last executing test programs: 5m18.354636035s ago: executing program 0 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x38}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8805}, 0x4004052) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x11, r0, 0x4c7fe000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount$bind(&(0x7f0000000140)='./debug/tracing/file0\x00', &(0x7f00000004c0)='./debug\x00', &(0x7f0000000500), 0x4000, 0x0) syz_emit_ethernet(0x85, &(0x7f0000000180)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x4f, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x1, "0200000004000001260004"}, {0x1, 0x6, "f93a3b499e8f86a736c45e9c9f72cc5dcfacd0b8c7a11d75a8be7585e10245a415f888b25b888ba1b1f3c202976c"}]}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcc, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) stat(&(0x7f0000000340)='./debug/tracing\x00', &(0x7f0000000380)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0x1}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xa0, 0x5, 0x2, 0x5}]}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) 5m17.834668957s ago: executing program 0 (id=165): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000440)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0x20b, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) close_range(r3, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m16.385241874s ago: executing program 0 (id=166): socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xd, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x50) 5m15.867946918s ago: executing program 0 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) open$dir(0x0, 0x210040, 0x8e) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 5m13.511760799s ago: executing program 0 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="1103000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xba01}, 0x8810) 5m10.256082817s ago: executing program 0 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x30, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "640080", 0x0, 0x2b, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) 4m53.654504015s ago: executing program 32 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x30, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "640080", 0x0, 0x2b, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) 2m2.173312588s ago: executing program 3 (id=558): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x3b90, &(0x7f0000000140)="2000000000000000efbeadde03000000050000000000000018") 2m1.986157353s ago: executing program 3 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 2m0.085798773s ago: executing program 3 (id=564): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100000) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 1m55.916050521s ago: executing program 3 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 1m54.89634867s ago: executing program 4 (id=574): sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x317, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m54.369276982s ago: executing program 1 (id=576): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x100000, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x502e}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m53.165480152s ago: executing program 2 (id=577): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 1m52.510588893s ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xe20, @local}}}, &(0x7f0000000040)=0x84) 1m52.308103571s ago: executing program 2 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) chdir(&(0x7f0000000000)='./bus\x00') 1m51.581050454s ago: executing program 4 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) epoll_create1(0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[], 0x239) 1m51.04104409s ago: executing program 2 (id=581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2d}, {0x6, 0x0, 0x0, 0x5a}]}) 1m49.307132918s ago: executing program 4 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m49.206398606s ago: executing program 1 (id=583): io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0xf93a, 0x10000, 0x11, 0x27}) 1m49.014768467s ago: executing program 2 (id=584): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) 1m48.093250856s ago: executing program 1 (id=585): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xca18}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x812, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c0102000000040200020401"], 0x28}, 0xc0) 1m47.75366925s ago: executing program 4 (id=586): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, 0x0) 1m47.747204359s ago: executing program 2 (id=587): sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x317, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m47.513077957s ago: executing program 1 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) 1m45.928827667s ago: executing program 4 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xe20, @local}}}, &(0x7f0000000040)=0x84) 1m45.881843229s ago: executing program 1 (id=590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x6, 0x9, 0x40, 0x0, 0x7, 0x9, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.678940269s ago: executing program 3 (id=591): r0 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0xf93a, 0x10000, 0x11, 0x27}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) 1m45.563779062s ago: executing program 2 (id=592): symlinkat(0x0, 0xffffffffffffff9c, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) 1m45.229321478s ago: executing program 1 (id=593): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 1m45.082335303s ago: executing program 3 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000440)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000100)=0x20b, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) close_range(r4, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 54.605017762s ago: executing program 33 (id=593): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 0s ago: executing program 34 (id=592): symlinkat(0x0, 0xffffffffffffff9c, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 83.135652][ T5578] cgroup: Unknown subsys name 'net' [ 83.379263][ T5578] cgroup: Unknown subsys name 'cpuset' [ 83.431691][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.425486][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.038987][ T3550] cfg80211: failed to load regulatory.db [ 88.044451][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.054506][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.066068][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.067118][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.073058][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.082819][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.084162][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.088531][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.089247][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.102200][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.133802][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.134787][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.160366][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.178931][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.179730][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.186803][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.189828][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.191722][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.195305][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.203043][ T4905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.211429][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.216750][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.229830][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.311310][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.318684][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.152746][ T59] Bluetooth: hci3: command tx timeout [ 90.232718][ T59] Bluetooth: hci2: command tx timeout [ 90.321594][ T59] Bluetooth: hci0: command tx timeout [ 90.401042][ T59] Bluetooth: hci1: command tx timeout [ 90.401063][ T5606] Bluetooth: hci4: command tx timeout [ 90.834395][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.835234][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.835454][ T5593] bridge_slave_0: entered allmulticast mode [ 90.838226][ T5593] bridge_slave_0: entered promiscuous mode [ 90.897014][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.897213][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.897397][ T5593] bridge_slave_1: entered allmulticast mode [ 90.903782][ T5593] bridge_slave_1: entered promiscuous mode [ 90.977100][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.977403][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.977572][ T5591] bridge_slave_0: entered allmulticast mode [ 90.980253][ T5591] bridge_slave_0: entered promiscuous mode [ 91.008791][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.009028][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.009583][ T5592] bridge_slave_0: entered allmulticast mode [ 91.013248][ T5592] bridge_slave_0: entered promiscuous mode [ 91.053318][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.053566][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.053764][ T5591] bridge_slave_1: entered allmulticast mode [ 91.056418][ T5591] bridge_slave_1: entered promiscuous mode [ 91.082257][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.083931][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.084456][ T5592] bridge_slave_1: entered allmulticast mode [ 91.093931][ T5592] bridge_slave_1: entered promiscuous mode [ 91.106450][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.146225][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.146451][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.146616][ T5596] bridge_slave_0: entered allmulticast mode [ 91.149434][ T5596] bridge_slave_0: entered promiscuous mode [ 91.177293][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.224807][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.225004][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.225548][ T5594] bridge_slave_0: entered allmulticast mode [ 91.228418][ T5594] bridge_slave_0: entered promiscuous mode [ 91.236648][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.236794][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.236965][ T5596] bridge_slave_1: entered allmulticast mode [ 91.240747][ T5596] bridge_slave_1: entered promiscuous mode [ 