last executing test programs: 3m36.373412804s ago: executing program 1 (id=102): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000900)='GPL\x00', 0x6, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94) 3m35.898775453s ago: executing program 1 (id=105): r0 = fanotify_init(0x8, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000037) close_range(r0, 0xffffffffffffffff, 0x0) 3m34.997338307s ago: executing program 1 (id=109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x200}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x3f, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x16, 0x3, [{0x1, 0x10, "a2eacfc441565a7ac609f9b0e5e3"}]}]}}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xd}}}}}}, 0x0) 3m34.883796752s ago: executing program 1 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x4004}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 3m34.64593649s ago: executing program 1 (id=115): r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_labels_list(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='*%}[} #'], 0x10) writev(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 3m31.426713592s ago: executing program 1 (id=141): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0a, &(0x7f0000000400)="0400000000000000060000007e01") 3m30.331127531s ago: executing program 32 (id=141): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0a, &(0x7f0000000400)="0400000000000000060000007e01") 2m47.559181764s ago: executing program 2 (id=635): openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x169802, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000680)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x40241, 0x0) pipe2(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000002a80), 0x86}], 0x2) 2m47.398412852s ago: executing program 2 (id=639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0x8005}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) 2m47.243077259s ago: executing program 2 (id=642): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0], &(0x7f0000000740)='syzkaller\x00'}, 0x94) 2m47.118829759s ago: executing program 2 (id=644): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000cc0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x0, &(0x7f0000000dc0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000e00)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2007, @fd_index=0x5, 0x4, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2m47.015080016s ago: executing program 2 (id=646): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0x100b}, @flat=@handle={0x73682a85, 0x100, 0x3, 0x3}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m45.099369533s ago: executing program 2 (id=662): openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x169802, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000680)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x40241, 0x0) pipe2(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000002a80), 0x86}], 0x2) 2m44.713526911s ago: executing program 33 (id=662): openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x169802, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000680)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x40241, 0x0) pipe2(0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000002a80), 0x86}], 0x2) 1m51.453058045s ago: executing program 0 (id=1093): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001b40)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000001d00)={0xfffa, [0x930, 0x746ffec1]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001d40), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001d80)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1m48.375075928s ago: executing program 0 (id=1126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'xfrm0\x00', 0x0}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4ea0, 0x2, @mcast1, 0x28}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r1}}}], 0x28}, 0x4004000) 1m48.078981132s ago: executing program 0 (id=1130): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000800)=ANY=[], 0xb) 1m47.539381884s ago: executing program 0 (id=1134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m42.95245841s ago: executing program 0 (id=1153): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000004c0)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000500)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000600)=0xc0) 1m42.343315507s ago: executing program 0 (id=1155): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000980)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000009c0)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000a00)=0x4) pwritev(r0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003090000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="002145000014000b0000400600000a0000010a000002005000500000000200000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 1m32.891062116s ago: executing