last executing test programs: 3.070419431s ago: executing program 0 (id=3838): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) fsopen(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 2.956532024s ago: executing program 1 (id=3839): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000010)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}}, 0x28) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x400, 0x4) sendto$inet(r0, &(0x7f0000001000)='\x00'/6607, 0x19cf, 0x40, 0x0, 0x0) sendto$inet(r0, &(0x7f0000005000)='\x00'/16384, 0x4000, 0x40, 0x0, 0x0) 2.931196344s ago: executing program 3 (id=3840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) unshare(0x22020600) syz_open_dev$usbfs(0x0, 0x9, 0x101301) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 2.895842585s ago: executing program 0 (id=3841): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000010)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}}, 0x28) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x400, 0x4) sendto$inet(r0, &(0x7f0000001000)='\x00'/2230, 0x8b6, 0x40, 0x0, 0x0) 2.774804579s ago: executing program 1 (id=3842): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) close(r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r1) close(0xffffffffffffffff) 1.957333379s ago: executing program 3 (id=3845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000010600000000000000000000000000000000000000000f00030073797a6b616c6c6572300000180012800d00010076736f636b6d6f6e00000004000280"], 0x48}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00'}) 1.956650829s ago: executing program 2 (id=3853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) unshare(0x22020600) syz_open_dev$usbfs(0x0, 0x9, 0x101301) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 1.93240929s ago: executing program 0 (id=3846): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000500)={0x0, 0x3db1, 0x80, 0x2, 0x1e0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x65, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x650, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xa0}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 1.845494102s ago: executing program 1 (id=3847): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syslog(0x3, &(0x7f0000000080)=""/206, 0xce) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x5, 0x4, 0x4, 0x200, 0x5, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x20, 0x2, 0x7, "f35051b9"}, 0x0, 0x2, {0x0}, 0x3}) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1) tkill(r3, 0xb) 1.761909284s ago: executing program 3 (id=3848): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x9, 0x201, 0xffffffff, 0x9}, 0x10) write(r3, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) 1.649936777s ago: executing program 0 (id=3849): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) fsopen(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x801) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 1.510512451s ago: executing program 0 (id=3850): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000010)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}}, 0x28) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x400, 0x4) sendto$inet(r0, &(0x7f0000001000)='\x00'/6607, 0x19cf, 0x40, 0x0, 0x0) sendto$inet(r0, &(0x7f0000005000)='\x00'/16384, 0x4000, 0x40, 0x0, 0x0) 1.375189484s ago: executing program 1 (id=3851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x301}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/256, 0x100}], 0x1}, 0x0) 1.15348252s ago: executing program 1 (id=3852): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000), 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000200)="0000301200000000000000000f000008000100010000000000000000", 0x1c, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) 783.5111ms ago: executing program 2 (id=3854): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 577.269015ms ago: executing program 2 (id=3855): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000010)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000020)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}}, 0x28) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x400, 0x4) sendto$inet(r0, &(0x7f0000001000)='\x00'/2231, 0x8b7, 0x40, 0x0, 0x0) 564.079815ms ago: executing program 0 (id=3856): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) close(r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r1) close(0xffffffffffffffff) 482.472067ms ago: executing program 2 (id=3857): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000e0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r3, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001400010604000000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020020010db8000000000000000000000001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000001800010605000000000000000a000000030001000000000008000f00e803000008000400", @ANYRES32=r3], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000b00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000c00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x3b) sendto$inet6(r4, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000d00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 367.68834ms ago: executing program 2 (id=3858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000800)="12345678", 0x8, 0x0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="4500001c00000000400100007f0000017f000001"], 0x1c) 277.722773ms ago: executing program 3 (id=3859): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) fsopen(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x801) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 226.853704ms ago: executing program 2 (id=3860): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syslog(0x3, &(0x7f0000000080)=""/206, 0xce) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x5, 0x4, 0x4, 0x200, 0x5, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x20, 0x2, 0x7, "f35051b9"}, 0x0, 0x2, {0x0}, 0x3}) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1) tkill(r3, 0xb) 149.711256ms ago: executing program 3 (id=3861): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0 1\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0) 96.158247ms ago: executing program 1 (id=3862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) unshare(0x22020600) syz_open_dev$usbfs(0x0, 0x9, 0x101301) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 0s ago: executing program 3 (id=3863): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0300000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0400000000000000"}, {0x10, 0x110, 0xe}], 0x30}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x24, &(0x7f0000000400)=[{&(0x7f0000000500)='hello', 0x5}], 0x1, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='world', 0x5}], 0x1, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) kernel console output (not intermixed with test programs): netlink: 20 bytes leftover after parsing attributes in process `syz.3.2506'. [ 919.164228][T13767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 919.654135][T13767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 921.428344][T13946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2515'. [ 922.668803][ T2926] hsr_slave_0: left promiscuous mode [ 922.722197][ T2926] hsr_slave_1: left promiscuous mode [ 922.735060][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.742592][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.779651][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.794523][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.828421][ T2926] bridge_slave_1: left allmulticast mode [ 922.834145][ T2926] bridge_slave_1: left promiscuous mode [ 922.876132][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.908379][ T2926] bridge_slave_0: left allmulticast mode [ 922.914266][ T2926] bridge_slave_0: left promiscuous mode [ 922.929696][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.053527][ T2926] veth1_macvtap: left promiscuous mode [ 923.087215][ T2926] veth0_macvtap: left promiscuous mode [ 923.093138][ T2926] veth1_vlan: left promiscuous mode [ 923.133938][ T2926] veth0_vlan: left promiscuous mode [ 925.987036][ T2926] team0 (unregistering): Port device 26±ÿ removed [ 926.075850][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 926.142689][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.151815][ T2926] bond_slave_1 (unregistering): left allmulticast mode [ 926.269542][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.294564][ T2926] bond_slave_0 (unregistering): left allmulticast mode [ 926.977092][ T2926] bond0 (unregistering): Released all slaves [ 927.073862][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2545'. [ 927.127917][T13987] netlink: 'syz.3.2532': attribute type 10 has an invalid length. [ 927.139374][T13987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2532'. [ 927.347721][T13767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.416538][T13767] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.456075][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.463338][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.605079][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.612292][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.018835][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2553'. [ 928.188236][T13767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.370681][T13767] veth0_vlan: entered promiscuous mode [ 928.433923][T13767] veth1_vlan: entered promiscuous mode [ 928.515580][T14048] netlink: 'syz.0.2556': attribute type 10 has an invalid length. [ 928.540245][T14048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2556'. [ 928.583908][T13767] veth0_macvtap: entered promiscuous mode [ 928.595717][T13767] veth1_macvtap: entered promiscuous mode [ 928.616043][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.626826][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.676453][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.740868][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.751427][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.763158][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.774961][T13767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.502288][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.558854][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.604513][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.676338][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.687995][T13767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.699038][T13767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.710875][T13767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.817896][T13767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.859868][T13767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.904148][T13767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.086202][T13767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.949491][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.964960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.062215][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.076741][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.359473][T14098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2573'. [ 931.561275][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'. [ 931.574855][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'. [ 931.760047][T14114] FAULT_INJECTION: forcing a failure. [ 931.760047][T14114] name failslab, interval 1, probability 100, space 0, times 10 [ 931.761582][T14113] FAULT_INJECTION: forcing a failure. [ 931.761582][T14113] name failslab, interval 1, probability 100, space 0, times 10 [ 931.773214][ C0] FAULT_INJECTION: forcing a failure. [ 931.773214][ C0] name failslab, interval 1, probability 100, space 0, times 10 [ 931.773342][ C1] FAULT_INJECTION: forcing a failure. [ 931.773342][ C1] name failslab, interval 1, probability 100, space 0, times 10 [ 931.773404][ C0] CPU: 0 PID: 14114 Comm: syz.2.2579 Not tainted syzkaller #0 [ 931.773421][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.773434][ C0] Call Trace: [ 931.773489][ C0] [ 931.773506][ C0] dump_stack_lvl+0x18c/0x250 [ 931.773599][ C0] ? show_regs_print_info+0x20/0x20 [ 931.773651][ C0] ? load_image+0x420/0x420 [ 931.773708][ C0] should_fail_ex+0x394/0x4c0 [ 931.773745][ C0] should_failslab+0x9/0x20 [ 931.773773][ C0] slab_pre_alloc_hook+0x59/0x300 [ 931.773806][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 931.773832][ C0] ? __alloc_skb+0x103/0x2c0 [ 931.773874][ C0] __alloc_skb+0x103/0x2c0 [ 931.773898][ C0] aoecmd_cfg+0x2c5/0xa50 [ 931.773936][ C0] ? _raw_spin_unlock+0x40/0x40 [ 931.774013][ C0] ? aoecmd_cfg+0x10e/0xa50 [ 931.774034][ C0] ? enqueue_timer+0x23d/0x550 [ 931.774059][ C0] ? ktcomplete+0x2a0/0x2a0 [ 931.774098][ C0] call_timer_fn+0x189/0x540 [ 931.774116][ C0] ? skbfree+0x340/0x340 [ 931.774137][ C0] ? call_timer_fn+0xd2/0x540 [ 931.774155][ C0] ? __run_timers+0x810/0x810 [ 931.774182][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 931.774209][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 931.774231][ C0] ? skbfree+0x340/0x340 [ 931.774255][ C0] __run_timers+0x570/0x810 [ 931.774287][ C0] ? detach_timer+0x2b0/0x2b0 [ 931.774316][ C0] ? lock_chain_count+0x20/0x20 [ 931.774349][ C0] run_timer_softirq+0x67/0xf0 [ 931.774367][ C0] handle_softirqs+0x27d/0x820 [ 931.774385][ C0] ? read_tsc+0x9/0x20 [ 931.774413][ C0] ? ktime_get+0x24b/0x280 [ 931.774436][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 931.774459][ C0] ? do_softirq+0x1a0/0x1a0 [ 931.774482][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 931.774509][ C0] __irq_exit_rcu+0xd3/0x190 [ 931.774528][ C0] ? irq_exit_rcu+0x20/0x20 [ 931.774554][ C0] irq_exit_rcu+0x9/0x20 [ 931.774571][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 931.774595][ C0] [ 931.774630][ C0] [ 931.774664][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 931.774752][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 931.774778][ C0] Code: ed 01 00 00 e8 5e 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 4f 7e 1b 00 eb 06 e8 48 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 931.774822][ C0] RSP: 0018:ffffc90004d2f8c0 EFLAGS: 00000283 [ 931.774866][ C0] RAX: ffffffff816bf338 RBX: ffffc90004d2fa3f RCX: 0000000000080000 [ 931.774880][ C0] RDX: ffffc9001977c000 RSI: 0000000000004833 RDI: 0000000000004834 [ 931.774893][ C0] RBP: ffffc90004d2fa10 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 931.774907][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8d8ce1e0 [ 931.774921][ C0] R13: 1ffffffff19f96d8 R14: ffffffff8d8ce238 R15: dffffc0000000000 [ 931.774943][ C0] ? console_flush_all+0x878/0xcf0 [ 931.774976][ C0] ? console_flush_all+0x10b/0xcf0 [ 931.775007][ C0] ? is_console_locked+0x20/0x20 [ 931.775029][ C0] ? lock_chain_count+0x20/0x20 [ 931.775053][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 931.775080][ C0] console_unlock+0xad/0x350 [ 931.775105][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 931.775138][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 931.775167][ C0] vprintk_emit+0x497/0x610 [ 931.775192][ C0] ? printk_sprint+0x460/0x460 [ 931.775212][ C0] ? get_random_u8+0x4af/0x980 [ 931.775236][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 