91.295661][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.295839][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.296348][ T5594] bridge_slave_1: entered allmulticast mode [ 91.298956][ T5594] bridge_slave_1: entered promiscuous mode [ 91.326455][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.335196][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.386204][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.389782][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.393704][ T5593] team0: Port device team_slave_0 added [ 91.418596][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.454182][ T5593] team0: Port device team_slave_1 added [ 91.458006][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.463808][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.514308][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.534878][ T5591] team0: Port device team_slave_0 added [ 91.542522][ T5592] team0: Port device team_slave_0 added [ 91.586322][ T5591] team0: Port device team_slave_1 added [ 91.589188][ T5592] team0: Port device team_slave_1 added [ 91.590656][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.590669][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.590693][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.622636][ T5596] team0: Port device team_slave_0 added [ 91.677433][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.677860][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.677888][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.684652][ T5594] team0: Port device team_slave_0 added [ 91.689833][ T5596] team0: Port device team_slave_1 added [ 91.750040][ T5594] team0: Port device team_slave_1 added [ 91.767925][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.767988][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.768015][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.769449][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.769462][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.769484][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.830207][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.830238][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.830262][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.835570][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.835588][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.835612][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.863629][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.863647][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.863670][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.904649][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.904667][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.904691][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.907210][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.907231][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.907254][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.916093][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.916110][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.916134][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.100750][ T5593] hsr_slave_0: entered promiscuous mode [ 92.103096][ T5593] hsr_slave_1: entered promiscuous mode [ 92.138584][ T5592] hsr_slave_0: entered promiscuous mode [ 92.140779][ T5592] hsr_slave_1: entered promiscuous mode [ 92.142831][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 92.143241][ T5592] Cannot create hsr debugfs directory [ 92.170864][ T5591] hsr_slave_0: entered promiscuous mode [ 92.172375][ T5591] hsr_slave_1: entered promiscuous mode [ 92.173467][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 92.173491][ T5591] Cannot create hsr debugfs directory [ 92.217640][ T5596] hsr_slave_0: entered promiscuous mode [ 92.219797][ T5596] hsr_slave_1: entered promiscuous mode [ 92.220782][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 92.220805][ T5596] Cannot create hsr debugfs directory [ 92.231194][ T59] Bluetooth: hci3: command tx timeout [ 92.234612][ T5594] hsr_slave_0: entered promiscuous mode [ 92.235960][ T5594] hsr_slave_1: entered promiscuous mode [ 92.236820][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 92.236842][ T5594] Cannot create hsr debugfs directory [ 92.312137][ T59] Bluetooth: hci2: command tx timeout [ 92.391278][ T59] Bluetooth: hci0: command tx timeout [ 92.471492][ T59] Bluetooth: hci1: command tx timeout [ 92.471576][ T59] Bluetooth: hci4: command tx timeout [ 93.852030][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.912377][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.921030][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.965256][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.972349][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.998198][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.018478][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.056179][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.194072][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.237313][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.245811][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.285333][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.299972][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.311237][ T5606] Bluetooth: hci3: command tx timeout [ 94.327660][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.353782][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.388907][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.391675][ T5606] Bluetooth: hci2: command tx timeout [ 94.472113][ T5606] Bluetooth: hci0: command tx timeout [ 94.490716][ T5591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.544619][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.552488][ T59] Bluetooth: hci1: command tx timeout [ 94.553300][ T5606] Bluetooth: hci4: command tx timeout [ 94.557414][ T5591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.587246][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.600317][ T5591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.635044][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.662076][ T5591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.695646][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.878677][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.915390][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.930819][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.982469][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.997074][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.038610][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.067101][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.094780][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.255239][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.279414][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.314227][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.323484][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.354378][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.372683][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.419769][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.426899][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.454383][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.516654][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.562686][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.572178][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.572871][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.648772][ T3167] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.655487][ T3167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.739298][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.772293][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.798201][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.799000][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.859631][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.860263][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.925620][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.971006][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.978831][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.979045][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.050546][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.058519][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.196032][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.269208][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.269734][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.300713][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.329552][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.332821][ T3172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.392592][ T5606] Bluetooth: hci3: command tx timeout [ 96.458896][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.472338][ T5606] Bluetooth: hci2: command tx timeout [ 96.552414][ T5606] Bluetooth: hci0: command tx timeout [ 96.564061][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.565515][ T3172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.631563][ T5606] Bluetooth: hci4: command tx timeout [ 96.632595][ T59] Bluetooth: hci1: command tx timeout [ 96.648608][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.654877][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.226013][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.798893][ T5593] veth0_vlan: entered promiscuous mode [ 97.944900][ T5593] veth1_vlan: entered promiscuous mode [ 98.133154][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.344812][ T5593] veth0_macvtap: entered promiscuous mode [ 98.354408][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.435454][ T5593] veth1_macvtap: entered promiscuous mode [ 98.505391][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.572534][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.617464][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.619979][ T5592] veth0_vlan: entered promiscuous mode [ 98.672822][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.729490][ T5592] veth1_vlan: entered promiscuous mode [ 98.828919][ T5591] veth0_vlan: entered promiscuous mode [ 99.029324][ T5591] veth1_vlan: entered promiscuous mode [ 99.190159][ T5594] veth0_vlan: entered promiscuous mode [ 99.210639][ T5592] veth0_macvtap: entered promiscuous mode [ 99.269641][ T5592] veth1_macvtap: entered promiscuous mode [ 99.295028][ T5594] veth1_vlan: entered promiscuous mode [ 