last executing test programs: 8.907148736s ago: executing program 3 (id=99): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="29000000010003", 0x7) 8.227121697s ago: executing program 3 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) clock_getres(0x6, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 7.967676432s ago: executing program 3 (id=105): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9801) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x44) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$rfkill(r2, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) r6 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r8 = fsmount(r6, 0x0, 0x0) bind$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r9 = socket(0xa, 0x3, 0x3a) ioctl$TIOCL_PASTESEL(r8, 0x541c, &(0x7f0000000100)) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffffffd, @local, 0x4}, {0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3d95}, 0xffff, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.197334433s ago: executing program 3 (id=108): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61124f00000000006113520000000000bf2000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d35f3ff000000006507000002080000070700004c0000003e75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2726f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfda047bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded527a0bfe5504eb355cb0000000000000073be27152effbed9ed6a4e8f9c55a2ff11245f2c20856d491b80d749cf8917dbe01cc6c7b747923621bb16efb2025d19a1a27b0348135e32e442da8f26e05283ece8ad92c77f8141c7a2037380f28c9c638ee0151f4620b9b64185db0321a4e809a5438cdef28f7adac1735a50006fbae20d0930b55f0081db6fa0d14024cefa1611ef384de38787324bfb9f79a1e164c8fe80a2d9e4199960"], &(0x7f0000000100)='GPL\x00'}, 0x27) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.978676s ago: executing program 3 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f00000000c0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x80, {0x0, 0xfb}, {}, @result={0x0, 0x2}}], 0x1c) 2.57101295s ago: executing program 1 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1}, 0xc) 2.40191066s ago: executing program 4 (id=117): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 2.325154502s ago: executing program 1 (id=118): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782", 0xc}], 0x1}, 0x20010) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1e0}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x8}}], 0x18}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 2.138272154s ago: executing program 4 (id=119): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x37) 1.999781114s ago: executing program 0 (id=120): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f7829e52f303021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700e00006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457c0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aef4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42af8f20000e6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 1.972812418s ago: executing program 1 (id=121): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001400)=""/4093, 0xffffff6c}], 0x1}, 0x0) 1.942725958s ago: executing program 2 (id=122): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) recvmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x40000000) 1.731040144s ago: executing program 4 (id=123): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x5, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 1.650328831s ago: executing program 2 (id=124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c2700406558009e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1.635403149s ago: executing program 0 (id=125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000000000085000000a500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.592363012s ago: executing program 1 (id=126): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000000c0), &(0x7f0000000080)=r0}, 0x20) 1.293054799s ago: executing program 0 (id=127): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 1.230475361s ago: executing program 1 (id=128): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r2, 0x0, r1}, 0x10) 1.167838136s ago: executing program 2 (id=129): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 1.047454815s ago: executing program 4 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 942.952848ms ago: executing program 0 (id=131): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 843.086302ms ago: executing program 2 (id=132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 404.000566ms ago: executing program 0 (id=133): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0b00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 403.846711ms ago: executing program 2 (id=134): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 403.663127ms ago: executing program 4 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000c9de00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 200.809644ms ago: executing program 1 (id=136): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000006b000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.378914ms ago: executing program 3 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0x27, 0x12, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286dd", 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 263.576µs ago: executing program 2 (id=138): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) 138.725µs ago: executing program 0 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c1c41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030612bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 0s ago: executing program 4 (id=140): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 91.255049][ T5578] cgroup: Unknown subsys name 'net' [ 91.496774][ T5578] cgroup: Unknown subsys name 'cpuset' [ 91.550720][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.967238][ T948] cfg80211: failed to load regulatory.db [ 93.454778][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.146323][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.183778][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.186753][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.188341][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.188744][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.189861][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.202657][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.207078][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.225126][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.249202][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.254819][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.270006][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.277012][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.285463][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.288530][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.289010][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.306739][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.309163][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.314777][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.325935][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.332710][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.366469][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.371043][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.371382][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.404732][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.511633][ T5613] Bluetooth: hci3: command tx timeout [ 98.511764][ T5613] Bluetooth: hci0: command tx timeout [ 98.511968][ T5612] Bluetooth: hci4: command tx timeout [ 98.590390][ T5597] Bluetooth: hci1: command tx timeout [ 98.590399][ T5612] Bluetooth: hci2: command tx timeout [ 99.056590][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.057499][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.057645][ T5594] bridge_slave_0: entered allmulticast mode [ 99.059651][ T5594] bridge_slave_0: entered promiscuous mode [ 99.130676][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.130780][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.130899][ T5594] bridge_slave_1: entered allmulticast mode [ 99.134172][ T5594] bridge_slave_1: entered promiscuous mode [ 99.217819][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.217982][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.218096][ T5592] bridge_slave_0: entered allmulticast mode [ 99.240841][ T5592] bridge_slave_0: entered promiscuous mode [ 