931.775260][ C0] ? get_random_u8+0x16c/0x980 [ 931.775282][ C0] ? get_random_u8+0x516/0x980 [ 931.775313][ C0] _printk+0xde/0x130 [ 931.775344][ C0] ? load_image+0x420/0x420 [ 931.775372][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 931.775399][ C0] should_fail_ex+0x375/0x4c0 [ 931.775426][ C0] should_failslab+0x9/0x20 [ 931.775451][ C0] slab_pre_alloc_hook+0x59/0x300 [ 931.775483][ C0] kmem_cache_alloc_lru+0x4d/0x2b0 [ 931.775508][ C0] ? sock_alloc_inode+0x28/0xc0 [ 931.775567][ C0] sock_alloc_inode+0x28/0xc0 [ 931.775587][ C0] ? sockfs_init_fs_context+0xb0/0xb0 [ 931.775608][ C0] new_inode_pseudo+0x63/0x1d0 [ 931.775638][ C0] __sock_create+0x12d/0x940 [ 931.775655][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 931.775684][ C0] __sys_socket+0xd7/0x1b0 [ 931.775705][ C0] __x64_sys_socket+0x7a/0x90 [ 931.775730][ C0] do_syscall_64+0x55/0xb0 [ 931.775748][ C0] ? clear_bhb_loop+0x40/0x90 [ 931.775766][ C0] ? clear_bhb_loop+0x40/0x90 [ 931.775788][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.775807][ C0] RIP: 0033:0x7f693b59e019 [ 931.775829][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.775843][ C0] RSP: 002b:00007f693c483028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 931.775863][ C0] RAX: ffffffffffffffda RBX: 00007f693b825fa0 RCX: 00007f693b59e019 [ 931.775877][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 931.775888][ C0] RBP: 00007f693b63500c R08: 0000000000000000 R09: 0000000000000000 [ 931.775899][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.775911][ C0] R13: 00007f693b826038 R14: 00007f693b825fa0 R15: 00007fffbf631268 [ 931.775938][ C0] [ 931.775946][ C1] CPU: 1 PID: 14113 Comm: syz.0.2580 Not tainted syzkaller #0 [ 931.775964][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.775975][ C1] Call Trace: [ 931.775979][ C0] aoe: skb alloc failure [ 931.775981][ C1] [ 931.775989][ C1] dump_stack_lvl+0x18c/0x250 [ 931.775990][ C0] FAULT_INJECTION: forcing a failure. [ 931.775990][ C0] name failslab, interval 1, probability 100, space 0, times 9 [ 931.776012][ C1] ? verify_lock_unused+0x140/0x140 [ 931.776034][ C1] ? show_regs_print_info+0x20/0x20 [ 931.776054][ C1] ? load_image+0x420/0x420 [ 931.776090][ C1] should_fail_ex+0x394/0x4c0 [ 931.776117][ C1] should_failslab+0x9/0x20 [ 931.776141][ C1] slab_pre_alloc_hook+0x59/0x300 [ 931.776172][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 931.776198][ C1] ? __alloc_skb+0x103/0x2c0 [ 931.776226][ C1] __alloc_skb+0x103/0x2c0 [ 931.776248][ C1] ndisc_alloc_skb+0xa6/0x450 [ 931.776317][ C1] ndisc_send_rs+0x27d/0x690 [ 931.776338][ C1] ? ipv6_get_lladdr+0x2b/0x3e0 [ 931.776402][ C1] addrconf_rs_timer+0x36b/0x640 [ 931.776428][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 931.776458][ C1] call_timer_fn+0x189/0x540 [ 931.776476][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 931.776496][ C1] ? call_timer_fn+0xd2/0x540 [ 931.776514][ C1] ? __run_timers+0x810/0x810 [ 931.776540][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 931.776566][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 931.776588][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 931.776611][ C1] __run_timers+0x570/0x810 [ 931.776643][ C1] ? detach_timer+0x2b0/0x2b0 [ 931.776667][ C1] ? lock_chain_count+0x20/0x20 [ 931.776694][ C1] run_timer_softirq+0x67/0xf0 [ 931.776713][ C1] handle_softirqs+0x27d/0x820 [ 931.776730][ C1] ? read_tsc+0x9/0x20 [ 931.776749][ C1] ? ktime_get+0x24b/0x280 [ 931.776772][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 931.776795][ C1] ? do_softirq+0x1a0/0x1a0 [ 931.776817][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 931.776844][ C1] __irq_exit_rcu+0xd3/0x190 [ 931.776863][ C1] ? irq_exit_rcu+0x20/0x20 [ 931.776889][ C1] irq_exit_rcu+0x9/0x20 [ 931.776905][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 931.776929][ C1] [ 931.776935][ C1] [ 931.776942][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 931.776962][ C1] RIP: 0010:vprintk_emit+0x46f/0x610 [ 931.776984][ C1] Code: 85 3f 01 00 00 e8 61 a1 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 50 a1 1b 00 eb 06 e8 49 a1 1b 00 fb 48 c7 c7 80 61 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 b4 [ 931.776999][ C1] RSP: 0000:ffffc90004b4f860 EFLAGS: 00000293 [ 931.777015][ C1] RAX: ffffffff816bd037 RBX: ffffffff816bcedb RCX: ffff888028de9e00 [ 931.777029][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d126180 [ 931.777041][ C1] RBP: ffffc90004b4f950 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 931.777054][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: dffffc0000000000 [ 931.777068][ C1] R13: 1ffff92000969f10 R14: 0000000000000061 R15: 0000000000000061 [ 931.777084][ C1] ? vprintk_emit+0x30b/0x610 [ 931.777106][ C1] ? vprintk_emit+0x467/0x610 [ 931.777133][ C1] ? vprintk_emit+0x30b/0x610 [ 931.777156][ C1] ? printk_sprint+0x460/0x460 [ 931.777176][ C1] ? get_random_u8+0x4af/0x980 [ 931.777198][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 931.777227][ C1] ? get_random_u8+0x16c/0x980 [ 931.777249][ C1] ? get_random_u8+0x516/0x980 [ 931.777280][ C1] _printk+0xde/0x130 [ 931.777310][ C1] ? load_image+0x420/0x420 [ 931.777338][ C1] ? __might_sleep+0xe0/0xe0 [ 931.777361][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 931.777386][ C1] should_fail_ex+0x375/0x4c0 [ 931.777413][ C1] should_failslab+0x9/0x20 [ 931.777437][ C1] slab_pre_alloc_hook+0x59/0x300 [ 931.777468][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 931.777492][ C1] ? ptlock_alloc+0x20/0x70 [ 931.777516][ C1] ptlock_alloc+0x20/0x70 [ 931.777534][ C1] pte_alloc_one+0xcc/0x540 [ 931.777557][ C1] ? pfn_modify_allowed+0x560/0x560 [ 931.777578][ C1] ? mt_find+0x169/0x640 [ 931.777598][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 931.777625][ C1] __do_fault+0xd7/0x4d0 [ 931.777643][ C1] ? handle_mm_fault+0x181f/0x4a50 [ 931.777664][ C1] handle_mm_fault+0x1964/0x4a50 [ 931.777685][ C1] ? handle_mm_fault+0xe6/0x4a50 [ 931.777714][ C1] ? numa_migrate_prep+0x350/0x350 [ 931.777747][ C1] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 931.777768][ C1] do_user_addr_fault+0x736/0x12d0 [ 931.777803][ C1] exc_page_fault+0x64/0x100 [ 931.777829][ C1] asm_exc_page_fault+0x26/0x30 [ 931.777847][ C1] RIP: 0033:0x7f6044c72740 [ 931.777862][ C1] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 e1 92 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 931.777877][ C1] RSP: 002b:00007ffef6fd9a00 EFLAGS: 00010202 [ 931.777892][ C1] RAX: 0000001b2e224000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 931.777904][ C1] RDX: 0000001b2e223ffc RSI: 00000000003ffde8 RDI: 00007f6045b55700 [ 931.777917][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f6045012000 [ 931.777928][ C1] R10: 00007f6045b55700 R11: 0000000000000000 R12: 0000000000000000 [ 931.777940][ C1] R13: 0000000000000b68 R14: ffffffff81321540 R15: 00007f6045b55720 [ 931.777954][ C1] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 931.777993][ C1] [ 931.778000][ C0] CPU: 0 PID: 14114 Comm: syz.2.2579 Not tainted syzkaller #0 [ 931.778016][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.778025][ C0] Call Trace: [ 931.778032][ C0] [ 931.778028][ C1] FAULT_INJECTION: forcing a failure. [ 931.778028][ C1] name failslab, interval 1, probability 100, space 0, times 8 [ 931.778040][ C0] dump_stack_lvl+0x18c/0x250 [ 931.778063][ C0] ? show_regs_print_info+0x20/0x20 [ 931.778083][ C0] ? load_image+0x420/0x420 [ 931.778107][ C0] ? vprintk_emit+0x53d/0x610 [ 931.778131][ C0] ? printk_sprint+0x460/0x460 [ 931.778160][ C0] should_fail_ex+0x394/0x4c0 [ 931.778193][ C0] should_failslab+0x9/0x20 [ 931.778217][ C0] slab_pre_alloc_hook+0x59/0x300 [ 931.778242][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 931.778268][ C0] ? __alloc_skb+0x103/0x2c0 [ 931.778291][ C0] __alloc_skb+0x103/0x2c0 [ 931.778313][ C0] aoecmd_cfg+0x2c5/0xa50 [ 931.778335][ C0] ? _raw_spin_unlock+0x40/0x40 [ 931.778361][ C0] ? aoecmd_cfg+0x10e/0xa50 [ 931.778381][ C0] ? enqueue_timer+0x23d/0x550 [ 931.778400][ C0] ? ktcomplete+0x2a0/0x2a0 [ 931.778438][ C0] call_timer_fn+0x189/0x540 [ 931.778456][ C0] ? skbfree+0x340/0x340 [ 931.778477][ C0] ? call_timer_fn+0xd2/0x540 [ 931.778495][ C0] ? __run_timers+0x810/0x810 [ 931.778522][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 931.778548][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 931.778570][ C0] ? skbfree+0x340/0x340 [ 931.778594][ C0] __run_timers+0x570/0x810 [ 931.778626][ C0] ? detach_timer+0x2b0/0x2b0 [ 931.778650][ C0] ? lock_chain_count+0x20/0x20 [ 931.778677][ C0] run_timer_softirq+0x67/0xf0 [ 931.778696][ C0] handle_softirqs+0x27d/0x820 [ 931.778714][ C0] ? read_tsc+0x9/0x20 [ 931.778741][ C0] ? ktime_get+0x24b/0x280 [ 931.778764][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 931.778787][ C0] ? do_softirq+0x1a0/0x1a0 [ 931.778809][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 931.778836][ C0] __irq_exit_rcu+0xd3/0x190 [ 931.778855][ C0] ? irq_exit_rcu+0x20/0x20 [ 931.778881][ C0] irq_exit_rcu+0x9/0x20 [ 931.778898][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 931.778922][ C0] [ 931.778928][ C0] [ 931.778935][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 931.778955][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 931.778978][ C0] Code: ed 01 00 00 e8 5e 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 4f 7e 1b 00 eb 06 e8 48 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 931.778993][ C0] RSP: 0018:ffffc90004d2f8c0 EFLAGS: 00000283 [ 931.779009][ C0] RAX: ffffffff816bf338 RBX: ffffc90004d2fa3f RCX: 0000000000080000 [ 931.779023][ C0] RDX: ffffc9001977c000 RSI: 0000000000004833 RDI: 0000000000004834 [ 931.779035][ C0] RBP: ffffc90004d2fa10 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 931.779049][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8d8ce1e0 [ 931.779063][ C0] R13: 1ffffffff19f96d8 R14: ffffffff8d8ce238 R15: dffffc0000000000 [ 931.779084][ C0] ? console_flush_all+0x878/0xcf0 [ 931.779116][ C0] ? console_flush_all+0x10b/0xcf0 [ 931.779147][ C0] ? is_console_locked+0x20/0x20 [ 931.779170][ C0] ? lock_chain_count+0x20/0x20 [ 931.779194][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 931.779220][ C0] console_unlock+0xad/0x350 [ 931.779244][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 931.779272][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 931.779297][ C0] vprintk_emit+0x497/0x610 [ 931.779321][ C0] ? printk_sprint+0x460/0x460 [ 931.779341][ C0] ? get_random_u8+0x4af/0x980 [ 931.779364][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 931.779387][ C0] ? get_random_u8+0x16c/0x980 [ 931.779410][ C0] ? get_random_u8+0x516/0x980 [ 931.779441][ C0] _printk+0xde/0x130 [ 931.779471][ C0] ? load_image+0x420/0x420 [ 931.779499][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 931.779526][ C0] should_fail_ex+0x375/0x4c0 [ 931.779554][ C0] should_failslab+0x9/0x20 [ 931.779578][ C0] slab_pre_alloc_hook+0x59/0x300 [ 931.779609][ C0] kmem_cache_alloc_lru+0x4d/0x2b0 [ 931.779634][ C0] ? sock_alloc_inode+0x28/0xc0 [ 931.779660][ C0] sock_alloc_inode+0x28/0xc0 [ 931.779680][ C0] ? sockfs_init_fs_context+0xb0/0xb0 [ 931.779701][ C0] new_inode_pseudo+0x63/0x1d0 [ 931.779728][ C0] __sock_create+0x12d/0x940 [ 931.779744][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 931.779773][ C0] __sys_socket+0xd7/0x1b0 [ 931.779795][ C0] __x64_sys_socket+0x7a/0x90 [ 931.779813][ C0] do_syscall_64+0x55/0xb0 [ 931.779831][ C0] ? clear_bhb_loop+0x40/0x90 [ 931.779850][ C0] ? clear_bhb_loop+0x40/0x90 [ 931.779871][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.779889][ C0] RIP: 0033:0x7f693b59e019 [ 931.779903][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.779918][ C0] RSP: 002b:00007f693c483028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 931.779937][ C0] RAX: ffffffffffffffda RBX: 00007f693b825fa0 RCX: 00007f693b59e019 [ 931.779950][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 931.779961][ C0] RBP: 00007f693b63500c R08: 0000000000000000 R09: 0000000000000000 [ 931.779973][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.779984][ C0] R13: 00007f693b826038 R14: 00007f693b825fa0 R15: 00007fffbf631268 [ 931.780011][ C0] [ 931.780018][ C0] aoe: skb alloc failure [ 931.780018][ C1] CPU: 1 PID: 14113 Comm: syz.0.2580 Not tainted syzkaller #0 [ 931.780027][ C0] FAULT_INJECTION: forcing a failure. [ 931.780027][ C0] name failslab, interval 1, probability 100, space 0, times 7 [ 931.780037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.780048][ C1] Call Trace: [ 931.780055][ C1] [ 931.780061][ C1] dump_stack_lvl+0x18c/0x250 [ 931.780081][ C1] ? verify_lock_unused+0x140/0x140 [ 931.780102][ C1] ? show_regs_print_info+0x20/0x20 [ 931.780122][ C1] ? load_image+0x420/0x420 [ 931.780158][ C1] should_fail_ex+0x394/0x4c0 [ 931.780185][ C1] should_failslab+0x9/0x20 [ 931.780210][ C1] slab_pre_alloc_hook+0x59/0x300 [ 931.780246][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 931.780271][ C1] ? __alloc_skb+0x103/0x2c0 [ 931.780294][ C1] __alloc_skb+0x103/0x2c0 [ 931.780316][ C1] ndisc_alloc_skb+0xa6/0x450 [ 931.780339][ C1] ndisc_send_rs+0x27d/0x690 [ 931.780359][ C1] ? ipv6_get_lladdr+0x378/0x3e0 [ 931.780383][ C1] ? ipv6_get_lladdr+0x2b/0x3e0 [ 931.780410][ C1] addrconf_rs_timer+0x36b/0x640 [ 931.780435][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 931.780464][ C1] call_timer_fn+0x189/0x540 [ 931.780483][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 931.780502][ C1] ? call_timer_fn+0xd2/0x540 [ 931.780520][ C1] ? __run_timers+0x810/0x810 [ 931.780546][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 931.780573][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 931.780595][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 931.780617][ C1] __run_timers+0x570/0x810 [ 931.780649][ C1] ? detach_timer+0x2b0/0x2b0 [ 931.780673][ C1] ? lock_chain_count+0x20/0x20 [ 931.780700][ C1] run_timer_softirq+0x67/0xf0 [ 931.780718][ C1] handle_softirqs+0x27d/0x820 [ 931.780736][ C1] ? read_tsc+0x9/0x20 [ 931.780755][ C1] ? ktime_get+0x24b/0x280 [ 931.780778][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 931.780800][ C1] ? do_softirq+0x1a0/0x1a0 [ 931.780823][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 931.780849][ C1] __irq_exit_rcu+0xd3/0x190 [ 931.780868][ C1] ? irq_exit_rcu+0x20/0x20 [ 931.780893][ C1] irq_exit_rcu+0x9/0x20 [ 931.780911][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 931.780934][ C1] [ 931.780940][ C1] [ 931.780947][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 931.780967][ C1] RIP: 0010:vprintk_emit+0x46f/0x610 [ 931.780989][ C1] Code: 85 3f 01 00 00 e8 61 a1 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 50 a1 1b 00 eb 06 e8 49 a1 1b 00 fb 48 c7 c7 80 61 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 b4 [ 931.781004][ C1] RSP: 0000:ffffc90004b4f860 EFLAGS: 00000293 [ 931.781020][ C1] RAX: ffffffff816bd037 RBX: ffffffff816bcedb RCX: ffff888028de9e00 [ 931.781033][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d126180 [ 931.781045][ C1] RBP: ffffc90004b4f950 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 931.781059][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: dffffc0000000000 [ 931.781072][ C1] R13: 1ffff92000969f10 R14: 0000000000000061 R15: 0000000000000061 [ 931.781088][ C1] ? vprintk_emit+0x30b/0x610 [ 931.781111][ C1] ? vprintk_emit+0x467/0x610 [ 931.781137][ C1] ? vprintk_emit+0x30b/0x610 [ 931.781160][ C1] ? printk_sprint+0x460/0x460 [ 931.781180][ C1] ? get_random_u8+0x4af/0x980 [ 931.781202][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 931.781231][ C1] ? get_random_u8+0x16c/0x980 [ 931.781261][ C1] ? get_random_u8+0x516/0x980 [ 931.781292][ C1] _printk+0xde/0x130 [ 931.781323][ C1] ? load_image+0x420/0x420 [ 931.781351][ C1] ? __might_sleep+0xe0/0xe0 [ 931.781373][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 931.781398][ C1] should_fail_ex+0x375/0x4c0 [ 931.781425][ C1] should_failslab+0x9/0x20 [ 931.781450][ C1] slab_pre_alloc_hook+0x59/0x300 [ 931.781481][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 931.781505][ C1] ? ptlock_alloc+0x20/0x70 [ 931.781527][ C1] ptlock_alloc+0x20/0x70 [ 931.781546][ C1] pte_alloc_one+0xcc/0x540 [ 931.781567][ C1] ? pfn_modify_allowed+0x560/0x560 [ 931.781589][ C1] ? mt_find+0x169/0x640 [ 931.781608][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 931.781635][ C1] __do_fault+0xd7/0x4d0 [ 931.781652][ C1] ? handle_mm_fault+0x181f/0x4a50 [ 931.781673][ C1] handle_mm_fault+0x1964/0x4a50 [ 931.781694][ C1] ? handle_mm_fault+0xe6/0x4a50 [ 931.781722][ C1] ? numa_migrate_prep+0x350/0x350 [ 931.781757][ C1] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 931.781778][ C1] do_user_addr_fault+0x736/0x12d0 [ 931.781812][ C1] exc_page_fault+0x64/0x100 [ 931.781838][ C1] asm_exc_page_fault+0x26/0x30 [ 931.781856][ C1] RIP: 0033:0x7f6044c72740 [ 931.781869][ C1] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 e1 92 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 931.781884][ C1] RSP: 002b:00007ffef6fd9a00 EFLAGS: 00010202 [ 931.781899][ C1] RAX: 0000001b2e224000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 931.781911][ C1] RDX: 0000001b2e223ffc RSI: 00000000003ffde8 RDI: 00007f6045b55700 [ 931.781924][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f6045012000 [ 931.781935][ C1] R10: 00007f6045b55700 R11: 0000000000000000 R12: 0000000000000000 [ 931.781947][ C1] R13: 0000000000000b68 R14: ffffffff81321540 R15: 00007f6045b55720 [ 931.781961][ C1] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 931.781999][ C1] [ 931.782006][ C0] CPU: 0 PID: 14114 Comm: syz.2.2579 Not tainted syzkaller #0 [ 931.782023][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.782032][ C0] Call Trace: [ 931.782032][ C1] FAULT_INJECTION: forcing a failure. [ 931.782032][ C1] name failslab, interval 1, probability 100, space 0, times 6 [ 931.782039][ C0] [ 931.782047][ C0] dump_stack_lvl+0x18c/0x250 [ 931.782071][ C0] ? show_regs_print_info+0x20/0x20 [ 931.782090][ C0] ? load_image+0x420/0x420 [ 931.782114][ C0] ? vprintk_emit+0x53d/0x610 [ 931.782138][ C0] ? printk_sprint+0x460/0x460 [ 931.782168][ C0] should_fail_ex+0x394/0x4c0 [ 931.782195][ C0] should_failslab+0x9/0x20 [ 931.782220][ C0] slab_pre_alloc_hook+0x59/0x300 [ 931.782250][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 931.782276][ C0] ? __alloc_skb+0x103/0x2c0 [ 931.782298][ C0] __alloc_skb+0x103/0x2c0 [ 931.782320][ C0] aoecmd_cfg+0x2c5/0xa50 [ 931.782342][ C0] ? _raw_spin_unlock+0x40/0x40 [ 931.782367][ C0] ? aoecmd_cfg+0x10e/0xa50 [ 931.782387][ C0] ? enqueue_timer+0x23d/0x550 [ 931.782406][ C0] ? ktcomplete+0x2a0/0x2a0 [ 931.782444][ C0] call_timer_fn+0x189/0x540 [ 931.782462][ C0] ? skbfree+0x340/0x340 [ 931.782483][ C0] ? call_timer_fn+0xd2/0x540 [ 931.782501][ C0] ? __run_timers+0x810/0x810 [ 931.782528][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 931.782554][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 931.782576][ C0] ? skbfree+0x340/0x340 [ 931.782600][ C0] __run_timers+0x570/0x810 [ 931.782632][ C0] ? detach_timer+0x2b0/0x2b0 [ 931.782656][ C0] ? lock_chain_count+0x20/0x20 [ 931.782683][ C0] run_timer_softirq+0x67/0xf0 [ 931.782702][ C0] handle_softirqs+0x27d/0x820 [ 931.782727][ C0] ? read_tsc+0x9/0x20 [ 931.782746][ C0] ? ktime_get+0x24b/0x280 [ 931.782769][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 931.782792][ C0] ? do_softirq+0x1a0/0x1a0 [ 931.782815][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 931.782841][ C0] __irq_exit_rcu+0xd3/0x190 [ 931.782860][ C0] ? irq_exit_rcu+0x20/0x20 [ 931.782886][ C0] irq_exit_rcu+0x9/0x20 [ 931.782903][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 931.782927][ C0] [ 931.782933][ C0] [ 931.782940][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 931.782960][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 931.782983][ C0] Code: ed 01 00 00 e8 5e 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 4f 7e 1b 00 eb 06 e8 48 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 931.782997][ C0] RSP: 0018:ffffc90004d2f8c0 EFLAGS: 00000283 [ 931.783013][ C0] RAX: ffffffff816bf338 RBX: ffffc90004d2fa3f RCX: 0000000000080000 [ 931.783026][ C0] RDX: ffffc9001977c000 RSI: 0000000000004833 RDI: 0000000000004834 [ 931.783038][ C0] RBP: ffffc90004d2fa10 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 931.783052][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8d8ce1e0 [ 931.783066][ C0] R13: 1ffffffff19f96d8 R14: ffffffff8d8ce238 R15: dffffc0000000000 [ 931.783087][ C0] ? console_flush_all+0x878/0xcf0 [ 931.783119][ C0] ? console_flush_all+0x10b/0xcf0 [ 931.783150][ C0] ? is_console_locked+0x20/0x20 [ 931.783172][ C0] ? lock_chain_count+0x20/0x20 [ 931.783196][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 931.783223][ C0] console_unlock+0xad/0x350 [ 931.783247][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 931.783276][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 931.783301][ C0] vprintk_emit+0x497/0x610 [ 931.783325][ C0] ? printk_sprint+0x460/0x460 [ 931.783345][ C0] ? get_random_u8+0x4af/0x980 [ 931.783368][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 931.783391][ C0] ? get_random_u8+0x16c/0x980 [ 931.783413][ C0] ? get_random_u8+0x516/0x980 [ 931.783444][ C0] _printk+0xde/0x130 [ 931.783474][ C0] ? load_image+0x420/0x420 [ 931.783502][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 931.783528][ C0] should_fail_ex+0x375/0x4c0 [ 931.783556][ C0] should_failslab+0x9/0x20 [ 931.783580][ C0] slab_pre_alloc_hook+0x59/0x300 [ 931.783611][ C0] kmem_cache_alloc_lru+0x4d/0x2b0 [ 931.783636][ C0] ? sock_alloc_inode+0x28/0xc0 [ 931.783663][ C0] sock_alloc_inode+0x28/0xc0 [ 931.783683][ C0] ? sockfs_init_fs_context+0xb0/0xb0 [ 931.783703][ C0] new_inode_pseudo+0x63/0x1d0 [ 931.783732][ C0] __sock_create+0x12d/0x940 [ 931.783748][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 931.783777][ C0] __sys_socket+0xd7/0x1b0 [ 931.783798][ C0] __x64_sys_socket+0x7a/0x90 [ 931.783817][ C0] do_syscall_64+0x55/0xb0 [ 931.783835][ C0] ? clear_bhb_loop+0x40/0x90 [ 931.783853][ C0] ? clear_bhb_loop+0x40/0x90 [ 931.783875][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.783893][ C0] RIP: 0033:0x7f693b59e019 [ 931.783907][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.783922][ C0] RSP: 002b:00007f693c483028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 931.783940][ C0] RAX: ffffffffffffffda RBX: 00007f693b825fa0 RCX: 00007f693b59e019 [ 931.783953][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 931.783964][ C0] RBP: 00007f693b63500c R08: 0000000000000000 R09: 0000000000000000 [ 931.783976][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.783987][ C0] R13: 00007f693b826038 R14: 00007f693b825fa0 R15: 00007fffbf631268 [ 931.784014][ C0] [ 931.784021][ C0] aoe: skb alloc failure [ 931.784021][ C1] CPU: 1 PID: 14113 Comm: syz.0.2580 Not tainted syzkaller #0 [ 931.784029][ C0] FAULT_INJECTION: forcing a failure. [ 931.784029][ C0] name failslab, interval 1, probability 100, space 0, times 5 [ 931.784040][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.784051][ C1] Call Trace: [ 931.784057][ C1] [ 931.784064][ C1] dump_stack_lvl+0x18c/0x250 [ 931.784083][ C1] ? verify_lock_unused+0x140/0x140 [ 931.784105][ C1] ? show_regs_print_info+0x20/0x20 [ 931.784124][ C1] ? load_image+0x420/0x420 [ 931.784161][ C1] should_fail_ex+0x394/0x4c0 [ 931.784188][ C1] should_failslab+0x9/0x20 [ 931.784212][ C1] slab_pre_alloc_hook+0x59/0x300 [ 931.784250][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 931.784275][ C1] ? __alloc_skb+0x103/0x2c0 [ 931.784297][ C1] __alloc_skb+0x103/0x2c0 [ 931.784327][ C1] ndisc_alloc_skb+0xa6/0x450 [ 931.784352][ C1] ndisc_send_rs+0x27d/0x690 [ 931.784371][ C1] ? ipv6_get_lladdr+0x2b/0x3e0 [ 931.784399][ C1] addrconf_rs_timer+0x36b/0x640 [ 931.784424][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 931.784454][ C1] call_timer_fn+0x189/0x540 [ 931.784472][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 931.784492][ C1] ? call_timer_fn+0xd2/0x540 [ 931.784509][ C1] ? __run_timers+0x810/0x810 [ 931.784536][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 931.784561][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 931.784583][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 931.784606][ C1] __run_timers+0x570/0x810 [ 931.784637][ C1] ? detach_timer+0x2b0/0x2b0 [ 931.784661][ C1] ? lock_chain_count+0x20/0x20 [ 931.784688][ C1] run_timer_softirq+0x67/0xf0 [ 931.784706][ C1] handle_softirqs+0x27d/0x820 [ 931.784724][ C1] ? read_tsc+0x9/0x20 [ 931.784748][ C1] ? ktime_get+0x24b/0x280 [ 931.784771][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 931.784793][ C1] ? do_softirq+0x1a0/0x1a0 [ 931.784821][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 931.784852][ C1] __irq_exit_rcu+0xd3/0x190 [ 931.784876][ C1] ? irq_exit_rcu+0x20/0x20 [ 931.784907][ C1] irq_exit_rcu+0x9/0x20 [ 931.784928][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 931.784956][ C1] [ 931.784962][ C1] [ 931.784975][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 931.784995][ C1] RIP: 0010:vprintk_emit+0x46f/0x610 [ 931.785020][ C1] Code: 85 3f 01 00 00 e8 61 a1 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 50 a1 1b 00 eb 06 e8 49 a1 1b 00 fb 48 c7 c7 80 61 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 b4 [ 931.785035][ C1] RSP: 0000:ffffc90004b4f860 EFLAGS: 00000293 [ 931.785050][ C1] RAX: ffffffff816bd037 RBX: ffffffff816bcedb RCX: ffff888028de9e00 [ 931.785068][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d126180 [ 931.785080][ C1] RBP: ffffc90004b4f950 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 931.785104][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: dffffc0000000000 [ 931.785117][ C1] R13: 1ffff92000969f10 R14: 0000000000000061 R15: 0000000000000061 [ 931.785133][ C1] ? vprintk_emit+0x30b/0x610 [ 931.785165][ C1] ? vprintk_emit+0x467/0x610 [ 931.785200][ C1] ? vprintk_emit+0x30b/0x610 [ 931.785232][ C1] ? printk_sprint+0x460/0x460 [ 931.785257][ C1] ? get_random_u8+0x4af/0x980 [ 931.785288][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 931.785311][ C1] ? get_random_u8+0x16c/0x980 [ 931.785338][ C1] ? get_random_u8+0x516/0x980 [ 931.785373][ C1] _printk+0xde/0x130 [ 931.785403][ C1] ? load_image+0x420/0x420 [ 931.785435][ C1] ? __might_sleep+0xe0/0xe0 [ 931.785462][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 931.785487][ C1] should_fail_ex+0x375/0x4c0 [ 931.785519][ C1] should_failslab+0x9/0x20 [ 931.785547][ C1] slab_pre_alloc_hook+0x59/0x300 [ 931.785583][ C1] kmem_cache_alloc+0x5a/0x2c0 [ 931.785606][ C1] ? ptlock_alloc+0x20/0x70 [ 931.785629][ C1] ptlock_alloc+0x20/0x70 [ 931.785647][ C1] pte_alloc_one+0xcc/0x540 [ 931.785668][ C1] ? pfn_modify_allowed+0x560/0x560 [ 931.785690][ C1] ? mt_find+0x169/0x640 [ 931.785709][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 931.785735][ C1] __do_fault+0xd7/0x4d0 [ 931.785753][ C1] ? handle_mm_fault+0x181f/0x4a50 [ 931.785774][ C1] handle_mm_fault+0x1964/0x4a50 [ 931.785795][ C1] ? handle_mm_fault+0xe6/0x4a50 [ 931.785823][ C1] ? numa_migrate_prep+0x350/0x350 [ 931.785857][ C1] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 931.785878][ C1] do_user_addr_fault+0x736/0x12d0 [ 931.785912][ C1] exc_page_fault+0x64/0x100 [ 931.785937][ C1] asm_exc_page_fault+0x26/0x30 [ 931.785955][ C1] RIP: 0033:0x7f6044c72740 [ 931.785969][ C1] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 e1 92 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 931.785983][ C1] RSP: 002b:00007ffef6fd9a00 EFLAGS: 00010202 [ 931.785998][ C1] RAX: 0000001b2e224000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 931.786010][ C1] RDX: 0000001b2e223ffc RSI: 00000000003ffde8 RDI: 00007f6045b55700 [ 931.786023][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f6045012000 [ 931.786034][ C1] R10: 00007f6045b55700 R11: 0000000000000000 R12: 0000000000000000 [ 931.786045][ C1] R13: 0000000000000b68 R14: ffffffff81321540 R15: 00007f6045b55720 [ 931.786059][ C1] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 931.786096][ C1] [ 931.786103][ C0] CPU: 0 PID: 14114 Comm: syz.2.2579 Not tainted syzkaller #0 [ 931.786120][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.786129][ C0] Call Trace: [ 931.786136][ C0] [ 931.786143][ C0] dump_stack_lvl+0x18c/0x250 [ 931.786165][ C0] ? show_regs_print_info+0x20/0x20 [ 931.786184][ C0] ? load_image+0x420/0x420 [ 931.786207][ C0] ? vprintk_emit+0x53d/0x610 [ 931.786231][ C0] ? printk_sprint+0x460/0x460 [ 931.786264][ C0] should_fail_ex+0x394/0x4c0 [ 931.786293][ C0] should_failslab+0x9/0x20 [ 931.786316][ C0] slab_pre_alloc_hook+0x59/0x300 [ 931.786343][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 931.786366][ C0] ? __alloc_skb+0x103/0x2c0 [ 931.786387][ C0] __alloc_skb+0x103/0x2c0 [ 931.786406][ C0] aoecmd_cfg+0x2c5/0xa50 [ 931.786428][ C0] ? _raw_spin_unlock+0x40/0x40 [ 931.786453][ C0] ? aoecmd_cfg+0x10e/0xa50 [ 931.786472][ C0] ? enqueue_timer+0x23d/0x550 [ 931.786494][ C0] ? ktcomplete+0x2a0/0x2a0 [ 931.786528][ C0] call_timer_fn+0x189/0x540 [ 931.786543][ C0] ? skbfree+0x340/0x340 [ 931.786560][ C0] ? call_timer_fn+0xd2/0x540 [ 931.786575][ C0] ? __run_timers+0x810/0x810 [ 931.786596][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 931.800198][T12051] FAULT_INJECTION: forcing a failure. [ 931.800198][T12051] name failslab, interval 1, probability 100, space 0, times 2 [ 931.812993][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 931.813027][ C0] ? skbfree+0x340/0x340 [ 931.813052][ C0] __run_timers+0x570/0x810 [ 931.813086][ C0] ? detach_timer+0x2b0/0x2b0 [ 931.813111][ C0] ? lock_chain_count+0x20/0x20 [ 931.813138][ C0] run_timer_softirq+0x67/0xf0 [ 931.826575][T13513] FAULT_INJECTION: forcing a failure. [ 931.826575][T13513] name failslab, interval 1, probability 100, space 0, times 2 [ 931.833647][ C0] handle_softirqs+0x27d/0x820 [ 931.843834][ C1] FAULT_INJECTION: forcing a failure. [ 931.843834][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 931.846972][ C0] ? read_tsc+0x9/0x20 [ 931.846998][ C0] ? ktime_get+0x24b/0x280 [ 931.847026][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 935.172824][ C0] ? do_softirq+0x1a0/0x1a0 [ 935.177350][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 935.182565][ C0] __irq_exit_rcu+0xd3/0x190 [ 935.187166][ C0] ? irq_exit_rcu+0x20/0x20 [ 935.191716][ C0] irq_exit_rcu+0x9/0x20 [ 935.195966][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 935.201616][ C0] [ 935.204558][ C0] [ 935.207496][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 935.213496][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 935.219238][ C0] Code: ed 01 00 00 e8 5e 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 4f 7e 1b 00 eb 06 e8 48 