99.295565][ T3193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.295583][ T3193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.392268][ T5596] veth0_vlan: entered promiscuous mode [ 99.434399][ T5591] veth0_macvtap: entered promiscuous mode [ 99.460711][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.479866][ T5591] veth1_macvtap: entered promiscuous mode [ 99.486168][ T3193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.486199][ T3193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.503828][ T5596] veth1_vlan: entered promiscuous mode [ 99.536671][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.597798][ T5594] veth0_macvtap: entered promiscuous mode [ 99.612106][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.634887][ T5594] veth1_macvtap: entered promiscuous mode [ 99.654751][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.740271][ T5593] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.983529][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.003770][ T5596] veth0_macvtap: entered promiscuous mode [ 100.207538][ T5596] veth1_macvtap: entered promiscuous mode [ 100.225431][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.513074][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.514594][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.754084][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.796378][ T5793] jffs2: notice: (5793) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.966444][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.058473][ T3170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.066877][ T3170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.404793][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.413000][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.590277][ T5802] syz.3.9 (5802): attempted to duplicate a private mapping with mremap. This is not supported. [ 103.536827][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.537657][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.936351][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.936445][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.411564][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.822177][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.845246][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.874995][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.152586][ T3168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.603428][ T1016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.799861][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.802155][ T3170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.802604][ T3170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.802920][ T3170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.803317][ T3170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.803711][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.811343][ T3170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.831276][ T3172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.831892][ T3172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.833056][ T3172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.833628][ T3172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.850659][ T3172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.073392][ T1187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.075226][ T1187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.728674][ T3172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.777039][ T3172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.800189][ T1016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.804645][ T1016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.386768][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.386847][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.730476][ T5808] vlan0: entered allmulticast mode [ 107.747260][ T5808] bond0: entered allmulticast mode [ 109.042697][ T5826] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.078382][ T12] IPVS: starting estimator thread 0... [ 111.523082][ T5849] IPVS: using max 8 ests per chain, 19200 per kthread [ 112.974661][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 114.438298][ T5893] FAULT_INJECTION: forcing a failure. [ 114.438298][ T5893] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.441093][ T5893] CPU: 1 UID: 0 PID: 5893 Comm: syz.1.27 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.441124][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.441136][ T5893] Call Trace: [ 114.441145][ T5893] [ 114.441155][ T5893] dump_stack_lvl+0xe8/0x150 [ 114.441197][ T5893] should_fail_ex+0x46b/0x600 [ 114.441231][ T5893] _copy_to_user+0x31/0xb0 [ 114.441262][ T5893] bpf_vlog_reverse_ubuf+0x289/0x3e0 [ 114.441297][ T5893] bpf_vlog_finalize+0x1c9/0x3f0 [ 114.441330][ T5893] bpf_log_attr_finalize+0x80/0x1e0 [ 114.441360][ T5893] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 114.441393][ T5893] ? btf_parse_hdr+0x54f/0x810 [ 114.441427][ T5893] btf_new_fd+0x35e/0xc10 [ 114.441464][ T5893] __sys_bpf+0xd2e/0xd90 [ 114.441510][ T5893] ? __pfx___sys_bpf+0x10/0x10 [ 114.441545][ T5893] ? do_futex+0x3e7/0x4e0 [ 114.441599][ T5893] ? rcu_is_watching+0x16/0xb0 [ 114.441636][ T5893] __x64_sys_bpf+0xba/0xd0 [ 114.441669][ T5893] do_syscall_64+0x166/0x520 [ 114.441698][ T5893] ? trace_irq_disable+0x3b/0x140 [ 114.441726][ T5893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.441749][ T5893] ? clear_bhb_loop+0x70/0xc0 [ 114.441776][ T5893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.441799][ T5893] RIP: 0033:0x7ff3727ae159 [ 114.441821][ T5893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.441841][ T5893] RSP: 002b:00007ff370a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.441867][ T5893] RAX: ffffffffffffffda RBX: 00007ff372a35fa0 RCX: 00007ff3727ae159 [ 114.441884][ T5893] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 114.441899][ T5893] RBP: 00007ff37284503b R08: 0000000000000000 R09: 0000000000000000 [ 114.441912][ T5893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.441925][ T5893] R13: 00007ff372a36038 R14: 00007ff372a35fa0 R15: 00007fffbf4cf308 [ 114.441960][ T5893] [ 114.689422][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 116.615404][ T5913] ======================================================= [ 116.615404][ T5913] WARNING: The mand mount option has been deprecated and [ 116.615404][ T5913] and is ignored by this kernel. Remove the mand [ 116.615404][ T5913] option from the mount to silence this warning. [ 116.615404][ T5913] ======================================================= [ 119.822797][ T5935] fuse: Unknown parameter '0xffffffffffffffff' [ 120.183528][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 129.885832][ T6022] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 133.271720][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.286484][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.240984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.945056][ T3550] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.194763][ T3550] usb 5-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 139.243853][ T3550] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 139.243946][ T3550] usb 5-1: config 0 has no interface number 0 [ 139.244000][ T3550] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 9223, setting to 1024 [ 139.244026][ T3550] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 139.271994][ T3550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.272024][ T3550] usb 5-1: Product: syz [ 139.272038][ T3550] usb 5-1: Manufacturer: syz [ 139.272051][ T3550] usb 5-1: SerialNumber: syz [ 139.767560][ T3550] usb 5-1: config 0 descriptor?? [ 140.032843][ T3550] usb 5-1: can't set config #0, error -71 [ 140.841052][ T3550] usb 5-1: USB disconnect, device number 2 [ 153.938022][ T6242] FAULT_INJECTION: forcing a failure. [ 153.938022][ T6242] name failslab, interval 1, probability 0, space 0, times 1 [ 153.939634][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.939665][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.939679][ T6242] Call Trace: [ 153.939689][ T6242] [ 153.939699][ T6242] dump_stack_lvl+0xe8/0x150 [ 153.939741][ T6242] should_fail_ex+0x46b/0x600 [ 153.939776][ T6242] should_failslab+0xa8/0x100 [ 153.939814][ T6242] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 153.939848][ T6242] ? __kernfs_new_node+0xac/0xa70 [ 153.939876][ T6242] ? __kernfs_new_node+0xac/0xa70 [ 153.939912][ T6242] kstrdup+0x42/0x100 [ 153.939955][ T6242] __kernfs_new_node+0xac/0xa70 [ 153.939996][ T6242] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.940025][ T6242] ? kernfs_root+0x1c/0x230 [ 153.940061][ T6242] ? kernfs_root+0x1c/0x230 [ 153.940088][ T6242] ? kernfs_root+0x1c/0x230 [ 153.940121][ T6242] kernfs_new_node+0xea/0x140 [ 153.940157][ T6242] kernfs_create_link+0xa7/0x200 [ 153.940198][ T6242] sysfs_do_create_link_sd+0x83/0x110 [ 153.940228][ T6242] driver_sysfs_add+0x89/0x210 [ 153.940265][ T6242] really_probe+0x142/0xae0 [ 153.940305][ T6242] __driver_probe_device+0x1e8/0x360 [ 153.940342][ T6242] driver_probe_device+0x4f/0x240 [ 153.940380][ T6242] __driver_attach+0x339/0x600 [ 153.940426][ T6242] bus_for_each_dev+0x23e/0x2c0 [ 153.940453][ T6242] ? __pfx___driver_attach+0x10/0x10 [ 153.940486][ T6242] ? __pfx_bus_for_each_dev+0x10/0x10 [ 153.940509][ T6242] ? rt_spin_unlock+0x159/0x200 [ 153.940537][ T6242] ? rt_spin_unlock+0x165/0x200 [ 153.940562][ T6242] bus_add_driver+0x348/0x670 [ 153.940598][ T6242] driver_register+0x23a/0x320 [ 153.940624][ T6242] usb_gadget_register_driver_owner+0xf9/0x270 [ 153.940657][ T6242] raw_ioctl+0x1503/0x40d0 [ 153.940699][ T6242] ? tomoyo_path_number_perm+0x219/0x5f0 [ 153.940731][ T6242] ? do_vfs_ioctl+0x1184/0x1550 [ 153.940767][ T6242] ? __pfx_raw_ioctl+0x10/0x10 [ 153.940815][ T6242] ? hook_file_ioctl+0x1f5/0x610 [ 153.940853][ T6242] ? __asan_memset+0x22/0x50 [ 153.940877][ T6242] ? smack_file_ioctl+0x265/0x370 [ 153.940901][ T6242] ? __pfx_smack_file_ioctl+0x10/0x10 [ 153.940935][ T6242] ? __fget_files+0x2a/0x420 [ 153.940959][ T6242] ? __fget_files+0x3a8/0x420 [ 153.940981][ T6242] ? __fget_files+0x2a/0x420 [ 153.941009][ T6242] ? bpf_lsm_file_ioctl+0x9/0x20 [ 153.941035][ T6242] ? __pfx_raw_ioctl+0x10/0x10 [ 153.941068][ T6242] __se_sys_ioctl+0xff/0x170 [ 153.941102][ T6242] do_syscall_64+0x166/0x520 [ 153.941130][ T6242] ? trace_irq_disable+0x3b/0x140 [ 153.941159][ T6242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.941182][ T6242] ? clear_bhb_loop+0x70/0xc0 [ 153.941211][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.941234][ T6242] RIP: 0033:0x7ff3727addeb [ 153.941257][ T6242] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 153.941276][ T6242] RSP: 002b:00007ff370a03f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.941302][ T6242] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff3727addeb [ 153.941319][ T6242] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 153.941333][ T6242] RBP: 00007ff370a04fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 153.941348][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.941362][ T6242] R13: 00002000000006c0 R14: 0000000000000000 R15: 0000000000000000 [ 153.941406][ T6242] [ 153.945543][ T6242] raw-gadget.0 gadget.1: really_probe: driver_sysfs_add failed [ 153.948449][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.969090][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.716228][ T6284] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 158.724619][ T6284] netlink: 152 bytes leftover after parsing attributes in process `syz.0.136'. [ 159.033171][ T6284] .