last executing test programs: 9.146085591s ago: executing program 3 (id=2330): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 7.847424012s ago: executing program 1 (id=2332): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x2, @scatter={0x0, 0x24000, 0x0}, &(0x7f0000000040)="0ac5150d98c6", 0x0, 0x7, 0x0, 0x8000000, 0x0}) 5.63519081s ago: executing program 4 (id=2341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast2}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x8000654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.584331516s ago: executing program 3 (id=2342): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000003c0)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 5.232459803s ago: executing program 3 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700"], 0x3c}}, 0x0) 4.764197601s ago: executing program 3 (id=2348): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}]}]}, 0x50}}, 0x0) 3.748421068s ago: executing program 3 (id=2349): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) setuid(0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="2eff46a13204", 0x0, 0x9, 0x0, 0x1, 0x0}) 3.646273201s ago: executing program 0 (id=2350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b0000000500000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0x1000008, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 3.405066733s ago: executing program 3 (id=2352): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 3.382997503s ago: executing program 0 (id=2353): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.327369255s ago: executing program 4 (id=2354): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sync() sync() r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) prctl$PR_SET_IO_FLUSHER(0x4c, 0x2) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) pipe(&(0x7f0000000140)) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) 3.192005272s ago: executing program 0 (id=2356): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000001240)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10) 2.897496161s ago: executing program 0 (id=2358): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x3, 0x0, 0x4000) 2.479341262s ago: executing program 2 (id=2359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x800) 2.084190042s ago: executing program 4 (id=2360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.924239652s ago: executing program 2 (id=2361): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x88}, 0x80) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x820, 0xfffffe, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.896904984s ago: executing program 1 (id=2362): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) 1.585469699s ago: executing program 4 (id=2363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0x1000008, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 1.444461979s ago: executing program 1 (id=2364): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x8) 1.360317987s ago: executing program 2 (id=2365): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='+bond_slave_0', 0xd) 1.166423653s ago: executing program 4 (id=2366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3a1b5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 984.073014ms ago: executing program 2 (id=2367): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) unshare(0x20400) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 922.411181ms ago: executing program 1 (id=2368): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x41) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400000000000000) 896.017853ms ago: executing program 0 (id=2369): r0 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x7, 0x9}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@delneigh={0x28, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x4, 0x7b}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) io_uring_enter(r2, 0x2219, 0x35a5, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) dup(0xffffffffffffffff) mq_timedreceive(r0, &(0x7f0000000140)=""/140, 0x8c, 0x0, 0x0) 792.990827ms ago: executing program 4 (id=2370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)) 755.24144ms ago: executing program 2 (id=2371): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_clone3(&(0x7f0000000840)={0x20000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 216.15019ms ago: executing program 1 (id=2372): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x2, @scatter={0x0, 0x24000, 0x0}, &(0x7f0000000040)="0ac5150d98c6", 0x0, 0x7, 0x0, 0x8000000, 0x0}) 211.406555ms ago: executing program 2 (id=2373): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x11000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, 0x0, &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r1}, 0x38) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, 0x0) 159.123049ms ago: executing program 0 (id=2374): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 0s ago: executing program 1 (id=2375): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x4, 0x7}}}}}}, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4004, r2, 0x2}) r4 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x7fe81e5246626bb5) lseek(r5, 0x141, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x4a) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = socket(0xf, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff09, 0x0) kernel console output (not intermixed with test programs): 0) entered disabled state [ 97.108536][ T5591] bridge_slave_0: entered allmulticast mode [ 97.110389][ T5591] bridge_slave_0: entered promiscuous mode [ 97.115109][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.158361][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.183929][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.184326][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.205369][ T5591] bridge_slave_1: entered allmulticast mode [ 97.207293][ T5591] bridge_slave_1: entered promiscuous mode [ 97.224490][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.237875][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.305199][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.330377][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.330596][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.330759][ T5589] bridge_slave_0: entered allmulticast mode [ 97.332896][ T5589] bridge_slave_0: entered promiscuous mode [ 97.422647][ T5588] team0: Port device team_slave_0 added [ 97.422953][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.423164][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.423333][ T5589] bridge_slave_1: entered allmulticast mode [ 97.425454][ T5589] bridge_slave_1: entered promiscuous mode [ 97.455447][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.470168][ T5590] team0: Port device team_slave_0 added [ 97.508349][ T5588] team0: Port device team_slave_1 added [ 97.529518][ T5590] team0: Port device team_slave_1 added [ 97.532369][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.534716][ T5592] team0: Port device team_slave_0 added [ 97.613580][ T5592] team0: Port device team_slave_1 added [ 97.637063][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.690690][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.690710][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.690730][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.694567][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.695628][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.695639][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.695659][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.748906][ T5591] team0: Port device team_slave_0 added [ 97.811182][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.811201][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.811229][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.863521][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.863535][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.863555][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.865895][ T5591] team0: Port device team_slave_1 added [ 97.866684][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.866695][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.866714][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.995314][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.995328][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.995347][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.016776][ T5589] team0: Port device team_slave_0 added [ 98.037901][ T60] Bluetooth: hci4: command tx timeout [ 98.078612][ T5589] team0: Port device team_slave_1 added [ 98.081746][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.081758][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.081776][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.108042][ T60] Bluetooth: hci3: command tx timeout [ 98.108074][ T60] Bluetooth: hci2: command tx timeout [ 98.177326][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.177340][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.177360][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.199251][ T5600] Bluetooth: hci0: command tx timeout [ 98.199285][ T5600] Bluetooth: hci1: command tx timeout [ 98.668570][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.668585][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.668604][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.677107][ T5590] hsr_slave_0: entered promiscuous mode [ 98.679701][ T5590] hsr_slave_1: entered promiscuous mode [ 98.724708][ T5588] hsr_slave_0: entered promiscuous mode [ 98.728462][ T5588] hsr_slave_1: entered promiscuous mode [ 98.731212][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 98.731592][ T5588] Cannot create hsr debugfs directory [ 98.780713][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.780742][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.780770][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.809265][ T5592] hsr_slave_0: entered promiscuous mode [ 98.812812][ T5592] hsr_slave_1: entered promiscuous mode [ 98.815761][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 98.815824][ T5592] Cannot create hsr debugfs directory [ 98.945444][ T5591] hsr_slave_0: entered promiscuous mode [ 98.946396][ T5591] hsr_slave_1: entered promiscuous mode [ 98.947069][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 98.947088][ T5591] Cannot create hsr debugfs directory [ 99.130252][ T5589] hsr_slave_0: entered promiscuous mode [ 99.131191][ T5589] hsr_slave_1: entered promiscuous mode [ 99.131939][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 99.131958][ T5589] Cannot create hsr debugfs directory [ 100.094993][ T5590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.108750][ T60] Bluetooth: hci4: command tx timeout [ 100.136701][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.147015][ T5590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.167182][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.182988][ T5590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.189147][ T60] Bluetooth: hci2: command tx timeout [ 100.189179][ T60] Bluetooth: hci3: command tx timeout [ 100.224235][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.250687][ T5590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.267955][ T5600] Bluetooth: hci1: command tx timeout [ 100.267989][ T5600] Bluetooth: hci0: command tx timeout [ 100.302993][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.431617][ T5588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.476720][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.497426][ T5588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.542559][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.545866][ T5588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.583362][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.612628][ T5588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.645348][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.795244][ T5592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.823013][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.837998][ T5592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.882802][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.886432][ T5592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.931413][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.961817][ T5592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.995350][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.141095][ T5591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.182280][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.203899][ T5591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.242308][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.247208][ T5591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.271510][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.303946][ T5591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.332438][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.402982][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.506230][ T5589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.531741][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.562795][ T5589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.600902][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.618928][ T5589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.661999][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.675596][ T5589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.701930][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.722224][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.800861][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.801109][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.840863][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.887062][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.887182][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.987325][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.020807][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.057466][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.057625][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.110421][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.110850][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.166495][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.188664][ T60] Bluetooth: hci4: command tx timeout [ 102.212999][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.213155][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.268265][ T60] Bluetooth: hci2: command tx timeout [ 102.278366][ T60] Bluetooth: hci3: command tx timeout [ 102.302791][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.325841][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.326011][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.347985][ T5600] Bluetooth: hci1: command tx timeout [ 102.348055][ T60] Bluetooth: hci0: command tx timeout [ 102.497510][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.603617][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.603777][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.652164][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.676992][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.677187][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.851303][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.950129][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.955486][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.033947][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.041158][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.550338][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.044981][ T5590] veth0_vlan: entered promiscuous mode [ 104.119727][ T5590] veth1_vlan: entered promiscuous mode [ 104.289451][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.340899][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.465272][ T5590] veth0_macvtap: entered promiscuous mode [ 104.539311][ T5590] veth1_macvtap: entered promiscuous mode [ 104.612324][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.696264][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.762397][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.915059][ T5588] veth0_vlan: entered promiscuous mode [ 105.054629][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.157409][ T5588] veth1_vlan: entered promiscuous mode [ 105.255236][ T5591] veth0_vlan: entered promiscuous mode [ 105.402464][ T5591] veth1_vlan: entered promiscuous mode [ 105.452185][ T5592] veth0_vlan: entered promiscuous mode [ 105.543656][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.543687][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.545511][ T5588] veth0_macvtap: entered promiscuous mode [ 105.582005][ T5592] veth1_vlan: entered promiscuous mode [ 105.617413][ T5588] veth1_macvtap: entered promiscuous mode [ 105.636375][ T5589] veth0_vlan: entered promiscuous mode [ 105.722774][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.722798][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.751006][ T5591] veth0_macvtap: entered promiscuous mode [ 105.764953][ T5589] veth1_vlan: entered promiscuous mode [ 105.786960][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.801223][ T5591] veth1_macvtap: entered promiscuous mode [ 105.900357][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.965837][ T5592] veth0_macvtap: entered promiscuous mode [ 105.984521][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.016386][ T5592] veth1_macvtap: entered promiscuous mode [ 106.096981][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.112885][ T5590] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.258861][ T5589] veth0_macvtap: entered promiscuous mode [ 106.375184][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.392444][ T5589] veth1_macvtap: entered promiscuous mode [ 106.615184][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.905700][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.905724][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.044082][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.110669][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.180094][ T37] audit: type=1326 audit(1790726508.531:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5795 comm="syz.0.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x0 [ 107.461552][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.461572][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.777515][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.777539][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.054707][ T1512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.054733][ T1512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.173950][ T1006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.529230][ T5807] FAULT_INJECTION: forcing a failure. [ 108.529230][ T5807] name failslab, interval 1, probability 0, space 0, times 1 [ 108.529288][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.529320][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.529343][ T5807] Call Trace: [ 108.529352][ T5807] [ 108.529363][ T5807] dump_stack_lvl+0xe8/0x150 [ 108.529413][ T5807] should_fail_ex+0x46b/0x600 [ 108.529467][ T5807] should_failslab+0xa8/0x100 [ 108.529494][ T5807] __kmalloc_noprof+0xfb/0x790 [ 108.529527][ T5807] ? __memcg_list_lru_alloc+0x211/0x830 [ 108.529552][ T5807] ? __memcg_list_lru_alloc+0x211/0x830 [ 108.529585][ T5807] __memcg_list_lru_alloc+0x211/0x830 [ 108.529617][ T5807] ? xa_load+0x60/0x210 [ 108.529645][ T5807] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 108.529688][ T5807] __memcg_slab_post_alloc_hook+0x407/0xde0 [ 108.529739][ T5807] ? __memcg_slab_post_alloc_hook+0x24b/0xde0 [ 108.529789][ T5807] ? proc_alloc_inode+0x2a/0xc0 [ 108.529823][ T5807] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 108.529857][ T5807] ? proc_alloc_inode+0x2a/0xc0 [ 108.529892][ T5807] ? proc_alloc_inode+0x2a/0xc0 [ 108.529931][ T5807] ? __pfx_proc_alloc_inode+0x10/0x10 [ 108.529962][ T5807] proc_alloc_inode+0x2a/0xc0 [ 108.529994][ T5807] alloc_inode+0x6a/0x1b0 [ 108.530021][ T5807] new_inode+0x1f/0x170 [ 108.530044][ T5807] ? proc_get_inode+0x1a/0x6a0 [ 108.530080][ T5807] proc_get_inode+0x22/0x6a0 [ 108.530111][ T5807] ? proc_fill_super+0x52a/0x760 [ 108.530151][ T5807] proc_fill_super+0x543/0x760 [ 108.530185][ T5807] ? __pfx_proc_fill_super+0x10/0x10 [ 108.530224][ T5807] get_tree_nodev+0xbb/0x150 [ 108.530248][ T5807] vfs_get_tree+0x92/0x2a0 [ 108.530272][ T5807] do_new_mount+0x319/0xdc0 [ 108.530290][ T5807] ? cap_capable+0x123/0x460 [ 108.530316][ T5807] ? __pfx_do_new_mount+0x10/0x10 [ 108.530335][ T5807] ? ns_capable+0x89/0xe0 [ 108.530366][ T5807] ? path_mount+0x647/0x1050 [ 108.530386][ T5807] ? user_path_at+0xd4/0x160 [ 108.530408][ T5807] __se_sys_mount+0x31d/0x420 [ 108.530438][ T5807] ? __pfx___se_sys_mount+0x10/0x10 [ 108.530478][ T5807] ? __x64_sys_mount+0x20/0xc0 [ 108.530499][ T5807] do_syscall_64+0x166/0x520 [ 108.530516][ T5807] ? trace_irq_disable+0x3b/0x140 [ 108.530539][ T5807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.530556][ T5807] ? clear_bhb_loop+0x70/0xc0 [ 108.530577][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.530594][ T5807] RIP: 0033:0x7f26cbc4e159 [ 108.530621][ T5807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.530635][ T5807] RSP: 002b:00007f26c9ea6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.530656][ T5807] RAX: ffffffffffffffda RBX: 00007f26cbed5fa0 RCX: 00007f26cbc4e159 [ 108.530668][ T5807] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 108.530680][ T5807] RBP: 00007f26cbce506b R08: 0000000000000000 R09: 0000000000000000 [ 108.530690][ T5807] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 108.530700][ T5807] R13: 00007f26cbed6038 R14: 00007f26cbed5fa0 R15: 00007ffecc53f408 [ 108.530726][ T5807] [ 108.531636][ T5807] proc_fill_super: get root inode failed [ 109.254735][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.254759][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.453288][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.453312][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.459690][ T1185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.459900][ T1185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.460523][ T1185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.460630][ T1185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.460745][ T1185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.460817][ T1185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.460920][ T1185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.461024][ T1185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.461126][ T1185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.463805][ T1185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.463919][ T1185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464023][ T1185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464127][ T1185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464228][ T1185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464345][ T1185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464449][ T1185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464551][ T1185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464647][ T1185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.464752][ T1185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.816813][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.816836][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.126286][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.126306][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.479386][ T5815] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.481268][ T5815] block device autoloading is deprecated and will be removed. [ 111.111525][ T5831] fuse: Bad value for 'fd' [ 111.366227][ T5834] FAULT_INJECTION: forcing a failure. [ 111.366227][ T5834] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.366267][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.366295][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.366309][ T5834] Call Trace: [ 111.366318][ T5834] [ 111.366327][ T5834] dump_stack_lvl+0xe8/0x150 [ 111.366366][ T5834] should_fail_ex+0x46b/0x600 [ 111.366405][ T5834] _copy_from_user+0x2d/0xb0 [ 111.366440][ T5834] memdup_user+0x5e/0xd0 [ 111.366464][ T5834] strndup_user+0x68/0xd0 [ 111.366487][ T5834] __se_sys_request_key+0x1c4/0x350 [ 111.366519][ T5834] ? __pfx___se_sys_request_key+0x10/0x10 [ 111.366566][ T5834] do_syscall_64+0x166/0x520 [ 111.366592][ T5834] ? trace_irq_disable+0x3b/0x140 [ 111.366621][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.366645][ T5834] ? clear_bhb_loop+0x70/0xc0 [ 111.366670][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.366691][ T5834] RIP: 0033:0x7ff0e24ee159 [ 111.366711][ T5834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.366729][ T5834] RSP: 002b:00007ff0e0746028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 111.366754][ T5834] RAX: ffffffffffffffda RBX: 00007ff0e2775fa0 RCX: 00007ff0e24ee159 [ 111.366770][ T5834] RDX: 00002000000004c0 RSI: 00002000000000c0 RDI: 00002000000008c0 [ 111.366787][ T5834] RBP: 00007ff0e258506b R08: 0000000000000000 R09: 0000000000000000 [ 111.366800][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.366812][ T5834] R13: 00007ff0e2776038 R14: 00007ff0e2775fa0 R15: 00007ffd1e31e6e8 [ 111.366845][ T5834] [ 111.589313][ T5835] overlayfs: overlapping lowerdir path [ 111.591458][ T5839] ======================================================= [ 111.591458][ T5839] WARNING: The mand mount option has been deprecated and [ 111.591458][ T5839] and is ignored by this kernel. Remove the mand [ 111.591458][ T5839] option from the mount to silence this warning. [ 111.591458][ T5839] ======================================================= [ 112.502089][ T5861] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.803685][ T5862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 113.687664][ T5868] bridge_slave_0: left allmulticast mode [ 113.691409][ T5868] bridge_slave_0: left promiscuous mode [ 113.724761][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.415486][ T5868] bridge_slave_1: left allmulticast mode [ 114.415527][ T5868] bridge_slave_1: left promiscuous mode [ 114.434089][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.583922][ T5603] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.742465][ T5868] bond0: (slave bond_slave_0): Releasing backup interface [ 114.791775][ T5603] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 114.869559][ T5603] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 114.869593][ T5603] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 114.870109][ T5603] usb 1-1: config 220 has no interface number 2 [ 114.870505][ T5603] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 114.870539][ T5603] usb 1-1: config 220 interface 0 has no altsetting 0 [ 114.870561][ T5603] usb 1-1: config 220 interface 76 has no altsetting 0 [ 114.870583][ T5603] usb 1-1: config 220 interface 1 has no altsetting 0 [ 114.874737][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.874765][ T5603] usb 1-1: Product: syz [ 114.874782][ T5603] usb 1-1: Manufacturer: syz [ 114.874797][ T5603] usb 1-1: SerialNumber: syz [ 115.157468][ T5868] bond0: (slave bond_slave_1): Releasing backup interface [ 115.575906][ T5868] team0: Port device team_slave_0 removed [ 115.663907][ T5875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'. [ 115.995675][ T5868] team0: Port device team_slave_1 removed [ 116.034760][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.034795][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.153142][ T5603] usb 1-1: selecting invalid altsetting 0 [ 116.178948][ T5603] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 116.178999][ T5603] uvcvideo 1-1:220.0: No valid video chain found. [ 116.252030][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.252067][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.325275][ T5603] usb 1-1: selecting invalid altsetting 0 [ 116.325319][ T5603] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 116.361753][ T5868] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.362456][ T5868] syz.4.27 (5868) used greatest stack depth: 18816 bytes left [ 116.487980][ T5603] usb 1-1: USB disconnect, device number 2 [ 116.710524][ T5893] overlayfs: overlapping lowerdir path [ 118.346522][ T5909] tunl0: entered promiscuous mode [ 118.458255][ T5909] netlink: 'syz.3.40': attribute type 4 has an invalid length. [ 118.458281][ T5909] netlink: 9 bytes leftover after parsing attributes in process `syz.3.40'. [ 119.069847][ T5931] overlayfs: overlapping lowerdir path [ 119.367981][ T1240] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.542888][ T1240] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 119.544432][ T1240] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 119.544463][ T1240] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 119.544486][ T1240] usb 4-1: config 220 has no interface number 2 [ 119.544568][ T1240] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 119.544598][ T1240] usb 4-1: config 220 interface 0 has no altsetting 0 [ 119.544626][ T1240] usb 4-1: config 220 interface 76 has no altsetting 0 [ 119.544647][ T1240] usb 4-1: config 220 interface 1 has no altsetting 0 [ 119.641740][ T1240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.641773][ T1240] usb 4-1: Product: syz [ 119.641790][ T1240] usb 4-1: Manufacturer: syz [ 119.641807][ T1240] usb 4-1: SerialNumber: syz [ 121.111902][ T5927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 121.389989][ T5603] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.579232][ T5603] usb 3-1: device descriptor read/64, error -71 [ 121.928061][ T5603] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.974814][ T1240] usb 4-1: selecting invalid altsetting 0 [ 121.975104][ T1240] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 121.975127][ T1240] uvcvideo 4-1:220.0: No valid video chain found. [ 122.082035][ T5603] usb 3-1: device descriptor read/64, error -71 [ 122.085621][ T1240] usb 4-1: selecting invalid altsetting 0 [ 122.085648][ T1240] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 122.192950][ T5603] usb usb3-port1: attempt power cycle [ 122.234609][ T5958] binder: 5957:5958 ioctl 401845e0 2000000002c0 returned -22 [ 122.307744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.335954][ T1240] usb 4-1: USB disconnect, device number 2 [ 122.680667][ T5603] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.718718][ T5603] usb 3-1: device descriptor read/8, error -71 [ 123.019149][ T5603] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.168109][ T5980] overlayfs: overlapping lowerdir path [ 123.228823][ T5603] usb 3-1: device not accepting address 5, error -71 [ 123.229305][ T5603] usb usb3-port1: unable to enumerate USB device [ 124.802182][ T5987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.802212][ T5987] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 125.589529][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.723880][ T5987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.723910][ T5987] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 125.788042][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 125.831705][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 125.837092][ T9] usb 4-1: config 0 has no interfaces? [ 125.837133][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.943054][ T9] usb 4-1: config 0 descriptor?? [ 126.053855][ T5788] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.071843][ T5987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.071870][ T5987] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 126.114985][ T123] IPVS: starting estimator thread 0... [ 126.182631][ T6011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.74'. [ 126.188692][ T5788] usb 3-1: device descriptor read/64, error -71 [ 126.230480][ T6017] IPVS: using max 11 ests per chain, 26400 per kthread [ 126.366333][ T5577] usb 4-1: USB disconnect, device number 3 [ 126.479356][ T5788] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 126.504879][ T5987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.504905][ T5987] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 126.628019][ T5788] usb 3-1: device descriptor read/64, error -71 [ 126.687239][ T5987] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.687271][ T5987] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 126.738485][ T5788] usb usb3-port1: attempt power cycle [ 127.012887][ T6027] fuse: Unknown parameter 'use00000000000000000000' [ 127.080050][ T5788] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.102014][ T5788] usb 3-1: device descriptor read/8, error -71 [ 128.237847][ T5788] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.261659][ T5788] usb 3-1: device descriptor read/8, error -71 [ 128.370573][ T5788] usb usb3-port1: unable to enumerate USB device [ 128.844656][ T6066] loop8: detected capacity change from 0 to 16384 [ 128.878441][ T6062] tipc: Started in network mode [ 128.878480][ T6062] tipc: Node identity eeb8925e0c96, cluster identity 4711 [ 128.881910][ T6062] tipc: Enabled bearer , priority 0 [ 129.041169][ T6047] tipc: Resetting bearer [ 129.097613][ T6063] syzkaller0: entered promiscuous mode [ 129.097641][ T6063] syzkaller0: entered allmulticast mode [ 129.149212][ T6046] tipc: Resetting bearer [ 129.227366][ T6067] loop8: detected capacity change from 16384 to 16383 [ 129.515414][ T6046] tipc: Disabling bearer [ 130.579630][ T6099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.102'. [ 130.579683][ T6099] openvswitch: netlink: Flow key attr not present in new flow. [ 130.837879][ T5598] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.977928][ T5598] usb 2-1: device descriptor read/64, error -71 [ 131.228004][ T5598] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.371405][ T5598] usb 2-1: device descriptor read/64, error -71 [ 131.484292][ T5598] usb usb2-port1: attempt power cycle [ 131.723117][ T6127] tipc: Enabling of bearer rejected, failed to enable media [ 131.895431][ T6133] Zero length message leads to an empty skb [ 131.917862][ T5598] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.952534][ T5598] usb 2-1: device descriptor read/8, error -71 [ 132.065954][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 132.148761][ T1512] IPVS: starting estimator thread 0... [ 132.201688][ T5598] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.219008][ T5598] usb 2-1: device descriptor read/8, error -71 [ 132.243611][ T6139] IPVS: using max 8 ests per chain, 19200 per kthread [ 132.276919][ T6142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.114'. [ 132.332997][ T5598] usb usb2-port1: unable to enumerate USB device [ 132.521181][ T5788] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.569776][ T6150] syz.2.118 (6150): /proc/6149/oom_adj is deprecated, please use /proc/6149/oom_score_adj instead. [ 132.678575][ T5788] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 132.679298][ T5788] usb 5-1: config 0 has no interfaces? [ 132.679335][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.696129][ T5788] usb 5-1: config 0 descriptor?? [ 132.917003][ T6143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.116'. [ 132.917032][ T6143] openvswitch: netlink: Flow key attr not present in new flow. [ 132.935459][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.949096][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.956633][ T5788] usb 5-1: USB disconnect, device number 2 [ 135.187833][ T5788] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.342375][ T5788] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 135.343328][ T5788] usb 5-1: config 0 has no interfaces? [ 135.343362][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.390275][ T5788] usb 5-1: config 0 descriptor?? [ 135.827500][ T6206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.139'. [ 135.827542][ T6206] openvswitch: netlink: Flow key attr not present in new flow. [ 135.852402][ T1240] usb 5-1: USB disconnect, device number 3 [ 136.655560][ T6236] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 136.655587][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 136.655603][ T6236] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 136.655617][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 136.655718][ T6236] iwpm_send_hello: Unable to send a nlmsg [ 136.867841][ T5577] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.018815][ T5577] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 137.020674][ T5577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.020706][ T5577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.020745][ T5577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.093372][ T5577] usb 2-1: config 0 descriptor?? [ 138.104767][ T5577] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 138.104810][ T5577] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 138.104839][ T5577] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 138.104867][ T5577] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 138.104894][ T5577] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 138.104921][ T5577] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 138.104948][ T5577] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 138.280289][ T5577] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 138.401630][ T6259] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 138.401898][ T5577] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 138.407031][ T5577] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 138.476209][ T5577] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 138.793459][ T6274] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 138.793480][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 138.793493][ T6274] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 138.793503][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 138.793553][ T6274] iwpm_send_hello: Unable to send a nlmsg [ 139.407882][ T36] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.570503][ T36] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 139.572475][ T36] usb 4-1: config 0 has no interfaces? [ 139.572513][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.631041][ T36] usb 4-1: config 0 descriptor?? [ 139.853164][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.166'. [ 139.853193][ T6284] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.909716][ T9] usb 4-1: USB disconnect, device number 4 [ 140.451045][ T6310] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 140.451073][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 140.451088][ T6310] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 140.451103][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 140.451168][ T6310] iwpm_send_hello: Unable to send a nlmsg [ 140.605484][ T6312] loop5: detected capacity change from 0 to 7 [ 140.648302][ T6312] Dev loop5: unable to read RDB block 7 [ 140.648372][ T6312] loop5: AHDI p1 p2 p3 [ 140.648396][ T6312] loop5: partition table partially beyond EOD, truncated [ 140.651885][ T6312] loop5: p1 start 1818582900 is beyond EOD, truncated [ 140.651914][ T6312] loop5: p3 start 335544320 is beyond EOD, truncated [ 140.821220][ T5577] usb 2-1: USB disconnect, device number 6 [ 140.988268][ T6314] binder: 6313:6314 ioctl 401845e0 2000000002c0 returned -22 [ 141.264885][ T6327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.183'. [ 141.313333][ T6327] ip6gre1: entered promiscuous mode [ 141.313366][ T6327] ip6gre1: entered allmulticast mode [ 141.673228][ T6341] fuse: Bad value for 'fd' [ 141.847875][ T5598] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.019724][ T5598] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 142.020805][ T5598] usb 5-1: config 0 has no interfaces? [ 142.020837][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.638297][ T5598] usb 5-1: config 0 descriptor?? [ 142.855420][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.188'. [ 142.855448][ T6337] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.891362][ T5603] usb 5-1: USB disconnect, device number 4 [ 143.497148][ T6366] loop5: detected capacity change from 0 to 7 [ 143.523337][ T6366] Dev loop5: unable to read RDB block 7 [ 143.523385][ T6366] loop5: unable to read partition table [ 143.524350][ T6366] loop5: partition table beyond EOD, truncated [ 143.525638][ T6366] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.646030][ T6370] fuse: Bad value for 'fd' [ 143.823367][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 143.961973][ T1487] IPVS: starting estimator thread 0... [ 143.962187][ T6371] fuse: Unknown parameter '0x0000000000000004' [ 144.567217][ T6374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.203'. [ 144.614674][ T6381] IPVS: using max 7 ests per chain, 16800 per kthread [ 145.094410][ T37] audit: type=1326 audit(1790726546.471:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 145.097232][ T37] audit: type=1326 audit(1790726546.471:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 145.112711][ T37] audit: type=1326 audit(1790726546.491:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 145.112850][ T37] audit: type=1326 audit(1790726546.491:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 145.139146][ T37] audit: type=1326 audit(1790726546.511:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 145.171388][ T37] audit: type=1326 audit(1790726546.551:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 145.171523][ T37] audit: type=1326 audit(1790726546.551:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0e24edec2 code=0x7ffc0000 [ 145.201499][ T37] audit: type=1326 audit(1790726546.581:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 145.206251][ T37] audit: type=1326 audit(1790726546.581:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff0e24edf57 code=0x7ffc0000 [ 145.207443][ T37] audit: type=1326 audit(1790726546.581:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.0.208" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 145.533573][ T6406] fuse: Bad value for 'fd' [ 145.627900][ T5598] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.736604][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 145.789057][ T5598] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 145.789750][ T5598] usb 3-1: config 0 has no interfaces? [ 145.789787][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.824205][ T5598] usb 3-1: config 0 descriptor?? [ 145.852749][ T1487] IPVS: starting estimator thread 0... [ 145.937933][ T6417] IPVS: using max 7 ests per chain, 16800 per kthread [ 146.087077][ T6411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.215'. [ 146.096830][ T6400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.211'. [ 146.096857][ T6400] openvswitch: netlink: Flow actions attr not present in new flow. [ 146.136031][ T5603] usb 3-1: USB disconnect, device number 10 [ 146.138032][ T1240] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.360253][ T1240] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 146.365733][ T1240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.365766][ T1240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.365802][ T1240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.431227][ T1240] usb 2-1: config 0 descriptor?? [ 146.976417][ T6445] overlayfs: missing 'lowerdir' [ 147.016946][ T1240] cp2112 0003:10C4:EA90.0002: item fetching failed at offset 3/7 [ 147.020887][ T1240] cp2112 0003:10C4:EA90.0002: parse failed [ 147.022944][ T1240] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -22 [ 147.497879][ T5603] usb 2-1: USB disconnect, device number 7 [ 147.684917][ T6465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.958653][ T6471] overlayfs: missing 'lowerdir' [ 148.271816][ T6474] FAULT_INJECTION: forcing a failure. [ 148.271816][ T6474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.271871][ T6474] CPU: 1 UID: 0 PID: 6474 Comm: syz.2.242 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.271904][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.271917][ T6474] Call Trace: [ 148.271926][ T6474] [ 148.271936][ T6474] dump_stack_lvl+0xe8/0x150 [ 148.271988][ T6474] should_fail_ex+0x46b/0x600 [ 148.272025][ T6474] _copy_from_user+0x2d/0xb0 [ 148.272061][ T6474] __x64_sys_sigaltstack+0x123/0x2b0 [ 148.272089][ T6474] ? __se_sys_futex+0x3a8/0x450 [ 148.272115][ T6474] ? __pfx___x64_sys_sigaltstack+0x10/0x10 [ 148.272163][ T6474] do_syscall_64+0x166/0x520 [ 148.272187][ T6474] ? trace_irq_disable+0x3b/0x140 [ 148.272219][ T6474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.272244][ T6474] ? clear_bhb_loop+0x70/0xc0 [ 148.272269][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.272287][ T6474] RIP: 0033:0x7f26cbc4e159 [ 148.272318][ T6474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.272337][ T6474] RSP: 002b:00007f26c9ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 148.272360][ T6474] RAX: ffffffffffffffda RBX: 00007f26cbed5fa0 RCX: 00007f26cbc4e159 [ 148.272376][ T6474] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 148.272391][ T6474] RBP: 00007f26cbce506b R08: 0000000000000000 R09: 0000000000000000 [ 148.272406][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.272419][ T6474] R13: 00007f26cbed6038 R14: 00007f26cbed5fa0 R15: 00007ffecc53f408 [ 148.272454][ T6474] [ 148.668700][ T6481] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 148.668725][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 148.668741][ T6481] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 148.668754][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 148.668819][ T6481] iwpm_send_hello: Unable to send a nlmsg [ 148.668844][ T6486] capability: warning: `syz.4.246' uses deprecated v2 capabilities in a way that may be insecure [ 149.871062][ T6496] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 150.098453][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.248750][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 150.252886][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.252917][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.252953][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.304388][ T9] usb 5-1: config 0 descriptor?? [ 150.359543][ T5603] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.407943][ T6349] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 150.512709][ T5603] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 150.514968][ T5603] usb 4-1: config 0 has no interfaces? [ 150.515005][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.586044][ T6349] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 150.589187][ T6349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.589248][ T6349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.589328][ T6349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.645458][ T5603] usb 4-1: config 0 descriptor?? [ 150.697172][ T6349] usb 3-1: config 0 descriptor?? [ 150.984797][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 150.984922][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 151.052602][ T9] usb 5-1: USB disconnect, device number 5 [ 151.123370][ T6505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.280518][ T5598] usb 4-1: USB disconnect, device number 5 [ 151.393711][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.262'. [ 151.419588][ T6519] l2tp_ppp: sess 2/0: no socket in recv [ 151.456322][ T6349] usbhid 3-1:0.0: can't add hid device: -71 [ 151.456449][ T6349] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 151.515144][ T6349] usb 3-1: USB disconnect, device number 11 [ 151.645449][ T6524] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 151.645465][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 151.645474][ T6524] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 151.645483][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 151.645524][ T6524] iwpm_send_hello: Unable to send a nlmsg [ 151.953332][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.137807][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 152.138773][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 152.140386][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 152.140413][ T9] usb 5-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 152.140449][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 152.140494][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 152.140524][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.145982][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 152.146022][ T9] usb 5-1: Product: syz [ 152.146037][ T9] usb 5-1: Manufacturer: syz [ 152.146052][ T9] usb 5-1: SerialNumber: syz [ 152.250579][ T9] usb 5-1: config 0 descriptor?? [ 152.335543][ T6548] overlayfs: failed to resolve './cgroup': -2 [ 152.529860][ T6553] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 152.530631][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 152.530652][ T6553] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 152.530666][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 152.530797][ T6553] iwpm_send_hello: Unable to send a nlmsg [ 153.365501][ T6574] overlay: Unknown parameter '/' [ 153.498941][ T9] ldusb 5-1:0.0: Interrupt in endpoint not found [ 153.529445][ T9] usb 5-1: USB disconnect, device number 6 [ 153.716976][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 153.727918][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 154.459692][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 154.461860][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 155.429526][ T6642] fuse: Bad value for 'fd' [ 155.690633][ T6653] fuse: Unknown parameter '0x0000000000000003' [ 156.318505][ T6682] fuse: Bad value for 'fd' [ 156.533360][ T6686] fuse: Unknown parameter '0x0000000000000003' [ 156.675952][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 156.675981][ T37] audit: type=1326 audit(1790726558.051:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.4.331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 156.676334][ T37] audit: type=1326 audit(1790726558.051:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.4.331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 156.738237][ T37] audit: type=1326 audit(1790726558.121:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.4.331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 156.738295][ T37] audit: type=1326 audit(1790726558.121:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.4.331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 156.738354][ T37] audit: type=1326 audit(1790726558.121:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.4.331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 156.739997][ T37] audit: type=1326 audit(1790726558.121:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.4.331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 156.740163][ T37] audit: type=1326 audit(1790726558.121:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.4.331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 156.740564][ T37] audit: type=1326 audit(1790726558.121:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.4.331" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 157.070171][ T6707] fuse: fd is not a fuse device [ 159.484409][ T6720] fuse: Unknown parameter '0x0000000000000003' [ 159.585485][ T6724] fuse: fd is not a fuse device [ 159.769131][ T37] audit: type=1326 audit(1790726561.141:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.0.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 159.769190][ T37] audit: type=1326 audit(1790726561.141:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6732 comm="syz.0.345" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 159.844113][ T6736] fuse: fd is not a fuse device [ 161.158094][ T6758] fuse: Bad value for 'fd' [ 161.633603][ T6766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.477239][ T6809] fuse: Bad value for 'fd' [ 163.633579][ T6818] FAULT_INJECTION: forcing a failure. [ 163.633579][ T6818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.633621][ T6818] CPU: 1 UID: 0 PID: 6818 Comm: syz.1.377 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.633649][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.633663][ T6818] Call Trace: [ 163.633675][ T6818] [ 163.633686][ T6818] dump_stack_lvl+0xe8/0x150 [ 163.633729][ T6818] should_fail_ex+0x46b/0x600 [ 163.633769][ T6818] _copy_from_user+0x2d/0xb0 [ 163.633807][ T6818] __x64_sys_sigaltstack+0x123/0x2b0 [ 163.633834][ T6818] ? __se_sys_futex+0x3a8/0x450 [ 163.633859][ T6818] ? __pfx___x64_sys_sigaltstack+0x10/0x10 [ 163.633907][ T6818] do_syscall_64+0x166/0x520 [ 163.633933][ T6818] ? trace_irq_disable+0x3b/0x140 [ 163.633965][ T6818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.633989][ T6818] ? clear_bhb_loop+0x70/0xc0 [ 163.634018][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.634041][ T6818] RIP: 0033:0x7fc5c268e159 [ 163.634062][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.634082][ T6818] RSP: 002b:00007fc5c08e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 163.634107][ T6818] RAX: ffffffffffffffda RBX: 00007fc5c2915fa0 RCX: 00007fc5c268e159 [ 163.634125][ T6818] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 163.634141][ T6818] RBP: 00007fc5c272506b R08: 0000000000000000 R09: 0000000000000000 [ 163.634156][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.634179][ T6818] R13: 00007fc5c2916038 R14: 00007fc5c2915fa0 R15: 00007fff001a84d8 [ 163.634217][ T6818] [ 163.832319][ T6820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.754382][ T6849] fuse: fd is not a fuse device [ 165.173381][ T6868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.656031][ T6884] FAULT_INJECTION: forcing a failure. [ 165.656031][ T6884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.656070][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.1.401 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.656096][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.656110][ T6884] Call Trace: [ 165.656119][ T6884] [ 165.656129][ T6884] dump_stack_lvl+0xe8/0x150 [ 165.656168][ T6884] should_fail_ex+0x46b/0x600 [ 165.656206][ T6884] _copy_from_user+0x2d/0xb0 [ 165.656243][ T6884] ucma_create_id+0xe9/0x370 [ 165.656274][ T6884] ? __pfx_ucma_create_id+0x10/0x10 [ 165.656320][ T6884] ucma_write+0x257/0x2f0 [ 165.656350][ T6884] ? __pfx_ucma_write+0x10/0x10 [ 165.656377][ T6884] ? security_file_permission+0x75/0x260 [ 165.656410][ T6884] ? rw_verify_area+0x209/0x4d0 [ 165.656439][ T6884] ? __pfx_ucma_write+0x10/0x10 [ 165.656465][ T6884] vfs_write+0x29f/0xbb0 [ 165.656501][ T6884] ? __pfx_vfs_write+0x10/0x10 [ 165.656531][ T6884] ? __fget_files+0x2a/0x420 [ 165.656560][ T6884] ? __fget_files+0x2a/0x420 [ 165.656584][ T6884] ? __fget_files+0x3a8/0x420 [ 165.656609][ T6884] ? __fget_files+0x2a/0x420 [ 165.656642][ T6884] ksys_write+0x156/0x270 [ 165.656673][ T6884] ? __pfx_ksys_write+0x10/0x10 [ 165.656710][ T6884] do_syscall_64+0x166/0x520 [ 165.656732][ T6884] ? trace_irq_disable+0x3b/0x140 [ 165.656761][ T6884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.656785][ T6884] ? clear_bhb_loop+0x70/0xc0 [ 165.656811][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.656834][ T6884] RIP: 0033:0x7fc5c268e159 [ 165.656855][ T6884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.656873][ T6884] RSP: 002b:00007fc5c08e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.656907][ T6884] RAX: ffffffffffffffda RBX: 00007fc5c2915fa0 RCX: 00007fc5c268e159 [ 165.656924][ T6884] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 165.656939][ T6884] RBP: 00007fc5c272506b R08: 0000000000000000 R09: 0000000000000000 [ 165.656953][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.656967][ T6884] R13: 00007fc5c2916038 R14: 00007fc5c2915fa0 R15: 00007fff001a84d8 [ 165.657003][ T6884] [ 167.352804][ T6902] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 167.352833][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 167.352850][ T6902] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 167.352865][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 167.352930][ T6902] iwpm_send_hello: Unable to send a nlmsg [ 167.776060][ T6897] syz.0.405 (6897) used greatest stack depth: 15424 bytes left [ 167.814368][ T6918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.508837][ T6939] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 168.508860][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 168.508874][ T6939] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 168.508886][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 168.508946][ T6939] iwpm_send_hello: Unable to send a nlmsg [ 170.321686][ T6967] fuse: Bad value for 'fd' [ 170.556041][ T6972] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 170.556068][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 170.556084][ T6972] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 170.556098][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 170.556165][ T6972] iwpm_send_hello: Unable to send a nlmsg [ 172.444534][ T7000] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 172.444560][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 172.444576][ T7000] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 172.444591][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 172.444658][ T7000] iwpm_send_hello: Unable to send a nlmsg [ 172.809683][ T7007] 9pnet_fd: Insufficient options for proto=fd [ 173.367289][ T7024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.453'. [ 173.759120][ T7031] 9pnet_fd: Insufficient options for proto=fd [ 174.257573][ T7050] sctp: [Deprecated]: syz.3.464 (pid 7050) Use of int in max_burst socket option deprecated. [ 174.257573][ T7050] Use struct sctp_assoc_value instead [ 174.331224][ T7052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.465'. [ 174.727792][ T7067] 9pnet_fd: Insufficient options for proto=fd [ 177.149901][ T7106] 9pnet_fd: Insufficient options for proto=fd [ 177.777805][ T6349] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.958622][ T6349] usb 5-1: Using ep0 maxpacket: 32 [ 177.962246][ T6349] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 177.977033][ T6349] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 177.977158][ T6349] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 177.977272][ T6349] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x1 has invalid maxpacket 28265, setting to 64 [ 177.977367][ T6349] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 177.977413][ T6349] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.055321][ T6349] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 178.055354][ T6349] usb 5-1: Product: syz [ 178.055371][ T6349] usb 5-1: Manufacturer: syz [ 178.055387][ T6349] usb 5-1: SerialNumber: syz [ 178.174675][ T6349] usb 5-1: config 0 descriptor?? [ 178.201047][ T6349] ldusb 5-1:0.0: Interrupt in endpoint not found [ 178.451705][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 178.501340][ T7144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.495'. [ 178.528596][ T7146] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 179.412669][ T9] usb 5-1: USB disconnect, device number 7 [ 180.506954][ T7187] netlink: 'syz.0.509': attribute type 7 has an invalid length. [ 180.506977][ T7187] netlink: 'syz.0.509': attribute type 5 has an invalid length. [ 180.506990][ T7187] netlink: 17 bytes leftover after parsing attributes in process `syz.0.509'. [ 180.991492][ T7196] bridge0: entered allmulticast mode [ 182.015282][ T7222] fuse: fd is not a fuse device [ 184.563445][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 184.563476][ T37] audit: type=1326 audit(1790726841.939:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.0.530" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 184.611410][ T37] audit: type=1326 audit(1790726841.959:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.0.530" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 184.615251][ T37] audit: type=1326 audit(1790726841.989:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.0.530" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 184.615303][ T37] audit: type=1326 audit(1790726841.989:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.0.530" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 184.615349][ T37] audit: type=1326 audit(1790726841.989:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.0.530" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 184.629117][ T37] audit: type=1326 audit(1790726842.009:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.0.530" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 184.633192][ T37] audit: type=1326 audit(1790726842.009:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.0.530" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 184.639723][ T37] audit: type=1326 audit(1790726842.009:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7242 comm="syz.0.530" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e24ee159 code=0x7ffc0000 [ 185.630681][ T7256] fuse: Bad value for 'fd' [ 186.342595][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 186.353430][ T7269] fuse: fd is not a fuse device [ 186.489708][ T7270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.537'. [ 186.745587][ T7288] fuse: Bad value for 'fd' [ 187.225803][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 187.272370][ T7310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.554'. [ 189.424123][ T7385] bridge0: port 1(bridge_slave_0) entered learning state [ 189.472675][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.033167][ T7424] loop5: detected capacity change from 0 to 7 [ 191.137402][ T7424] Dev loop5: unable to read RDB block 7 [ 191.137431][ T7424] loop5: AHDI p1 p2 p3 [ 191.137445][ T7424] loop5: partition table partially beyond EOD, truncated [ 191.137674][ T7424] loop5: p1 start 1818582900 is beyond EOD, truncated [ 191.137696][ T7424] loop5: p3 start 335544320 is beyond EOD, truncated [ 192.806001][ T7468] fuse: fd is not a fuse device [ 193.180265][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 193.248153][ T7484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.625'. [ 193.839858][ T7506] fuse: fd is not a fuse device [ 194.047822][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 194.103919][ T7516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.638'. [ 194.310838][ T7524] fuse: Bad value for 'fd' [ 194.358197][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.358276][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.781351][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 194.893550][ T7548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.653'. [ 195.019062][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.655'. [ 195.626895][ T1240] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.691766][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'. [ 195.767942][ T7586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.668'. [ 195.828723][ T1240] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 195.831353][ T1240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.831388][ T1240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.831417][ T1240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.887690][ T1240] usb 5-1: config 0 descriptor?? [ 196.394540][ T1240] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 196.394582][ T1240] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 196.394612][ T1240] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 196.394639][ T1240] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 196.394667][ T1240] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 196.394695][ T1240] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 196.394722][ T1240] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 196.473002][ T1240] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 196.540630][ T1240] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 197.591403][ T7637] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38 [ 197.858093][ T1240] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 198.478640][ T7661] syzkaller0: entered promiscuous mode [ 198.478670][ T7661] syzkaller0: entered allmulticast mode [ 198.481734][ T7661] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 198.628991][ T7668] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 199.369365][ T5577] usb 5-1: USB disconnect, device number 8 [ 200.583923][ T7722] fuse: Unknown parameter 'use00000000000000000000' [ 201.512483][ T7751] fuse: fd is not a fuse device [ 203.804662][ T7782] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 203.819865][ T7776] pimreg: tun_chr_ioctl cmd 2147767520 [ 204.469925][ T7792] fuse: Unknown parameter 'user_i00000000000000000000' [ 205.167768][ T7810] fuse: Bad value for 'fd' [ 206.211113][ T7843] syzkaller0: entered promiscuous mode [ 206.211149][ T7843] syzkaller0: entered allmulticast mode [ 218.494355][ T7895] IPv6: virt_wifi0: Failed to add prefix route for address fe80::2f; dropping [ 219.180668][ T7930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.799'. [ 219.195540][ T7930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.799'. [ 219.556024][ T7940] ªªªªªª: renamed from vlan0 (while UP) [ 220.149335][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 220.180307][ T7960] process 'syz.1.812' launched './file2' with NULL argv: empty string added [ 220.358231][ T7957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.811'. [ 221.132215][ T7990] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 221.951217][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'. [ 222.011128][ T1163] IPVS: starting estimator thread 0... [ 222.134656][ T8008] IPVS: using max 9 ests per chain, 21600 per kthread [ 222.167715][ T8011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.827'. [ 222.221283][ T8007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.826'. [ 222.260203][ T8015] fuse: Bad value for 'rootmode' [ 224.458474][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 226.065235][ T8075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'. [ 226.163458][ T8078] fuse: Unknown parameter 'use00000000000000000000' [ 227.299936][ T8111] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 227.335020][ T8111] bond1 (unregistering): Released all slaves [ 228.275635][ T8137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 230.966802][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.894'. [ 233.226514][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.908'. [ 233.922235][ T8247] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 233.999362][ T8247] bond1 (unregistering): Released all slaves [ 234.692918][ T8272] sctp: [Deprecated]: syz.2.924 (pid 8272) Use of int in maxseg socket option. [ 234.692918][ T8272] Use struct sctp_assoc_value instead [ 235.271095][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.929'. [ 235.769052][ T8302] sctp: [Deprecated]: syz.2.936 (pid 8302) Use of int in maxseg socket option. [ 235.769052][ T8302] Use struct sctp_assoc_value instead [ 237.411502][ T36] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 237.562333][ T36] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 237.563472][ T36] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 237.563492][ T36] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 237.563506][ T36] usb 5-1: config 220 has no interface number 2 [ 237.563555][ T36] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 237.563575][ T36] usb 5-1: config 220 interface 0 has no altsetting 0 [ 237.563589][ T36] usb 5-1: config 220 interface 76 has no altsetting 0 [ 237.563603][ T36] usb 5-1: config 220 interface 1 has no altsetting 0 [ 237.566183][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.566210][ T36] usb 5-1: Product: syz [ 237.566228][ T36] usb 5-1: Manufacturer: syz [ 237.566245][ T36] usb 5-1: SerialNumber: syz [ 238.016505][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.949'. [ 238.226305][ T36] usb 5-1: selecting invalid altsetting 0 [ 238.262561][ T36] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 238.262603][ T36] uvcvideo 5-1:220.0: No valid video chain found. [ 238.300317][ T36] usb 5-1: selecting invalid altsetting 0 [ 238.300389][ T36] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 238.373282][ T36] usb 5-1: USB disconnect, device number 9 [ 238.886240][ T8373] binder: 8372:8373 ioctl c0306201 0 returned -14 [ 239.680395][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.700456][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.521138][ T8389] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 240.672051][ T8389] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 240.673714][ T8389] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 240.673745][ T8389] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 240.673767][ T8389] usb 5-1: config 220 has no interface number 2 [ 240.673848][ T8389] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 240.673878][ T8389] usb 5-1: config 220 interface 0 has no altsetting 0 [ 240.673898][ T8389] usb 5-1: config 220 interface 76 has no altsetting 0 [ 240.673919][ T8389] usb 5-1: config 220 interface 1 has no altsetting 0 [ 240.677141][ T8389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.677169][ T8389] usb 5-1: Product: syz [ 240.677187][ T8389] usb 5-1: Manufacturer: syz [ 240.677203][ T8389] usb 5-1: SerialNumber: syz [ 240.990399][ T8381] bridge_slave_0: left allmulticast mode [ 240.990433][ T8381] bridge_slave_0: left promiscuous mode [ 241.012156][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.091008][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.970'. [ 241.376137][ T8381] bridge_slave_1: left allmulticast mode [ 241.376173][ T8381] bridge_slave_1: left promiscuous mode [ 241.380635][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.429045][ T8389] usb 5-1: selecting invalid altsetting 0 [ 241.450298][ T8389] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 241.450337][ T8389] uvcvideo 5-1:220.0: No valid video chain found. [ 241.516568][ T8389] usb 5-1: selecting invalid altsetting 0 [ 241.516612][ T8389] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 241.570958][ T8389] usb 5-1: USB disconnect, device number 10 [ 241.768364][ T8381] bond0: (slave bond_slave_0): Releasing backup interface [ 241.851621][ T8381] bond0: (slave bond_slave_1): Releasing backup interface [ 242.025872][ T8381] team0: Port device team_slave_0 removed [ 242.079392][ T8432] FAULT_INJECTION: forcing a failure. [ 242.079392][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 242.079435][ T8432] CPU: 1 UID: 0 PID: 8432 Comm: syz.4.979 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.079475][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.079490][ T8432] Call Trace: [ 242.079498][ T8432] [ 242.079509][ T8432] dump_stack_lvl+0xe8/0x150 [ 242.079551][ T8432] should_fail_ex+0x46b/0x600 [ 242.079592][ T8432] should_failslab+0xa8/0x100 [ 242.079622][ T8432] __kmalloc_noprof+0xfb/0x790 [ 242.079655][ T8432] ? __pfx___futex_wait+0x10/0x10 [ 242.079684][ T8432] ? iovec_from_user+0x87/0x250 [ 242.079736][ T8432] ? iovec_from_user+0x87/0x250 [ 242.079780][ T8432] iovec_from_user+0x87/0x250 [ 242.079821][ T8432] __import_iovec+0x15e/0x7e0 [ 242.079869][ T8432] import_iovec+0x73/0xa0 [ 242.079910][ T8432] vfs_readv+0x1cd/0x850 [ 242.079957][ T8432] ? __pfx_vfs_readv+0x10/0x10 [ 242.080010][ T8432] ? __fget_files+0x2a/0x420 [ 242.080042][ T8432] ? __fget_files+0x3a8/0x420 [ 242.080067][ T8432] ? __fget_files+0x2a/0x420 [ 242.080104][ T8432] __se_sys_preadv2+0x17a/0x2a0 [ 242.080141][ T8432] ? __pfx___se_sys_preadv2+0x10/0x10 [ 242.080180][ T8432] ? __x64_sys_preadv2+0x20/0xc0 [ 242.080226][ T8432] do_syscall_64+0x166/0x520 [ 242.080251][ T8432] ? trace_irq_disable+0x3b/0x140 [ 242.080283][ T8432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.080306][ T8432] ? clear_bhb_loop+0x70/0xc0 [ 242.080334][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.080357][ T8432] RIP: 0033:0x7f7ccb3ee159 [ 242.080379][ T8432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.080398][ T8432] RSP: 002b:00007f7cc9646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 242.080425][ T8432] RAX: ffffffffffffffda RBX: 00007f7ccb675fa0 RCX: 00007f7ccb3ee159 [ 242.080442][ T8432] RDX: 100000000000012a RSI: 00002000000004c0 RDI: 0000000000000003 [ 242.080458][ T8432] RBP: 00007f7ccb48506b R08: 0000000000007fff R09: 0000000000000000 [ 242.080474][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.080488][ T8432] R13: 00007f7ccb676038 R14: 00007f7ccb675fa0 R15: 00007ffc3bbae888 [ 242.080524][ T8432] [ 242.344295][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.980'. [ 242.396563][ T8436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.980'. [ 242.396822][ T8381] team0: Port device team_slave_1 removed [ 242.470513][ T8381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.529435][ T8440] 9pnet_fd: p9_fd_create_unix (8440): problem connecting socket: ./dev: -111 [ 242.704379][ T8381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.793861][ T8381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.820592][ T8381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.893250][ T8381] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.621635][ T8466] futex_wake_op: syz.4.991 tries to shift op by 144; fix this program [ 244.405078][ T8481] fuse: fd is not a fuse device [ 244.857363][ T8502] fuse: fd is not a fuse device [ 245.279286][ T8519] fuse: fd is not a fuse device [ 246.208201][ T8552] fuse: fd is not a fuse device [ 246.626878][ T8567] tmpfs: Unsupported parameter 'huge' [ 248.019712][ T8595] fuse: fd is not a fuse device [ 248.751981][ T5598] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 248.941185][ T5598] usb 5-1: Using ep0 maxpacket: 16 [ 248.949453][ T5598] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 248.975263][ T5598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.975296][ T5598] usb 5-1: Product: syz [ 248.975313][ T5598] usb 5-1: Manufacturer: syz [ 248.975329][ T5598] usb 5-1: SerialNumber: syz [ 249.022676][ T5598] usb 5-1: config 0 descriptor?? [ 249.056175][ T5598] usb 5-1: selecting invalid altsetting 1 [ 249.056199][ T5598] technisat-usb2: could not set alternate setting to 0 [ 249.194178][ T8625] fuse: fd is not a fuse device [ 249.236270][ T5598] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 249.324019][ T5598] usb 5-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 249.324051][ T5598] usb 5-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 249.609609][ T8641] fuse: Bad value for 'fd' [ 250.412511][ T8656] fuse: fd is not a fuse device [ 251.122147][ T8684] fuse: fd is not a fuse device [ 251.387801][ T8691] tun0: tun_chr_ioctl cmd 1074296322 [ 252.163812][ T8712] fuse: fd is not a fuse device [ 252.195514][ T8714] fuse: fd is not a fuse device [ 252.451731][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 252.518124][ T8723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1097'. [ 252.911653][ T8741] fuse: fd is not a fuse device [ 254.263239][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 254.355799][ T8766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1111'. [ 254.518587][ T8783] fuse: fd is not a fuse device [ 254.694556][ T8793] IPVS: Error connecting to the multicast addr [ 255.519890][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 255.550992][ T8812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1132'. [ 255.638741][ T8817] fuse: fd is not a fuse device [ 255.658453][ T8819] fuse: fd is not a fuse device [ 255.785839][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.131551][ T8845] IPVS: Error connecting to the multicast addr [ 256.240906][ T8849] fuse: Bad value for 'fd' [ 256.314643][ T8851] fuse: Bad value for 'fd' [ 256.808059][ T8868] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 256.858696][ T8868] bond1 (unregistering): Released all slaves [ 256.960752][ T8411] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 257.123521][ T8875] fuse: fd is not a fuse device [ 257.129040][ T8411] usb 2-1: Using ep0 maxpacket: 16 [ 257.129934][ T8411] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 257.161258][ T8411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.161290][ T8411] usb 2-1: Product: syz [ 257.161307][ T8411] usb 2-1: Manufacturer: syz [ 257.161322][ T8411] usb 2-1: SerialNumber: syz [ 257.208432][ T8411] usb 2-1: config 0 descriptor?? [ 257.225214][ T8411] usb 2-1: selecting invalid altsetting 1 [ 257.225239][ T8411] technisat-usb2: could not set alternate setting to 0 [ 257.246442][ T8878] fuse: fd is not a fuse device [ 257.423622][ T8411] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 258.299543][ T8908] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 258.466711][ T8914] fuse: fd is not a fuse device [ 258.538236][ T8917] fuse: fd is not a fuse device [ 258.722208][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1174'. [ 258.722773][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1174'. [ 258.848170][ T8927] fuse: fd is not a fuse device [ 259.364284][ T8944] fuse: fd is not a fuse device [ 259.482575][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 259.483012][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 259.574229][ T37] audit: type=1326 audit(1790728708.956:66): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.3.1186" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4232d1e159 code=0x0 [ 260.066645][ T67] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.181320][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1188'. [ 260.928629][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1196'. [ 260.931268][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1196'. [ 261.111423][ T8983] fuse: fd is not a fuse device [ 261.409983][ T8988] bond1: entered allmulticast mode [ 261.410698][ T8988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.038088][ T9014] bond2: entered allmulticast mode [ 262.059611][ T9014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.553500][ T9036] fuse: Bad value for 'fd' [ 263.076549][ T9049] syz.0.1228 uses obsolete (PF_INET,SOCK_PACKET) [ 263.588889][ T9062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1231'. [ 263.667924][ T9068] IPVS: Error connecting to the multicast addr [ 263.858503][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.048895][ T9078] fuse: Bad value for 'fd' [ 264.938285][ T9112] FAULT_INJECTION: forcing a failure. [ 264.938285][ T9112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.938325][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.1.1250 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 264.938351][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.938366][ T9112] Call Trace: [ 264.938374][ T9112] [ 264.938384][ T9112] dump_stack_lvl+0xe8/0x150 [ 264.938426][ T9112] should_fail_ex+0x46b/0x600 [ 264.938466][ T9112] _copy_from_user+0x2d/0xb0 [ 264.938505][ T9112] btf_new_fd+0x2fd/0xc70 [ 264.938551][ T9112] __sys_bpf+0xd2e/0xd90 [ 264.938598][ T9112] ? __pfx___sys_bpf+0x10/0x10 [ 264.938639][ T9112] ? do_futex+0x3e7/0x4e0 [ 264.938696][ T9112] ? rcu_is_watching+0x16/0xb0 [ 264.938741][ T9112] __x64_sys_bpf+0xba/0xd0 [ 264.938778][ T9112] do_syscall_64+0x166/0x520 [ 264.938803][ T9112] ? trace_irq_disable+0x3b/0x140 [ 264.938835][ T9112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.938859][ T9112] ? clear_bhb_loop+0x70/0xc0 [ 264.938888][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.938912][ T9112] RIP: 0033:0x7fc5c268e159 [ 264.938933][ T9112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.938981][ T9112] RSP: 002b:00007fc5c08e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.939007][ T9112] RAX: ffffffffffffffda RBX: 00007fc5c2915fa0 RCX: 00007fc5c268e159 [ 264.939025][ T9112] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 264.939041][ T9112] RBP: 00007fc5c272506b R08: 0000000000000000 R09: 0000000000000000 [ 264.939056][ T9112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.939071][ T9112] R13: 00007fc5c2916038 R14: 00007fc5c2915fa0 R15: 00007fff001a84d8 [ 264.939109][ T9112] [ 265.561176][ T9127] fuse: Bad value for 'fd' [ 267.304115][ T9159] fuse: Bad value for 'fd' [ 268.635395][ T9198] fuse: fd is not a fuse device [ 268.693232][ T9200] fuse: Bad value for 'fd' [ 268.975914][ T9206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1292'. [ 269.007169][ T9210] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 269.436141][ T9224] fuse: Bad value for 'fd' [ 269.876852][ T9247] fuse: Bad value for 'fd' [ 269.956389][ T9250] ÿ: renamed from bond_slave_0 (while UP) [ 270.170654][ T9257] fuse: Bad value for 'fd' [ 270.235083][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1313'. [ 270.367323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 270.387314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 270.397312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 270.407310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 270.417310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 270.427309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 270.437321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 270.447322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 270.457309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 271.713569][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 274.289539][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 274.415405][ T9290] bond1: option resend_igmp: invalid value (32768) [ 274.415432][ T9290] bond1: option resend_igmp: allowed values 0 - 255 [ 274.571166][ T9290] bond1 (unregistering): Released all slaves [ 275.365147][ T9312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1335'. [ 279.477868][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 279.571063][ T9376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1357'. [ 282.616111][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 282.742885][ T9417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1373'. [ 283.944780][ T8908] IPVS: ip_vs_send_async error -101 [ 286.495518][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 289.509767][ T9574] fuse: Bad value for 'fd' [ 293.160260][ T9606] fuse: Bad value for 'fd' [ 303.222106][ T9667] mmap: syz.1.1472 (9667) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 308.311326][ T9710] Bluetooth: MGMT ver 1.23 [ 311.902171][ T9755] warning: `syz.3.1515' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 312.125717][ T8411] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 312.178852][ T8411] usb 2-1: USB disconnect, device number 8 [ 312.285550][ T5598] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 312.313277][ T5598] usb 5-1: USB disconnect, device number 11 [ 312.622431][ T8411] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 312.820239][ T8411] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 312.852347][ T5598] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 312.867586][ T8411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.867677][ T8411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.867782][ T8411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.930555][ T8411] usb 2-1: config 0 descriptor?? [ 313.052321][ T5598] usb 5-1: Using ep0 maxpacket: 16 [ 313.053904][ T5598] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 313.117204][ T5598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.117226][ T5598] usb 5-1: Product: syz [ 313.117237][ T5598] usb 