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 935.238856][ C0] RSP: 0018:ffffc90004d2f8c0 EFLAGS: 00000283 [ 935.244933][ C0] RAX: ffffffff816bf338 RBX: ffffc90004d2fa3f RCX: 0000000000080000 [ 935.252912][ C0] RDX: ffffc9001977c000 RSI: 0000000000004833 RDI: 0000000000004834 [ 935.260888][ C0] RBP: ffffc90004d2fa10 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 935.268872][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8d8ce1e0 [ 935.276850][ C0] R13: 1ffffffff19f96d8 R14: ffffffff8d8ce238 R15: dffffc0000000000 [ 935.284834][ C0] ? console_flush_all+0x878/0xcf0 [ 935.289971][ C0] ? console_flush_all+0x10b/0xcf0 [ 935.295103][ C0] ? is_console_locked+0x20/0x20 [ 935.300055][ C0] ? lock_chain_count+0x20/0x20 [ 935.304915][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 935.310739][ C0] console_unlock+0xad/0x350 [ 935.315342][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 935.320382][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 935.326374][ C0] vprintk_emit+0x497/0x610 [ 935.330892][ C0] ? printk_sprint+0x460/0x460 [ 935.335684][ C0] ? get_random_u8+0x4af/0x980 [ 935.340474][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 935.345729][ C0] ? get_random_u8+0x16c/0x980 [ 935.350519][ C0] ? get_random_u8+0x516/0x980 [ 935.355430][ C0] _printk+0xde/0x130 [ 935.359456][ C0] ? load_image+0x420/0x420 [ 935.363996][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 935.369042][ C0] should_fail_ex+0x375/0x4c0 [ 935.373737][ C0] should_failslab+0x9/0x20 [ 935.378254][ C0] slab_pre_alloc_hook+0x59/0x300 [ 935.383303][ C0] kmem_cache_alloc_lru+0x4d/0x2b0 [ 935.388431][ C0] ? sock_alloc_inode+0x28/0xc0 [ 935.393302][ C0] sock_alloc_inode+0x28/0xc0 [ 935.397990][ C0] ? sockfs_init_fs_context+0xb0/0xb0 [ 935.403369][ C0] new_inode_pseudo+0x63/0x1d0 [ 935.408146][ C0] __sock_create+0x12d/0x940 [ 935.412742][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 935.418739][ C0] __sys_socket+0xd7/0x1b0 [ 935.423168][ C0] __x64_sys_socket+0x7a/0x90 [ 935.427854][ C0] do_syscall_64+0x55/0xb0 [ 935.432275][ C0] ? clear_bhb_loop+0x40/0x90 [ 935.436962][ C0] ? clear_bhb_loop+0x40/0x90 [ 935.441652][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.447556][ C0] RIP: 0033:0x7f693b59e019 [ 935.451977][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.471595][ C0] RSP: 002b:00007f693c483028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 935.480021][ C0] RAX: ffffffffffffffda RBX: 00007f693b825fa0 RCX: 00007f693b59e019 [ 935.487999][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 935.495975][ C0] RBP: 00007f693b63500c R08: 0000000000000000 R09: 0000000000000000 [ 935.503951][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.511952][ C0] R13: 00007f693b826038 R14: 00007f693b825fa0 R15: 00007fffbf631268 [ 935.519944][ C0] [ 935.522984][ C1] CPU: 1 PID: 13513 Comm: udevd Not tainted syzkaller #0 [ 935.523225][ C0] aoe: skb alloc failure [ 935.530021][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.530038][ C1] Call Trace: [ 935.530045][ C1] [ 935.530054][ C1] dump_stack_lvl+0x18c/0x250 [ 935.534286][ C0] FAULT_INJECTION: forcing a failure. [ 935.534286][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 935.544324][ C1] ? show_regs_print_info+0x20/0x20 [ 935.544348][ C1] ? load_image+0x420/0x420 [ 935.544379][ C1] ? verify_lock_unused+0x140/0x140 [ 935.582763][ C1] ? mark_lock+0x94/0x320 [ 935.587111][ C1] should_fail_ex+0x394/0x4c0 [ 935.591804][ C1] should_failslab+0x9/0x20 [ 935.596334][ C1] slab_pre_alloc_hook+0x59/0x300 [ 935.601390][ C1] ? __lock_acquire+0x1262/0x7d80 [ 935.606424][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 935.611648][ C1] ? __alloc_skb+0x103/0x2c0 [ 935.616249][ C1] __alloc_skb+0x103/0x2c0 [ 935.620678][ C1] __netdev_alloc_skb+0x10c/0x500 [ 935.625715][ C1] ? kmalloc_reserve+0x240/0x240 [ 935.630674][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 935.636285][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 935.641867][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 935.647355][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 935.654141][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 935.659754][ C1] __iterate_interfaces+0x225/0x4c0 [ 935.664985][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 935.671255][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 935.678463][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 935.684713][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 935.691747][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 935.696951][ C1] ? hw_scan_work+0xf10/0xf10 [ 935.701637][ C1] __hrtimer_run_queues+0x525/0xc10 [ 935.706864][ C1] ? hrtimer_interrupt+0x980/0x980 [ 935.711983][ C1] ? read_tsc+0x9/0x20 [ 935.716075][ C1] hrtimer_run_softirq+0x177/0x290 [ 935.721199][ C1] handle_softirqs+0x27d/0x820 [ 935.725967][ C1] ? read_tsc+0x9/0x20 [ 935.730044][ C1] ? ktime_get+0x24b/0x280 [ 935.734482][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 935.739261][ C1] ? do_softirq+0x1a0/0x1a0 [ 935.743779][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 935.748992][ C1] __irq_exit_rcu+0xd3/0x190 [ 935.753593][ C1] ? irq_exit_rcu+0x20/0x20 [ 935.758112][ C1] irq_exit_rcu+0x9/0x20 [ 935.762360][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 935.768011][ C1] [ 935.770949][ C1] [ 935.773882][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 935.779871][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 935.785605][ C1] Code: ed 01 00 00 e8 5e 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 4f 7e 1b 00 eb 06 e8 48 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 935.805223][ C1] RSP: 0018:ffffc900046df360 EFLAGS: 00000293 [ 935.811300][ C1] RAX: ffffffff816bf338 RBX: ffffc900046df4df RCX: ffff88802b391e00 [ 935.819278][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 935.827253][ C1] RBP: ffffc900046df4b0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 935.835232][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8d8ce1e0 [ 935.843216][ C1] R13: 1ffffffff19f96d8 R14: ffffffff8d8ce238 R15: dffffc0000000000 [ 935.851203][ C1] ? console_flush_all+0x878/0xcf0 [ 935.856342][ C1] ? console_flush_all+0x10b/0xcf0 [ 935.861470][ C1] ? is_console_locked+0x20/0x20 [ 935.866427][ C1] console_unlock+0xad/0x350 [ 935.871040][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 935.876075][ C1] ? lock_chain_count+0x20/0x20 [ 935.880936][ C1] ? vprintk_emit+0x40d/0x610 [ 935.885619][ C1] ? vprintk_emit+0x30b/0x610 [ 935.890305][ C1] ? vprintk_emit+0x30b/0x610 [ 935.894994][ C1] vprintk_emit+0x497/0x610 [ 935.899513][ C1] ? vprintk_emit+0x30b/0x610 [ 935.904210][ C1] ? printk_sprint+0x460/0x460 [ 935.908983][ C1] ? get_random_u8+0x4af/0x980 [ 935.913768][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 935.918983][ C1] ? get_random_u8+0x16c/0x980 [ 935.923759][ C1] ? get_random_u8+0x516/0x980 [ 935.928543][ C1] _printk+0xde/0x130 [ 935.932544][ C1] ? load_image+0x420/0x420 [ 935.937064][ C1] ? __might_sleep+0xe0/0xe0 [ 935.941667][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 935.946702][ C1] ? aa_get_newest_label+0xfd/0x5c0 [ 935.951952][ C1] should_fail_ex+0x375/0x4c0 [ 935.956646][ C1] should_failslab+0x9/0x20 [ 935.961161][ C1] slab_pre_alloc_hook+0x59/0x300 [ 935.966215][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 935.971428][ C1] ? security_capable+0x89/0xb0 [ 935.976288][ C1] ? __alloc_skb+0x103/0x2c0 [ 935.980888][ C1] __alloc_skb+0x103/0x2c0 [ 935.985315][ C1] netlink_sendmsg+0x66a/0xbf0 [ 935.990197][ C1] ? netlink_getsockopt+0x590/0x590 [ 935.995410][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 936.000967][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 936.006271][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 936.011739][ C1] ? netlink_getsockopt+0x590/0x590 [ 936.016948][ C1] ____sys_sendmsg+0x61b/0x980 [ 936.021731][ C1] ? __asan_memset+0x22/0x40 [ 936.026332][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 936.031361][ C1] ? __import_iovec+0x3fa/0x850 [ 936.036254][ C1] ? import_iovec+0x73/0xa0 [ 936.040796][ C1] ___sys_sendmsg+0x2a6/0x360 [ 936.045484][ C1] ? do_syscall_64+0x55/0xb0 [ 936.050082][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 936.056162][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 936.060979][ C1] __se_sys_sendmsg+0x1d0/0x2c0 [ 936.065840][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 936.070806][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 936.076021][ C1] do_syscall_64+0x55/0xb0 [ 936.080448][ C1] ? clear_bhb_loop+0x40/0x90 [ 936.085139][ C1] ? clear_bhb_loop+0x40/0x90 [ 936.089826][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 936.095726][ C1] RIP: 0033:0x7f0d2d2a7407 [ 936.100154][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 936.119771][ C1] RSP: 002b:00007fff5ae130b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 936.128204][ C1] RAX: ffffffffffffffda RBX: 00007f0d2d9e2880 RCX: 00007f0d2d2a7407 [ 936.136182][ C1] RDX: 0000000000000000 RSI: 00007fff5ae13110 RDI: 000000000000000c [ 936.144166][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 936.152147][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000d5 [ 936.160126][ C1] R13: 0000560e514004d0 R14: 0000000000000000 R15: 0000560e513f0e20 [ 936.168119][ C1] [ 936.171145][ C0] CPU: 0 PID: 14114 Comm: syz.2.2579 Not tainted syzkaller #0 [ 936.178641][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 936.188723][ C0] Call Trace: [ 936.192024][ C0] [ 936.194886][ C0] dump_stack_lvl+0x18c/0x250 [ 936.199606][ C0] ? show_regs_print_info+0x20/0x20 [ 936.201587][T14087] ceph: No mds server is up or the cluster is laggy [ 936.204820][ C0] ? load_image+0x420/0x420 [ 936.204853][ C0] ? vprintk_emit+0x53d/0x610 [ 936.204879][ C0] ? printk_sprint+0x460/0x460 [ 936.204908][ C0] should_fail_ex+0x394/0x4c0 [ 936.204940][ C0] should_failslab+0x9/0x20 [ 936.234970][ C0] slab_pre_alloc_hook+0x59/0x300 [ 936.240048][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 936.245292][ C0] ? __alloc_skb+0x103/0x2c0 [ 936.249911][ C0] __alloc_skb+0x103/0x2c0 [ 936.254353][ C0] aoecmd_cfg+0x2c5/0xa50 [ 936.258708][ C0] ? _raw_spin_unlock+0x40/0x40 [ 936.263584][ C0] ? aoecmd_cfg+0x10e/0xa50 [ 936.268155][ C0] ? enqueue_timer+0x23d/0x550 [ 936.272957][ C0] ? ktcomplete+0x2a0/0x2a0 [ 936.277495][ C0] call_timer_fn+0x189/0x540 [ 936.282104][ C0] ? skbfree+0x340/0x340 [ 936.286381][ C0] ? call_timer_fn+0xd2/0x540 [ 936.291085][ C0] ? __run_timers+0x810/0x810 [ 936.295800][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 936.301028][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 936.306257][ C0] ? skbfree+0x340/0x340 [ 936.310535][ C0] __run_timers+0x570/0x810 [ 936.315075][ C0] ? detach_timer+0x2b0/0x2b0 [ 936.319791][ C0] ? lock_chain_count+0x20/0x20 [ 936.324710][ C0] run_timer_softirq+0x67/0xf0 [ 936.329522][ C0] handle_softirqs+0x27d/0x820 [ 936.334304][ C0] ? read_tsc+0x9/0x20 [ 936.338381][ C0] ? ktime_get+0x24b/0x280 [ 936.342812][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 936.347588][ C0] ? do_softirq+0x1a0/0x1a0 [ 936.352108][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 936.357338][ C0] __irq_exit_rcu+0xd3/0x190 [ 936.361962][ C0] ? irq_exit_rcu+0x20/0x20 [ 936.366501][ C0] irq_exit_rcu+0x9/0x20 [ 936.370760][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 936.376413][ C0] [ 936.379351][ C0] [ 936.382290][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 936.388290][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 936.394027][ C0] Code: ed 01 00 00 e8 5e 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 4f 7e 1b 00 eb 06 e8 48 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 936.413652][ C0] RSP: 0018:ffffc90004d2f8c0 EFLAGS: 00000283 [ 936.419742][ C0] RAX: ffffffff816bf338 RBX: ffffc90004d2fa3f RCX: 0000000000080000 [ 936.427828][ C0] RDX: ffffc9001977c000 RSI: 0000000000004833 RDI: 0000000000004834 [ 936.435900][ C0] RBP: ffffc90004d2fa10 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 936.443899][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffffffff8d8ce1e0 [ 936.451885][ C0] R13: 1ffffffff19f96d8 R14: ffffffff8d8ce238 R15: dffffc0000000000 [ 936.459877][ C0] ? console_flush_all+0x878/0xcf0 [ 936.465017][ C0] ? console_flush_all+0x10b/0xcf0 [ 936.470147][ C0] ? is_console_locked+0x20/0x20 [ 936.475096][ C0] ? lock_chain_count+0x20/0x20 [ 936.479961][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 936.485780][ C0] console_unlock+0xad/0x350 [ 936.490384][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 936.495426][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 936.501422][ C0] vprintk_emit+0x497/0x610 [ 936.505939][ C0] ? printk_sprint+0x460/0x460 [ 936.510713][ C0] ? get_random_u8+0x4af/0x980 [ 936.515487][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 936.520700][ C0] ? get_random_u8+0x16c/0x980 [ 936.525476][ C0] ? get_random_u8+0x516/0x980 [ 936.530261][ C0] _printk+0xde/0x130 [ 936.534275][ C0] ? load_image+0x420/0x420 [ 936.538797][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 936.543836][ C0] should_fail_ex+0x375/0x4c0 [ 936.548535][ C0] should_failslab+0x9/0x20 [ 936.553055][ C0] slab_pre_alloc_hook+0x59/0x300 [ 936.558105][ C0] kmem_cache_alloc_lru+0x4d/0x2b0 [ 936.563232][ C0] ? sock_alloc_inode+0x28/0xc0 [ 936.568101][ C0] sock_alloc_inode+0x28/0xc0 [ 936.572787][ C0] ? sockfs_init_fs_context+0xb0/0xb0 [ 936.578171][ C0] new_inode_pseudo+0x63/0x1d0 [ 936.582947][ C0] __sock_create+0x12d/0x940 [ 936.587542][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 936.593540][ C0] __sys_socket+0xd7/0x1b0 [ 936.597970][ C0] __x64_sys_socket+0x7a/0x90 [ 936.602660][ C0] do_syscall_64+0x55/0xb0 [ 936.607098][ C0] ? clear_bhb_loop+0x40/0x90 [ 936.611786][ C0] ? clear_bhb_loop+0x40/0x90 [ 936.616474][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 936.622379][ C0] RIP: 0033:0x7f693b59e019 [ 936.626805][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.646422][ C0] RSP: 002b:00007f693c483028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 936.654867][ C0] RAX: ffffffffffffffda RBX: 00007f693b825fa0 RCX: 00007f693b59e019 [ 936.662848][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 936.670826][ C0] RBP: 00007f693b63500c R08: 0000000000000000 R09: 0000000000000000 [ 936.678805][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.686790][ C0] R13: 00007f693b826038 R14: 00007f693b825fa0 R15: 00007fffbf631268 [ 936.694794][ C0] [ 936.697824][T12051] CPU: 1 PID: 12051 Comm: kworker/1:16 Not tainted syzkaller #0 [ 936.697889][ C0] aoe: skb alloc failure [ 936.705463][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 936.705478][T12051] Workqueue: events nsim_fib_event_work [ 936.725349][T12051] Call Trace: [ 936.728657][T12051] [ 936.731609][T12051] dump_stack_lvl+0x18c/0x250 [ 936.736321][T12051] ? show_regs_print_info+0x20/0x20 [ 936.741551][T12051] ? load_image+0x420/0x420 [ 936.745361][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.746071][T12051] ? __might_sleep+0xe0/0xe0 [ 936.752830][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.756901][T12051] ? __lock_acquire+0x7d80/0x7d80 [ 936.756930][T12051] should_fail_ex+0x394/0x4c0 [ 936.756958][T12051] should_failslab+0x9/0x20 [ 936.777409][T12051] slab_pre_alloc_hook+0x59/0x300 [ 936.782446][T12051] ? __might_sleep+0xe0/0xe0 [ 936.787037][T12051] ? nsim_fib_event_work+0x1249/0x32c0 [ 936.792495][T12051] __kmem_cache_alloc_node+0x53/0x250 [ 936.797873][T12051] ? nsim_fib_event_work+0x1249/0x32c0 [ 936.803353][T12051] kmalloc_trace+0x2a/0xe0 [ 936.807775][T12051] nsim_fib_event_work+0x1249/0x32c0 [ 936.813072][T12051] ? nsim_fib_create+0xb20/0xb20 [ 936.818016][T12051] ? verify_lock_unused+0x140/0x140 [ 936.823238][T12051] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 936.829226][T12051] ? __lock_acquire+0x7d80/0x7d80 [ 936.834269][T12051] ? _raw_spin_unlock_irq+0x23/0x50 [ 936.839480][T12051] ? process_scheduled_works+0x975/0x1600 [ 936.845205][T12051] ? process_scheduled_works+0x975/0x1600 [ 936.850933][T12051] process_scheduled_works+0xa60/0x1600 [ 936.856506][T12051] ? worker_attach_to_pool+0x370/0x370 [ 936.861991][T12051] ? assign_work+0x3cc/0x5d0 [ 936.866604][T12051] worker_thread+0xa5e/0xfe0 [ 936.871215][T12051] ? _raw_spin_unlock+0x40/0x40 [ 936.876069][T12051] ? __kthread_parkme+0x71/0x1c0 [ 936.881011][T12051] kthread+0x2fa/0x390 [ 936.885076][T12051] ? pr_cont_work+0x550/0x550 [ 936.889757][T12051] ? kthread_blkcg+0xd0/0xd0 [ 936.894361][T12051] ret_from_fork+0x48/0x80 [ 936.898793][T12051] ? kthread_blkcg+0xd0/0xd0 [ 936.903388][T12051] ret_from_fork_asm+0x11/0x20 [ 936.908208][T12051] [ 936.924447][T14113] CPU: 1 PID: 14113 Comm: syz.0.2580 Not tainted syzkaller #0 [ 936.931997][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 936.942085][T14113] Call Trace: [ 936.945370][T14113] [ 936.948303][T14113] dump_stack_lvl+0x18c/0x250 [ 936.952996][T14113] ? show_regs_print_info+0x20/0x20 [ 936.958214][T14113] ? load_image+0x420/0x420 [ 936.962742][T14113] ? __might_sleep+0xe0/0xe0 [ 936.967344][T14113] ? __lock_acquire+0x7d80/0x7d80 [ 936.972378][T14113] should_fail_ex+0x394/0x4c0 [ 936.977070][T14113] should_failslab+0x9/0x20 [ 936.981582][T14113] slab_pre_alloc_hook+0x59/0x300 [ 936.986634][T14113] kmem_cache_alloc+0x5a/0x2c0 [ 936.991437][T14113] ? ptlock_alloc+0x20/0x70 [ 936.995970][T14113] ptlock_alloc+0x20/0x70 [ 937.000311][T14113] pte_alloc_one+0xcc/0x540 [ 937.004828][T14113] ? pfn_modify_allowed+0x560/0x560 [ 937.010044][T14113] ? mt_find+0x169/0x640 [ 937.014292][T14113] ? __lock_acquire+0x7d80/0x7d80 [ 937.019326][T14113] __do_fault+0xd7/0x4d0 [ 937.023575][T14113] ? handle_mm_fault+0x181f/0x4a50 [ 937.028699][T14113] handle_mm_fault+0x1964/0x4a50 [ 937.033644][T14113] ? handle_mm_fault+0xe6/0x4a50 [ 937.038597][T14113] ? numa_migrate_prep+0x350/0x350 [ 937.043721][T14113] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 937.049009][T14113] do_user_addr_fault+0x736/0x12d0 [ 937.054130][T14113] exc_page_fault+0x64/0x100 [ 937.058725][T14113] asm_exc_page_fault+0x26/0x30 [ 937.063685][T14113] RIP: 0033:0x7f6044c72740 [ 937.068141][T14113] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 e1 92 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 937.087749][T14113] RSP: 002b:00007ffef6fd9a00 EFLAGS: 00010202 [ 937.093814][T14113] RAX: 0000001b2e224000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 937.101805][T14113] RDX: 0000001b2e223ffc RSI: 00000000003ffde8 RDI: 00007f6045b55700 [ 937.109772][T14113] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f6045012000 [ 937.117740][T14113] R10: 00007f6045b55700 R11: 0000000000000000 R12: 0000000000000000 [ 937.125706][T14113] R13: 0000000000000b68 R14: ffffffff81321540 R15: 00007f6045b55720 [ 937.133678][T14113] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 937.139758][T14113] [ 937.154225][T14114] CPU: 0 PID: 14114 Comm: syz.2.2579 Not tainted syzkaller #0 [ 937.161754][T14114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.171834][T14114] Call Trace: [ 937.175129][T14114] [ 937.178073][T14114] dump_stack_lvl+0x18c/0x250 [ 937.182778][T14114] ? show_regs_print_info+0x20/0x20 [ 937.187994][T14114] ? load_image+0x420/0x420 [ 937.192512][T14114] ? __lock_acquire+0x7d80/0x7d80 [ 937.197554][T14114] should_fail_ex+0x394/0x4c0 [ 937.202253][T14114] should_failslab+0x9/0x20 [ 937.206766][T14114] slab_pre_alloc_hook+0x59/0x300 [ 937.211799][T14114] kmem_cache_alloc_lru+0x4d/0x2b0 [ 937.216914][T14114] ? sock_alloc_inode+0x28/0xc0 [ 937.221767][T14114] sock_alloc_inode+0x28/0xc0 [ 937.226443][T14114] ? sockfs_init_fs_context+0xb0/0xb0 [ 937.231817][T14114] new_inode_pseudo+0x63/0x1d0 [ 937.236583][T14114] __sock_create+0x12d/0x940 [ 937.241167][T14114] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 937.247155][T14114] __sys_socket+0xd7/0x1b0 [ 937.251573][T14114] __x64_sys_socket+0x7a/0x90 [ 937.256249][T14114] do_syscall_64+0x55/0xb0 [ 937.260666][T14114] ? clear_bhb_loop+0x40/0x90 [ 937.265346][T14114] ? clear_bhb_loop+0x40/0x90 [ 937.270029][T14114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.275919][T14114] RIP: 0033:0x7f693b59e019 [ 937.280332][T14114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.299952][T14114] RSP: 002b:00007f693c483028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 937.308370][T14114] RAX: ffffffffffffffda RBX: 00007f693b825fa0 RCX: 00007f693b59e019 [ 937.316339][T14114] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 937.324311][T14114] RBP: 00007f693b63500c R08: 0000000000000000 R09: 0000000000000000 [ 937.332282][T14114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.340249][T14114] R13: 00007f693b826038 R14: 00007f693b825fa0 R15: 00007fffbf631268 [ 937.348231][T14114] [ 937.351286][T13513] CPU: 1 PID: 13513 Comm: udevd Not tainted syzkaller #0 [ 937.355938][T14114] socket: no more sockets [ 937.358319][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.358333][T13513] Call Trace: [ 937.376014][T13513] [ 937.378957][T13513] dump_stack_lvl+0x18c/0x250 [ 937.383652][T13513] ? show_regs_print_info+0x20/0x20 [ 937.388861][T13513] ? lockdep_hardirqs_on+0x98/0x150 [ 937.394088][T13513] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 937.400278][T13513] should_fail_ex+0x394/0x4c0 [ 937.404977][T13513] should_failslab+0x9/0x20 [ 937.409476][T13513] slab_pre_alloc_hook+0x59/0x300 [ 937.414496][T13513] kmem_cache_alloc_node+0x5e/0x310 [ 937.419686][T13513] ? security_capable+0x89/0xb0 [ 937.424524][T13513] ? __alloc_skb+0x103/0x2c0 [ 937.429107][T13513] __alloc_skb+0x103/0x2c0 [ 937.433512][T13513] netlink_sendmsg+0x66a/0xbf0 [ 937.438267][T13513] ? netlink_getsockopt+0x590/0x590 [ 937.443472][T13513] ? apparmor_socket_sendmsg+0x8e/0x330 [ 937.449026][T13513] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 937.454338][T13513] ? security_socket_sendmsg+0x80/0xa0 [ 937.459818][T13513] ? netlink_getsockopt+0x590/0x590 [ 937.465047][T13513] ____sys_sendmsg+0x61b/0x980 [ 937.469821][T13513] ? __asan_memset+0x22/0x40 [ 937.474420][T13513] ? __sys_sendmsg_sock+0x30/0x30 [ 937.479450][T13513] ? __import_iovec+0x3fa/0x850 [ 937.484309][T13513] ? import_iovec+0x73/0xa0 [ 937.488819][T13513] ___sys_sendmsg+0x2a6/0x360 [ 937.493502][T13513] ? do_syscall_64+0x55/0xb0 [ 937.498092][T13513] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.504165][T13513] ? __sys_sendmsg+0x2b0/0x2b0 [ 937.508956][T13513] __se_sys_sendmsg+0x1d0/0x2c0 [ 937.513804][T13513] ? __x64_sys_sendmsg+0x80/0x80 [ 937.518751][T13513] ? lockdep_hardirqs_on+0x98/0x150 [ 937.523991][T13513] do_syscall_64+0x55/0xb0 [ 937.528409][T13513] ? clear_bhb_loop+0x40/0x90 [ 937.533116][T13513] ? clear_bhb_loop+0x40/0x90 [ 937.537818][T13513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.543715][T13513] RIP: 0033:0x7f0d2d2a7407 [ 937.548135][T13513] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 937.567746][T13513] RSP: 002b:00007fff5ae130b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 937.576160][T13513] RAX: ffffffffffffffda RBX: 00007f0d2d9e2880 RCX: 00007f0d2d2a7407 [ 937.584134][T13513] RDX: 0000000000000000 RSI: 00007fff5ae13110 RDI: 000000000000000c [ 937.592104][T13513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.600091][T13513] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000d5 [ 937.608057][T13513] R13: 0000560e514004d0 R14: 0000000000000000 R15: 0000560e513f0e20 [ 937.616035][T13513] [ 937.972542][ T9] IPVS: starting estimator thread 0... [ 938.094569][T14127] IPVS: using max 23 ests per chain, 55200 per kthread [ 938.329258][ T8844] syz_tun (unregistering): left allmulticast mode [ 938.433769][T14134] bridge0: port 3(veth0) entered blocking state [ 938.443002][T14134] bridge0: port 3(veth0) entered disabled state [ 938.449789][T14134] veth0: entered allmulticast mode [ 938.457859][T14134] veth0: entered promiscuous mode [ 938.469800][T14134] bridge0: port 3(veth0) entered blocking state [ 938.477576][T14134] bridge0: port 3(veth0) entered forwarding state [ 938.884971][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 938.887334][T14145] sctp: [Deprecated]: syz.0.2590 (pid 14145) Use of int in maxseg socket option. [ 938.887334][T14145] Use struct sctp_assoc_value instead [ 938.908306][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 938.917455][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 938.930530][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 938.940615][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 938.952011][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 939.625401][T14170] bridge0: port 3(erspan0) entered blocking state [ 939.644531][T14170] bridge0: port 3(erspan0) entered disabled state [ 939.656654][T14170] erspan0: entered allmulticast mode [ 939.671366][T14170] erspan0: entered promiscuous mode [ 939.688666][T14170] bridge0: port 3(erspan0) entered blocking state [ 939.696913][T14170] bridge0: port 3(erspan0) entered forwarding state [ 939.727354][T14147] chnl_net:caif_netlink_parms(): no params data found [ 940.017622][T14147] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.044755][T14147] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.058448][T14147] bridge_slave_0: entered allmulticast mode [ 940.074122][T14147] bridge_slave_0: entered promiscuous mode [ 940.097421][T14147] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.121738][T14147] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.154294][T14147] bridge_slave_1: entered allmulticast mode [ 940.359553][T14147] bridge_slave_1: entered promiscuous mode [ 940.499410][T14147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.548674][T14147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.648522][T14147] team0: Port device team_slave_0 added [ 940.669861][T14147] team0: Port device team_slave_1 added [ 940.757554][T14147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.780661][T14147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.807967][T14147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.823123][T14147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.830552][T14147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.857863][T14147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.912121][T14147] hsr_slave_0: entered promiscuous mode [ 940.919529][T14147] hsr_slave_1: entered promiscuous mode [ 941.045564][ T51] Bluetooth: hci2: command tx timeout [ 941.050602][T14193] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2608'. [ 942.438815][T14224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2618'. [ 942.485720][T14224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2618'. [ 942.635162][T14147] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 942.668076][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 942.686070][T14147] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 942.717969][T14147] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 942.761273][T14147] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 942.770156][T14231] Cannot find add_set index 4 as target [ 943.020186][T14147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.134795][ T51] Bluetooth: hci2: command tx timeout [ 943.342581][T14147] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.393257][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.400463][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.622284][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.629568][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.721322][T14246] veth0: left allmulticast mode [ 943.726910][T14246] veth0: left promiscuous mode [ 943.731976][T14246] bridge0: port 3(veth0) entered disabled state [ 944.134852][T14147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.297329][T14147] veth0_vlan: entered promiscuous mode [ 944.371004][T14147] veth1_vlan: entered promiscuous mode [ 944.705630][T14147] veth0_macvtap: entered promiscuous mode [ 944.756910][T14147] veth1_macvtap: entered promiscuous mode [ 944.816688][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.853335][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.895435][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.926209][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.973298][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.998589][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.009823][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.020647][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.032950][T14147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.053387][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.093718][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.375827][ T51] Bluetooth: hci2: command tx timeout [ 945.474506][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.554476][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.616673][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.674461][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.728007][T14147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.784392][T14147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.836253][T14147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.051881][T14285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2635'. [ 946.120331][T14147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.164397][T14147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.204927][T14147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.213689][T14147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.525563][ T1889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.552160][ T1889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.670184][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.680178][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.649941][ T51] Bluetooth: hci2: command tx timeout [ 947.933915][T14320] loop2: detected capacity change from 0 to 256 [ 948.039679][T14320] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 948.052409][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 948.490626][ T9] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 948.524275][T14326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2650'. [ 948.543283][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.590198][ T9] usb 4-1: Product: syz [ 948.619057][ T9] usb 4-1: Manufacturer: syz [ 948.623725][ T9] usb 4-1: SerialNumber: syz [ 949.071831][T14346] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 949.946802][ T9] speedtch 4-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 950.004302][ T9] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -71! [ 950.012010][ T9] speedtch: probe of 4-1:1.0 failed with error -71 [ 950.114698][ T9] speedtch 4-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 950.192363][ T9] speedtch 4-1:1.1: usbatm_usb_probe: bind failed: -71! [ 950.233479][ T9] speedtch: probe of 4-1:1.1 failed with error -71 [ 950.295563][ T9] usb 4-1: USB disconnect, device number 7 [ 950.960288][T14395] bridge0: port 3(gretap0) entered blocking state [ 950.979256][T14395] bridge0: port 3(gretap0) entered disabled state [ 950.995092][T14395] gretap0: entered allmulticast mode [ 951.003141][T14395] gretap0: entered promiscuous mode [ 951.026092][T14395] bridge0: port 3(gretap0) entered blocking state [ 951.032659][T14395] bridge0: port 3(gretap0) entered forwarding state [ 951.055125][T14399] tipc: Started in network mode [ 951.069309][T14399] tipc: Node identity 7f000001, cluster identity 4711 [ 951.084585][T14399] tipc: New replicast peer: 127.0.0.1 [ 951.098691][T14399] tipc: Enabled bearer , priority 10 [ 951.120741][T14400] bridge0: port 4(erspan0) entered blocking state [ 951.132791][T14400] bridge0: port 4(erspan0) entered disabled state [ 951.150043][T14400] erspan0: entered allmulticast mode [ 951.175795][T14400] erspan0: entered promiscuous mode [ 951.192032][T14400] bridge0: port 4(erspan0) entered blocking state [ 951.198678][T14400] bridge0: port 4(erspan0) entered forwarding state [ 951.927388][T14426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2689'. [ 952.224639][ T8411] tipc: Node number set to 2130706433 [ 953.504608][T14455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2700'. [ 953.986638][T14477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2708'. [ 954.456462][T14467] ceph: No mds server is up or the cluster is laggy [ 954.470683][ T8411] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PAYLOAD) [ 954.666620][T14494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2717'. [ 955.899739][T14520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2727'. [ 956.179986][T14528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2730'. [ 957.053577][T14555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2741'. [ 957.343426][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2745'. [ 958.154919][T14576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2750'. [ 958.809068][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2758'. [ 959.653109][T14608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2763'. [ 959.856823][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2765'. [ 960.863475][T14641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2775'. [ 961.975289][T14677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2785'. [ 962.280270][T14686] x_tables: duplicate underflow at hook 2 [ 963.007140][T14702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2795'. [ 963.113554][T14707] rdma_op ffff8880244e89f0 conn xmit_rdma 0000000000000000 [ 963.255095][T14714] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 964.272539][T14729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2804'. [ 964.292825][T14728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2806'. [ 964.336539][T14728] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2806'. [ 964.554810][T14737] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2809'. [ 964.965966][T14750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2815'. [ 965.258592][T14762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2820'. [ 965.393313][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2822'. [ 965.645542][T14775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'. [ 965.819898][T14778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2827'. [ 966.038711][T14786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2830'. [ 966.903992][T14808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2839'. [ 966.984864][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2840'. [ 967.018334][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 967.039155][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 970.984948][T14881] __nla_validate_parse: 2 callbacks suppressed [ 970.984967][T14881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2865'. [ 971.175466][T14891] smc: net device veth0 applied user defined pnetid SYZ0 [ 971.631721][T14906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2878'. [ 972.695288][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2884'. [ 972.811393][T14930] netlink: 'syz.1.2882': attribute type 3 has an invalid length. [ 972.904301][T14932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2885'. [ 973.016756][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2885'. [ 973.058465][T14924] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.121044][T14939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2887'. [ 973.330862][T14948] netlink: 'syz.0.2889': attribute type 1 has an invalid length. [ 973.344198][T14942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2888'. [ 973.354143][T14948] netlink: 'syz.0.2889': attribute type 1 has an invalid length. [ 974.632978][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 974.720950][T14975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2897'. [ 974.823699][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2899'. [ 976.027375][T15002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2909'. [ 976.206363][T15009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2910'. [ 976.359527][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'. [ 976.436448][T15017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2915'. [ 976.670181][T15024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2918'. [ 977.671404][T15034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2921'. [ 977.671432][T15040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2924'. [ 977.820602][T15044] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2926'. [ 977.830421][T15044] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2926'. [ 977.841991][T15044] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2926'. [ 981.026243][T15126] netlink: 'syz.0.2959': attribute type 1 has an invalid length. [ 982.002342][T15142] __nla_validate_parse: 12 callbacks suppressed [ 982.002359][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2966'. [ 982.021900][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2965'. [ 982.214082][T15150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2968'. [ 982.246406][T15150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2968'. [ 982.341870][T15157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2971'. [ 982.763076][T15170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2975'. [ 983.309462][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 983.664001][T15188] loop3: detected capacity change from 0 to 256 [ 983.721860][T15188] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 985.966410][T15232] loop2: detected capacity change from 0 to 256 [ 985.998517][T15232] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 987.492939][T15247] x_tables: duplicate underflow at hook 2 [ 988.150315][T15259] loop0: detected capacity change from 0 to 256 [ 988.213845][T15259] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 988.699789][T12045] IPVS: starting estimator thread 0... [ 988.701826][T15266] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 988.804496][T15265] IPVS: using max 34 ests per chain, 81600 per kthread [ 990.057177][ T2956] hsr_slave_0: left promiscuous mode [ 990.123713][ T2956] hsr_slave_1: left promiscuous mode [ 990.159200][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.588038][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.614147][ T2956] bridge_slave_1: left allmulticast mode [ 990.664437][ T2956] bridge_slave_1: left promiscuous mode [ 990.671891][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.683184][ T2956] bridge_slave_0: left allmulticast mode [ 990.689058][ T2956] bridge_slave_0: left promiscuous mode [ 990.700673][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.838539][T15309] loop3: detected capacity change from 0 to 256 [ 991.913433][T15309] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 992.413613][ T2956] team0 (unregistering): Port device 26±ÿ removed [ 992.480402][ T2956] team0 (unregistering): Port device C removed [ 993.174904][T15289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3015'. [ 993.211075][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.217564][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.449267][T15332] tipc: Started in network mode [ 994.454434][T15332] tipc: Node identity 7f000001, cluster identity 4711 [ 994.461466][T15332] tipc: New replicast peer: 127.0.0.1 [ 994.568532][T15332] tipc: Enabled bearer , priority 10 [ 994.853105][T15337] netlink: 'syz.1.3032': attribute type 2 has an invalid length. [ 994.916971][T15340] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3033'. [ 995.170880][T15345] x_tables: duplicate underflow at hook 2 [ 995.449661][T15349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3036'. [ 995.622700][T15357] x_tables: duplicate underflow at hook 2 [ 995.851091][T12048] tipc: Node number set to 2130706433 [ 996.730527][T15370] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3044'. [ 997.048836][ T2956] IPVS: stop unused estimator thread 0... [ 997.463769][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3048'. [ 999.154652][T15378] NFSD: attempt to initialize umh client tracking in a container ignored. [ 999.186665][T15378] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 999.241138][T15378] NFSD: Unable to initialize client recovery tracking! (-22) [ 999.274004][T15378] NFSD: starting 90-second grace period (net f0000906) [ 999.334105][T15401] loop1: detected capacity change from 0 to 256 [ 999.435926][T15401] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1002.172856][T15449] (null): rxe_set_mtu: Set mtu to 1024 [ 1002.818640][T15465] (null): rxe_set_mtu: Set mtu to 4096 [ 1002.830945][T15465] rdma_rxe: rxe_newlink: failed to add lo [ 1002.981048][T15449] infiniband syz0: set active [ 1003.001381][T15449] infiniband syz0: added veth0 [ 1003.783134][T15449] RDS/IB: syz0: added [ 1003.918105][T15449] smc: adding ib device syz0 with port count 1 [ 1003.958764][T15449] smc: ib device syz0 port 1 has pnetid [ 1005.224627][T12045] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_CONNECT_MSG) [ 1005.241254][T15491] ceph: No mds server is up or the cluster is laggy [ 1005.248123][T15490] ceph: No mds server is up or the cluster is laggy [ 1005.256043][T12045] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 1008.958313][T15574] nvme_fabrics: unknown parameter or missing value 'tls_key=1' in ctrl creation request [ 1011.183778][T15611] (null): rxe_set_mtu: Set mtu to 1024 [ 1011.195215][T15611] rdma_rxe: rxe_newlink: failed to add eth0 [ 1011.531698][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3139'. [ 1013.417000][T15657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.451127][T15658] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.527838][T15657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.654227][T15657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.760260][T15657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.929775][T15657] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.955091][T15657] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.980815][T15657] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.041443][T15657] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.279820][T15673] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3157'. [ 1014.365563][ T42] tipc: Left network mode [ 1014.733781][T15680] can0: slcan on ptm0. [ 1014.873983][T15678] can0 (unregistered): slcan off ptm0. [ 1015.364593][T12045] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1015.575296][T12045] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 1015.728096][T12045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1015.860201][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1015.955425][T12045] usb 2-1: Product: syz [ 1015.963928][T12045] usb 2-1: Manufacturer: syz [ 1016.521376][T15712] (null): rxe_set_mtu: Set mtu to 1024 [ 1016.542144][T15712] rdma_rxe: rxe_newlink: failed to add veth0 [ 1016.763509][T15721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1016.781260][T15721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3175'. [ 1016.980961][ T174] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1017.124197][ T42] hsr_slave_0: left promiscuous mode [ 1017.146056][ T42] hsr_slave_1: left promiscuous mode [ 1017.155032][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.170594][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.180466][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.189854][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.204131][ T174] usb 4-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice= 0.00 [ 1017.213676][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.232018][ T42] bridge_slave_0: left allmulticast mode [ 1017.243267][ T174] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0X0): ADI930 [ 1017.262575][ T42] bridge_slave_0: left promiscuous mode [ 1017.269170][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.334899][ T42] veth1_macvtap: left promiscuous mode [ 1017.341596][ T42] veth0_macvtap: left promiscuous mode [ 1017.347800][ T42] veth1_vlan: left promiscuous mode [ 1017.353943][ T42] veth0_vlan: left promiscuous mode [ 1017.354532][T12045] speedtch 2-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 1017.389651][T12045] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -71! [ 1017.396954][T12045] speedtch: probe of 2-1:1.0 failed with error -71 [ 1017.407953][T12045] speedtch 2-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 1017.419300][T12045] speedtch 2-1:1.1: usbatm_usb_probe: bind failed: -71! [ 1017.426435][T12045] speedtch: probe of 2-1:1.1 failed with error -71 [ 1017.437607][T12045] usb 2-1: USB disconnect, device number 15 [ 1017.562760][T12051] usb 4-1: USB disconnect, device number 8 [ 1017.771083][ T42] team0 (unregistering): Port device vlan2 removed [ 1019.231794][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1019.292693][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1019.351423][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.419610][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.486998][ T42] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1019.890000][ T42] bond0 (unregistering): Released all slaves [ 1020.025420][T15731] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1020.068072][T15731] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1020.094874][T15731] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1020.156550][T15747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3181'. [ 1020.430822][T15757] x_tables: duplicate underflow at hook 3 [ 1020.889078][T15772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3192'. [ 1021.708367][T15779] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3195'. [ 1021.729252][T15777] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1021.869866][T15786] ip_tables: iptables: counters copy to user failed while replacing table [ 1022.326809][T15799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3203'. [ 1022.522738][T15805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3204'. [ 1023.290025][T15828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3213'. [ 