program 6 (id=1176): r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000440)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000480)=0x18) 1m30.935234718s ago: executing program 6 (id=1180): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x95f3, 0x2080, 0x2, 0x3}, 0x0, 0x4, 0x0, 0x0) io_uring_setup(0x4a88, &(0x7f0000000240)={0x0, 0xbba5, 0x10, 0xffffffff, 0x391}) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000340)=0x68) 1m28.944394893s ago: executing program 6 (id=1182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)={0x74, 0x0, 0x1, 0x70bd30, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "95397f8996b270ba3bc9b01717feab5b"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4883c7d451eee56e217c6e9169cb0f01"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) 1m28.68960401s ago: executing program 6 (id=1186): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000440)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000004c0)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000500)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000600)=0xc0) 1m28.040489196s ago: executing program 6 (id=1190): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat2$dir(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x18) 1m25.85304741s ago: executing program 34 (id=1155): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000980)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000009c0)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000a00)=0x4) pwritev(r0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003090000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="002145000014000b0000400600000a0000010a000002005000500000000200000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 1m23.458294857s ago: executing program 6 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m13.831692761s ago: executing program 4 (id=1209): r0 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4622"], 0x18) 1m11.997349521s ago: executing program 4 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)={0x40, r1, 0x1, 0x70bd27, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0x0, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x1a, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}]}]}, 0x40}}, 0x0) 1m11.678578939s ago: executing program 4 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000004060101000000000000000000000000050001000775872cc15359e40705cd196164000000d8b9b4253c6e5646524e602d328ff1b8d5b45bfbf906a6965c067e81343d704f615c8c9baf"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, "d92984bd1c8411e88509de050000000000f2170e65e3f50327e42200000004e7ed000000000a0000000000190000000000000000000400", 0x3f}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000005c0)={0x27, 0x0, 0x0, 0x5, 0x0, 0x87, "750538d1ee2c6680718336d9bd3517076db9ad1f6a120d8be6d7f81cd80669b740a5418d69d00000000000000400", 0x35}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000640)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r3, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x28}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 1m9.937895973s ago: executing program 4 (id=1217): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1m9.045549948s ago: executing program 4 (id=1219): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1m8.02658699s ago: executing program 35 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m7.211506242s ago: executing program 4 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef) 56.067371469s ago: executing program 5 (id=1230): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @fwd={0x6}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x0, 0x61, 0x5f]}}, 0x0, 0x45}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 47.977596152s ago: executing program 36 (id=1223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef) 46.735940342s ago: executing program 5 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000059c0)='fd/3\x00') 41.310977346s ago: executing program 5 (id=1240): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r0, &(0x7f0000000200)='\\0', 0x2) 40.974133438s ago: executing program 5 (id=1242): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 36.866731725s ago: executing program 5 (id=1244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000004060101000000000000000000000000050001000775872cc15359e40705cd196164000000d8b9b4253c6e5646524e602d328ff1b8d5b45bfbf906a6965c067e81343d704f615c8c9baf"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000340)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000005c0)={0x27, 0x0, 0x0, 0x5, 0x0, 0x87, "750538d1ee2c6680718336d9bd3517076db9ad1f6a120d8be6d7f81cd80669b740a5418d69d00000000000000400", 0x35}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000640)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r3, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x28}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 