5-1: Manufacturer: syz [ 313.117248][ T5598] usb 5-1: SerialNumber: syz [ 314.634436][ T8411] usbhid 2-1:0.0: can't add hid device: -71 [ 314.634570][ T8411] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 315.528086][ T5598] usb 5-1: config 0 descriptor?? [ 315.696910][ T5598] usb 5-1: can't set config #0, error -71 [ 315.697227][ T8411] usb 2-1: USB disconnect, device number 9 [ 315.773094][ T5598] usb 5-1: USB disconnect, device number 12 [ 315.932009][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.314297][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.501885][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1537'. [ 323.383705][ T9822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1537'. [ 326.430196][ T9860] fuse: fd is not a fuse device [ 326.896437][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 326.987654][ T9866] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1552'. [ 327.049176][ T9868] fuse: fd is not a fuse device [ 327.586438][ T9881] cgroup: Unknown subsys name 'cpuset' [ 327.675627][ T37] audit: type=1326 audit(1790728777.064:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 327.676305][ T37] audit: type=1326 audit(1790728777.064:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 327.740781][ T37] audit: type=1326 audit(1790728777.124:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 327.740834][ T37] audit: type=1326 audit(1790728777.124:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 327.805824][ T37] audit: type=1326 audit(1790728777.124:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 327.830369][ T37] audit: type=1326 audit(1790728777.214:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26cbc0e98e code=0x7ffc0000 [ 327.846202][ T37] audit: type=1326 audit(1790728777.224:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26cbc0e98e code=0x7ffc0000 [ 327.853915][ T37] audit: type=1326 audit(1790728777.234:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26cbc0e98e code=0x7ffc0000 [ 327.858353][ T37] audit: type=1326 audit(1790728777.244:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 327.858476][ T37] audit: type=1326 audit(1790728777.244:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.2.1558" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 328.560812][ T9900] fuse: fd is not a fuse device [ 337.495313][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 344.208206][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 344.208228][ T37] audit: type=1326 audit(1790728793.596:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10054 comm="syz.2.1624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 344.208294][ T37] audit: type=1326 audit(1790728793.596:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10054 comm="syz.2.1624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 344.284379][ T37] audit: type=1326 audit(1790728793.676:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10054 comm="syz.2.1624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 344.284422][ T37] audit: type=1326 audit(1790728793.676:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10054 comm="syz.2.1624" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f26cbc4e159 code=0x7ffc0000 [ 347.899759][T10092] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 347.918091][ T8385] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 348.078778][ T8385] usb 5-1: Using ep0 maxpacket: 16 [ 348.081272][ T8385] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 348.082476][ T8385] usb 5-1: config 0 has no interfaces? [ 348.082512][ T8385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.138099][ T8385] usb 5-1: config 0 descriptor?? [ 348.176241][T10096] netlink: 'syz.1.1640': attribute type 7 has an invalid length. [ 348.176281][T10096] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1640'. [ 348.176416][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 350.411198][T10103] fuse: fd is not a fuse device [ 350.703229][ T8411] usb 5-1: USB disconnect, device number 13 [ 355.775262][ T7146] IPVS: ip_vs_send_async error -101 [ 359.740066][T10194] syz.2.1671 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 366.400953][T10233] fuse: fd is not a fuse device [ 366.810668][T10237] 9p: Could not find request transport: fd0x0000000000000004 [ 368.348679][ T8389] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 368.695983][ T8389] usb 5-1: Using ep0 maxpacket: 32 [ 368.697002][ T8389] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 368.698798][ T8389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12592, setting to 1024 [ 368.698832][ T8389] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 368.708816][ T8389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.708872][ T8389] usb 5-1: Product: syz [ 368.708929][ T8389] usb 5-1: Manufacturer: syz [ 368.708972][ T8389] usb 5-1: SerialNumber: syz [ 369.797499][ T8389] usb 5-1: config 0 descriptor?? [ 370.616034][ T8389] usb 5-1: can't set config #0, error -71 [ 370.638229][ T8389] usb 5-1: USB disconnect, device number 14 [ 379.760000][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.771715][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.390271][T10462] fuse: fd is not a fuse device [ 392.189219][T10485] fuse: fd is not a fuse device [ 394.389443][ T37] audit: type=1800 audit(1790728843.752:87): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1778" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 400.094065][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 400.820159][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1820'. [ 401.406071][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.590350][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.659481][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.232647][ T1517] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.232704][ T1517] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.232746][ T1517] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.232797][ T1517] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.730430][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1856'. [ 404.848429][T10735] fuse: fd is not a fuse device [ 405.219425][T10753] fuse: fd is not a fuse device [ 406.377107][T10768] fuse: Unknown parameter 'grou00000000000000000000' [ 406.726196][T10782] fuse: fd is not a fuse device [ 406.911899][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1881'. [ 408.394906][T10822] fuse: fd is not a fuse device [ 408.776144][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1896'. [ 411.693724][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 414.873431][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 417.098552][T10978] GUP no longer grows the stack in syz.1.1943 (10978): 200000155000-200000200000 (200000154000) [ 417.098610][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.1.1943 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 417.098638][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.098663][T10978] Call Trace: [ 417.098673][T10978] [ 417.098684][T10978] dump_stack_lvl+0xe8/0x150 [ 417.098737][T10978] __get_user_pages+0x22b5/0x2650 [ 417.098807][T10978] get_user_pages_remote+0x307/0xb10 [ 417.098838][T10978] ? __pfx_mtree_load+0x10/0x10 [ 417.098879][T10978] ? __pfx_get_user_pages_remote+0x10/0x10 [ 417.098909][T10978] ? __access_remote_vm+0x5f2/0x6f0 [ 417.098959][T10978] ? __access_remote_vm+0x42c/0x6f0 [ 417.098997][T10978] __access_remote_vm+0x222/0x6f0 [ 417.099046][T10978] ? __pfx___access_remote_vm+0x10/0x10 [ 417.099092][T10978] proc_pid_cmdline_read+0x46e/0x900 [ 417.099120][T10978] ? __asan_memset+0x22/0x50 [ 417.099160][T10978] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 417.099192][T10978] ? rw_verify_area+0x250/0x4d0 [ 417.099227][T10978] vfs_readv+0x588/0x850 [ 417.099265][T10978] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 417.099299][T10978] ? __pfx_vfs_readv+0x10/0x10 [ 417.099352][T10978] ? __fget_files+0x2a/0x420 [ 417.099384][T10978] ? __fget_files+0x3a8/0x420 [ 417.099409][T10978] ? __fget_files+0x2a/0x420 [ 417.099446][T10978] __x64_sys_preadv+0x19f/0x2c0 [ 417.099482][T10978] ? __pfx___x64_sys_preadv+0x10/0x10 [ 417.099529][T10978] do_syscall_64+0x166/0x520 [ 417.099553][T10978] ? trace_irq_disable+0x3b/0x140 [ 417.099585][T10978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.099610][T10978] ? clear_bhb_loop+0x70/0xc0 [ 417.099639][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.099670][T10978] RIP: 0033:0x7fc5c268e159 [ 417.099701][T10978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.099722][T10978] RSP: 002b:00007fc5c08c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 417.099748][T10978] RAX: ffffffffffffffda RBX: 00007fc5c2916090 RCX: 00007fc5c268e159 [ 417.099766][T10978] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000005 [ 417.099782][T10978] RBP: 00007fc5c272506b R08: 0000000000006a76 R09: 0000000000000000 [ 417.099798][T10978] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 417.099813][T10978] R13: 00007fc5c2916128 R14: 00007fc5c2916090 R15: 00007fff001a84d8 [ 417.099850][T10978] [ 417.653455][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1944'. [ 419.360210][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 425.136716][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1972'. [ 425.246108][T11068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1972'. [ 425.858492][T11077] sock: sock_set_timeout: `syz.2.1976' (pid 11077) tries to set negative timeout [ 431.079799][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'. [ 432.818262][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 434.752607][T11248] syz_tun: entered allmulticast mode [ 434.777946][T11247] syz_tun: left allmulticast mode [ 436.286750][ T37] audit: type=1326 audit(1790729653.678:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11263 comm="syz.1.2047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c268e159 code=0x7ffc0000 [ 436.286998][ T37] audit: type=1326 audit(1790729653.678:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11263 comm="syz.1.2047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c268e159 code=0x7ffc0000 [ 436.287245][ T37] audit: type=1326 audit(1790729653.678:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11263 comm="syz.1.2047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc5c268e159 code=0x7ffc0000 [ 436.289176][ T37] audit: type=1326 audit(1790729653.678:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11263 comm="syz.1.2047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c268e159 code=0x7ffc0000 [ 436.289430][ T37] audit: type=1326 audit(1790729653.678:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11263 comm="syz.1.2047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c268e159 code=0x7ffc0000 [ 436.289670][ T37] audit: type=1326 audit(1790729653.688:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11263 comm="syz.1.2047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc5c268e159 code=0x7ffc0000 [ 436.290082][ T37] audit: type=1326 audit(1790729653.688:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11263 comm="syz.1.2047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c268e159 code=0x7ffc0000 [ 436.290299][ T37] audit: type=1326 audit(1790729653.688:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11263 comm="syz.1.2047" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c268e159 code=0x7ffc0000 [ 437.034549][T11272] syz_tun: entered allmulticast mode [ 437.069402][T11271] syz_tun: left allmulticast mode [ 440.091166][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.675257][T11356] FAULT_INJECTION: forcing a failure. [ 440.675257][T11356] name failslab, interval 1, probability 0, space 0, times 0 [ 440.675299][T11356] CPU: 0 UID: 0 PID: 11356 Comm: syz.1.2082 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.675327][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.675342][T11356] Call Trace: [ 440.675351][T11356] [ 440.675361][T11356] dump_stack_lvl+0xe8/0x150 [ 440.675404][T11356] should_fail_ex+0x46b/0x600 [ 440.675441][T11356] ? __d_alloc+0x37/0x6f0 [ 440.675471][T11356] should_failslab+0xa8/0x100 [ 440.675497][T11356] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 440.675533][T11356] ? __d_alloc+0x37/0x6f0 [ 440.675569][T11356] __d_alloc+0x37/0x6f0 [ 440.675595][T11356] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 440.675622][T11356] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 440.675659][T11356] d_alloc_pseudo+0x21/0xc0 [ 440.675690][T11356] alloc_path_pseudo+0x107/0x220 [ 440.675719][T11356] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 440.675754][T11356] alloc_file_pseudo+0xa8/0x1e0 [ 440.675787][T11356] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 440.675820][T11356] anon_inode_getfd+0xc8/0x200 [ 440.675849][T11356] btf_new_fd+0x98e/0xc70 [ 440.675898][T11356] __sys_bpf+0xd2e/0xd90 [ 440.675944][T11356] ? __pfx___sys_bpf+0x10/0x10 [ 440.675976][T11356] ? reacquire_held_locks+0x117/0x1a0 [ 440.676018][T11356] ? do_futex+0x3e7/0x4e0 [ 440.676074][T11356] ? rcu_is_watching+0x16/0xb0 [ 440.676119][T11356] __x64_sys_bpf+0xba/0xd0 [ 440.676154][T11356] do_syscall_64+0x166/0x520 [ 440.676178][T11356] ? trace_irq_disable+0x3b/0x140 [ 440.676210][T11356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.676234][T11356] ? clear_bhb_loop+0x70/0xc0 [ 440.676263][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.676287][T11356] RIP: 0033:0x7fc5c268e159 [ 440.676310][T11356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.676330][T11356] RSP: 002b:00007fc5c08e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.676355][T11356] RAX: ffffffffffffffda RBX: 00007fc5c2915fa0 RCX: 00007fc5c268e159 [ 440.676373][T11356] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 440.676389][T11356] RBP: 00007fc5c272506b R08: 0000000000000000 R09: 0000000000000000 [ 440.676404][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.676419][T11356] R13: 