1023.344078][T15830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3214'. [ 1023.549674][T15838] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3219'. [ 1023.858763][T15849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3223'. [ 1023.878656][T15853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3225'. [ 1023.922150][T15854] sctp: [Deprecated]: syz.1.3224 (pid 15854) Use of int in maxseg socket option. [ 1023.922150][T15854] Use struct sctp_assoc_value instead [ 1024.189058][T15857] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.411758][T15876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3234'. [ 1024.486751][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3235'. [ 1025.831397][T15903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3245'. [ 1026.008553][T11844] Bluetooth: hci0: command 0x0406 tx timeout [ 1026.668232][T15940] tipc: Enabled bearer , priority 0 [ 1026.885004][T15911] ceph: No mds server is up or the cluster is laggy [ 1028.128199][T15955] __nla_validate_parse: 3 callbacks suppressed [ 1028.128219][T15955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3264'. [ 1028.891563][T15979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3273'. [ 1028.911335][T15979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3273'. [ 1029.029992][T15985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3276'. [ 1030.178507][T16009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1030.675478][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3285'. [ 1031.124984][T11844] Bluetooth: hci1: command 0x0406 tx timeout [ 1032.564753][T16051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1036.131386][T16083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3305'. [ 1038.313020][T16101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'. [ 1039.165997][T16116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3315'. [ 1039.508951][T16122] netlink: 'syz.1.3318': attribute type 2 has an invalid length. [ 1041.856963][T16136] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1041.867080][T16136] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1041.876765][T16136] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1041.922735][T16138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 1042.106841][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3323'. [ 1043.319950][T16154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3326'. [ 1046.429052][T16190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3339'. [ 1048.784854][T16216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3350'. [ 1050.872335][T16241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3359'. [ 1052.722392][T16263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3366'. [ 1054.521000][ T174] IPVS: starting estimator thread 0... [ 1054.712341][T16280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3371'. [ 1054.733652][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.740193][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.746768][T16277] IPVS: using max 18 ests per chain, 43200 per kthread [ 1057.121569][T16313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3383'. [ 1060.322751][T16351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3394'. [ 1060.843869][T12046] libceph: connect (1)127.0.0.1:6789 error -101 [ 1060.851620][T12046] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1061.124746][T12046] libceph: connect (1)127.0.0.1:6789 error -101 [ 1061.150056][T12046] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1062.119606][T12045] libceph: connect (1)127.0.0.1:6789 error -101 [ 1062.126212][T12045] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1062.144721][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1062.250328][T16363] ceph: No mds server is up or the cluster is laggy [ 1063.736336][T16391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3406'. [ 1065.085895][T16405] netlink: 'syz.3.3411': attribute type 3 has an invalid length. [ 1065.317912][T16412] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1066.155924][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3418'. [ 1067.043716][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3422'. [ 1067.746286][T16437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3422'. [ 1068.929136][T16458] netlink: 'syz.2.3425': attribute type 3 has an invalid length. [ 1068.947375][T16459] (null): rxe_set_mtu: Set mtu to 1024 [ 1068.987412][T16462] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3428'. [ 1069.351748][T16459] infiniband syz1: set active [ 1069.367242][T16459] infiniband syz1: added veth0 [ 1070.042709][T16459] RDS/IB: syz1: added [ 1070.132369][T16459] smc: adding ib device syz1 with port count 1 [ 1070.142007][T16459] smc: ib device syz1 port 1 has pnetid [ 1071.020050][T16485] sctp: [Deprecated]: syz.1.3434 (pid 16485) Use of int in maxseg socket option. [ 1071.020050][T16485] Use struct sctp_assoc_value instead [ 1072.128306][T16504] tipc: Enabling of bearer rejected, already enabled [ 1072.214834][T16508] tipc: Disabling bearer [ 1073.964466][T12049] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1074.183082][T12049] usb 3-1: device descriptor read/64, error -71 [ 1074.944610][T12049] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1074.990042][T16540] x_tables: duplicate underflow at hook 2 [ 1075.274849][T12049] usb 3-1: device descriptor read/64, error -71 [ 1076.802318][T12049] usb usb3-port1: attempt power cycle [ 1078.406969][T16582] infiniband syz1: set active [ 1079.179997][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3470'. [ 1081.880140][T16627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3478'. [ 1085.870500][T16699] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3500'. [ 1086.063558][T16703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3501'. [ 1086.165628][T16705] can0: slcan on ptm0. [ 1086.419636][T16704] can0 (unregistered): slcan off ptm0. [ 1087.974542][T16732] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3511'. [ 1088.017162][T16737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1090.108201][T16775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1090.120431][T16775] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1090.217325][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3525'. [ 1090.238306][T16776] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3524'. [ 1092.676174][T16812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3536'. [ 1092.756006][T16815] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3537'. [ 1094.107124][T16794] NFSD: attempt to initialize umh client tracking in a container ignored. [ 1094.160746][T16794] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 1094.257391][T16794] NFSD: Unable to initialize client recovery tracking! (-22) [ 1094.301290][T16794] NFSD: starting 90-second grace period (net f0000906) [ 1095.232897][T16855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3546'. [ 1097.539147][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3558'. [ 1097.614671][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3559'. [ 1098.774667][T16900] ceph: No mds server is up or the cluster is laggy [ 1100.411306][T16921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3569'. [ 1101.529601][ T5850] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1102.413284][ T5850] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 1102.468022][ T5850] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.545598][ T5850] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 1102.804583][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1103.481146][ T5850] usb 4-1: Product: syz [ 1103.486181][ T5850] usb 4-1: Manufacturer: syz [ 1103.530794][ T5850] usb 4-1: can't set config #1, error -71 [ 1103.546401][ T5850] usb 4-1: USB disconnect, device number 9 [ 1104.807485][T16972] 8021q: VLANs not supported on syzkaller0 [ 1105.029035][T16972] 8021q: VLANs not supported on lo [ 1105.548650][T16993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1105.651522][ T8411] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1105.675856][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3593'. [ 1105.688801][T16999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3593'. [ 1106.031239][ T8411] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1106.608936][T16995] ceph: No mds server is up or the cluster is laggy [ 1106.817683][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1107.470042][T17027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3602'. [ 1108.288581][T17033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3603'. [ 1108.398046][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1108.428694][T17038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1109.461534][T17056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1110.938384][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3617'. [ 1110.972422][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3618'. [ 1110.993318][T17072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3617'. [ 1111.015214][T17074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3618'. [ 1112.255473][T17089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3623'. [ 1113.522228][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 1113.543446][T17103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3629'. [ 1114.730838][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3631'. [ 1114.776262][T17111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3631'. [ 1114.835270][T17116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3633'. [ 1116.212361][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.218904][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.703596][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3642'. [ 1116.753782][T17143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3642'. [ 1116.859793][T17146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3643'. [ 1118.210597][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1118.237687][T17162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1120.279628][T17180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3654'. [ 1120.433415][T17183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3655'. [ 1120.656673][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 1120.672171][T17195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3660'. [ 1123.069309][T17223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3668'. [ 1123.097770][T17224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1123.197043][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1123.215875][T17226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1126.297545][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'. [ 1126.322077][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3679'. [ 1126.360135][T17258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3681'. [ 1127.586437][T17270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3680'. [ 1129.189527][T17289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1129.507916][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3691'. [ 1129.526170][T17294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3691'. [ 1129.685590][T17302] syz_tun: entered allmulticast mode [ 1129.694047][T17301] syz_tun: left allmulticast mode [ 1130.094069][T17309] can0: slcan on ttyS3. [ 1130.745062][T17303] can0 (unregistered): slcan off ttyS3. [ 1131.016296][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1131.016310][ T27] audit: type=1326 audit(1785796458.098:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1131.046703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1131.159921][ T27] audit: type=1326 audit(1785796458.128:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1131.184149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1131.234226][T17320] ceph: No mds server is up or the cluster is laggy [ 1131.242184][ T174] libceph: connect (1)[c::]:6789 error -101 [ 1131.278596][ T174] libceph: mon0 (1)[c::]:6789 connect error [ 1131.379085][ T27] audit: type=1326 audit(1785796458.158:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1131.481584][ T27] audit: type=1326 audit(1785796458.158:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1131.548655][ T27] audit: type=1326 audit(1785796458.168:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1131.618836][ T27] audit: type=1326 audit(1785796458.168:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1131.663668][ T27] audit: type=1326 audit(1785796458.168:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1131.843806][ T27] audit: type=1326 audit(1785796458.168:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1131.905556][ T27] audit: type=1326 audit(1785796458.168:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1131.993984][ T27] audit: type=1326 audit(1785796458.168:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17318 comm="syz.3.3701" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1132.018223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.091420][T17375] can0: slcan on ttyS3. [ 1136.107666][T17369] can0 (unregistered): slcan off ttyS3. [ 1136.335130][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 1136.335146][ T27] audit: type=1326 audit(1785796463.398:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1136.482251][ T27] audit: type=1326 audit(1785796463.398:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1136.506862][ T27] audit: type=1326 audit(1785796463.398:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1136.522152][T17392] ceph: No mds server is up or the cluster is laggy [ 1136.538468][T12046] libceph: connect (1)[c::]:6789 error -101 [ 1136.547809][T12046] libceph: mon0 (1)[c::]:6789 connect error [ 1136.590027][ T27] audit: type=1326 audit(1785796463.408:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1136.671630][ T27] audit: type=1326 audit(1785796463.408:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1136.755847][ T27] audit: type=1326 audit(1785796463.408:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1136.821852][ T27] audit: type=1326 audit(1785796463.408:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1136.894813][ T27] audit: type=1326 audit(1785796463.408:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1136.919005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.987900][ T27] audit: type=1326 audit(1785796463.408:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1137.012149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1137.027803][ T27] audit: type=1326 audit(1785796463.408:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17390 comm="syz.3.3714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5e79e019 code=0x7ffc0000 [ 1137.051991][ C0] vkms_vblank_simulate: vblank timer overrun [ 1140.342453][T17438] can0: slcan on ttyS3. [ 1140.917645][T17428] can0 (unregistered): slcan off ttyS3. [ 1142.199907][T12046] libceph: connect (1)[c::]:6789 error -101 [ 1142.206124][T12046] libceph: mon0 (1)[c::]:6789 connect error [ 1143.806317][T17456] ceph: No mds server is up or the cluster is laggy [ 1144.094750][T12049] libceph: connect (1)[c::]:6789 error -101 [ 1144.100862][T12049] libceph: mon0 (1)[c::]:6789 connect error [ 1146.756446][T17512] can0: slcan on ttyS3. [ 1148.677181][T17501] can0 (unregistered): slcan