32.161807188s ago: executing program 5 (id=1247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3dc34858a6ce3afa}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x3ff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc014}, 0x2004c090) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000b00)={'syzkaller0\x00', @random="2b0100004ec6"}) 30.523597902s ago: executing program 3 (id=1248): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 28.03782222s ago: executing program 3 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) 27.623534868s ago: executing program 3 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000006c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r0, &(0x7f0000000740)='3', 0x4e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 20.23879534s ago: executing program 3 (id=1251): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182c00fe8000"], 0x0) 19.441506866s ago: executing program 3 (id=1252): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 17.174593732s ago: executing program 3 (id=1253): bind$bt_hci(0xffffffffffffffff, &(0x7f0000001b40)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001d00)={0xfffa, [0x930, 0x746ffec1]}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001d40), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001d80)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 16.286930339s ago: executing program 37 (id=1247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3dc34858a6ce3afa}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x3ff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc014}, 0x2004c090) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000b00)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 38 (id=1253): bind$bt_hci(0xffffffffffffffff, &(0x7f0000001b40)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001d00)={0xfffa, [0x930, 0x746ffec1]}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001d40), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001d80)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) kernel console output (not intermixed with test programs): cd [ 116.643652][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.676199][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.677199][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.706287][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.709519][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.866208][ T5592] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.986984][ T5592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.987013][ T5592] usb 1-1: Product: syz [ 116.987027][ T5592] usb 1-1: Manufacturer: syz [ 116.987042][ T5592] usb 1-1: SerialNumber: syz [ 117.563121][ T36] audit: type=1326 audit(1791986448.988:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.2.153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7efabe2d9 code=0x0 [ 117.727679][ T31] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 117.762155][ T5592] usb 1-1: USB disconnect, device number 2 [ 117.798712][ T5592] usb 1-1: ath9k_htc: USB layer deinitialized [ 119.124812][ T60] Bluetooth: hci4: command tx timeout [ 120.724359][ T6232] capability: warning: `syz.4.170' uses 32-bit capabilities (legacy support in use) [ 121.198844][ T5589] Bluetooth: hci4: command tx timeout [ 122.165895][ T36] audit: type=1326 audit(1791986453.588:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.4.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfbe3e2d9 code=0x7ffc0000 [ 122.165945][ T36] audit: type=1326 audit(1791986453.588:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.4.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfbe3e2d9 code=0x7ffc0000 [ 122.199946][ T36] audit: type=1326 audit(1791986453.598:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.4.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfbe3e2d9 code=0x7ffc0000 [ 122.199998][ T36] audit: type=1326 audit(1791986453.618:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.4.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfbe3e2d9 code=0x7ffc0000 [ 122.202492][ T36] audit: type=1326 audit(1791986453.628:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.4.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f6dfbe3e2d9 code=0x7ffc0000 [ 122.202535][ T36] audit: type=1326 audit(1791986453.628:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.4.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfbe3e2d9 code=0x7ffc0000 [ 122.202573][ T36] audit: type=1326 audit(1791986453.628:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.4.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dfbe3e2d9 code=0x7ffc0000 [ 122.203428][ T36] audit: type=1326 audit(1791986453.628:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.4.