`: renamed from bond0 (while UP) [ 159.040762][ T6288] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 159.040791][ T6288] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 159.181227][ T1238] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.394253][ T1238] usb 5-1: Using ep0 maxpacket: 32 [ 159.399999][ T1238] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 159.405555][ T1238] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 159.417203][ T1238] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 159.417232][ T1238] usb 5-1: Product: syz [ 159.417246][ T1238] usb 5-1: Manufacturer: syz [ 159.417260][ T1238] usb 5-1: SerialNumber: syz [ 159.774982][ T1238] usb 5-1: config 0 descriptor?? [ 159.947837][ T6286] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 163.799213][ T36] usb 5-1: USB disconnect, device number 3 [ 163.972013][ T37] audit: type=1326 audit(1788953904.278:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674af0e159 code=0x7ffc0000 [ 163.988729][ T37] audit: type=1326 audit(1788953904.278:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674af0e159 code=0x7ffc0000 [ 164.035445][ T37] audit: type=1326 audit(1788953904.348:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f674af0e159 code=0x7ffc0000 [ 164.045102][ T37] audit: type=1326 audit(1788953904.348:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674af0e159 code=0x7ffc0000 [ 164.045167][ T37] audit: type=1326 audit(1788953904.348:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674af0e159 code=0x7ffc0000 [ 164.372645][ T37] audit: type=1326 audit(1788953904.678:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f674af0e159 code=0x7ffc0000 [ 164.372698][ T37] audit: type=1326 audit(1788953904.678:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674af0e159 code=0x7ffc0000 [ 164.372736][ T37] audit: type=1326 audit(1788953904.678:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6338 comm="syz.3.153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674af0e159 code=0x7ffc0000 [ 165.907928][ T6346] Zero length message leads to an empty skb [ 166.469094][ T6364] ip6gretap1: entered allmulticast mode [ 172.767174][ T6345] syz.4.154 (6345) used greatest stack depth: 19104 bytes left [ 173.150642][ T6403] macvlan2: entered promiscuous mode [ 173.150715][ T6403] dummy0: entered promiscuous mode [ 173.216767][ T6403] macvlan2: entered allmulticast mode [ 173.216844][ T6403] dummy0: entered allmulticast mode [ 173.320901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.330900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.340926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.350933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.360904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.370909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.380902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.390898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.400898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.373022][ T6407] ip6gretap1: entered allmulticast mode [ 180.925684][ T6466] ip6gretap1: entered allmulticast mode [ 181.430127][ T6474] FAULT_INJECTION: forcing a failure. [ 181.430127][ T6474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.444430][ T6474] CPU: 1 UID: 0 PID: 6474 Comm: syz.1.194 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 181.444461][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.444474][ T6474] Call Trace: [ 181.444484][ T6474] [ 181.444496][ T6474] dump_stack_lvl+0xe8/0x150 [ 181.444530][ T6474] should_fail_ex+0x46b/0x600 [ 181.444556][ T6474] _copy_to_user+0x31/0xb0 [ 181.444582][ T6474] do_timer_create+0xb36/0x1100 [ 181.444611][ T6474] ? __pfx_do_timer_create+0x10/0x10 [ 181.444640][ T6474] __x64_sys_timer_create+0x14c/0x1c0 [ 181.444670][ T6474] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 181.444701][ T6474] ? rcu_is_watching+0x16/0xb0 [ 181.444738][ T6474] do_syscall_64+0x166/0x520 [ 181.444759][ T6474] ? trace_irq_disable+0x3b/0x140 [ 181.444781][ T6474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.444798][ T6474] ? clear_bhb_loop+0x70/0xc0 [ 181.444821][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.444839][ T6474] RIP: 0033:0x7ff3727ae159 [ 181.444857][ T6474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.444880][ T6474] RSP: 002b:00007ff370a06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 181.444900][ T6474] RAX: ffffffffffffffda RBX: 00007ff372a35fa0 RCX: 00007ff3727ae159 [ 181.444913][ T6474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 98e63d26ce15b27f [ 181.444924][ T6474] RBP: 00007ff37284503b R08: 0000000000000000 R09: 0000000000000000 [ 181.444935][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.444945][ T6474] R13: 00007ff372a36038 R14: 00007ff372a35fa0 R15: 00007fffbf4cf308 [ 181.444973][ T6474] [ 181.515707][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 181.813387][ T6476] bridge0: port 3(syz_tun) entered blocking state [ 181.820395][ T6476] bridge0: port 3(syz_tun) entered disabled state [ 181.820651][ T6476] syz_tun: entered allmulticast mode [ 181.880332][ T6476] syz_tun: entered promiscuous mode [ 181.896807][ T6476] bridge0: port 3(syz_tun) entered blocking state [ 182.137479][ T6476] bridge0: port 3(syz_tun) entered forwarding state [ 182.788254][ T6477] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 185.970911][ T1238] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 186.198403][ T1238] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 186.205749][ T1238] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 186.205777][ T1238] usb 5-1: config 5 has no interface number 0 [ 186.205819][ T1238] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 186.205845][ T1238] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 186.205866][ T1238] usb 5-1: config 5 interface 123 has no altsetting 0 [ 186.220158][ T1238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.220186][ T1238] usb 5-1: Product: syz [ 186.220201][ T1238] usb 5-1: Manufacturer: syz [ 186.220215][ T1238] usb 5-1: SerialNumber: syz [ 189.193098][ T6530] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 190.622818][ T6522] FAULT_INJECTION: forcing a failure. [ 190.622818][ T6522] name failslab, interval 1, probability 0, space 0, times 0 [ 190.638623][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: syz.1.210 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.638656][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.638669][ T6522] Call Trace: [ 190.638678][ T6522] [ 190.638689][ T6522] dump_stack_lvl+0xe8/0x150 [ 190.638727][ T6522] should_fail_ex+0x46b/0x600 [ 190.638754][ T6522] ? sock_alloc_inode+0x2c/0x1a0 [ 190.638778][ T6522] should_failslab+0xa8/0x100 [ 190.638811][ T6522] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 190.638848][ T6522] ? sock_alloc_inode+0x2c/0x1a0 [ 190.638877][ T6522] ? __pfx_sock_alloc_inode+0x10/0x10 [ 190.638899][ T6522] sock_alloc_inode+0x2c/0x1a0 [ 190.638923][ T6522] ? __pfx_sock_alloc_inode+0x10/0x10 [ 190.638944][ T6522] alloc_inode+0x6a/0x1b0 [ 190.638978][ T6522] __sock_create+0x12d/0x9d0 [ 190.639014][ T6522] __sys_socket+0xd6/0x1b0 [ 190.639043][ T6522] __x64_sys_socket+0x7a/0x90 [ 190.639069][ T6522] do_syscall_64+0x166/0x520 [ 190.639094][ T6522] ? trace_irq_disable+0x3b/0x140 [ 190.639119][ T6522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.639140][ T6522] ? clear_bhb_loop+0x70/0xc0 [ 190.639166][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.639186][ T6522] RIP: 0033:0x7ff3727ae159 [ 190.639208][ T6522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.639225][ T6522] RSP: 002b:00007ff370a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 190.639250][ T6522] RAX: ffffffffffffffda RBX: 00007ff372a35fa0 RCX: 00007ff3727ae159 [ 190.639267][ T6522] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 190.639280][ T6522] RBP: 00007ff37284503b R08: 0000000000000000 R09: 0000000000000000 [ 190.639293][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.639306][ T6522] R13: 00007ff372a36038 R14: 00007ff372a35fa0 R15: 00007fffbf4cf308 [ 190.639339][ T6522] [ 190.639361][ T6522] socket: no more sockets [ 191.286912][ T1238] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 192.808488][ T1238] usb 5-1: USB disconnect, device number 4 [ 193.388835][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.543055][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.555500][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.569178][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.574753][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.430176][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.430339][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.106944][ T59] Bluetooth: hci5: command tx timeout [ 198.154755][ T59] Bluetooth: hci5: command tx timeout [ 198.176778][ T6615] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 200.232611][ T59] Bluetooth: hci5: command tx timeout [ 200.722029][ T6638] syz.2.240 (6638) used greatest stack depth: 18248 bytes left [ 202.311326][ T59] Bluetooth: hci5: command tx timeout [ 202.606203][ T37] audit: type=1326 audit(1788953942.898:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3727ae159 code=0x7ffc0000 [ 202.607905][ T37] audit: type=1326 audit(1788953942.918:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3727ae159 code=0x7ffc0000 [ 202.618638][ T37] audit: type=1326 audit(1788953942.928:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff3727ae159 code=0x7ffc0000 [ 202.620796][ T37] audit: type=1326 