00007fc5c2916038 R14: 00007fc5c2915fa0 R15: 00007fff001a84d8 [ 440.676455][T11356] [ 442.422277][T11418] FAULT_INJECTION: forcing a failure. [ 442.422277][T11418] name failslab, interval 1, probability 0, space 0, times 0 [ 442.422319][T11418] CPU: 1 UID: 0 PID: 11418 Comm: syz.4.2106 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 442.422347][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.422361][T11418] Call Trace: [ 442.422371][T11418] [ 442.422382][T11418] dump_stack_lvl+0xe8/0x150 [ 442.422424][T11418] should_fail_ex+0x46b/0x600 [ 442.422465][T11418] should_failslab+0xa8/0x100 [ 442.422493][T11418] ? do_getname+0x2e/0x250 [ 442.422517][T11418] kmem_cache_alloc_noprof+0x9e/0x690 [ 442.422552][T11418] ? do_getname+0x2e/0x250 [ 442.422582][T11418] do_getname+0x2e/0x250 [ 442.422603][T11418] ? __se_sys_mkdirat+0x18/0x150 [ 442.422641][T11418] __se_sys_mkdirat+0x24/0x150 [ 442.422689][T11418] do_syscall_64+0x166/0x520 [ 442.422715][T11418] ? trace_irq_disable+0x3b/0x140 [ 442.422747][T11418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.422772][T11418] ? clear_bhb_loop+0x70/0xc0 [ 442.422801][T11418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.422825][T11418] RIP: 0033:0x7f7ccb3ee159 [ 442.422848][T11418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.422867][T11418] RSP: 002b:00007f7cc9646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 442.422893][T11418] RAX: ffffffffffffffda RBX: 00007f7ccb675fa0 RCX: 00007f7ccb3ee159 [ 442.422910][T11418] RDX: 00000000000001ed RSI: 0000000000000000 RDI: ffffffffffffff9c [ 442.422926][T11418] RBP: 00007f7ccb48506b R08: 0000000000000000 R09: 0000000000000000 [ 442.422941][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.422955][T11418] R13: 00007f7ccb676038 R14: 00007f7ccb675fa0 R15: 00007ffc3bbae888 [ 442.422992][T11418] [ 448.582832][T11496] atomic_op ffff888039dab260 conn xmit_atomic 0000000000000000 [ 462.278791][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2169'. [ 462.338658][T11607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2169'. [ 473.758353][ T37] audit: type=1326 audit(1790730203.171:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11744 comm="syz.1.2225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5c268e159 code=0x0 [ 474.185638][T11773] netlink: 'syz.0.2235': attribute type 1 has an invalid length. [ 474.272748][T11773] bond1: entered promiscuous mode [ 474.280008][T11773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.350280][T11775] ipvlan0: entered allmulticast mode [ 474.350369][T11775] bond1: entered allmulticast mode [ 474.665012][T11773] bond1: (slave bridge1): making interface the new active one [ 474.665040][T11773] bridge1: entered promiscuous mode [ 474.665288][T11773] bridge1: entered allmulticast mode [ 474.818583][T11773] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 475.742616][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2252'. [ 476.021008][T11824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2252'. [ 476.332166][ T37] audit: type=1326 audit(1790730973.740:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11832 comm="syz.4.2258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 476.365109][ T37] audit: type=1326 audit(1790730973.740:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11832 comm="syz.4.2258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 476.366353][ T37] audit: type=1326 audit(1790730973.780:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11832 comm="syz.4.2258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 477.007251][T11855] bridge0: entered allmulticast mode [ 477.056768][ T37] audit: type=1326 audit(1790730974.470:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11832 comm="syz.4.2258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 477.057057][ T37] audit: type=1326 audit(1790730974.470:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11832 comm="syz.4.2258" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb3ee159 code=0x7ffc0000 [ 477.079234][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'. [ 477.141035][T11857] bridge_slave_1: left allmulticast mode [ 477.141076][T11857] bridge_slave_1: left promiscuous mode [ 477.141601][T11857] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.380468][T11857] bridge_slave_0: left allmulticast mode [ 477.380510][T11857] bridge_slave_0: left promiscuous mode [ 477.380820][T11857] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.425003][T11863] netlink: 'syz.4.2269': attribute type 7 has an invalid length. [ 477.425024][T11863] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2269'. [ 477.425159][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2269'. [ 478.090386][T11857] bridge0 (unregistering): left allmulticast mode [ 478.790796][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2274'. [ 478.843207][T11879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2274'. [ 479.762620][T11897] netlink: 'syz.4.2281': attribute type 7 has an invalid length. [ 479.762646][T11897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2281'. [ 479.762685][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 482.003414][T11924] netlink: 'syz.3.2293': attribute type 7 has an invalid length. [ 482.003436][T11924] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2293'. [ 482.003472][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 482.008824][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 483.495684][T11929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2292'. [ 484.107608][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2299'. [ 484.107635][T11942] netlink: 416 bytes leftover after parsing attributes in process `syz.0.2299'. [ 484.107653][T11942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2299'. [ 486.245555][T11946] tipc: Started in network mode [ 486.245613][T11946] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 486.267449][T11946] tipc: Enabling of bearer rejected, failed to enable media [ 486.652871][T11982] FAULT_INJECTION: forcing a failure. [ 486.652871][T11982] name failslab, interval 1, probability 0, space 0, times 0 [ 486.652900][T11982] CPU: 1 UID: 0 PID: 11982 Comm: syz.1.2315 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 486.652919][T11982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.652930][T11982] Call Trace: [ 486.652936][T11982] [ 486.652943][T11982] dump_stack_lvl+0xe8/0x150 [ 486.652974][T11982] should_fail_ex+0x46b/0x600 [ 486.653002][T11982] should_failslab+0xa8/0x100 [ 486.653020][T11982] __kmalloc_cache_noprof+0xa1/0x680 [ 486.653046][T11982] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 486.653063][T11982] ? io_uring_alloc_task_context+0xa2/0x6c0 [ 486.653086][T11982] io_uring_alloc_task_context+0xa2/0x6c0 [ 486.653103][T11982] ? __asan_memcpy+0x40/0x70 [ 486.653124][T11982] ? errseq_sample+0x40/0x70 [ 486.653150][T11982] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 486.653172][T11982] ? alloc_file_pseudo+0x156/0x1e0 [ 486.653192][T11982] __io_uring_add_tctx_node+0x48d/0x630 [ 486.653224][T11982] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 486.653253][T11982] ? __anon_inode_getfile+0x16c/0x210 [ 486.653287][T11982] io_uring_create+0x596/0x990 [ 486.653313][T11982] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 486.653333][T11982] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 486.653362][T11982] ? rcu_is_watching+0x16/0xb0 [ 486.653399][T11982] do_syscall_64+0x166/0x520 [ 486.653417][T11982] ? trace_irq_disable+0x3b/0x140 [ 486.653440][T11982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.653457][T11982] ? clear_bhb_loop+0x70/0xc0 [ 486.653477][T11982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.653494][T11982] RIP: 0033:0x7fc5c268e159 [ 486.653510][T11982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.653525][T11982] RSP: 002b:00007fc5c08e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 486.653543][T11982] RAX: ffffffffffffffda RBX: 00007fc5c2915fa0 RCX: 00007fc5c268e159 [ 486.653556][T11982] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 486.653567][T11982] RBP: 00007fc5c272506b R08: 0000000000000000 R09: 0000000000000000 [ 486.653577][T11982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.653587][T11982] R13: 00007fc5c2916038 R14: 00007fc5c2915fa0 R15: 00007fff001a84d8 [ 486.653612][T11982] [ 487.001064][T11988] tun0: tun_chr_ioctl cmd 2147767517 [ 487.910827][T12020] netlink: 'syz.1.2331': attribute type 7 has an invalid length. [ 487.910853][T12020] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2331'. [ 487.910893][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 491.894459][T12060] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2345'. [ 496.221605][T12122] FAULT_INJECTION: forcing a failure. [ 496.221605][T12122] name failslab, interval 1, probability 0, space 0, times 0 [ 496.221646][T12122] CPU: 0 UID: 0 PID: 12122 Comm: syz.1.2368 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 496.221674][T12122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.221689][T12122] Call Trace: [ 496.221699][T12122] [ 496.221709][T12122] dump_stack_lvl+0xe8/0x150 [ 496.221759][T12122] should_fail_ex+0x46b/0x600 [ 496.221800][T12122] should_failslab+0xa8/0x100 [ 496.221827][T12122] __kmalloc_noprof+0xfb/0x790 [ 496.221861][T12122] ? copy_splice_read+0x16f/0xab0 [ 496.221900][T12122] ? copy_splice_read+0x16f/0xab0 [ 496.221935][T12122] copy_splice_read+0x16f/0xab0 [ 496.221963][T12122] ? __pfx_pipe_to_null+0x10/0x10 [ 496.221999][T12122] ? pipe_unlock+0x56/0x80 [ 496.222030][T12122] ? splice_from_pipe+0x124/0x190 [ 496.222058][T12122] ? __pfx_pipe_to_null+0x10/0x10 [ 496.222091][T12122] ? __pfx_copy_splice_read+0x10/0x10 [ 496.222125][T12122] ? register_lock_class+0x31/0x2e0 [ 496.222161][T12122] ? file_end_write+0xdb/0x220 [ 496.222190][T12122] ? direct_splice_actor+0x10f/0x160 [ 496.222222][T12122] ? __pfx_copy_splice_read+0x10/0x10 [ 496.222249][T12122] splice_direct_to_actor+0x496/0xcc0 [ 496.222297][T12122] ? __pfx_direct_splice_actor+0x10/0x10 [ 496.222326][T12122] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 496.222367][T12122] do_splice_direct+0x19b/0x2a0 [ 496.222404][T12122] ? __pfx_do_splice_direct+0x10/0x10 [ 496.222434][T12122] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 496.222467][T12122] ? bpf_lsm_file_permission+0x9/0x20 [ 496.222494][T12122] ? security_file_permission+0x75/0x260 [ 496.222527][T12122] ? rw_verify_area+0x209/0x4d0 [ 496.222560][T12122] do_sendfile+0x540/0x7e0 [ 496.222606][T12122] ? __pfx_do_sendfile+0x10/0x10 [ 496.222651][T12122] ? __se_sys_futex+0x3a8/0x450 [ 496.222699][T12122] __se_sys_sendfile64+0x144/0x1a0 [ 496.222747][T12122] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 496.222798][T12122] do_syscall_64+0x166/0x520 [ 496.222823][T12122] ? trace_irq_disable+0x3b/0x140 [ 496.222855][T12122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.222880][T12122] ? clear_bhb_loop+0x70/0xc0 [ 496.222910][T12122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.222935][T12122] RIP: 0033:0x7fc5c268e159 [ 496.222957][T12122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.222990][T12122] RSP: 002b:00007fc5c08e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 496.223015][T12122] RAX: ffffffffffffffda RBX: 00007fc5c2915fa0 RCX: 00007fc5c268e159 [ 496.223033][T12122] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 496.223047][T12122] RBP: 00007fc5c272506b R08: 0000000000000000 R09: 0000000000000000 [ 496.223062][T12122] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.223078][T12122] R13: 00007fc5c2916038 R14: 00007fc5c2915fa0 R15: 00007fff001a84d8 [ 496.223113][T12122] [ 496.986195][T12135] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.2373/12135 [ 496.986218][T12135] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 496.986253][T12135] CPU: 1 UID: 0 PID: 12135 Comm: syz.2.2373 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 496.986271][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.986282][T12135] Call Trace: [ 496.986289][T12135] [ 496.986296][T12135] dump_stack_lvl+0xe8/0x150 [ 496.986323][T12135] check_preemption_disabled+0xcd/0xd0 [ 496.986346][T12135] bpf_mem_cache_free_rcu+0x48/0xc0 [ 496.986374][T12135] rhtab_delete_elem+0x1826/0x1b00 [ 496.986406][T12135] ? rhtab_delete_elem+0x15f/0x1b00 [ 496.986431][T12135] ? check_and_init_map_value+0x57/0x410 [ 496.986452][T12135] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 496.986492][T12135] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 496.986519][T12135] bpf_map_do_batch+0x451/0x640 [ 496.986540][T12135] __sys_bpf+0x906/0xd90 [ 496.986589][T12135] ? userfaultfd_unmap_complete+0x260/0x310 [ 496.986609][T12135] ? __pfx___sys_bpf+0x10/0x10 [ 496.986632][T12135] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 496.986655][T12135] ? do_futex+0x458/0x4e0 [ 496.986733][T12135] ? rcu_is_watching+0x16/0xb0 [ 496.986773][T12135] __x64_sys_bpf+0xba/0xd0 [ 496.986797][T12135] do_syscall_64+0x166/0x520 [ 496.986815][T12135] ? trace_irq_disable+0x3b/0x140 [ 496.986877][T12135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.986905][T12135] ? clear_bhb_loop+0x70/0xc0 [ 496.986926][T12135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.986943][T12135] RIP: 0033:0x7f26cbc4e159 [ 496.986958][T12135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.986973][T12135] RSP: 002b:00007f26c9ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.986991][T12135] RAX: ffffffffffffffda RBX: 00007f26cbed5fa0 RCX: 00007f26cbc4e159 [ 496.987003][T12135] RDX: 0000000000000038 RSI: 00002000000018c0 RDI: 0000000000000019 [ 496.987020][T12135] RBP: 00007f26cbce506b R08: 0000000000000000 R09: 0000000000000000 [ 496.987031][T12135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.987041][T12135] R13: 00007f26cbed6038 R14: 00007f26cbed5fa0 R15: 00007ffecc53f408 [ 496.987067][T12135] [ 501.512905][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.629499][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!