off ttyS3. [ 1149.042143][T12048] libceph: connect (1)[c::]:6789 error -101 [ 1149.070439][T12048] libceph: mon0 (1)[c::]:6789 connect error [ 1149.104201][T17537] ceph: No mds server is up or the cluster is laggy [ 1149.358766][T12048] libceph: connect (1)[c::]:6789 error -101 [ 1149.442847][T12048] libceph: mon0 (1)[c::]:6789 connect error [ 1152.326691][T17584] syz_tun: entered allmulticast mode [ 1152.718850][T17585] can0: slcan on ttyS3. [ 1153.148604][T12051] libceph: connect (1)[c::]:6789 error -101 [ 1153.166399][T17580] can0 (unregistered): slcan off ttyS3. [ 1153.757806][T12051] libceph: mon0 (1)[c::]:6789 connect error [ 1153.919863][T17602] ceph: No mds server is up or the cluster is laggy [ 1157.523095][T17664] can0: slcan on ttyS3. [ 1157.984804][T17669] lo: entered allmulticast mode [ 1158.114701][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 1158.114718][ T27] audit: type=1326 audit(1785796485.168:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693b59e019 code=0x7ffc0000 [ 1158.144964][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.195744][T17656] can0 (unregistered): slcan off ttyS3. [ 1158.344428][ T27] audit: type=1326 audit(1785796485.168:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693b59e019 code=0x7ffc0000 [ 1158.379716][ T174] libceph: connect (1)[c::]:6789 error -101 [ 1158.391452][ T174] libceph: mon0 (1)[c::]:6789 connect error [ 1158.672225][ T174] libceph: connect (1)[c::]:6789 error -101 [ 1158.691821][ T174] libceph: mon0 (1)[c::]:6789 connect error [ 1159.544586][ T27] audit: type=1326 audit(1785796485.168:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693b59e019 code=0x7ffc0000 [ 1159.824810][ T174] libceph: connect (1)[c::]:6789 error -101 [ 1159.830986][ T174] libceph: mon0 (1)[c::]:6789 connect error [ 1160.178984][ T27] audit: type=1326 audit(1785796485.168:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f693b59e019 code=0x7ffc0000 [ 1160.298105][ T27] audit: type=1326 audit(1785796485.248:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693b59e019 code=0x7ffc0000 [ 1160.345233][ T27] audit: type=1326 audit(1785796485.248:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f693b59dd82 code=0x7ffc0000 [ 1160.379032][ T27] audit: type=1326 audit(1785796485.248:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f693b59de17 code=0x7ffc0000 [ 1160.479079][ T27] audit: type=1326 audit(1785796485.248:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f693b55ad11 code=0x7ffc0000 [ 1160.542391][ T27] audit: type=1326 audit(1785796485.248:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f693b59ee09 code=0x7ffc0000 [ 1160.576699][ T27] audit: type=1326 audit(1785796485.248:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17667 comm="syz.2.3769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f693b55ad7b code=0x7ffc0000 [ 1160.644413][T17672] ceph: No mds server is up or the cluster is laggy [ 1161.187438][T17712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3780'. [ 1163.143746][ T27] kauditd_printk_skb: 71 callbacks suppressed [ 1163.143762][ T27] audit: type=1326 audit(1785796490.218:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1163.282645][ T174] libceph: connect (1)[c::]:6789 error -101 [ 1163.320715][ T174] libceph: mon0 (1)[c::]:6789 connect error [ 1163.360164][ T27] audit: type=1326 audit(1785796490.278:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1163.434072][T17732] ceph: No mds server is up or the cluster is laggy [ 1163.504381][ T27] audit: type=1326 audit(1785796490.288:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1163.689334][ T27] audit: type=1326 audit(1785796490.298:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1163.834741][ T27] audit: type=1326 audit(1785796490.298:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1163.858951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.890003][ T27] audit: type=1326 audit(1785796490.298:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1163.914780][ T27] audit: type=1326 audit(1785796490.298:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1163.939572][ T27] audit: type=1326 audit(1785796490.298:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1163.964046][ T27] audit: type=1326 audit(1785796490.298:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1163.989903][ T27] audit: type=1326 audit(1785796490.298:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17731 comm="syz.0.3785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044d9e019 code=0x7ffc0000 [ 1166.058546][T12049] libceph: connect (1)[c::]:6789 error -101 [ 1166.102347][T12049] libceph: mon0 (1)[c::]:6789 connect error [ 1166.165581][T17781] ceph: No mds server is up or the cluster is laggy [ 1168.187681][ T27] kauditd_printk_skb: 156 callbacks suppressed [ 1168.187696][ T27] audit: type=1326 audit(1785796495.268:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1059e019 code=0x7ffc0000 [ 1168.219951][ T27] audit: type=1326 audit(1785796495.268:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1059e019 code=0x7ffc0000 [ 1168.244127][ C1] vkms_vblank_simulate: vblank timer overrun [ 1168.251659][ T27] audit: type=1326 audit(1785796495.298:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1059e019 code=0x7ffc0000 [ 1168.275919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1168.429888][ T27] audit: type=1326 audit(1785796495.298:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1059e019 code=0x7ffc0000 [ 1168.465037][ T8411] libceph: connect (1)[c::]:6789 error -101 [ 1168.482491][ T8411] libceph: mon0 (1)[c::]:6789 connect error [ 1168.490017][ T27] audit: type=1326 audit(1785796495.298:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f9b1059e019 code=0x7ffc0000 [ 1168.515536][ T27] audit: type=1326 audit(1785796495.458:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1059e019 code=0x7ffc0000 [ 1168.540444][ T27] audit: type=1326 audit(1785796495.458:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b1059dd82 code=0x7ffc0000 [ 1168.565695][ T27] audit: type=1326 audit(1785796495.458:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9b1059de17 code=0x7ffc0000 [ 1168.592388][ T27] audit: type=1326 audit(1785796495.458:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9b1055ad11 code=0x7ffc0000 [ 1168.624472][T17824] ceph: No mds server is up or the cluster is laggy [ 1168.648203][ T27] audit: type=1326 audit(1785796495.468:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17822 comm="syz.1.3810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9b1059ee09 code=0x7ffc0000 [ 1170.541473][T12051] libceph: connect (1)[c::]:6789 error -101 [ 1170.564640][T12051] libceph: mon0 (1)[c::]:6789 connect error [ 1170.629424][T17867] ceph: No mds server is up or the cluster is laggy [ 1171.015472][T17884] syz_tun: entered allmulticast mode [ 1171.028506][T17883] syz_tun: left allmulticast mode [ 1171.876950][T12049] libceph: connect (1)[c::]:6789 error -101 [ 1171.883050][T12049] libceph: mon0 (1)[c::]:6789 connect error [ 1171.967702][T17905] ceph: No mds server is up or the cluster is laggy [ 1173.155115][T17938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3845'. [ 1173.342057][ T174] libceph: connect (1)[c::]:6789 error -101 [ 1173.363742][ T174] libceph: mon0 (1)[c::]:6789 connect error [ 1173.418982][T17944] ceph: No mds server is up or the cluster is laggy [ 1174.590845][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3857'. [ 1174.607159][T17973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3857'. [ 1174.807011][T17978] lo: entered allmulticast mode [ 1174.814627][T17977] lo: left allmulticast mode [ 1174.940640][T12048] libceph: connect (1)[c::]:6789 error -101 [ 1174.951051][T12048] libceph: mon0 (1)[c::]:6789 connect error [ 1174.963100][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3861'. [ 1175.042404][T17981] ceph: No mds server is up or the cluster is laggy [ 1175.118667][T17991] ------------[ cut here ]------------ [ 1175.124846][T17991] WARNING: CPU: 0 PID: 17991 at kernel/softirq.c:386 __local_bh_enable_ip+0x186/0x1c0 [ 1175.134419][T17991] Modules linked in: [ 1175.138310][T17991] CPU: 0 PID: 17991 Comm: krxrpcio/8999 Not tainted syzkaller #0 [ 1175.146023][T17991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1175.156079][T17991] RIP: 0010:__local_bh_enable_ip+0x186/0x1c0 [ 1175.162064][T17991] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 f3 fe ff ff e8 3c 00 00 00 eb a5 <0f> 0b e9 20 ff ff ff 48 c7 c1 ac af 8c 8e 80 e1 07 80 c1 03 38 c1 [ 1175.181682][T17991] RSP: 0018:ffffc900032d76e0 EFLAGS: 00010046 [ 1175.187754][T17991] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1175.195733][T17991] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8901575f [ 1175.203705][T17991] RBP: ffffc900032d7760 R08: ffff8880b8e3dc83 R09: 1ffff110171c7b90 [ 1175.211678][T17991] R10: dffffc0000000000 R11: ffffed10171c7b91 R12: ffff88806340b978 [ 1175.219654][T17991] R13: ffff88806340b970 R14: dffffc0000000000 R15: 1ffff9200065aedc [ 1175.227628][T17991] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1175.236555][T17991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.243139][T17991] CR2: 000000110c36882a CR3: 0000000069e53000 CR4: 00000000003506f0 [ 1175.251113][T17991] Call Trace: [ 1175.254390][T17991] [ 1175.257322][T17991] ? _local_bh_enable+0xa0/0xa0 [ 1175.262180][T17991] ? do_raw_spin_unlock+0x121/0x230 [ 1175.267380][T17991] ? rt_cache_route+0x21f/0x280 [ 1175.272344][T17991] rt_cache_route+0x21f/0x280 [ 1175.277030][T17991] rt_set_nexthop+0x48b/0xa10 [ 1175.281711][T17991] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 1175.287956][T17991] ip_route_output_key_hash_rcu+0x18c9/0x2350 [ 1175.294027][T17991] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 1175.300274][T17991] ? ip_route_output_key_hash+0x13d/0x330 [ 1175.305992][T17991] ip_route_output_key_hash+0x1f3/0x330 [ 1175.311568][T17991] ? ip_route_input_rcu+0x3120/0x3120 [ 1175.316967][T17991] ? make_kuid+0x1db/0x680 [ 1175.321395][T17991] ? __put_user_ns+0x50/0x50 [ 1175.325987][T17991] ip_route_output_flow+0x2a/0x150 [ 1175.331109][T17991] rxrpc_init_peer+0x2da/0x740 [ 1175.336007][T17991] ? rxrpc_new_incoming_peer+0x590/0x590 [ 1175.341647][T17991] ? do_raw_spin_lock+0x11f/0x2b0 [ 1175.346683][T17991] ? __rwlock_init+0x150/0x150 [ 1175.351453][T17991] rxrpc_new_incoming_peer+0x27a/0x590 [ 1175.356920][T17991] rxrpc_new_incoming_call+0x62a/0x1450 [ 1175.362476][T17991] ? rxrpc_io_thread+0x12b5/0x24b0 [ 1175.367600][T17991] rxrpc_io_thread+0x1b3e/0x24b0 [ 1175.372542][T17991] ? rxrpc_io_thread+0x12b5/0x24b0 [ 1175.377668][T17991] ? rxrpc_direct_abort+0x330/0x330 [ 1175.382868][T17991] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1175.388847][T17991] ? __lock_acquire+0x7d80/0x7d80 [ 1175.393879][T17991] ? lockdep_hardirqs_on+0x98/0x150 [ 1175.399087][T17991] ? _raw_spin_unlock+0x40/0x40 [ 1175.403935][T17991] ? __kthread_parkme+0x71/0x1c0 [ 1175.408868][T17991] ? __kthread_parkme+0x15b/0x1c0 [ 1175.413889][T17991] kthread+0x2fa/0x390 [ 1175.417954][T17991] ? rxrpc_direct_abort+0x330/0x330 [ 1175.423155][T17991] ? kthread_blkcg+0xd0/0xd0 [ 1175.427752][T17991] ret_from_fork+0x48/0x80 [ 1175.432168][T17991] ? kthread_blkcg+0xd0/0xd0 [ 1175.436759][T17991] ret_from_fork_asm+0x11/0x20 [ 1175.441532][T17991] [ 1175.444563][T17991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1175.451844][T17991] CPU: 0 PID: 17991 Comm: krxrpcio/8999 Not tainted syzkaller #0 [ 1175.459558][T17991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1175.469611][T17991] Call Trace: [ 1175.472885][T17991] [ 1175.475813][T17991] dump_stack_lvl+0x18c/0x250 [ 1175.480495][T17991] ? show_regs_print_info+0x20/0x20 [ 1175.485687][T17991] ? load_image+0x420/0x420 [ 1175.490201][T17991] panic+0x2ca/0x720 [ 1175.494107][T17991] ? bpf_jit_dump+0xd0/0xd0 [ 1175.498615][T17991] ? ret_from_fork_asm+0x11/0x20 [ 1175.503551][T17991] __warn+0x2e0/0x470 [ 1175.507532][T17991] ? __local_bh_enable_ip+0x186/0x1c0 [ 1175.512901][T17991] ? __local_bh_enable_ip+0x186/0x1c0 [ 1175.518267][T17991] report_bug+0x2be/0x4f0 [ 1175.522681][T17991] ? __local_bh_enable_ip+0x186/0x1c0 [ 1175.528050][T17991] ? __local_bh_enable_ip+0x186/0x1c0 [ 1175.533419][T17991] ? __local_bh_enable_ip+0x188/0x1c0 [ 1175.538789][T17991] handle_bug+0xcf/0x120 [ 1175.543036][T17991] exc_invalid_op+0x1a/0x50 [ 1175.547540][T17991] asm_exc_invalid_op+0x1a/0x20 [ 1175.552397][T17991] RIP: 0010:__local_bh_enable_ip+0x186/0x1c0 [ 1175.558377][T17991] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 4e 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 0f 0b e9 f3 fe ff ff e8 3c 00 00 00 eb a5 <0f> 0b e9 20 ff ff ff 48 c7 c1 ac af 8c 8e 80 e1 07 80 c1 03 38 c1 [ 1175.577986][T17991] RSP: 0018:ffffc900032d76e0 EFLAGS: 00010046 [ 1175.584052][T17991] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1175.592017][T17991] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff8901575f [ 1175.599985][T17991] RBP: ffffc900032d7760 R08: ffff8880b8e3dc83 R09: 1ffff110171c7b90 [ 1175.607952][T17991] R10: dffffc0000000000 R11: ffffed10171c7b91 R12: ffff88806340b978 [ 1175.615923][T17991] R13: ffff88806340b970 R14: dffffc0000000000 R15: 1ffff9200065aedc [ 1175.623900][T17991] ? rt_cache_route+0x21f/0x280 [ 1175.628762][T17991] ? _local_bh_enable+0xa0/0xa0 [ 1175.633609][T17991] ? do_raw_spin_unlock+0x121/0x230 [ 1175.638811][T17991] ? rt_cache_route+0x21f/0x280 [ 1175.643665][T17991] rt_cache_route+0x21f/0x280 [ 1175.648355][T17991] rt_set_nexthop+0x48b/0xa10 [ 1175.653045][T17991] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 1175.659289][T17991] ip_route_output_key_hash_rcu+0x18c9/0x2350 [ 1175.665362][T17991] ? ip_route_output_key_hash_rcu+0x1281/0x2350 [ 1175.671623][T17991] ? ip_route_output_key_hash+0x13d/0x330 [ 1175.677342][T17991] ip_route_output_key_hash+0x1f3/0x330 [ 1175.682910][T17991] ? ip_route_input_rcu+0x3120/0x3120 [ 1175.688284][T17991] ? make_kuid+0x1db/0x680 [ 1175.692723][T17991] ? __put_user_ns+0x50/0x50 [ 1175.697331][T17991] ip_route_output_flow+0x2a/0x150 [ 1175.702463][T17991] rxrpc_init_peer+0x2da/0x740 [ 1175.707237][T17991] ? rxrpc_new_incoming_peer+0x590/0x590 [ 1175.712872][T17991] ? do_raw_spin_lock+0x11f/0x2b0 [ 1175.717899][T17991] ? __rwlock_init+0x150/0x150 [ 1175.722664][T17991] rxrpc_new_incoming_peer+0x27a/0x590 [ 1175.728131][T17991] rxrpc_new_incoming_call+0x62a/0x1450 [ 1175.733684][T17991] ? rxrpc_io_thread+0x12b5/0x24b0 [ 1175.738792][T17991] rxrpc_io_thread+0x1b3e/0x24b0 [ 1175.743734][T17991] ? rxrpc_io_thread+0x12b5/0x24b0 [ 1175.748855][T17991] ? rxrpc_direct_abort+0x330/0x330 [ 1175.754056][T17991] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1175.760038][T17991] ? __lock_acquire+0x7d80/0x7d80 [ 1175.765068][T17991] ? lockdep_hardirqs_on+0x98/0x150 [ 1175.770277][T17991] ? _raw_spin_unlock+0x40/0x40 [ 1175.775132][T17991] ? __kthread_parkme+0x71/0x1c0 [ 1175.780064][T17991] ? __kthread_parkme+0x15b/0x1c0 [ 1175.785085][T17991] kthread+0x2fa/0x390 [ 1175.789187][T17991] ? rxrpc_direct_abort+0x330/0x330 [ 1175.794388][T17991] ? kthread_blkcg+0xd0/0xd0 [ 1175.798975][T17991] ret_from_fork+0x48/0x80 [ 1175.803389][T17991] ? kthread_blkcg+0xd0/0xd0 [ 1175.807987][T17991] ret_from_fork_asm+0x11/0x20 [ 1175.812762][T17991] [ 1175.816045][T17991] Kernel Offset: disabled [ 1175.820451][T17991] Rebooting in 86400 seconds..