audit(1788953942.928:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3727ae159 code=0x7ffc0000 [ 202.621541][ T37] audit: type=1326 audit(1788953942.928:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3727ae159 code=0x7ffc0000 [ 202.625366][ T37] audit: type=1326 audit(1788953942.938:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3727ae159 code=0x7ffc0000 [ 202.625422][ T37] audit: type=1326 audit(1788953942.938:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3727ae159 code=0x7ffc0000 [ 202.625471][ T37] audit: type=1326 audit(1788953942.938:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3727ae159 code=0x7ffc0000 [ 203.855788][ T37] audit: type=1326 audit(1788953942.938:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff37276e98e code=0x7ffc0000 [ 203.861073][ T37] audit: type=1326 audit(1788953942.948:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6658 comm="syz.1.246" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff37276e98e code=0x7ffc0000 [ 205.370589][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.717474][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.722571][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.722851][ T6562] bridge_slave_0: entered allmulticast mode [ 206.735937][ T6562] bridge_slave_0: entered promiscuous mode [ 206.837873][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.843505][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.843739][ T6562] bridge_slave_1: entered allmulticast mode [ 206.878301][ T6562] bridge_slave_1: entered promiscuous mode [ 209.136339][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.618276][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 212.699236][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.726599][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.994220][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 214.244014][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 214.244217][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 214.756583][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.094195][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.274'. [ 221.113361][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.666411][ T6562] team0: Port device team_slave_0 added [ 221.823195][ T6562] team0: Port device team_slave_1 added [ 221.863907][ T6801] FAULT_INJECTION: forcing a failure. [ 221.863907][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 221.879326][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.1.284 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.879361][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.879375][ T6801] Call Trace: [ 221.879385][ T6801] [ 221.879395][ T6801] dump_stack_lvl+0xe8/0x150 [ 221.879441][ T6801] should_fail_ex+0x46b/0x600 [ 221.879477][ T6801] should_failslab+0xa8/0x100 [ 221.879517][ T6801] __kmalloc_noprof+0xfb/0x790 [ 221.879547][ T6801] ? asymmetric_key_generate_id+0x60/0x170 [ 221.879576][ T6801] ? asymmetric_key_generate_id+0x60/0x170 [ 221.879604][ T6801] ? x509_fabricate_name+0x580/0xa90 [ 221.879637][ T6801] ? x509_fabricate_name+0x580/0xa90 [ 221.879680][ T6801] x509_fabricate_name+0x580/0xa90 [ 221.879737][ T6801] asn1_ber_decoder+0x1936/0x2590 [ 221.879799][ T6801] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 221.879850][ T6801] ? __kmalloc_cache_noprof+0x370/0x680 [ 221.879883][ T6801] ? x509_cert_parse+0x16a/0x7a0 [ 221.879926][ T6801] x509_cert_parse+0x1ba/0x7a0 [ 221.879958][ T6801] ? __pfx_down_read+0x10/0x10 [ 221.879992][ T6801] x509_key_preparse+0x64/0x6d0 [ 221.880026][ T6801] ? __pfx_smack_key_permission+0x10/0x10 [ 221.880059][ T6801] asymmetric_key_preparse+0xb9/0x1b0 [ 221.880088][ T6801] __key_create_or_update+0x3a9/0xa80 [ 221.880131][ T6801] ? __pfx___key_create_or_update+0x10/0x10 [ 221.880169][ T6801] ? lookup_user_key+0xb68/0x1150 [ 221.880211][ T6801] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 221.880252][ T6801] key_create_or_update+0x42/0x60 [ 221.880290][ T6801] __se_sys_add_key+0x349/0x420 [ 221.880320][ T6801] ? __pfx___se_sys_add_key+0x10/0x10 [ 221.880357][ T6801] ? __x64_sys_add_key+0x20/0xc0 [ 221.880385][ T6801] do_syscall_64+0x166/0x520 [ 221.880414][ T6801] ? trace_irq_disable+0x3b/0x140 [ 221.880444][ T6801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.880468][ T6801] ? clear_bhb_loop+0x70/0xc0 [ 221.880497][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.880521][ T6801] RIP: 0033:0x7ff3727ae159 [ 221.880544][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.880564][ T6801] RSP: 002b:00007ff370a06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 221.880590][ T6801] RAX: ffffffffffffffda RBX: 00007ff372a35fa0 RCX: 00007ff3727ae159 [ 221.880607][ T6801] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 221.880623][ T6801] RBP: 00007ff37284503b R08: ffffffffffffffff R09: 0000000000000000 [ 221.880639][ T6801] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 221.880653][ T6801] R13: 00007ff372a36038 R14: 00007ff372a35fa0 R15: 00007fffbf4cf308 [ 221.880691][ T6801] [ 222.042181][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.042198][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.042222][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.055540][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.055557][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.055581][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.512303][ T6562] hsr_slave_0: entered promiscuous mode [ 222.523623][ T6562] hsr_slave_1: entered promiscuous mode [ 222.532068][ T6562] debugfs: 'hsr0' already exists in 'hsr' [ 222.532100][ T6562] Cannot create hsr debugfs directory [ 223.321456][ T5726] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 223.580633][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 223.592950][ T5726] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 223.646342][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.647057][ T5726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.675521][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.678866][ T5726] usb 2-1: Product: syz [ 223.678888][ T5726] usb 2-1: Manufacturer: syz [ 223.678904][ T5726] usb 2-1: SerialNumber: syz [ 224.091815][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 225.071993][ T5726] usb 2-1: Unsupported UAC3 BADD profile [ 232.056085][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.301'. [ 234.483306][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.305'. [ 234.780741][ T5726] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 236.996484][ T5726] usb 2-1: USB disconnect, device number 2 [ 237.274185][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.059422][ T66] bridge_slave_1: left allmulticast mode [ 240.080768][ T66] bridge_slave_1: left promiscuous mode [ 240.156654][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.886097][ T66] bridge_slave_0: left allmulticast mode [ 240.886225][ T66] bridge_slave_0: left promiscuous mode [ 240.886512][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.161137][ T6926] FAULT_INJECTION: forcing a failure. [ 242.161137][ T6926] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 242.171050][ T6926] CPU: 0 UID: 0 PID: 6926 Comm: syz.1.319 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.171086][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.171099][ T6926] Call Trace: [ 242.171109][ T6926] [ 242.171130][ T6926] dump_stack_lvl+0xe8/0x150 [ 242.171175][ T6926] should_fail_ex+0x46b/0x600 [ 242.171210][ T6926] prepare_alloc_pages+0x223/0x650 [ 242.171265][ T6926] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 242.171306][ T6926] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 242.171345][ T6926] ? __pfx_policy_nodemask+0x10/0x10 [ 242.171383][ T6926] ? __lock_acquire+0x747/0x2de0 [ 242.171431][ T6926] alloc_pages_mpol+0xd4/0x280 [ 242.171472][ T6926] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 242.171513][ T6926] vma_alloc_folio_noprof+0xe1/0x1e0 [ 242.171540][ T6926] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 242.171575][ T6926] ? lock_acquire+0x115/0x350 [ 242.171617][ T6926] do_pte_missing+0x835/0x28f0 [ 242.171659][ T6926] ? handle_mm_fault+0xeb/0x28c0 [ 242.171692][ T6926] handle_mm_fault+0xf64/0x28c0 [ 242.171727][ T6926] ? handle_mm_fault+0xeb/0x28c0 [ 242.171772][ T6926] ? __pfx_handle_mm_fault+0x10/0x10 [ 242.171822][ T6926] ? lock_mm_and_find_vma+0xa7/0x340 [ 242.171859][ T6926] do_user_addr_fault+0x746/0x1340 [ 242.171904][ T6926] exc_page_fault+0x6a/0xc0 [ 242.171935][ T6926] asm_exc_page_fault+0x26/0x30 [ 242.171958][ T6926] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 242.171997][ T6926] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 35 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 242.172016][ T6926] RSP: 0018:ffffc90006ac7ac8 EFLAGS: 00050246 [ 242.172040][ T6926] RAX: ffffffff84cd0401 RBX: 0000000000000040 RCX: 0000000000000040 [ 242.172056][ T6926] RDX: 0000000000000000 RSI: ffffc90006ac7b60 RDI: 0000200000033a80 [ 242.172072][ T6926] RBP: ffffc90006ac7c10 R08: ffffc90006ac7b9f R09: 1ffff92000d58f73 [ 242.172090][ T6926] R10: dffffc0000000000 R11: fffff52000d58f74 R12: 0000200000033ac0 [ 242.172107][ T6926] R13: 00007ffffffff000 R14: ffffc90006ac7b60 R15: 0000200000033a80 [ 242.172141][ T6926] ? _copy_from_user+0x31/0xb0 [ 242.172181][ T6926] _copy_to_user+0x8a/0xb0 [ 242.172214][ T6926] rng_dev_read+0x3ed/0x7c0 [ 242.172253][ T6926] ? __pfx_rng_dev_read+0x10/0x10 [ 242.172288][ T6926] ? bpf_lsm_file_permission+0x9/0x20 [ 242.172313][ T6926] ? security_file_permission+0x75/0x260 [ 242.172341][ T6926] ? rw_verify_area+0x250/0x4d0 [ 242.172373][ T6926] vfs_readv+0x588/0x850 [ 242.172410][ T6926] ? __pfx_rng_dev_read+0x10/0x10 [ 242.172444][ T6926] ? __pfx_vfs_readv+0x10/0x10 [ 242.172494][ T6926] ? __fget_files+0x2a/0x420 [ 242.172524][ T6926] ? __fget_files+0x3a8/0x420 [ 242.172546][ T6926] ? __fget_files+0x2a/0x420 [ 242.172581][ T6926] __x64_sys_preadv+0x19f/0x2c0 [ 242.172614][ T6926] ? __pfx___x64_sys_preadv+0x10/0x10 [ 242.172656][ T6926] do_syscall_64+0x166/0x520 [ 242.172683][ T6926] ? trace_irq_disable+0x3b/0x140 [ 242.172712][ T6926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.172735][ T6926] ? clear_bhb_loop+0x70/0xc0 [ 242.172764][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.172786][ T6926] RIP: 0033:0x7ff3727ae159 [ 242.172807][ T6926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.172825][ T6926] RSP: 002b:00007ff370a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 242.172863][ T6926] RAX: ffffffffffffffda RBX: 00007ff372a35fa0 RCX: 00007ff3727ae159 [ 242.172880][ T6926] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 242.172895][ T6926] RBP: 00007ff37284503b R08: 0000000000000000 R09: 0000000000000000 [ 242.172910][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.172925][ T6926] R13: 00007ff372a36038 R14: 00007ff372a35fa0 R15: 00007fffbf4cf308 [ 242.172964][ T6926] [ 242.263656][ T6927] syz.1.319 uses obsolete (PF_INET,SOCK_PACKET) [ 247.733798][ T66] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.926137][ T66] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.964643][ T66] .