audit(1793798431.766:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 175.325091][ T36] audit: type=1326 audit(1793798431.766:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 175.325129][ T36] audit: type=1326 audit(1793798431.766:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 175.325166][ T36] audit: type=1326 audit(1793798431.776:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 175.325203][ T36] audit: type=1326 audit(1793798431.786:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa7bd44fb19 code=0x7ffc0000 [ 176.048099][ T7236] FAULT_INJECTION: forcing a failure. [ 176.048099][ T7236] name failslab, interval 1, probability 0, space 0, times 0 [ 176.048141][ T7236] CPU: 0 UID: 0 PID: 7236 Comm: syz.3.447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.048170][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.048182][ T7236] Call Trace: [ 176.048190][ T7236] [ 176.048199][ T7236] dump_stack_lvl+0xe8/0x150 [ 176.048241][ T7236] should_fail_ex+0x447/0x5e0 [ 176.048276][ T7236] should_failslab+0xa8/0x100 [ 176.048312][ T7236] __kmalloc_cache_noprof+0x9c/0x670 [ 176.048335][ T7236] ? __sk_attach_prog+0x52/0x430 [ 176.048364][ T7236] ? __sk_attach_prog+0x52/0x430 [ 176.048392][ T7236] ? kmemdup_noprof+0x55/0x70 [ 176.048419][ T7236] __sk_attach_prog+0x52/0x430 [ 176.048451][ T7236] sk_attach_filter+0x4a/0x140 [ 176.048483][ T7236] sk_setsockopt+0x2440/0x2ce0 [ 176.048523][ T7236] ? __pfx_sk_setsockopt+0x10/0x10 [ 176.048556][ T7236] ? do_futex+0x3e7/0x4e0 [ 176.048581][ T7236] ? __asan_memcpy+0x40/0x70 [ 176.048616][ T7236] ? lock_acquire+0x115/0x350 [ 176.048657][ T7236] ? __fget_files+0x2a/0x420 [ 176.048692][ T7236] ? __fget_files+0x3a8/0x420 [ 176.048719][ T7236] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 176.048745][ T7236] do_sock_setsockopt+0x11b/0x1b0 [ 176.048770][ T7236] __x64_sys_setsockopt+0x143/0x1b0 [ 176.048796][ T7236] do_syscall_64+0x166/0x520 [ 176.048819][ T7236] ? trace_irq_disable+0x3b/0x140 [ 176.048841][ T7236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.048862][ T7236] ? clear_bhb_loop+0x70/0xc0 [ 176.048889][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.048909][ T7236] RIP: 0033:0x7ff5144afb19 [ 176.048930][ T7236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.048947][ T7236] RSP: 002b:00007ff512706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 176.048969][ T7236] RAX: ffffffffffffffda RBX: 00007ff514735fa0 RCX: 00007ff5144afb19 [ 176.048985][ T7236] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 176.048999][ T7236] RBP: 00007ff514547b70 R08: 0000000000000010 R09: 0000000000000000 [ 176.049013][ T7236] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 176.049026][ T7236] R13: 00007ff514736038 R14: 00007ff514735fa0 R15: 00007ffe615dc1e8 [ 176.049061][ T7236] [ 177.403584][ T7259] FAULT_INJECTION: forcing a failure. [ 177.403584][ T7259] name failslab, interval 1, probability 0, space 0, times 0 [ 177.403617][ T7259] CPU: 0 UID: 0 PID: 7259 Comm: syz.3.453 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.403643][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.403654][ T7259] Call Trace: [ 177.403662][ T7259] [ 177.403671][ T7259] dump_stack_lvl+0xe8/0x150 [ 177.403713][ T7259] should_fail_ex+0x447/0x5e0 [ 177.403746][ T7259] should_failslab+0xa8/0x100 [ 177.403771][ T7259] ? __kernfs_new_node+0xe7/0xa70 [ 177.403796][ T7259] kmem_cache_alloc_noprof+0x99/0x680 [ 177.403829][ T7259] ? __kernfs_new_node+0xe7/0xa70 [ 177.403859][ T7259] __kernfs_new_node+0xe7/0xa70 [ 177.403885][ T7259] ? lock_acquire+0x115/0x350 [ 177.403918][ T7259] ? __pfx___kernfs_new_node+0x10/0x10 [ 177.403942][ T7259] ? kernfs_root+0x1c/0x230 [ 177.403972][ T7259] ? kernfs_root+0x1c/0x230 [ 177.403993][ T7259] ? kernfs_root+0x1c/0x230 [ 177.404012][ T7259] ? kernfs_root+0x1c/0x230 [ 177.404038][ T7259] kernfs_new_node+0xeb/0x140 [ 177.404065][ T7259] kernfs_create_link+0xe3/0x240 [ 177.404099][ T7259] sysfs_do_create_link_sd+0x83/0x110 [ 177.404124][ T7259] device_create_sys_dev_entry+0x122/0x190 [ 177.404148][ T7259] ? __pfx_device_create_sys_dev_entry+0x10/0x10 [ 177.404176][ T7259] ? device_create_file+0xf4/0x1b0 [ 177.404198][ T7259] device_add+0x71e/0xb80 [ 177.404220][ T7259] device_create+0x269/0x300 [ 177.404250][ T7259] ? __pfx_device_create+0x10/0x10 [ 177.404272][ T7259] ? __pfx_device_create+0x10/0x10 [ 177.404297][ T7259] ? is_console_locked+0x9/0x20 [ 177.404330][ T7259] vc_allocate+0x61a/0x6f0 [ 177.404353][ T7259] ? lock_acquire+0x115/0x350 [ 177.404388][ T7259] ? __pfx_vc_allocate+0x10/0x10 [ 177.404414][ T7259] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 177.404444][ T7259] con_install+0x9f/0x770 [ 177.404478][ T7259] ? __pfx_con_install+0x10/0x10 [ 177.404506][ T7259] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.404530][ T7259] ? mutex_lock_nested+0x14d/0x1d0 [ 177.404593][ T7259] ? tty_init_dev+0x74/0x4d0 [ 177.404621][ T7259] tty_init_dev+0xd7/0x4d0 [ 177.404649][ T7259] tty_open+0x7ea/0xd90 [ 177.404690][ T7259] ? __pfx_tty_open+0x10/0x10 [ 177.404715][ T7259] ? rt_spin_unlock+0x159/0x200 [ 177.404747][ T7259] ? rt_spin_unlock+0x165/0x200 [ 177.404778][ T7259] chrdev_open+0x4dc/0x600 [ 177.404804][ T7259] ? __pfx_chrdev_open+0x10/0x10 [ 177.404827][ T7259] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 177.404858][ T7259] ? __pfx_chrdev_open+0x10/0x10 [ 177.404881][ T7259] do_dentry_open+0x841/0x1410 [ 177.404919][ T7259] vfs_open_consume+0x4a/0x360 [ 177.404941][ T7259] ? path_openat+0x16e6/0x2100 [ 177.404965][ T7259] path_openat+0x1701/0x2100 [ 177.405007][ T7259] do_file_open+0x23e/0x4a0 [ 177.405026][ T7259] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.405055][ T7259] ? __pfx_do_file_open+0x10/0x10 [ 177.405104][ T7259] ? alloc_fd+0x6b2/0x760 [ 177.405146][ T7259] do_sys_openat2+0x115/0x200 [ 177.405173][ T7259] ? __se_sys_futex+0x3a8/0x450 [ 177.405201][ T7259] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.405235][ T7259] ? rcu_is_watching+0x16/0xb0 [ 177.405272][ T7259] __x64_sys_openat+0x138/0x170 [ 177.405306][ T7259] do_syscall_64+0x166/0x520 [ 177.405328][ T7259] ? trace_irq_disable+0x3b/0x140 [ 177.405350][ T7259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.405372][ T7259] ? clear_bhb_loop+0x70/0xc0 [ 177.405398][ T7259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.405417][ T7259] RIP: 0033:0x7ff51447034e [ 177.405437][ T7259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.405452][ T7259] RSP: 002b:00007ff512705b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.405475][ T7259] RAX: ffffffffffffffda RBX: 00007ff5127066c0 RCX: 00007ff51447034e [ 177.405491][ T7259] RDX: 0000000000000002 RSI: 00007ff512705c00 RDI: ffffffffffffff9c [ 177.405505][ T7259] RBP: 00007ff514547b70 R08: 0000000000000000 R09: 0000000000000000 [ 177.405519][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.405531][ T7259] R13: 00007ff514736038 R14: 00007ff514735fa0 R15: 00007ffe615dc1e8 [ 177.405573][ T7259] [ 178.897704][ T7314] device-mapper: raid: Choosing default region size of 4MiB [ 179.002714][ T7320] rdma_op ffff888033961ab8 conn xmit_rdma 0000000000000000 [ 180.936677][ T7347] FAULT_INJECTION: forcing a failure. [ 180.936677][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 180.936722][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.4.484 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.936747][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 180.936759][ T7347] Call Trace: [ 180.936767][ T7347] [ 180.936776][ T7347] dump_stack_lvl+0xe8/0x150 [ 180.936817][ T7347] should_fail_ex+0x447/0x5e0 [ 180.936850][ T7347] should_failslab+0xa8/0x100 [ 180.936877][ T7347] __kmalloc_noprof+0xf6/0x790 [ 180.936899][ T7347] ? __memcg_list_lru_alloc+0x211/0x830 [ 180.936920][ T7347] ? __memcg_list_lru_alloc+0x211/0x830 [ 