99.292918][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.293033][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.293178][ T5592] bridge_slave_1: entered allmulticast mode [ 99.295328][ T5592] bridge_slave_1: entered promiscuous mode [ 99.331304][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.331422][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.331801][ T5593] bridge_slave_0: entered allmulticast mode [ 99.333382][ T5593] bridge_slave_0: entered promiscuous mode [ 99.373949][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.436526][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.436651][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.436833][ T5593] bridge_slave_1: entered allmulticast mode [ 99.439094][ T5593] bridge_slave_1: entered promiscuous mode [ 99.483068][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.504372][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.504501][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.505123][ T5596] bridge_slave_0: entered allmulticast mode [ 99.507003][ T5596] bridge_slave_0: entered promiscuous mode [ 99.546970][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.547073][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.547194][ T5595] bridge_slave_0: entered allmulticast mode [ 99.549090][ T5595] bridge_slave_0: entered promiscuous mode [ 99.590616][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.590849][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.590974][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.591138][ T5596] bridge_slave_1: entered allmulticast mode [ 99.593049][ T5596] bridge_slave_1: entered promiscuous mode [ 99.638590][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.638726][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.639400][ T5595] bridge_slave_1: entered allmulticast mode [ 99.664399][ T5595] bridge_slave_1: entered promiscuous mode [ 99.688297][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.710660][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.734224][ T5594] team0: Port device team_slave_0 added [ 99.777503][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.811029][ T5594] team0: Port device team_slave_1 added [ 99.842474][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.865730][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.892208][ T5592] team0: Port device team_slave_0 added [ 99.894994][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.927560][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.951986][ T5592] team0: Port device team_slave_1 added [ 99.973298][ T5593] team0: Port device team_slave_0 added [ 99.992383][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.992411][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.992435][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.062650][ T5593] team0: Port device team_slave_1 added [ 100.080496][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.080512][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.080539][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.123904][ T5596] team0: Port device team_slave_0 added [ 100.151206][ T5595] team0: Port device team_slave_0 added [ 100.170459][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.170478][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.170507][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.173892][ T5596] team0: Port device team_slave_1 added [ 100.223030][ T5595] team0: Port device team_slave_1 added [ 100.236571][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.236589][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.236607][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.295089][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.295103][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.295123][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.371799][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.371823][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.371844][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.438607][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.438621][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.438641][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.485742][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.485784][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.485856][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.590389][ T5597] Bluetooth: hci4: command tx timeout [ 100.590428][ T5597] Bluetooth: hci3: command tx timeout [ 100.590505][ T5612] Bluetooth: hci0: command tx timeout [ 100.671054][ T5597] Bluetooth: hci2: command tx timeout [ 100.671154][ T5612] Bluetooth: hci1: command tx timeout [ 100.868904][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.868919][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.868940][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.917808][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.917824][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.917844][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.985535][ T5594] hsr_slave_0: entered promiscuous mode [ 100.986866][ T5594] hsr_slave_1: entered promiscuous mode [ 101.058057][ T5592] hsr_slave_0: entered promiscuous mode [ 101.059334][ T5592] hsr_slave_1: entered promiscuous mode [ 101.063201][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 101.063535][ T5592] Cannot create hsr debugfs directory [ 101.134687][ T5593] hsr_slave_0: entered promiscuous mode [ 101.135534][ T5593] hsr_slave_1: entered promiscuous mode [ 101.136201][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 101.136221][ T5593] Cannot create hsr debugfs directory [ 101.241771][ T5596] hsr_slave_0: entered promiscuous mode [ 101.242789][ T5596] hsr_slave_1: entered promiscuous mode [ 101.243469][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 101.243488][ T5596] Cannot create hsr debugfs directory [ 101.279392][ T5595] hsr_slave_0: entered promiscuous mode [ 101.281560][ T5595] hsr_slave_1: entered promiscuous mode [ 101.284121][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 101.284180][ T5595] Cannot create hsr debugfs directory [ 102.256117][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.303594][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.324468][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.355343][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.365049][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.406593][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.429900][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.466510][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.550114][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.588916][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.605684][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.645137][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.648857][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.670312][ T5612] Bluetooth: hci3: command tx timeout [ 102.671679][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.685208][ T5597] Bluetooth: hci4: command tx timeout [ 102.685302][ T5612] Bluetooth: hci0: command tx timeout [ 102.716591][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.750568][ T5597] Bluetooth: hci2: command tx timeout [ 102.750669][ T5612] Bluetooth: hci1: command tx timeout [ 102.755424][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.890507][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.917734][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.944415][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.984695][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.987533][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.016318][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.055948][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.094219][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.262785][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.293722][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.322583][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.364635][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.378703][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.415521][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.456987][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.495043][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.581698][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.675541][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.714183][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.719981][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.755457][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.769674][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.802135][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.820428][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.853987][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.890131][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.923155][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.947079][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.947258][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.046973][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.047097][ T3359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.142512][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.186731][ T3354] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.187185][ T3354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.220918][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.259686][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.259795][ T3359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.347183][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.396645][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.396968][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.434147][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.498298][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.498419][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.635880][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.688348][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.702264][ T3354] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.702419][ T3354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.751500][ T5612] Bluetooth: hci0: command tx timeout [ 104.751529][ T5597] Bluetooth: hci4: command tx timeout [ 104.751563][ T5597] Bluetooth: hci3: command tx timeout [ 104.797514][ T3342] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.797643][ T3342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.831474][ T5612] Bluetooth: hci1: command tx timeout [ 104.831507][ T5612] Bluetooth: hci2: command tx timeout [ 104.946128][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.019492][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.019648][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.097102][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.098799][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.747240][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.184263][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.313726][ T5594] veth0_vlan: entered promiscuous mode [ 106.377396][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.416640][ T5594] veth1_vlan: entered promiscuous mode [ 106.623168][ T5592] veth0_vlan: entered promiscuous mode [ 106.691808][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.696335][ T5594] veth0_macvtap: entered promiscuous mode [ 106.723661][ T5592] veth1_vlan: entered promiscuous mode [ 106.762868][ T5594] veth1_macvtap: entered promiscuous mode [ 106.785227][ T5593] veth0_vlan: entered promiscuous mode [ 106.841986][ T5593] veth1_vlan: entered promiscuous mode [ 106.875220][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.924320][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.965572][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.006673][ T5592] veth0_macvtap: entered promiscuous mode [ 107.046322][ T5592] veth1_macvtap: entered promiscuous mode [ 107.196312][ T5593] veth0_macvtap: entered promiscuous mode [ 107.308681][ T5593] veth1_macvtap: entered promiscuous mode [ 107.379892][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.507347][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.603746][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.659627][ T5595] veth0_vlan: entered promiscuous mode [ 107.669170][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.711856][ T3359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.711881][ T3359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.809813][ T5596] veth0_vlan: entered promiscuous mode [ 107.817408][ T5595] veth1_vlan: entered promiscuous mode [ 108.024029][ T3342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.024053][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.027790][ T5596] veth1_vlan: entered promiscuous mode [ 108.414553][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.414576][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.566203][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.566229][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.597661][ T5594] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.620066][ T5595] veth0_macvtap: entered promiscuous mode [ 108.745513][ T5595] veth1_macvtap: entered promiscuous mode [ 108.763754][ T5596] veth0_macvtap: entered promiscuous mode [ 108.795758][ T3359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.795780][ T3359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.902612][ T5596] veth1_macvtap: entered promiscuous mode [ 108.932985][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.933004][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.023539][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.088848][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.101667][ T5786] FAULT_INJECTION: forcing a failure. [ 109.101667][ T5786] name failslab, interval 1, probability 0, space 0, times 1 [ 109.101717][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.101743][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.101764][ T5786] Call Trace: [ 109.101773][ T5786] [ 109.101782][ T5786] dump_stack_lvl+0xe8/0x150 [ 109.101828][ T5786] should_fail_ex+0x46b/0x600 [ 109.101862][ T5786] should_failslab+0xa8/0x100 [ 109.101898][ T5786] ? security_file_alloc+0x34/0x310 [ 109.101926][ T5786] kmem_cache_alloc_noprof+0x9e/0x690 [ 109.101953][ T5786] ? rcu_is_watching+0x16/0xb0 [ 109.101984][ T5786] ? security_file_alloc+0x34/0x310 [ 109.102012][ T5786] ? alloc_empty_file+0x5b/0x1d0 [ 109.102048][ T5786] security_file_alloc+0x34/0x310 [ 109.102078][ T5786] init_file+0x96/0x2d0 [ 109.102113][ T5786] alloc_empty_file+0x74/0x1d0 [ 109.102148][ T5786] path_openat+0xa2/0x1d60 [ 109.102205][ T5786] do_file_open+0x23e/0x4a0 [ 109.102239][ T5786] ? __pfx_do_file_open+0x10/0x10 [ 109.102291][ T5786] ? alloc_fd+0x654/0x6d0 [ 109.102324][ T5786] do_sys_openat2+0x115/0x200 [ 109.102359][ T5786] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.102394][ T5786] ? ksys_write+0x248/0x270 [ 109.102423][ T5786] ? __pfx_ksys_write+0x10/0x10 [ 109.102451][ T5786] __x64_sys_openat+0x138/0x170 [ 109.102485][ T5786] do_syscall_64+0x166/0x520 [ 109.102512][ T5786] ? trace_irq_disable+0x3b/0x140 [ 109.102536][ T5786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.102556][ T5786] ? clear_bhb_loop+0x70/0xc0 [ 109.102579][ T5786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.102599][ T5786] RIP: 0033:0x7f7a7d63e159 [ 109.102629][ T5786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.102647][ T5786] RSP: 002b:00007f7a7b896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.102675][ T5786] RAX: ffffffffffffffda RBX: 00007f7a7d8c5fa0 RCX: 00007f7a7d63e159 [ 109.102690][ T5786] RDX: 0000000000000001 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 109.102703][ T5786] RBP: 00007f7a7b896090 R08: 0000000000000000 R09: 0000000000000000 [ 109.102716][ T5786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.102729][ T5786] R13: 00007f7a7d8c6038 R14: 00007f7a7d8c5fa0 R15: 00007ffe4696b7a8 [ 109.102757][ T5786] [ 109.394368][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.440675][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.679443][ T5790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.734239][ T5788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.115727][ T5788] gre1: entered promiscuous mode [ 110.115756][ T5788] gre1: entered allmulticast mode [ 110.777116][ T1176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.796436][ T1176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.871250][ T1117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.872050][ T1117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.872240][ T1117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.872425][ T1117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.128605][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.128625][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.292822][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.448805][ T1242] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.559646][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.559667][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.660210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.740194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.760213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.770192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.780227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.790203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.800207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.810212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.830224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.840206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.439846][ T37] audit: type=1800 audit(1789683374.940:2): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.9" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 113.691728][ T1242] usb 4-1: Using ep0 maxpacket: 32 [ 114.036216][ T1242] usb 4-1: device descriptor read/all, error -71 [ 114.184070][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.187292][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.218883][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.218921][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.370303][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.569291][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.612877][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.658201][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.658231][ T10] usb 2-1: Product: syz [ 114.658246][ T10] usb 2-1: Manufacturer: syz [ 114.658262][ T10] usb 2-1: SerialNumber: syz [ 115.127248][ T3359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.127270][ T3359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.248055][ T10] usb 2-1: can't set config #1, error -71 [ 115.343704][ T10] usb 2-1: USB disconnect, device number 2 [ 115.520986][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.521613][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.593634][ T1176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.611589][ T1176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.612357][ T1176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.613002][ T1176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.701048][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.824507][ T1125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.868644][ T1176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.870004][ T37] audit: type=1804 audit(1789683377.540:3): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.13" name="/newroot/2/file0" dev="tmpfs" ino=28 res=1 errno=0 [ 117.655691][ T1176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.975755][ T1023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.286101][ T5840] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.330404][ T1117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.331150][ T3359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.273440][ T37] audit: type=1326 audit(1789683381.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 119.341016][ T37] audit: type=1326 audit(1789683381.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 119.341072][ T37] audit: type=1326 audit(1789683381.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 119.341114][ T37] audit: type=1326 audit(1789683381.070:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 119.341156][ T37] audit: type=1326 audit(1789683381.070:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 119.341197][ T37] audit: type=1326 audit(1789683381.070:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 119.347133][ T37] audit: type=1326 audit(1789683381.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 119.347190][ T37] audit: type=1326 audit(1789683381.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 119.347250][ T37] audit: type=1326 audit(1789683381.080:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 119.349071][ T37] audit: type=1326 audit(1789683381.080:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.4.5" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111defe159 code=0x7ffc0000 [ 120.537490][ T5860] FAULT_INJECTION: forcing a failure. [ 120.537490][ T5860] name failslab, interval 1, probability 0, space 0, times 0 [ 120.537542][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.537568][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.537582][ T5860] Call Trace: [ 120.537591][ T5860] [ 120.537602][ T5860] dump_stack_lvl+0xe8/0x150 [ 120.537666][ T5860] should_fail_ex+0x46b/0x600 [ 120.537711][ T5860] should_failslab+0xa8/0x100 [ 120.537747][ T5860] ? skb_ext_add+0x148/0x8e0 [ 120.537770][ T5860] kmem_cache_alloc_noprof+0x9e/0x690 [ 120.537802][ T5860] ? skb_ext_add+0x148/0x8e0 [ 120.537831][ T5860] skb_ext_add+0x148/0x8e0 [ 120.537864][ T5860] j1939_sk_sendmsg+0x761/0x1320 [ 120.537910][ T5860] ? j1939_sk_sendmsg+0x4ea/0x1320 [ 120.537953][ T5860] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 120.537992][ T5860] ? __kernel_text_address+0xd/0x30 [ 120.538018][ T5860] ? unwind_get_return_address+0x4d/0x90 [ 120.538050][ T5860] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 120.538084][ T5860] sock_sendmsg_nosec+0x13a/0x180 [ 120.538126][ T5860] ____sys_sendmsg+0x565/0x870 [ 120.538311][ T5860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.538347][ T5860] ? import_iovec+0x73/0xa0 [ 120.538383][ T5860] ___sys_sendmsg+0x2a5/0x360 [ 120.538407][ T5860] ? __lock_acquire+0x747/0x2de0 [ 120.538442][ T5860] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.538505][ T5860] ? __fget_files+0x2a/0x420 [ 120.538529][ T5860] ? __fget_files+0x3a8/0x420 [ 120.538565][ T5860] __x64_sys_sendmsg+0x1b7/0x290 [ 120.538594][ T5860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.538643][ T5860] do_syscall_64+0x166/0x520 [ 120.538675][ T5860] ? trace_irq_disable+0x3b/0x140 [ 120.538706][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.538728][ T5860] ? clear_bhb_loop+0x70/0xc0 [ 120.538756][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.538778][ T5860] RIP: 0033:0x7f06d05be159 [ 120.538819][ T5860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.538838][ T5860] RSP: 002b:00007f06ce816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.538869][ T5860] RAX: ffffffffffffffda RBX: 00007f06d0845fa0 RCX: 00007f06d05be159 [ 120.538886][ T5860] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 120.538997][ T5860] RBP: 00007f06ce816090 R08: 0000000000000000 R09: 0000000000000000 [ 120.539017][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.539030][ T5860] R13: 00007f06d0846038 R14: 00007f06d0845fa0 R15: 00007ffc2c68d6f8 [ 120.539065][ T5860] [ 121.622873][ T5872] FAULT_INJECTION: forcing a failure. [ 121.622873][ T5872] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 121.622939][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.622966][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.622981][ T5872] Call Trace: [ 121.622990][ T5872] [ 121.623000][ T5872] dump_stack_lvl+0xe8/0x150 [ 121.623039][ T5872] should_fail_ex+0x46b/0x600 [ 121.623075][ T5872] iommufd_get_object+0x78/0x4b0 [ 121.623107][ T5872] ? __pfx_iommufd_get_object+0x10/0x10 [ 121.623139][ T5872] ? irqentry_exit+0x218/0x910 [ 121.623177][ T5872] iommufd_hwpt_alloc+0x275/0xca0 [ 121.623219][ T5872] ? __pfx_iommufd_hwpt_alloc+0x10/0x10 [ 121.623257][ T5872] ? __pfx_iommufd_hwpt_alloc+0x10/0x10 [ 121.623289][ T5872] iommufd_fops_ioctl+0x468/0x600 [ 121.623313][ T5872] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 121.623343][ T5872] ? __fget_files+0x2a/0x420 [ 121.623362][ T5872] ? bpf_lsm_file_ioctl+0x9/0x20 [ 121.623381][ T5872] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 121.623401][ T5872] __se_sys_ioctl+0xff/0x170 [ 121.623426][ T5872] do_syscall_64+0x166/0x520 [ 121.623449][ T5872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.623466][ T5872] ? clear_bhb_loop+0x70/0xc0 [ 121.623486][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.623502][ T5872] RIP: 0033:0x7f06d05be159 [ 121.623517][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.623531][ T5872] RSP: 002b:00007f06ce7d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.623548][ T5872] RAX: ffffffffffffffda RBX: 00007f06d0846180 RCX: 00007f06d05be159 [ 121.623560][ T5872] RDX: 0000200000000440 RSI: 0000000000003b89 RDI: 0000000000000003 [ 121.623571][ T5872] RBP: 00007f06ce7d4090 R08: 0000000000000000 R09: 0000000000000000 [ 121.623581][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.623591][ T5872] R13: 00007f06d0846218 R14: 00007f06d0846180 R15: 00007ffc2c68d6f8 [ 121.623620][ T5872] [ 123.492668][ T5891] 0x000000000000-0x000000020000 : "" [ 124.157675][ T5891] ftl_cs: FTL header not found. [ 125.125506][ T5907] capability: warning: `syz.4.28' uses 32-bit capabilities (legacy support in use) [ 125.859945][ T5920] Zero length message leads to an empty skb [ 127.060304][ T5720] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.214691][ T5720] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 127.229448][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.229480][ T5720] usb 4-1: Product: syz [ 127.229497][ T5720] usb 4-1: Manufacturer: syz [ 127.229514][ T5720] usb 4-1: SerialNumber: syz [ 127.353915][ T5929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.497415][ T5720] usb 4-1: config 0 descriptor?? [ 127.539229][ T5720] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 127.902406][ T5939] No source specified [ 127.947366][ T5939] tipc: Started in network mode [ 127.947406][ T5939] tipc: Node identity 000000000000000000000017000a0001, cluster identity 4711 [ 127.947457][ T5939] tipc: Enabling of bearer rejected, failed to enable media [ 128.135955][ T5720] gspca_sunplus: reg_r err -110 [ 128.839632][ T10] usb 4-1: USB disconnect, device number 4 [ 129.043594][ T37] kauditd_printk_skb: 59 callbacks suppressed [ 129.043615][ T37] audit: type=1326 audit(1789683390.780:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.1.36" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a7d63e159 code=0x0 [ 129.792026][ T5959] dns_resolver: Unsupported content type (6) [ 131.004892][ T5966] FAULT_INJECTION: forcing a failure. [ 131.004892][ T5966] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.004932][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: syz.0.39 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.004957][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.004970][ T5966] Call Trace: [ 131.004979][ T5966] [ 131.004989][ T5966] dump_stack_lvl+0xe8/0x150 [ 131.005028][ T5966] should_fail_ex+0x46b/0x600 [ 131.005065][ T5966] _copy_from_user+0x2d/0xb0 [ 131.005099][ T5966] __sys_connect+0x156/0x470 [ 131.005135][ T5966] ? __pfx___sys_connect+0x10/0x10 [ 131.005199][ T5966] ? __pfx_ksys_write+0x10/0x10 [ 131.005249][ T5966] __x64_sys_connect+0x7a/0x90 [ 131.005286][ T5966] do_syscall_64+0x166/0x520 [ 131.005317][ T5966] ? trace_irq_disable+0x3b/0x140 [ 131.005346][ T5966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.005370][ T5966] ? clear_bhb_loop+0x70/0xc0 [ 131.005398][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.005422][ T5966] RIP: 0033:0x7f06d05be159 [ 131.005443][ T5966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.005462][ T5966] RSP: 002b:00007f06ce816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 131.005488][ T5966] RAX: ffffffffffffffda RBX: 00007f06d0845fa0 RCX: 00007f06d05be159 [ 131.005505][ T5966] RDX: 000000000000006e RSI: 0000200000000940 RDI: 0000000000000003 [ 131.005520][ T5966] RBP: 00007f06ce816090 R08: 0000000000000000 R09: 0000000000000000 [ 131.005535][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.005549][ T5966] R13: 00007f06d0846038 R14: 00007f06d0845fa0 R15: 00007ffc2c68d6f8 [ 131.005585][ T5966] [ 131.563568][ T5831] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.712780][ T5831] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 131.724450][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 131.724482][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.724503][ T5831] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 131.724537][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.731820][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.731844][ T5831] usb 4-1: Product: syz [ 131.731858][ T5831] usb 4-1: Manufacturer: syz [ 131.731872][ T5831] usb 4-1: SerialNumber: syz [ 132.010493][ T5831] usb 4-1: config 0 descriptor?? [ 132.082534][ T5831] redrat3 4-1:0.0: Couldn't find all endpoints [ 132.176208][ T5982] tipc: Failed to remove unknown binding: 66,0,0/0:1915325939/1915325940 [ 132.245557][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.246148][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.250861][ T1242] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.307391][ T948] usb 4-1: USB disconnect, device number 5 [ 132.400332][ T1242] usb 1-1: Using ep0 maxpacket: 32 [ 132.401173][ T1242] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 132.406860][ T1242] usb 1-1: config 164 has an invalid interface number: 195 but max is 0 [ 132.406890][ T1242] usb 1-1: config 164 has no interface number 0 [ 132.406940][ T1242] usb 1-1: config 164 interface 195 has no altsetting 0 [ 132.444633][ T1242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.444698][ T1242] usb 1-1: Product: syz [ 132.444735][ T1242] usb 1-1: Manufacturer: syz [ 132.444772][ T1242] usb 1-1: SerialNumber: syz [ 133.580301][ T948] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.904625][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.904727][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.924108][ T948] usb 5-1: Using ep0 maxpacket: 32 [ 133.924985][ T948] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 133.928288][ T948] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 133.928316][ T948] usb 5-1: config 0 has no interface number 0 [ 133.928366][ T948] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 133.973916][ T948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.973958][ T948] usb 5-1: Product: syz [ 133.973976][ T948] usb 5-1: Manufacturer: syz [ 133.973992][ T948] usb 5-1: SerialNumber: syz [ 134.092945][ T948] usb 5-1: config 0 descriptor?? [ 134.094060][ T5988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.331652][ T5986] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.597784][ T5975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.339753][ T1242] usb 1-1: USB disconnect, device number 2 [ 137.532430][ T36] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.564908][ T948] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 137.569746][ T948] asix 5-1:0.188: probe with driver asix failed with error -71 [ 137.655348][ T948] usb 5-1: USB disconnect, device number 2 [ 137.741085][ T36] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 137.744708][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.744732][ T36] usb 4-1: Product: syz [ 137.744747][ T36] usb 4-1: Manufacturer: syz [ 137.744761][ T36] usb 4-1: SerialNumber: syz [ 137.874473][ T36] usb 4-1: config 0 descriptor?? [ 137.877883][ T37] audit: type=1326 audit(1789683399.610:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6007 comm="syz.1.50" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a7d63e159 code=0x0 [ 137.960362][ T36] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 138.269340][ T6012] comedi comedi3: dt2817: I/O base address or length out of range [ 138.883304][ T36] gspca_sunplus: reg_r err -110 [ 139.301635][ T948] usb 4-1: USB disconnect, device number 6 [ 139.641501][ T1242] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 139.771291][ T6026] ======================================================= [ 139.771291][ T6026] WARNING: The mand mount option has been deprecated and [ 139.771291][ T6026] and is ignored by this kernel. Remove the mand [ 139.771291][ T6026] option from the mount to silence this warning. [ 139.771291][ T6026] ======================================================= [ 139.791477][ T1242] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 139.793945][ T1242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.793974][ T1242] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.794016][ T1242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.934429][ T1242] dln2 3-1:1.0: USB write failed: -90 [ 139.938434][ T1242] dln2 3-1:1.0: failed to initialize hardware [ 139.980550][ T1242] dln2 3-1:1.0: probe with driver dln2 failed with error -90 [ 140.115952][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.116508][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.220334][ T5580] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 140.254063][ T6034] FAULT_INJECTION: forcing a failure. [ 140.254063][ T6034] name failslab, interval 1, probability 0, space 0, times 0 [ 140.254101][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: syz.0.56 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.254127][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.254141][ T6034] Call Trace: [ 140.254150][ T6034] [ 140.254159][ T6034] dump_stack_lvl+0xe8/0x150 [ 140.254199][ T6034] should_fail_ex+0x46b/0x600 [ 140.254235][ T6034] should_failslab+0xa8/0x100 [ 140.254276][ T6034] __kmalloc_noprof+0xfb/0x790 [ 140.254308][ T6034] ? security_sk_alloc+0x52/0x360 [ 140.254332][ T6034] ? security_sk_alloc+0x52/0x360 [ 140.254366][ T6034] security_sk_alloc+0x52/0x360 [ 140.254402][ T6034] sk_prot_alloc+0x101/0x210 [ 140.254424][ T6034] ? sk_alloc+0x27/0x390 [ 140.254448][ T6034] sk_alloc+0x3a/0x390 [ 140.254475][ T6034] __netlink_create+0x62/0x260 [ 140.254501][ T6034] ? __pfx_genl_release+0x10/0x10 [ 140.254534][ T6034] netlink_create+0x3be/0x580 [ 140.254563][ T6034] ? __pfx_genl_unbind+0x10/0x10 [ 140.254593][ T6034] ? __pfx_genl_bind+0x10/0x10 [ 140.254629][ T6034] __sock_create+0x4b3/0x9d0 [ 140.254670][ T6034] __sys_socket+0xd6/0x1b0 [ 140.254705][ T6034] __x64_sys_socket+0x7a/0x90 [ 140.254739][ T6034] do_syscall_64+0x166/0x520 [ 140.254771][ T6034] ? trace_irq_disable+0x3b/0x140 [ 140.254800][ T6034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.254824][ T6034] ? clear_bhb_loop+0x70/0xc0 [ 140.254852][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.254876][ T6034] RIP: 0033:0x7f06d05bf9c7 [ 140.254896][ T6034] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.254916][ T6034] RSP: 002b:00007f06ce814f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 140.254941][ T6034] RAX: ffffffffffffffda RBX: 00007f06d0845fa0 RCX: 00007f06d05bf9c7 [ 140.254958][ T6034] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 140.254972][ T6034] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 140.254987][ T6034] R10: 0000200000000240 R11: 0000000000000286 R12: 0000000000000001 [ 140.255002][ T6034] R13: 00007f06d0846038 R14: 00007f06d0845fa0 R15: 00007ffc2c68d6f8 [ 140.255052][ T6034] [ 140.519833][ T36] usb 3-1: USB disconnect, device number 2 [ 140.571879][ T5580] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 140.575026][ T5580] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 140.575050][ T5580] usb 5-1: config 0 has no interface number 0 [ 140.575091][ T5580] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.575117][ T5580] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 140.599709][ T5580] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 140.599739][ T5580] usb 5-1: Product: syz [ 140.599756][ T5580] usb 5-1: SerialNumber: syz [ 140.653621][ T5580] usb 5-1: config 0 descriptor?? [ 140.655116][ T6029] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 140.694035][ T5580] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 140.711175][ T5580] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input5 [ 141.270742][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 143.024460][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 145.379269][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.380415][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.380811][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.383334][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.383571][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.383803][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.384032][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.384279][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.384674][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.384908][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 145.460525][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 145.488296][ T9] usb 5-1: USB disconnect, device number 3 [ 145.739786][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 171.488055][ T6077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.652816][ T6074] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 171.876377][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 172.031644][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 172.035603][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.035633][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 172.035658][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.039175][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.039202][ T10] usb 1-1: Product: syz [ 172.039220][ T10] usb 1-1: Manufacturer: syz [ 172.039237][ T10] usb 1-1: SerialNumber: syz [ 172.059998][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 172.060040][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 174.537403][ T6101] FAULT_INJECTION: forcing a failure. [ 174.537403][ T6101] name failslab, interval 1, probability 0, space 0, times 0 [ 174.537446][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.1.72 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.537468][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.537480][ T6101] Call Trace: [ 174.537487][ T6101] [ 174.537499][ T6101] dump_stack_lvl+0xe8/0x150 [ 174.537534][ T6101] should_fail_ex+0x46b/0x600 [ 174.537572][ T6101] should_failslab+0xa8/0x100 [ 174.537603][ T6101] __kmalloc_noprof+0xfb/0x790 [ 174.537630][ T6101] ? tomoyo_realpath_from_path+0xef/0x640 [ 174.537657][ T6101] ? tomoyo_realpath_from_path+0xef/0x640 [ 174.537691][ T6101] tomoyo_realpath_from_path+0xef/0x640 [ 174.537730][ T6101] tomoyo_check_open_permission+0x229/0x470 [ 174.537757][ T6101] ? tomoyo_check_open_permission+0x1d3/0x470 [ 174.537780][ T6101] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 174.537806][ T6101] ? __asan_memset+0x22/0x50 [ 174.537834][ T6101] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 174.537882][ T6101] ? tomoyo_file_open+0x167/0x220 [ 174.537913][ T6101] security_file_open+0xa9/0x240 [ 174.537940][ T6101] do_dentry_open+0x4be/0x1420 [ 174.537980][ T6101] vfs_open+0x3b/0x350 [ 174.538007][ T6101] ? path_openat+0x142d/0x1d60 [ 174.538033][ T6101] path_openat+0x1448/0x1d60 [ 174.538077][ T6101] do_file_open+0x23e/0x4a0 [ 174.538108][ T6101] ? __pfx_do_file_open+0x10/0x10 [ 174.538156][ T6101] ? alloc_fd+0x654/0x6d0 [ 174.538185][ T6101] do_sys_openat2+0x115/0x200 [ 174.538218][ T6101] ? __pfx_do_sys_openat2+0x10/0x10 [ 174.538253][ T6101] ? rcu_is_watching+0x16/0xb0 [ 174.538291][ T6101] __x64_sys_openat+0x138/0x170 [ 174.538327][ T6101] do_syscall_64+0x166/0x520 [ 174.538354][ T6101] ? trace_irq_disable+0x3b/0x140 [ 174.538379][ T6101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.538399][ T6101] ? clear_bhb_loop+0x70/0xc0 [ 174.538423][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.538443][ T6101] RIP: 0033:0x7f7a7d5fe98e [ 174.538462][ T6101] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.538478][ T6101] RSP: 002b:00007f7a7b895b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 174.538500][ T6101] RAX: ffffffffffffffda RBX: 00007f7a7b8966c0 RCX: 00007f7a7d5fe98e [ 174.538514][ T6101] RDX: 0000000000000000 RSI: 00007f7a7b895c00 RDI: ffffffffffffff9c [ 174.538527][ T6101] RBP: 00007f7a7b895c00 R08: 0000000000000000 R09: 0000000000000000 [ 174.538561][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 174.538573][ T6101] R13: 00007f7a7d8c6038 R14: 00007f7a7d8c5fa0 R15: 00007ffe4696b7a8 [ 174.538605][ T6101] [ 174.539129][ T6101] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.864987][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 174.911113][ T6103] 0x000000000000-0x000000020000 : "" [ 175.100685][ T6103] ftl_cs: FTL header not found. [ 175.358743][ T10] usb 1-1: USB disconnect, device number 3 [ 175.627255][ T6112] FAULT_INJECTION: forcing a failure. [ 175.627255][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 175.627291][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 175.627315][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.627328][ T6112] Call Trace: [ 175.627337][ T6112] [ 175.627345][ T6112] dump_stack_lvl+0xe8/0x150 [ 175.627385][ T6112] should_fail_ex+0x46b/0x600 [ 175.627419][ T6112] should_failslab+0xa8/0x100 [ 175.627454][ T6112] __kmalloc_noprof+0xfb/0x790 [ 175.627483][ T6112] ? tomoyo_realpath_from_path+0xef/0x640 [ 175.627513][ T6112] ? tomoyo_realpath_from_path+0xef/0x640 [ 175.627551][ T6112] tomoyo_realpath_from_path+0xef/0x640 [ 175.627592][ T6112] ? tomoyo_path_number_perm+0x219/0x5f0 [ 175.627628][ T6112] tomoyo_path_number_perm+0x246/0x5f0 [ 175.627655][ T6112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.627678][ T6112] ? __lock_acquire+0x747/0x2de0 [ 175.627718][ T6112] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 175.627745][ T6112] ? hook_file_ioctl+0x1f5/0x610 [ 175.627809][ T6112] ? __fget_files+0x2a/0x420 [ 175.627834][ T6112] ? __fget_files+0x2a/0x420 [ 175.627855][ T6112] ? __fget_files+0x3a8/0x420 [ 175.627875][ T6112] ? __fget_files+0x2a/0x420 [ 175.627902][ T6112] security_file_ioctl+0xc3/0x2a0 [ 175.627930][ T6112] __se_sys_ioctl+0x47/0x170 [ 175.627971][ T6112] do_syscall_64+0x166/0x520 [ 175.627998][ T6112] ? trace_irq_disable+0x3b/0x140 [ 175.628023][ T6112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.628043][ T6112] ? clear_bhb_loop+0x70/0xc0 [ 175.628067][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.628086][ T6112] RIP: 0033:0x7f7a7d63e159 [ 175.628104][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.628120][ T6112] RSP: 002b:00007f7a7b896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.628141][ T6112] RAX: ffffffffffffffda RBX: 00007f7a7d8c5fa0 RCX: 00007f7a7d63e159 [ 175.628156][ T6112] RDX: 0000000000000000 RSI: 00000000000089ef RDI: 0000000000000003 [ 175.628168][ T6112] RBP: 00007f7a7b896090 R08: 0000000000000000 R09: 0000000000000000 [ 