` (unregistering): Released all slaves [ 248.208532][ T6943] ip6gretap1: entered allmulticast mode [ 250.452075][ T7003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 250.469770][ T7003] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 250.558313][ T4905] Bluetooth: hci3: unexpected subevent 0x10 length: 30 > 2 [ 250.638966][ T7003] vhci_hcd vhci_hcd.0: Device attached [ 250.664720][ T7004] vhci_hcd: connection closed [ 250.726353][ T3193] vhci_hcd vhci_hcd.2: stop threads [ 250.739664][ T3193] vhci_hcd vhci_hcd.2: release socket [ 250.739780][ T3193] vhci_hcd vhci_hcd.2: disconnect device [ 251.065458][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 251.719661][ T5252] 8021q: adding VLAN 0 to HW filter on device eth1 [ 254.950543][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.000400][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.016362][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.349134][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.356961][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.996728][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.996876][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.532242][ T4905] Bluetooth: hci0: command tx timeout [ 258.058158][ T66] hsr_slave_0: left promiscuous mode [ 258.094354][ T66] hsr_slave_1: left promiscuous mode [ 258.096616][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.096779][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.186189][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.191390][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.888401][ T66] dummy0: left allmulticast mode [ 258.938020][ T66] veth1_macvtap: left promiscuous mode [ 259.239860][ T66] veth0_macvtap: left promiscuous mode [ 259.256487][ T66] veth1_vlan: left promiscuous mode [ 259.262543][ T66] veth0_vlan: left promiscuous mode [ 260.235490][ T4905] Bluetooth: hci0: command tx timeout [ 262.321011][ T4905] Bluetooth: hci0: command tx timeout [ 263.828174][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 264.401235][ T4905] Bluetooth: hci0: command tx timeout [ 268.722719][ T7131] FAULT_INJECTION: forcing a failure. [ 268.722719][ T7131] name failslab, interval 1, probability 0, space 0, times 0 [ 268.742933][ T7131] CPU: 1 UID: 0 PID: 7131 Comm: syz.2.370 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 268.742967][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.742981][ T7131] Call Trace: [ 268.742990][ T7131] [ 268.743002][ T7131] dump_stack_lvl+0xe8/0x150 [ 268.743044][ T7131] should_fail_ex+0x46b/0x600 [ 268.743091][ T7131] should_failslab+0xa8/0x100 [ 268.743130][ T7131] __kmalloc_noprof+0xfb/0x790 [ 268.743159][ T7131] ? kasan_save_track+0x4f/0x80 [ 268.743189][ T7131] ? __alloc_workqueue+0x111/0x1fe0 [ 268.743211][ T7131] ? __alloc_workqueue+0x111/0x1fe0 [ 268.743242][ T7131] __alloc_workqueue+0x111/0x1fe0 [ 268.743266][ T7131] ? __asan_memcpy+0x40/0x70 [ 268.743295][ T7131] ? vsnprintf+0xe42/0xef0 [ 268.743337][ T7131] alloc_workqueue_noprof+0xe3/0x210 [ 268.743370][ T7131] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 268.743403][ T7131] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 268.743437][ T7131] nci_register_device+0x22b/0x9a0 [ 268.743480][ T7131] ? __pfx_nci_register_device+0x10/0x10 [ 268.743520][ T7131] ? __rt_spin_lock_init+0x3e/0x50 [ 268.743545][ T7131] ? __init_waitqueue_head+0xad/0x160 [ 268.743574][ T7131] virtual_ncidev_open+0x129/0x190 [ 268.743613][ T7131] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 268.743646][ T7131] misc_open+0x2de/0x350 [ 268.743685][ T7131] chrdev_open+0x4dc/0x600 [ 268.743721][ T7131] ? __pfx_chrdev_open+0x10/0x10 [ 268.743755][ T7131] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 268.743794][ T7131] ? __pfx_chrdev_open+0x10/0x10 [ 268.743824][ T7131] do_dentry_open+0x849/0x1420 [ 268.743870][ T7131] vfs_open+0x3b/0x350 [ 268.743898][ T7131] ? path_openat+0x142d/0x1d60 [ 268.743928][ T7131] path_openat+0x1448/0x1d60 [ 268.743975][ T7131] do_file_open+0x23e/0x4a0 [ 268.744008][ T7131] ? __pfx_do_file_open+0x10/0x10 [ 268.744071][ T7131] ? alloc_fd+0x654/0x6d0 [ 268.744108][ T7131] do_sys_openat2+0x115/0x200 [ 268.744145][ T7131] ? __se_sys_futex+0x3a8/0x450 [ 268.744170][ T7131] ? __pfx_do_sys_openat2+0x10/0x10 [ 268.744213][ T7131] ? rcu_is_watching+0x16/0xb0 [ 268.744254][ T7131] __x64_sys_openat+0x138/0x170 [ 268.744297][ T7131] do_syscall_64+0x166/0x520 [ 268.744325][ T7131] ? trace_irq_disable+0x3b/0x140 [ 268.744356][ T7131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.744380][ T7131] ? clear_bhb_loop+0x70/0xc0 [ 268.744409][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.744433][ T7131] RIP: 0033:0x7f6782a0e159 [ 268.744458][ T7131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.744476][ T7131] RSP: 002b:00007f6780c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 268.744503][ T7131] RAX: ffffffffffffffda RBX: 00007f6782c95fa0 RCX: 00007f6782a0e159 [ 268.744520][ T7131] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 268.744535][ T7131] RBP: 00007f6782aa503b R08: 0000000000000000 R09: 0000000000000000 [ 268.744549][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.744562][ T7131] R13: 00007f6782c96038 R14: 00007f6782c95fa0 R15: 00007ffcb9fb25e8 [ 268.744600][ T7131] [ 270.332968][ T7145] FAULT_INJECTION: forcing a failure. [ 270.332968][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 270.346054][ T7145] CPU: 1 UID: 0 PID: 7145 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 270.346102][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.346116][ T7145] Call Trace: [ 270.346126][ T7145] [ 270.346138][ T7145] dump_stack_lvl+0xe8/0x150 [ 270.346181][ T7145] should_fail_ex+0x46b/0x600 [ 270.346217][ T7145] should_failslab+0xa8/0x100 [ 270.346256][ T7145] __kmalloc_noprof+0xfb/0x790 [ 270.346288][ T7145] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 270.346311][ T7145] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 270.346342][ T7145] __se_sys_futex_waitv+0x19b/0x2c0 [ 270.346370][ T7145] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 270.346413][ T7145] ? __x64_sys_futex_waitv+0x20/0xc0 [ 270.346440][ T7145] do_syscall_64+0x166/0x520 [ 270.346468][ T7145] ? trace_irq_disable+0x3b/0x140 [ 270.346497][ T7145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.346520][ T7145] ? clear_bhb_loop+0x70/0xc0 [ 270.346550][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.346573][ T7145] RIP: 0033:0x7ff3727ae159 [ 270.346595][ T7145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.346613][ T7145] RSP: 002b:00007ff370a06028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 270.346639][ T7145] RAX: ffffffffffffffda RBX: 00007ff372a35fa0 RCX: 00007ff3727ae159 [ 270.346656][ T7145] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000200000002dc0 [ 270.346670][ T7145] RBP: 00007ff37284503b R08: 0000000000000000 R09: 0000000000000000 [ 270.346684][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.346698][ T7145] R13: 00007ff372a36038 R14: 00007ff372a35fa0 R15: 00007fffbf4cf308 [ 270.346736][ T7145] [ 271.187101][ T66] team0 (unregistering): Port device team_slave_1 removed [ 271.263287][ T66] team0 (unregistering): Port device team_slave_0 removed [ 272.392526][ T5252] 8021q: adding VLAN 0 to HW filter on device eth2 [ 275.118303][ T7195] FAULT_INJECTION: forcing a failure. [ 275.118303][ T7195] name failslab, interval 1, probability 0, space 0, times 0 [ 275.118389][ T7195] CPU: 0 UID: 0 PID: 7195 Comm: syz.4.386 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 275.118415][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.118427][ T7195] Call Trace: [ 275.118436][ T7195] [ 275.118446][ T7195] dump_stack_lvl+0xe8/0x150 [ 275.118483][ T7195] should_fail_ex+0x46b/0x600 [ 275.118517][ T7195] should_failslab+0xa8/0x100 [ 275.118554][ T7195] __kmalloc_noprof+0xfb/0x790 [ 275.118583][ T7195] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 275.118605][ T7195] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 275.118632][ T7195] __se_sys_futex_waitv+0x19b/0x2c0 [ 275.118656][ T7195] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 275.118695][ T7195] ? __x64_sys_futex_waitv+0x20/0xc0 [ 275.118719][ T7195] do_syscall_64+0x166/0x520 [ 275.118745][ T7195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.118767][ T7195] ? clear_bhb_loop+0x70/0xc0 [ 275.118793][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.118815][ T7195] RIP: 0033:0x7fb73862e159 [ 275.118837][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.118855][ T7195] RSP: 002b:00007fb736886028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 275.118881][ T7195] RAX: ffffffffffffffda RBX: 00007fb7388b5fa0 RCX: 00007fb73862e159 [ 275.118910][ T7195] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000200000002dc0 [ 275.118924][ T7195] RBP: 00007fb7386c503b R08: 0000000000000000 R09: 0000000000000000 [ 275.118938][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.118952][ T7195] R13: 00007fb7388b6038 R14: 00007fb7388b5fa0 R15: 00007ffc1f3c0f78 [ 275.118987][ T7195] [ 277.162831][ T5252] 8021q: adding VLAN 0 to HW filter on device eth3 [ 278.561015][ T5860] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 278.762005][ T5860] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 278.763657][ T5860] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 278.763684][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.763701][ T5860] usb 2-1: config 0 has no interface number 0 [ 278.808261][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.808771][ T5860] usb 2-1: Product: syz [ 278.808791][ T5860] usb 2-1: Manufacturer: syz [ 278.808805][ T5860] usb 2-1: SerialNumber: syz [ 278.825029][ T5860] usb 2-1: config 0 descriptor?? [ 279.077756][ T5860] usb 2-1: USB disconnect, device number 3 [ 279.825002][ T5252] 8021q: adding VLAN 0 to HW filter on device eth4 [ 280.854953][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.399'. [ 281.294616][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.302255][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.302501][ T7036] bridge_slave_0: entered allmulticast mode [ 281.326958][ T7036] bridge_slave_0: entered promiscuous mode [ 281.379100][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.379298][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.395566][ T7036] bridge_slave_1: entered allmulticast mode [ 281.407924][ T7036] bridge_slave_1: entered promiscuous mode [ 282.035340][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.351112][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'. [ 282.968258][ T7276] team0 (unregistering): Port device team_slave_0 removed [ 283.045693][ T7276] team0 (unregistering): Port device team_slave_1 removed [ 283.191826][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.433162][ T7289] FAULT_INJECTION: forcing a failure. [ 283.433162][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 283.446516][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.4.406 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 283.446550][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.446563][ T7289] Call Trace: [ 283.446572][ T7289] [ 283.446582][ T7289] dump_stack_lvl+0xe8/0x150 [ 283.446623][ T7289] should_fail_ex+0x46b/0x600 [ 283.446657][ T7289] should_failslab+0xa8/0x100 [ 283.446691][ T7289] __kmalloc_noprof+0xfb/0x790 [ 283.446720][ T7289] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 283.446736][ T7289] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 283.446752][ T7289] __se_sys_futex_waitv+0x19b/0x2c0 [ 283.446766][ T7289] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 283.446788][ T7289] ? __x64_sys_futex_waitv+0x20/0xc0 [ 283.446806][ T7289] do_syscall_64+0x166/0x520 [ 283.446832][ T7289] ? trace_irq_disable+0x3b/0x140 [ 283.446859][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.446881][ T7289] ? clear_bhb_loop+0x70/0xc0 [ 283.446931][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.446946][ T7289] RIP: 0033:0x7fb73862e159 [ 283.446960][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.446971][ T7289] RSP: 002b:00007fb736886028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 283.446988][ T7289] RAX: ffffffffffffffda RBX: 00007fb7388b5fa0 RCX: 00007fb73862e159 [ 283.446997][ T7289] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000200000002dc0 [ 283.447006][ T7289] RBP: 00007fb7386c503b R08: 0000000000000000 R09: 0000000000000000 [ 283.447014][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.447022][ T7289] R13: 00007fb7388b6038 R14: 00007fb7388b5fa0 R15: 00007ffc1f3c0f78 [ 283.447042][ T7289] [ 283.584086][ T7036] team0: Port device team_slave_0 added [ 283.623181][ T7036] team0: Port device team_slave_1 added [ 284.150755][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.158655][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.158695][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.356140][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.357751][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.357780][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.045522][ T7036] hsr_slave_0: entered promiscuous mode [ 285.057563][ T7036] hsr_slave_1: entered promiscuous mode [ 285.067532][ T7036] debugfs: 'hsr0' already exists in 'hsr' [ 285.073718][ T7036] Cannot create hsr debugfs directory [ 288.786909][ T7322] FAULT_INJECTION: forcing a failure. [ 288.786909][ T7322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.802681][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.3.416 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 288.802712][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.802726][ T7322] Call Trace: [ 288.802735][ T7322] [ 288.802745][ T7322] dump_stack_lvl+0xe8/0x150 [ 288.802788][ T7322] should_fail_ex+0x46b/0x600 [ 288.802823][ T7322] _copy_from_user+0x2d/0xb0 [ 288.802856][ T7322] futex_parse_waitv+0x101/0x420 [ 288.802884][ T7322] ? __pfx_futex_wake_mark+0x10/0x10 [ 288.802912][ T7322] ? __pfx_futex_parse_waitv+0x10/0x10 [ 288.802937][ T7322] ? __kmalloc_noprof+0x43e/0x790 [ 288.802969][ T7322] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 288.802991][ T7322] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 288.803022][ T7322] __se_sys_futex_waitv+0x1bd/0x2c0 [ 288.803058][ T7322] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 288.803101][ T7322] ? __x64_sys_futex_waitv+0x20/0xc0 [ 288.803127][ T7322] do_syscall_64+0x166/0x520 [ 288.803157][ T7322] ? trace_irq_disable+0x3b/0x140 [ 288.803186][ T7322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.803211][ T7322] ? clear_bhb_loop+0x70/0xc0 [ 288.803241][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.803264][ T7322] RIP: 0033:0x7f674af0e159 [ 288.803286][ T7322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.803306][ T7322] RSP: 002b:00007f6749166028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 288.803332][ T7322] RAX: ffffffffffffffda RBX: 00007f674b195fa0 RCX: 00007f674af0e159 [ 288.803349][ T7322] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000200000002dc0 [ 288.803365][ T7322] RBP: 00007f674afa503b R08: 0000000000000000 R09: 0000000000000000 [ 288.803380][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.803394][ T7322] R13: 00007f674b196038 R14: 00007f674b195fa0 R15: 00007ffffa5bf098 [ 288.803429][ T7322] [ 289.732986][ T66] bridge_slave_1: left allmulticast mode [ 289.733101][ T66] bridge_slave_1: left promiscuous mode [ 289.734186][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.964235][ T66] bridge_slave_0: left allmulticast mode [ 289.964755][ T66] bridge_slave_0: left promiscuous mode [ 289.965058][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.401783][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.483220][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.564293][ T66] bond0 (unregistering): Released all slaves [ 292.332831][ T66] hsr_slave_0: left promiscuous mode [ 292.376422][ T66] hsr_slave_1: left promiscuous mode [ 292.383779][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.427313][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.372065][ T7372] FAULT_INJECTION: forcing a failure. [ 295.372065][ T7372] name failslab, interval 1, probability 0, space 0, times 0 [ 295.388245][ T7372] CPU: 0 UID: 0 PID: 7372 Comm: syz.2.428 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 295.388276][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.388290][ T7372] Call Trace: [ 295.388299][ T7372] [ 295.388310][ T7372] dump_stack_lvl+0xe8/0x150 [ 295.388353][ T7372] should_fail_ex+0x46b/0x600 [ 295.388392][ T7372] should_failslab+0xa8/0x100 [ 295.388430][ T7372] __kmalloc_noprof+0xfb/0x790 [ 295.388461][ T7372] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 295.388484][ T7372] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 295.388524][ T7372] __se_sys_futex_waitv+0x19b/0x2c0 [ 295.388551][ T7372] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 295.388591][ T7372] ? __x64_sys_futex_waitv+0x20/0xc0 [ 295.388619][ T7372] do_syscall_64+0x166/0x520 [ 295.388647][ T7372] ? trace_irq_disable+0x3b/0x140 [ 295.388677][ T7372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.388700][ T7372] ? clear_bhb_loop+0x70/0xc0 [ 295.388729][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.388752][ T7372] RIP: 0033:0x7f6782a0e159 [ 295.388775][ T7372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.388796][ T7372] RSP: 002b:00007f6780c66028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 295.388822][ T7372] RAX: ffffffffffffffda RBX: 00007f6782c95fa0 RCX: 00007f6782a0e159 [ 295.388839][ T7372] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000200000002dc0 [ 295.388855][ T7372] RBP: 00007f6782aa503b R08: 0000000000000000 R09: 0000000000000000 [ 295.388870][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.388884][ T7372] R13: 00007f6782c96038 R14: 00007f6782c95fa0 R15: 00007ffcb9fb25e8 [ 295.388921][ T7372] [ 295.945828][ T66] team0 (unregistering): Port device team_slave_1 removed [ 296.093729][ T66] team0 (unregistering): Port device team_slave_0 removed [ 297.206881][ T5252] 8021q: adding VLAN 0 to HW filter on device eth5 [ 304.555732][ T7430] jffs2: notice: (7430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 308.205776][ T7473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.455'. [ 312.504414][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.575031][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.587059][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.606819][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.612663][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.858150][ T4905] Bluetooth: hci5: command tx timeout [ 316.197857][ T1159] bridge_slave_1: left allmulticast mode [ 316.197952][ T1159] bridge_slave_1: left promiscuous mode [ 316.198228][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.370412][ T1159] bridge_slave_0: left allmulticast mode [ 316.377037][ T1159] bridge_slave_0: left promiscuous mode [ 316.377353][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.872103][ T4905] Bluetooth: hci5: command tx timeout [ 317.433751][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.435224][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.952193][ T4905] Bluetooth: hci5: command tx timeout [ 320.027585][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.203357][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.293607][ T1159] bond0 (unregistering): Released all slaves [ 321.032255][ T4905] Bluetooth: hci5: command tx timeout [ 321.088353][ T1159] hsr_slave_0: left promiscuous mode [ 321.133687][ T1159] hsr_slave_1: left promiscuous mode [ 321.136594][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.185526][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.287473][ T3167] IPVS: starting estimator thread 0... [ 323.731027][ T7652] IPVS: using max 7 ests per chain, 16800 per kthread [ 323.878544][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 324.112188][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 325.877075][ T7668] bridge0: port 3(syz_tun) entered blocking state [ 325.880298][ T7668] bridge0: port 3(syz_tun) entered disabled state [ 325.887731][ T7668] syz_tun: entered allmulticast mode [ 325.952395][ T7668] syz_tun: entered promiscuous mode [ 325.953635][ T7668] bridge0: port 3(syz_tun) entered blocking state [ 325.953771][ T7668] bridge0: port 3(syz_tun) entered forwarding state [ 326.051162][ T7670] FAULT_INJECTION: forcing a failure. [ 326.051162][ T7670] name failslab, interval 1, probability 0, space 0, times 0 [ 326.051267][ T7670] CPU: 0 UID: 0 PID: 7670 Comm: syz.2.502 