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6dfbe3e2d9 code=0x7ffc0000 [ 122.206489][ T36] audit: type=1326 audit(1791986453.628:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6250 comm="syz.4.178" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6dfbe3e2d9 code=0x7ffc0000 [ 122.559977][ T6264] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 122.620026][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.628689][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.628866][ T6153] bridge_slave_0: entered allmulticast mode [ 122.647373][ T6153] bridge_slave_0: entered promiscuous mode [ 122.680575][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.680708][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.680856][ T6153] bridge_slave_1: entered allmulticast mode [ 122.687135][ T6153] bridge_slave_1: entered promiscuous mode [ 122.936680][ T6153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.944780][ T6153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.135431][ T6153] team0: Port device team_slave_0 added [ 123.160686][ T6153] team0: Port device team_slave_1 added [ 123.217530][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.217547][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.217570][ T6153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.219862][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.219875][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.219899][ T6153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.251104][ T60] Bluetooth: hci4: command tx timeout [ 123.396195][ T6153] hsr_slave_0: entered promiscuous mode [ 123.397420][ T6153] hsr_slave_1: entered promiscuous mode [ 123.398302][ T6153] debugfs: 'hsr0' already exists in 'hsr' [ 123.398324][ T6153] Cannot create hsr debugfs directory [ 123.740154][ T5920] nvmet: connect request for invalid subsystem testsubsys! [ 123.742683][ T6291] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 123.927314][ T6300] binder_alloc: 6299: binder_alloc_buf, no vma [ 124.312898][ T6153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.350101][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.363311][ T6153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.420220][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.425437][ T6153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.497322][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.498569][ T6153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.550370][ T6153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.725606][ T6153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.769000][ T6153] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.792033][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.797587][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.847080][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.847215][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.180938][ T60] Bluetooth: hci5: command 0x1003 tx timeout [ 125.181341][ T5589] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 125.334392][ T5589] Bluetooth: hci4: command tx timeout [ 125.805276][ T6366] ======================================================= [ 125.805276][ T6366] WARNING: The mand mount option has been deprecated and [ 125.805276][ T6366] and is ignored by this kernel. Remove the mand [ 125.805276][ T6366] option from the mount to silence this warning. [ 125.805276][ T6366] ======================================================= [ 125.805725][ T6366] 9pnet_virtio: no channels available for device ./proc/file0 [ 125.807893][ T6366] FAULT_INJECTION: forcing a failure. [ 125.807893][ T6366] name failslab, interval 1, probability 0, space 0, times 0 [ 125.807935][ T6366] CPU: 1 UID: 0 PID: 6366 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.807955][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.807966][ T6366] Call Trace: [ 125.807973][ T6366] [ 125.807982][ T6366] dump_stack_lvl+0xe8/0x150 [ 125.808022][ T6366] should_fail_ex+0x46b/0x600 [ 125.808059][ T6366] should_failslab+0xa8/0x100 [ 125.808079][ T6366] ? skb_clone+0x212/0x3a0 [ 125.808104][ T6366] kmem_cache_alloc_noprof+0x9e/0x690 [ 125.808134][ T6366] ? skb_clone+0x212/0x3a0 [ 125.808167][ T6366] skb_clone+0x212/0x3a0 [ 125.808198][ T6366] pfkey_sendmsg+0x4d6/0x11d0 [ 125.808220][ T6366] ? rcu_is_watching+0x16/0xb0 [ 125.808250][ T6366] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 125.808269][ T6366] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 125.808314][ T6366] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 125.808351][ T6366] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 125.808370][ T6366] sock_sendmsg_nosec+0x13a/0x180 [ 125.808394][ T6366] ____sys_sendmsg+0x565/0x870 [ 125.808430][ T6366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.808468][ T6366] ? import_iovec+0x73/0xa0 [ 125.808494][ T6366] ___sys_sendmsg+0x2a5/0x360 [ 125.808516][ T6366] ? __lock_acquire+0x747/0x2de0 [ 125.808545][ T6366] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.808576][ T6366] ? futex_wait+0x2a2/0x390 [ 125.808633][ T6366] ? __fget_files+0x2a/0x420 [ 125.808658][ T6366] ? __fget_files+0x3a8/0x420 [ 125.808692][ T6366] __x64_sys_sendmsg+0x1b7/0x290 [ 125.808720][ T6366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.808766][ T6366] do_syscall_64+0x166/0x520 [ 125.808795][ T6366] ? trace_irq_disable+0x3b/0x140 [ 125.808823][ T6366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.808844][ T6366] ? clear_bhb_loop+0x70/0xc0 [ 125.808879][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.808900][ T6366] RIP: 0033:0x7fb03264e2d9 [ 125.808925][ T6366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.808941][ T6366] RSP: 002b:00007fb030885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.808964][ T6366] RAX: ffffffffffffffda RBX: 00007fb0328d6090 RCX: 00007fb03264e2d9 [ 125.808981][ T6366] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 125.808994][ T6366] RBP: 00007fb0326e5888 R08: 0000000000000000 R09: 0000000000000000 [ 125.809008][ T6366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.809021][ T6366] R13: 00007fb0328d6128 R14: 00007fb0328d6090 R15: 00007ffee106e4d8 [ 125.809054][ T6366] [ 126.186809][ T6374] FAULT_INJECTION: forcing a failure. [ 126.186809][ T6374] name failslab, interval 1, probability 0, space 0, times 0 [ 126.186845][ T6374] CPU: 1 UID: 0 PID: 6374 Comm: syz.4.228 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.186878][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.186891][ T6374] Call Trace: [ 126.186900][ T6374] [ 126.186910][ T6374] dump_stack_lvl+0xe8/0x150 [ 126.186947][ T6374] should_fail_ex+0x46b/0x600 [ 126.186985][ T6374] should_failslab+0xa8/0x100 [ 126.187008][ T6374] ? __proc_create+0x560/0xae0 [ 126.187029][ T6374] kmem_cache_alloc_noprof+0x9e/0x690 [ 126.187059][ T6374] ? __proc_create+0x560/0xae0 [ 126.187084][ T6374] __proc_create+0x560/0xae0 [ 126.187107][ T6374] ? rt_write_unlock+0x19e/0x360 [ 126.187133][ T6374] ? __pfx___proc_create+0x10/0x10 [ 126.187155][ T6374] ? rt_write_unlock+0x1aa/0x360 [ 126.187182][ T6374] ? proc_register+0x5d8/0x7f0 [ 126.187206][ T6374] proc_create_data+0xa5/0x1a0 [ 126.187232][ T6374] cache_register_net+0x464/0x4c0 [ 126.187268][ T6374] nfsd_idmap_init+0x160/0x1f0 [ 126.187288][ T6374] ? nfsd_net_init+0x5b/0x530 [ 126.187316][ T6374] nfsd_net_init+0x71/0x530 [ 126.187345][ T6374] ops_init+0x35d/0x5d0 [ 126.187377][ T6374] setup_net+0x118/0x350 [ 126.187403][ T6374] ? __pfx_setup_net+0x10/0x10 [ 126.187428][ T6374] ? __ns_common_init+0x2fc/0x4a0 [ 126.187460][ T6374] copy_net_ns+0x53b/0x780 [ 126.187488][ T6374] create_new_namespaces+0x3f0/0x6b0 [ 126.187518][ T6374] ? security_capable+0x7e/0x2c0 [ 126.187549][ T6374] unshare_nsproxy_namespaces+0x149/0x190 [ 126.187582][ T6374] ksys_unshare+0x5d8/0x970 [ 126.187619][ T6374] ? __pfx_ksys_unshare+0x10/0x10 [ 126.187650][ T6374] ? rcu_is_watching+0x16/0xb0 [ 126.187682][ T6374] __x64_sys_unshare+0x38/0x50 [ 126.187713][ T6374] do_syscall_64+0x166/0x520 [ 126.187741][ T6374] ? trace_irq_disable+0x3b/0x140 [ 126.187770][ T6374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.187791][ T6374] ? clear_bhb_loop+0x70/0xc0 [ 126.187817][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.187838][ T6374] RIP: 0033:0x7f6dfbe3e2d9 [ 126.187858][ T6374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.187884][ T6374] RSP: 002b:00007f6dfa096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 126.187907][ T6374] RAX: ffffffffffffffda RBX: 00007f6dfc0c5fa0 RCX: 00007f6dfbe3e2d9 [ 126.187923][ T6374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 126.187936][ T6374] RBP: 00007f6dfbed5888 R08: 0000000000000000 R09: 0000000000000000 [ 126.187949][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.187961][ T6374] R13: 00007f6dfc0c6038 R14: 00007f6dfc0c5fa0 R15: 00007ffd04a407a8 [ 126.187996][ T6374] [ 126.689023][ T6153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.758124][ T6385] syzkaller0: entered promiscuous mode [ 126.758151][ T6385] syzkaller0: entered allmulticast mode [ 127.799509][ T6153] veth0_vlan: entered promiscuous mode [ 127.864183][ T6153] veth1_vlan: entered promiscuous mode [ 127.974018][ T6153] veth0_macvtap: entered promiscuous mode [ 127.991284][ T6153] veth1_macvtap: entered promiscuous mode [ 128.114006][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.228956][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.491623][ T6452] binder: 6450:6452 ioctl c0306201 200000000c80 returned -14 [ 128.678849][ T4237] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.679421][ T4237] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.679543][ T4237] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.679672][ T4237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.059332][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.059354][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.469906][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.469932][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.586402][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 