180.936950][ T7347] __memcg_list_lru_alloc+0x211/0x830 [ 180.936979][ T7347] ? xa_load+0x60/0x210 [ 180.937006][ T7347] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 180.937046][ T7347] __memcg_slab_post_alloc_hook+0x41b/0xe00 [ 180.937070][ T7347] ? __memcg_slab_post_alloc_hook+0x25f/0xe00 [ 180.937103][ T7347] ? __d_alloc+0x37/0x830 [ 180.937135][ T7347] kmem_cache_alloc_lru_noprof+0x417/0x680 [ 180.937169][ T7347] ? __d_alloc+0x37/0x830 [ 180.937198][ T7347] ? __d_alloc+0x37/0x830 [ 180.937234][ T7347] __d_alloc+0x37/0x830 [ 180.937264][ T7347] ? inode_set_ctime_to_ts+0x116/0x2e0 [ 180.937289][ T7347] d_alloc_pseudo+0x21/0xc0 [ 180.937322][ T7347] alloc_path_pseudo+0x107/0x220 [ 180.937354][ T7347] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 180.937380][ T7347] ? inode_set_ctime_current+0x287/0xb60 [ 180.937413][ T7347] alloc_file_pseudo+0xa8/0x1e0 [ 180.937443][ T7347] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 180.937474][ T7347] ? alloc_anon_inode+0x194/0x330 [ 180.937507][ T7347] dma_buf_export+0x64d/0xac0 [ 180.937541][ T7347] system_heap_allocate+0xb83/0xf70 [ 180.937580][ T7347] ? __pfx_system_heap_allocate+0x10/0x10 [ 180.937630][ T7347] dma_heap_ioctl+0x4aa/0x6d0 [ 180.937665][ T7347] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 180.937722][ T7347] ? bpf_lsm_file_ioctl+0x9/0x20 [ 180.937747][ T7347] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 180.937776][ T7347] __se_sys_ioctl+0xff/0x170 [ 180.937801][ T7347] do_syscall_64+0x166/0x520 [ 180.937825][ T7347] ? trace_irq_disable+0x3b/0x140 [ 180.937847][ T7347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.937869][ T7347] ? clear_bhb_loop+0x70/0xc0 [ 180.937894][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.937914][ T7347] RIP: 0033:0x7f7af6bdfb19 [ 180.937935][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.937952][ T7347] RSP: 002b:00007f7af4e2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.937974][ T7347] RAX: ffffffffffffffda RBX: 00007f7af6e65fa0 RCX: 00007f7af6bdfb19 [ 180.937989][ T7347] RDX: 0000200000010340 RSI: 000000004008af00 RDI: 0000000000000005 [ 180.938003][ T7347] RBP: 00007f7af6c77b70 R08: 0000000000000000 R09: 0000000000000000 [ 180.938016][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.938029][ T7347] R13: 00007f7af6e66038 R14: 00007f7af6e65fa0 R15: 00007ffeaa427718 [ 180.938062][ T7347] [ 182.031705][ T7314] device-mapper: table: 248:2: raid: Invalid flags combination (-EINVAL) [ 182.031733][ T7314] device-mapper: ioctl: error adding target to table [ 182.250746][ T7370] netlink: 'syz.5.490': attribute type 29 has an invalid length. [ 182.262785][ T7370] netlink: 'syz.5.490': attribute type 29 has an invalid length. [ 183.841164][ T7409] netlink: 'syz.2.503': attribute type 29 has an invalid length. [ 183.855113][ T7409] netlink: 'syz.2.503': attribute type 29 has an invalid length. [ 187.998487][ T7480] netlink: 'syz.5.517': attribute type 29 has an invalid length. [ 187.999337][ T7480] netlink: 'syz.5.517': attribute type 29 has an invalid length. [ 188.085351][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 189.324751][ T7514] netlink: 'syz.5.537': attribute type 29 has an invalid length. [ 189.326104][ T7514] netlink: 'syz.5.537': attribute type 29 has an invalid length. [ 189.536265][ T7519] netlink: 'syz.6.535': attribute type 2 has an invalid length. [ 189.564396][ T36] audit: type=1326 audit(1793798446.766:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.565865][ T36] audit: type=1326 audit(1793798446.766:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.587515][ T36] audit: type=1326 audit(1793798446.796:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.587565][ T36] audit: type=1326 audit(1793798446.796:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.587601][ T36] audit: type=1326 audit(1793798446.796:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.590595][ T36] audit: type=1326 audit(1793798446.796:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.590649][ T36] audit: type=1326 audit(1793798446.796:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.590685][ T36] audit: type=1326 audit(1793798446.796:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.594793][ T36] audit: type=1326 audit(1793798446.796:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.594911][ T36] audit: type=1326 audit(1793798446.796:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7521 comm="syz.3.539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5144afb19 code=0x7ffc0000 [ 189.602832][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.538'. [ 190.004940][ T7540] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 190.005713][ T7540] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 190.724496][ T5816] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 190.797990][ T7570] netlink: 'syz.5.562': attribute type 29 has an invalid length. [ 190.799824][ T7570] netlink: 'syz.5.562': attribute type 29 has an invalid length. [ 190.970338][ T5816] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 191.044133][ T5816] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.044165][ T5816] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 191.044184][ T5816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.044234][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 191.044260][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 191.148327][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.148362][ T5816] usb 3-1: Product: syz [ 191.148377][ T5816] usb 3-1: Manufacturer: syz [ 192.218527][ T7586] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 192.222375][ T7586] ================================================================== [ 192.222393][ T7586] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xae/0x480 [ 192.222428][ T7586] Read of size 4 at addr 0000000000000234 by task syz.4.564/7586 [ 192.222446][ T7586] [ 192.222458][ T7586] CPU: 1 UID: 0 PID: 7586 Comm: syz.4.564 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.222483][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.222495][ T7586] Call Trace: [ 192.222504][ T7586] [ 192.222512][ T7586] dump_stack_lvl+0xe8/0x150 [ 192.222546][ T7586] ? dm_kcopyd_client_destroy+0xae/0x480 [ 192.222571][ T7586] kasan_report+0x117/0x150 [ 192.222597][ T7586] ? dm_kcopyd_client_destroy+0xae/0x480 [ 192.222625][ T7586] kasan_check_range+0x264/0x2c0 [ 192.222651][ T7586] dm_kcopyd_client_destroy+0xae/0x480 [ 192.222675][ T7586] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 192.222699][ T7586] ? kasan_quarantine_put+0xbb/0x1f0 [ 192.222718][ T7586] ? lockdep_hardirqs_on+0x7b/0x110 [ 192.222744][ T7586] ? kfree+0x1c5/0x6d0 [ 192.222771][ T7586] ? __destroy+0x139/0x300 [ 192.222793][ T7586] ? vfree+0x46d/0x4f0 [ 192.222822][ T7586] __destroy+0x172/0x300 [ 192.222845][ T7586] cache_ctr+0x168c/0x2ba0 [ 192.222879][ T7586] ? __pfx_cache_ctr+0x10/0x10 [ 192.222902][ T7586] ? skip_spaces+0x8a/0xa0 [ 192.222935][ T7586] ? up_read+0x34/0x180 [ 192.222961][ T7586] dm_table_add_target+0x58d/0xc70 [ 192.222990][ T7586] table_load+0x325/0x8a0 [ 192.223013][ T7586] ? __pfx_table_load+0x10/0x10 [ 192.223041][ T7586] dm_ctl_ioctl+0x9ec/0xe10 [ 192.223064][ T7586] ? __pfx_table_load+0x10/0x10 [ 192.223083][ T7586] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 192.223117][ T7586] ? __fget_files+0x2a/0x420 [ 192.223147][ T7586] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.223177][ T7586] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 192.223196][ T7586] __se_sys_ioctl+0xff/0x170 [ 192.223219][ T7586] do_syscall_64+0x166/0x520 [ 192.223243][ T7586] ? trace_irq_disable+0x3b/0x140 [ 192.223266][ T7586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.223286][ T7586] ? clear_bhb_loop+0x70/0xc0 [ 