175.628180][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.628191][ T6112] R13: 00007f7a7d8c6038 R14: 00007f7a7d8c5fa0 R15: 00007ffe4696b7a8 [ 175.628222][ T6112] [ 175.678591][ T6112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.887898][ T10] usblp0: removed [ 176.225516][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.77'. [ 176.225957][ T6116] netlink: 'syz.4.77': attribute type 7 has an invalid length. [ 176.225974][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 178.144171][ T6116] erspan0: entered promiscuous mode [ 178.145634][ T6116] gretap0: entered promiscuous mode [ 178.264842][ T6128] bond1: entered promiscuous mode [ 178.265204][ T6128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.502621][ T6140] FAULT_INJECTION: forcing a failure. [ 180.502621][ T6140] name failslab, interval 1, probability 0, space 0, times 0 [ 180.502660][ T6140] CPU: 1 UID: 0 PID: 6140 Comm: syz.4.80 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.502685][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.502699][ T6140] Call Trace: [ 180.502708][ T6140] [ 180.502717][ T6140] dump_stack_lvl+0xe8/0x150 [ 180.502757][ T6140] should_fail_ex+0x46b/0x600 [ 180.502792][ T6140] ? alloc_slab_obj_exts+0x5c/0x180 [ 180.502819][ T6140] should_failslab+0xa8/0x100 [ 180.502854][ T6140] ? alloc_slab_obj_exts+0x5c/0x180 [ 180.502879][ T6140] __kmalloc_flags_noprof+0x128/0x810 [ 180.502914][ T6140] ? alloc_slab_obj_exts+0x5c/0x180 [ 180.502949][ T6140] alloc_slab_obj_exts+0x5c/0x180 [ 180.502978][ T6140] __memcg_slab_post_alloc_hook+0x62d/0xde0 [ 180.503066][ T6140] __kvmalloc_node_noprof+0x6a5/0x890 [ 180.503103][ T6140] ? traverse+0xf1/0x620 [ 180.503133][ T6140] ? traverse+0xf1/0x620 [ 180.503172][ T6140] traverse+0xf1/0x620 [ 180.503205][ T6140] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 180.503242][ T6140] ? seq_read_iter+0xa5/0xcb0 [ 180.503282][ T6140] seq_read_iter+0xb6b/0xcb0 [ 180.503340][ T6140] seq_read+0x36a/0x490 [ 180.503369][ T6140] ? kstrtoull+0x137/0x1d0 [ 180.503402][ T6140] ? __pfx_seq_read+0x10/0x10 [ 180.503444][ T6140] ? __import_iovec+0x5d7/0x7e0 [ 180.503486][ T6140] ? __pfx_seq_read+0x10/0x10 [ 180.503516][ T6140] proc_reg_read+0x1f6/0x2f0 [ 180.503553][ T6140] vfs_readv+0x588/0x850 [ 180.503588][ T6140] ? __pfx_proc_reg_read+0x10/0x10 [ 180.503624][ T6140] ? __pfx_vfs_readv+0x10/0x10 [ 180.503673][ T6140] ? __fget_files+0x2a/0x420 [ 180.503704][ T6140] ? __fget_files+0x3a8/0x420 [ 180.503728][ T6140] ? __fget_files+0x2a/0x420 [ 180.503762][ T6140] __x64_sys_preadv+0x19f/0x2c0 [ 180.503796][ T6140] ? __pfx___x64_sys_preadv+0x10/0x10 [ 180.503839][ T6140] do_syscall_64+0x166/0x520 [ 180.503871][ T6140] ? trace_irq_disable+0x3b/0x140 [ 180.503906][ T6140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.503931][ T6140] ? clear_bhb_loop+0x70/0xc0 [ 180.503959][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.503982][ T6140] RIP: 0033:0x7f111defe159 [ 180.504003][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.504022][ T6140] RSP: 002b:00007f111c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 180.504047][ T6140] RAX: ffffffffffffffda RBX: 00007f111e185fa0 RCX: 00007f111defe159 [ 180.504064][ T6140] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 180.504079][ T6140] RBP: 00007f111c156090 R08: 0000000000000001 R09: 0000000000000000 [ 180.504093][ T6140] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 180.504106][ T6140] R13: 00007f111e186038 R14: 00007f111e185fa0 R15: 00007ffc76e43098 [ 180.504143][ T6140] [ 180.996300][ T6150] FAULT_INJECTION: forcing a failure. [ 180.996300][ T6150] name failslab, interval 1, probability 0, space 0, times 0 [ 180.996375][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.996400][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.996413][ T6150] Call Trace: [ 180.996422][ T6150] [ 180.996431][ T6150] dump_stack_lvl+0xe8/0x150 [ 180.996468][ T6150] should_fail_ex+0x46b/0x600 [ 180.996501][ T6150] should_failslab+0xa8/0x100 [ 180.996536][ T6150] __kmalloc_noprof+0xfb/0x790 [ 180.996564][ T6150] ? tomoyo_realpath_from_path+0xef/0x640 [ 180.996594][ T6150] ? tomoyo_realpath_from_path+0xef/0x640 [ 180.996632][ T6150] tomoyo_realpath_from_path+0xef/0x640 [ 180.996676][ T6150] tomoyo_check_open_permission+0x229/0x470 [ 180.996704][ T6150] ? tomoyo_check_open_permission+0x1d3/0x470 [ 180.996748][ T6150] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 180.996778][ T6150] ? __asan_memset+0x22/0x50 [ 180.996811][ T6150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 180.996871][ T6150] ? tomoyo_file_open+0x167/0x220 [ 180.996903][ T6150] security_file_open+0xa9/0x240 [ 180.996928][ T6150] do_dentry_open+0x4be/0x1420 [ 180.996964][ T6150] vfs_open+0x3b/0x350 [ 180.996988][ T6150] ? path_openat+0x142d/0x1d60 [ 180.997013][ T6150] path_openat+0x1448/0x1d60 [ 180.997052][ T6150] do_file_open+0x23e/0x4a0 [ 180.997079][ T6150] ? __pfx_do_file_open+0x10/0x10 [ 180.997122][ T6150] ? alloc_fd+0x654/0x6d0 [ 180.997148][ T6150] do_sys_openat2+0x115/0x200 [ 180.997188][ T6150] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.997215][ T6150] ? ksys_write+0x248/0x270 [ 180.997241][ T6150] __x64_sys_openat+0x138/0x170 [ 180.997279][ T6150] do_syscall_64+0x166/0x520 [ 180.997303][ T6150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.997320][ T6150] ? clear_bhb_loop+0x70/0xc0 [ 180.997341][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.997357][ T6150] RIP: 0033:0x7f06d057e98e [ 180.997372][ T6150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.997386][ T6150] RSP: 002b:00007f06ce7d3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.997404][ T6150] RAX: ffffffffffffffda RBX: 00007f06ce7d46c0 RCX: 00007f06d057e98e [ 180.997417][ T6150] RDX: 0000000000000002 RSI: 00007f06ce7d3c00 RDI: ffffffffffffff9c [ 180.997428][ T6150] RBP: 00007f06ce7d4090 R08: 0000000000000000 R09: 0000000000000000 [ 180.997438][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.997448][ T6150] R13: 00007f06d0846218 R14: 00007f06d0846180 R15: 00007ffc2c68d6f8 [ 180.997474][ T6150] [ 180.997513][ T6150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.678631][ T6154] FAULT_INJECTION: forcing a failure. [ 181.678631][ T6154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.692916][ T6154] CPU: 1 UID: 0 PID: 6154 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 181.692947][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.692960][ T6154] Call Trace: [ 181.692970][ T6154] [ 181.692980][ T6154] dump_stack_lvl+0xe8/0x150 [ 181.693018][ T6154] should_fail_ex+0x46b/0x600 [ 181.693054][ T6154] _copy_from_user+0x2d/0xb0 [ 181.693087][ T6154] kstrtouint_from_user+0xd6/0x180 [ 181.693117][ T6154] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 181.693141][ T6154] ? __lock_acquire+0x747/0x2de0 [ 181.693180][ T6154] ? lock_acquire+0x115/0x350 [ 181.693214][ T6154] proc_fail_nth_write+0x8e/0x210 [ 181.693243][ T6154] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.693280][ T6154] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.693308][ T6154] vfs_write+0x29f/0xbb0 [ 181.693344][ T6154] ? __pfx_vfs_write+0x10/0x10 [ 181.693373][ T6154] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 181.693409][ T6154] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 181.693441][ T6154] ? mutex_lock_nested+0x152/0x1d0 [ 181.693465][ T6154] ? fdget_pos+0x252/0x320 [ 181.693499][ T6154] ksys_write+0x156/0x270 [ 181.693528][ T6154] ? __pfx_ksys_write+0x10/0x10 [ 181.693587][ T6154] do_syscall_64+0x166/0x520 [ 181.693618][ T6154] ? trace_irq_disable+0x3b/0x140 [ 181.693648][ T6154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.693672][ T6154] ? clear_bhb_loop+0x70/0xc0 [ 181.693711][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.693735][ T6154] RIP: 0033:0x7f520637e98e [ 181.693757][ T6154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.693776][ T6154] RSP: 002b:00007f52045f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.693801][ T6154] RAX: ffffffffffffffda RBX: 00007f52045f56c0 RCX: 00007f520637e98e [ 181.693819][ T6154] RDX: 0000000000000001 RSI: 00007f52045f50a0 RDI: 0000000000000003 [ 181.693833][ T6154] RBP: 00007f52045f5090 R08: 0000000000000000 R09: 0000000000000000 [ 181.693848][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.693862][ T6154] R13: 00007f5206646128 R14: 00007f5206646090 R15: 00007fffa0feef18 [ 181.693900][ T6154] [ 182.827244][ T6158] bond1: entered promiscuous mode [ 182.837363][ T6158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.480858][ T6167] warning: `syz.0.