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.051293][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.051306][ T7670] Call Trace: [ 326.051314][ T7670] [ 326.051322][ T7670] dump_stack_lvl+0xe8/0x150 [ 326.051358][ T7670] should_fail_ex+0x46b/0x600 [ 326.051390][ T7670] should_failslab+0xa8/0x100 [ 326.051423][ T7670] __kmalloc_cache_noprof+0xa1/0x680 [ 326.051452][ T7670] ? x509_cert_parse+0xfa/0x7a0 [ 326.051480][ T7670] ? x509_cert_parse+0xfa/0x7a0 [ 326.051515][ T7670] x509_cert_parse+0xfa/0x7a0 [ 326.051540][ T7670] ? __pfx_down_read+0x10/0x10 [ 326.051571][ T7670] x509_key_preparse+0x64/0x6d0 [ 326.051602][ T7670] ? __pfx_smack_key_permission+0x10/0x10 [ 326.051631][ T7670] asymmetric_key_preparse+0xb9/0x1b0 [ 326.051659][ T7670] __key_create_or_update+0x3a9/0xa80 [ 326.051698][ T7670] ? __pfx___key_create_or_update+0x10/0x10 [ 326.051741][ T7670] ? lookup_user_key+0xb68/0x1150 [ 326.051779][ T7670] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 326.051815][ T7670] key_create_or_update+0x42/0x60 [ 326.051848][ T7670] __se_sys_add_key+0x349/0x420 [ 326.051873][ T7670] ? __pfx___se_sys_add_key+0x10/0x10 [ 326.051906][ T7670] ? __x64_sys_add_key+0x20/0xc0 [ 326.051929][ T7670] do_syscall_64+0x166/0x520 [ 326.051953][ T7670] ? trace_irq_disable+0x3b/0x140 [ 326.051978][ T7670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.052003][ T7670] ? clear_bhb_loop+0x70/0xc0 [ 326.052029][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.052049][ T7670] RIP: 0033:0x7f6782a0e159 [ 326.052069][ T7670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.052085][ T7670] RSP: 002b:00007f6780c66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 326.052108][ T7670] RAX: ffffffffffffffda RBX: 00007f6782c95fa0 RCX: 00007f6782a0e159 [ 326.052122][ T7670] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 326.052136][ T7670] RBP: 00007f6782aa503b R08: ffffffffffffffff R09: 0000000000000000 [ 326.052149][ T7670] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 326.052161][ T7670] R13: 00007f6782c96038 R14: 00007f6782c95fa0 R15: 00007ffcb9fb25e8 [ 326.052195][ T7670] [ 329.938416][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.940197][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.940412][ T7518] bridge_slave_0: entered allmulticast mode [ 329.974052][ T7518] bridge_slave_0: entered promiscuous mode [ 330.075468][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.075684][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.075897][ T7518] bridge_slave_1: entered allmulticast mode [ 330.117931][ T7518] bridge_slave_1: entered promiscuous mode [ 330.490059][ T7518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.581258][ T7518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.874365][ T7518] team0: Port device team_slave_0 added [ 330.885995][ T7518] team0: Port device team_slave_1 added [ 331.964912][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.964990][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.965019][ T7518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.085225][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.090956][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.090991][ T7518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.607832][ T7518] hsr_slave_0: entered promiscuous mode [ 336.618204][ T7518] hsr_slave_1: entered promiscuous mode [ 336.625317][ T7518] debugfs: 'hsr0' already exists in 'hsr' [ 336.625396][ T7518] Cannot create hsr debugfs directory [ 343.710759][ T7518] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 343.830355][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.883953][ T7518] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.216427][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.243911][ T7518] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.448358][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.478371][ T5252] veth1_vlan: left promiscuous mode [ 344.629480][ T7518] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.747074][ T7518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.543388][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.839096][ T7518] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.815860][ T3167] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.816146][ T3167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.790459][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.790734][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.556980][ T7952] loop0: detected capacity change from 0 to 3904 [ 360.066370][ T7953] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 360.067397][ T7953] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 360.067420][ T7953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 360.067498][ T7953] loop0: [ 360.118498][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.653251][ T8018] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.563'. [ 365.094591][ T7518] veth0_vlan: entered promiscuous mode [ 365.186147][ T7518] veth1_vlan: entered promiscuous mode [ 365.545475][ T7518] veth0_macvtap: entered promiscuous mode [ 365.567399][ T7518] veth1_macvtap: entered promiscuous mode [ 365.692937][ T7518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.841781][ T7518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.355641][ T3172] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.360119][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.360612][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.472447][ T8035] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 366.669093][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.564206][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.570945][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.368957][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.377117][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.472927][ T8065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.575'. [ 373.377900][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.457161][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.474198][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.508869][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.555471][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.671112][ T59] Bluetooth: hci0: command tx timeout [ 378.614871][ T59] Bluetooth: hci0: command tx timeout [ 378.886367][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.893147][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.116616][ T4905] Bluetooth: hci0: command tx timeout [ 391.927203][ T4905] Bluetooth: hci0: command tx timeout [ 440.734991][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.767262][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 498.967473][ T4905] Bluetooth: hci0: command 0x0406 tx timeout [ 502.247410][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.266478][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.211172][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 514.218983][ C0] rcu: 0-....: (10470 ticks this GP) idle=2354/1/0x4000000000000000 softirq=0/0 fqs=1854 rcuc=10472 jiffies(starved) [ 514.232074][ C0] rcu: hardirqs softirqs csw/system [ 514.239560][ C0] rcu: number: 13313 4086 10052 [ 514.246182][ C0] rcu: cputime: 2141 31814 18509 ==> 52480(ms) [ 514.254475][ C0] rcu: (t=10500 jiffies g=24701 q=2076 ncpus=2) [ 514.260968][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 514.272737][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.283456][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 514.290175][ C0] Code: f7 e8 5d ae 48 f6 f7 c3 00 02 00 00 74 05 e8 20 01 75 f6 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 c5 3a f6 65 48 8b 05 ac 14 4b 07 48 85 c0 74 18 5b 41 5e c3 [ 514.310788][ C0] RSP: 0000:ffffc900001576c8 EFLAGS: 00000206 [ 514.317160][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 514.325500][ C0] RDX: 0000000000000002 RSI: ffffffff8d8ca66c RDI: 0000000000000001 [ 514.333660][ C0] RBP: ffffc900001577c8 R08: ffffffff8fb1e77f R09: 1ffffffff1f63cef [ 514.341830][ C0] R10: dffffc0000000000 R11: fffffbfff1f63cf0 R12: dffffc0000000000 [ 514.349832][ C0] R13: 1ffff9200002aee4 R14: ffff8880b8646c90 R15: 0000000000000246 [ 514.357836][ C0] FS: 0000000000000000(0000) GS:ffff888125bd1000(0000) knlGS:0000000000000000 [ 514.366885][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.373486][ C0] CR2: 00007fbd33b79d30 CR3: 000000002511e000 CR4: 00000000003526f0 [ 514.381586][ C0] Call Trace: [ 514.384946][ C0] [ 514.388093][ C0] rt_mutex_slowunlock+0x4ee/0xa30 [ 514.393620][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 514.399281][ C0] ? rt_spin_trylock+0x10c/0x2b0 [ 514.404276][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 514.410444][ C0] ? kmem_cache_alloc_node_noprof+0x29e/0x660 [ 514.416929][ C0] rt_spin_unlock+0x10f/0x200 [ 514.421839][ C0] kmem_cache_alloc_node_noprof+0x29e/0x660 [ 514.427926][ C0] ? __alloc_skb+0x1db/0x7a0 [ 514.432678][ C0] ? __alloc_skb+0x1db/0x7a0 [ 514.437714][ C0] __alloc_skb+0x1db/0x7a0 [ 514.442526][ C0] __netdev_alloc_skb+0xc1/0x4b0 [ 514.447873][ C0] __ieee80211_beacon_get+0xc97/0x1820 [ 514.453887][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 514.460039][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 514.467410][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 514.474249][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 514.480379][ C0] __iterate_interfaces+0x2af/0x5a0 [ 514.486032][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 514.492125][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 514.499440][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 514.506321][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 514.515147][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 514.521506][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 514.527662][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 514.534054][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 514.539885][ C0] handle_softirqs+0x1da/0x6d0 [ 514.545268][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 514.552818][ C0] run_ktimerd+0x6a/0x100 [ 514.557394][ C0] smpboot_thread_fn+0x565/0xa70 [ 514.562687][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 514.568292][ C0] kthread+0x38b/0x470 [ 514.572640][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 514.578125][ C0] ? __pfx_kthread+0x10/0x10 [ 514.583123][ C0] ret_from_fork+0x514/0xb70 [ 514.588125][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 514.593515][ C0] ? __switch_to+0xc89/0x1420 [ 514.598504][ C0] ? __pfx_kthread+0x10/0x10 [ 514.603331][ C0] ret_from_fork_asm+0x1a/0x30 [ 514.609068][ C0]