192.223310][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.223330][ T7586] RIP: 0033:0x7f7af6bdfb19 [ 192.223348][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.223366][ T7586] RSP: 002b:00007f7af49c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.223389][ T7586] RAX: ffffffffffffffda RBX: 00007f7af6e66270 RCX: 00007f7af6bdfb19 [ 192.223404][ T7586] RDX: 0000200000000640 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 192.223418][ T7586] RBP: 00007f7af6c77b70 R08: 0000000000000000 R09: 0000000000000000 [ 192.223432][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.223445][ T7586] R13: 00007f7af6e66308 R14: 00007f7af6e66270 R15: 00007ffeaa427718 [ 192.223469][ T7586] [ 192.223477][ T7586] ================================================================== [ 192.223496][ T7586] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.529538][ T7586] CPU: 1 UID: 0 PID: 7586 Comm: syz.4.564 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.539252][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 192.549300][ T7586] Call Trace: [ 192.552595][ T7586] [ 192.555521][ T7586] vpanic+0x26f/0x710 [ 192.559503][ T7586] panic+0xc5/0xd0 [ 192.563218][ T7586] ? __pfx_panic+0x10/0x10 [ 192.567626][ T7586] ? dm_kcopyd_client_destroy+0xae/0x480 [ 192.573255][ T7586] ? rcu_is_watching+0x16/0xb0 [ 192.578023][ T7586] ? dm_kcopyd_client_destroy+0xae/0x480 [ 192.583664][ T7586] check_panic_on_warn+0x89/0xb0 [ 192.588602][ T7586] ? dm_kcopyd_client_destroy+0xae/0x480 [ 192.594239][ T7586] end_report+0x73/0x170 [ 192.598486][ T7586] ? dm_kcopyd_client_destroy+0xae/0x480 [ 192.604121][ T7586] kasan_report+0x128/0x150 [ 192.608632][ T7586] ? dm_kcopyd_client_destroy+0xae/0x480 [ 192.614291][ T7586] kasan_check_range+0x264/0x2c0 [ 192.619238][ T7586] dm_kcopyd_client_destroy+0xae/0x480 [ 192.624696][ T7586] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 192.630777][ T7586] ? kasan_quarantine_put+0xbb/0x1f0 [ 192.636141][ T7586] ? lockdep_hardirqs_on+0x7b/0x110 [ 192.641338][ T7586] ? kfree+0x1c5/0x6d0 [ 192.645405][ T7586] ? __destroy+0x139/0x300 [ 192.649814][ T7586] ? vfree+0x46d/0x4f0 [ 192.653882][ T7586] __destroy+0x172/0x300 [ 192.658125][ T7586] cache_ctr+0x168c/0x2ba0 [ 192.662544][ T7586] ? __pfx_cache_ctr+0x10/0x10 [ 192.667299][ T7586] ? skip_spaces+0x8a/0xa0 [ 192.671719][ T7586] ? up_read+0x34/0x180 [ 192.675873][ T7586] dm_table_add_target+0x58d/0xc70 [ 192.680981][ T7586] table_load+0x325/0x8a0 [ 192.685306][ T7586] ? __pfx_table_load+0x10/0x10 [ 192.690164][ T7586] dm_ctl_ioctl+0x9ec/0xe10 [ 192.694666][ T7586] ? __pfx_table_load+0x10/0x10 [ 192.699521][ T7586] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 192.704553][ T7586] ? __fget_files+0x2a/0x420 [ 192.709158][ T7586] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.714109][ T7586] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 192.719137][ T7586] __se_sys_ioctl+0xff/0x170 [ 192.723758][ T7586] do_syscall_64+0x166/0x520 [ 192.728353][ T7586] ? trace_irq_disable+0x3b/0x140 [ 192.733381][ T7586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.739439][ T7586] ? clear_bhb_loop+0x70/0xc0 [ 192.744113][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.750003][ T7586] RIP: 0033:0x7f7af6bdfb19 [ 192.754414][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.774013][ T7586] RSP: 002b:00007f7af49c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.782424][ T7586] RAX: ffffffffffffffda RBX: 00007f7af6e66270 RCX: 00007f7af6bdfb19 [ 192.790393][ T7586] RDX: 0000200000000640 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 192.798365][ T7586] RBP: 00007f7af6c77b70 R08: 0000000000000000 R09: 0000000000000000 [ 192.806347][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.814317][ T7586] R13: 00007f7af6e66308 R14: 00007f7af6e66270 R15: 00007ffeaa427718 [ 192.822291][ T7586] [ 192.825561][ T7586] Kernel Offset: disabled [ 192.829880][ T7586] Rebooting in 86400 seconds..