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 185.381515][ T5707] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 185.645945][ T5707] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.885911][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.885946][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.885970][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.886013][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.534160][ T6183] bond1: entered promiscuous mode [ 186.539758][ T6183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.976453][ T5707] usb 4-1: config 0 descriptor?? [ 187.059848][ T5707] usb 4-1: can't set config #0, error -71 [ 187.091652][ T5707] usb 4-1: USB disconnect, device number 7 [ 187.527615][ T6198] FAULT_INJECTION: forcing a failure. [ 187.527615][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 187.527682][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.527706][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.527719][ T6198] Call Trace: [ 187.527728][ T6198] [ 187.527737][ T6198] dump_stack_lvl+0xe8/0x150 [ 187.527773][ T6198] should_fail_ex+0x46b/0x600 [ 187.527806][ T6198] should_failslab+0xa8/0x100 [ 187.527840][ T6198] __kmalloc_cache_noprof+0xa1/0x680 [ 187.527870][ T6198] ? iommufd_test+0x23d1/0x6370 [ 187.527890][ T6198] ? iommufd_test+0x23d1/0x6370 [ 187.527916][ T6198] iommufd_test+0x23d1/0x6370 [ 187.527947][ T6198] ? __lock_acquire+0x747/0x2de0 [ 187.527973][ T6198] ? __pfx_iommufd_test+0x10/0x10 [ 187.527997][ T6198] ? rcu_is_watching+0x16/0xb0 [ 187.528028][ T6198] ? trace_sched_exit_tp+0x3a/0x130 [ 187.528054][ T6198] ? __schedule+0x16ef/0x5700 [ 187.528091][ T6198] ? lock_acquire+0x115/0x350 [ 187.528142][ T6198] iommufd_fops_ioctl+0x468/0x600 [ 187.528174][ T6198] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 187.528233][ T6198] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 187.528258][ T6198] __se_sys_ioctl+0xff/0x170 [ 187.528287][ T6198] do_syscall_64+0x166/0x520 [ 187.528315][ T6198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.528335][ T6198] ? clear_bhb_loop+0x70/0xc0 [ 187.528359][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.528379][ T6198] RIP: 0033:0x7f52063be159 [ 187.528413][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.528430][ T6198] RSP: 002b:00007f52045b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.528453][ T6198] RAX: ffffffffffffffda RBX: 00007f5206646270 RCX: 00007f52063be159 [ 187.528469][ T6198] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 187.528483][ T6198] RBP: 00007f52045b3090 R08: 0000000000000000 R09: 0000000000000000 [ 187.528496][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.528508][ T6198] R13: 00007f5206646308 R14: 00007f5206646270 R15: 00007fffa0feef18 [ 187.528558][ T6198] [ 191.826183][ T6231] FAULT_INJECTION: forcing a failure. [ 191.826183][ T6231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.826225][ T6231] CPU: 1 UID: 0 PID: 6231 Comm: syz.4.104 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.826251][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.826266][ T6231] Call Trace: [ 191.826275][ T6231] [ 191.826294][ T6231] dump_stack_lvl+0xe8/0x150 [ 191.826335][ T6231] should_fail_ex+0x46b/0x600 [ 191.826371][ T6231] _copy_to_user+0x31/0xb0 [ 191.826406][ T6231] simple_read_from_buffer+0xe1/0x170 [ 191.826439][ T6231] proc_fail_nth_read+0x1be/0x230 [ 191.826472][ T6231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.826504][ T6231] ? rw_verify_area+0x250/0x4d0 [ 191.826533][ T6231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.826560][ T6231] vfs_read+0x219/0xa90 [ 191.826596][ T6231] ? __pfx_vfs_read+0x10/0x10 [ 191.826625][ T6231] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.826661][ T6231] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 191.826693][ T6231] ? mutex_lock_nested+0x152/0x1d0 [ 191.826718][ T6231] ? fdget_pos+0x252/0x320 [ 191.826752][ T6231] ksys_read+0x156/0x270 [ 191.826782][ T6231] ? __pfx_ksys_read+0x10/0x10 [ 191.826821][ T6231] do_syscall_64+0x166/0x520 [ 191.826853][ T6231] ? trace_irq_disable+0x3b/0x140 [ 191.826882][ T6231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.826906][ T6231] ? clear_bhb_loop+0x70/0xc0 [ 191.826932][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.826954][ T6231] RIP: 0033:0x7f111debe98e [ 191.826975][ T6231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.826994][ T6231] RSP: 002b:00007f111c155fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.827019][ T6231] RAX: ffffffffffffffda RBX: 00007f111c1566c0 RCX: 00007f111debe98e [ 191.827036][ T6231] RDX: 000000000000000f RSI: 00007f111c1560a0 RDI: 0000000000000003 [ 191.827050][ T6231] RBP: 00007f111c156090 R08: 0000000000000000 R09: 0000000000000000 [ 191.827064][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.827078][ T6231] R13: 00007f111e186038 R14: 00007f111e185fa0 R15: 00007ffc76e43098 [ 191.827120][ T6231] [ 192.849399][ T6235] bond2: entered promiscuous mode [ 192.850628][ T6235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.359999][ T6245] jffs2: notice: (6245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.522727][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.548447][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.610423][ T5707] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 195.179358][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 195.228305][ T5707] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 196.500315][ T5707] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 196.500361][ T5707] usb 3-1: can't read configurations, error -71 [ 197.614434][ T6288] netlink: 'syz.0.120': attribute type 21 has an invalid length. [ 197.614457][ T6288] netlink: 'syz.0.120': attribute type 7 has an invalid length. [ 199.564490][ T6332] [ 199.570673][ T6332] ============================= [ 199.575548][ T6332] WARNING: suspicious RCU usage [ 199.580463][ T6332] syzkaller #0 Not tainted [ 199.584951][ T6332] ----------------------------- [ 199.589798][ T6332] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 199.598338][ T6332] [ 199.598338][ T6332] other info that might help us debug this: [ 199.598338][ T6332] [ 199.608615][ T6332] [ 199.608615][ T6332] rcu_scheduler_active = 2, debug_locks = 1 [ 199.616708][ T6332] locks held by syz.4.140/6332: 1, last CPU#0: [ 199.622945][ T6332] #0: ffffffff8e1c3e78 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 199.633990][ T6332] [ 199.633990][ T6332] stack backtrace: [ 199.639900][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.4.140 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 199.649617][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.660652][ T6332] Call Trace: [ 199.664303][ T6332] [ 199.667490][ T6332] dump_stack_lvl+0xe8/0x150 [ 199.672125][ T6332] lockdep_rcu_suspicious+0x140/0x1d0 [ 199.677520][ T6332] get_callchain_entry+0x2b7/0x3c0 [ 199.682659][ T6332] get_perf_callchain+0xd5/0x880 [ 199.687641][ T6332] ? __pfx_get_perf_callchain+0x10/0x10 [ 199.693238][ T6332] ? __lock_acquire+0x747/0x2de0 [ 199.698367][ T6332] __bpf_get_stack+0x375/0xae0 [ 199.703164][ T6332] ? __pfx___bpf_get_stack+0x10/0x10 [ 199.708453][ T6332] ? __lock_acquire+0x747/0x2de0 [ 199.713433][ T6332] ? lock_acquire+0x115/0x350 [ 199.718133][ T6332] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 199.723766][ T6332] bpf_get_stack_raw_tp+0x1a4/0x210 [ 199.729003][ T6332] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 199.734477][ T6332] bpf_prog_run_pin_on_cpu+0x14f/0x4c0 [ 199.739963][ T6332] bpf_prog_test_run_syscall+0x324/0x4c0 [ 199.745606][ T6332] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 199.751760][ T6332] ? __fget_files+0x2a/0x420 [ 199.756448][ T6332] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 199.762606][ T6332] bpf_prog_test_run+0x2cb/0x340 [ 199.767559][ T6332] __sys_bpf+0xa22/0xd90 [ 199.771825][ T6332] ? __pfx___sys_bpf+0x10/0x10 [ 199.776611][ T6332] ? do_futex+0x458/0x4e0 [ 199.780975][ T6332] ? rcu_is_watching+0x16/0xb0 [ 199.785763][ T6332] __x64_sys_bpf+0xba/0xd0 [ 199.790224][ T6332] do_syscall_64+0x166/0x520 [ 199.794849][ T6332] ? trace_irq_disable+0x3b/0x140 [ 199.799882][ T6332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.805965][ T6332] ? clear_bhb_loop+0x70/0xc0 [ 199.810666][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.816584][ T6332] RIP: 0033:0x7f111defe159 [ 199.821015][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.840631][ T6332] RSP: 002b:00007f111c156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.849060][ T6332] RAX: ffffffffffffffda RBX: 00007f111e185fa0 RCX: 00007f111defe159 [ 199.857040][ T6332] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 199.865014][ T6332] RBP: 00007f111df9506b R08: 0000000000000000 R09: 0000000000000000 [ 199.872991][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.880988][ T6332] R13: 00007f111e186038 R14: 00007f111e185fa0 R15: 00007ffc76e43098 [ 199.889014][ T6332]