129.704747][ T6477] netlink: 'syz.3.263': attribute type 9 has an invalid length. [ 129.704817][ T6477] netlink: 'syz.3.263': attribute type 7 has an invalid length. [ 129.704852][ T6477] netlink: 'syz.3.263': attribute type 8 has an invalid length. [ 130.504514][ T6481] binder: 6479:6481 ioctl c0306201 200000000c80 returned -14 [ 131.076937][ T6504] binder: 6502:6504 ioctl c0306201 200000000c80 returned -14 [ 131.506882][ T6523] syzkaller1: entered promiscuous mode [ 131.506909][ T6523] syzkaller1: entered allmulticast mode [ 132.731673][ T6530] smc: net device erspan0 applied user defined pnetid SYZ1 [ 132.746539][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.297'. [ 132.746583][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.297'. [ 132.778583][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778676][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.874181][ T6548] syzkaller1: entered promiscuous mode [ 132.874209][ T6548] syzkaller1: entered allmulticast mode [ 132.952810][ T6551] 9p: Bad value for 'rfdno' [ 133.011439][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 133.368379][ T6555] team0: Port device team_slave_0 removed [ 133.864034][ T6582] usbip-vudc usbip-vudc.0: gadget not bound [ 133.894744][ T6585] FAULT_INJECTION: forcing a failure. [ 133.894744][ T6585] name failslab, interval 1, probability 0, space 0, times 0 [ 133.894769][ T6585] CPU: 1 UID: 0 PID: 6585 Comm: syz.0.314 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.894782][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.894789][ T6585] Call Trace: [ 133.894794][ T6585] [ 133.894800][ T6585] dump_stack_lvl+0xe8/0x150 [ 133.894822][ T6585] should_fail_ex+0x46b/0x600 [ 133.894843][ T6585] should_failslab+0xa8/0x100 [ 133.894857][ T6585] __kmalloc_cache_noprof+0xa1/0x680 [ 133.894875][ T6585] ? landlock_create_ruleset+0x93/0x320 [ 133.894887][ T6585] ? landlock_create_ruleset+0x93/0x320 [ 133.894903][ T6585] landlock_create_ruleset+0x93/0x320 [ 133.894917][ T6585] __se_sys_landlock_create_ruleset+0x3d9/0x5e0 [ 133.894931][ T6585] ? __pfx___se_sys_landlock_create_ruleset+0x10/0x10 [ 133.894952][ T6585] do_syscall_64+0x166/0x520 [ 133.894967][ T6585] ? trace_irq_disable+0x3b/0x140 [ 133.894982][ T6585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.894994][ T6585] ? clear_bhb_loop+0x70/0xc0 [ 133.895008][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.895019][ T6585] RIP: 0033:0x7fb03264e2d9 [ 133.895031][ T6585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.895040][ T6585] RSP: 002b:00007fb0308a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 133.895053][ T6585] RAX: ffffffffffffffda RBX: 00007fb0328d5fa0 RCX: 00007fb03264e2d9 [ 133.895061][ T6585] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000200000000900 [ 133.895067][ T6585] RBP: 00007fb0326e5888 R08: 0000000000000000 R09: 0000000000000000 [ 133.895074][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.895080][ T6585] R13: 00007fb0328d6038 R14: 00007fb0328d5fa0 R15: 00007ffee106e4d8 [ 133.895098][ T6585] [ 134.270971][ T6591] Bluetooth: MGMT ver 1.23 [ 134.908671][ T6617] usbip-vudc usbip-vudc.0: gadget not bound [ 135.149632][ T5589] Bluetooth: hci0: unexpected cc 0x1405 length: 11 > 4 [ 135.306172][ T6627] syz.0.332 (6627) used greatest stack depth: 18752 bytes left [ 135.654276][ T6649] usbip-vudc usbip-vudc.0: gadget not bound [ 137.293893][ T6722] binder: BINDER_SET_CONTEXT_MGR already set [ 137.293911][ T6722] binder: 6721:6722 ioctl 4018620d 200000000180 returned -16 [ 138.592543][ T6760] tipc: Started in network mode [ 138.592559][ T6760] tipc: Node identity 1000001, cluster identity 4369 [ 138.592567][ T6760] tipc: Node number set to 16777217 [ 138.593238][ T6760] tipc: Cannot configure node identity twice [ 138.596417][ T6760] tipc: New replicast peer: 127.0.0.1 [ 138.599819][ T6760] tipc: Enabled bearer , priority 10 [ 138.768557][ T6766] usbip-vudc usbip-vudc.0: gadget not bound [ 138.823220][ T5589] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 138.823238][ T5589] CPU: 1 UID: 0 PID: 5589 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.823251][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.823259][ T5589] Workqueue: hci0 hci_rx_work [ 138.823276][ T5589] Call Trace: [ 138.823280][ T5589] [ 138.823287][ T5589] dump_stack_lvl+0xe8/0x150 [ 138.823309][ T5589] sysfs_create_dir_ns+0x271/0x2a0 [ 138.823327][ T5589] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 138.823345][ T5589] ? rt_spin_unlock+0x165/0x200 [ 138.823360][ T5589] kobject_add_internal+0x62c/0xce0 [ 138.823376][ T5589] kobject_add+0x163/0x240 [ 138.823386][ T5589] ? rt_spin_unlock+0x159/0x200 [ 138.823401][ T5589] ? __pfx_kobject_add+0x10/0x10 [ 138.823415][ T5589] ? get_device_parent+0x370/0x3a0 [ 138.823431][ T5589] device_add+0x3fa/0xb80 [ 138.823445][ T5589] hci_conn_add_sysfs+0xd5/0x210 [ 138.823465][ T5589] le_conn_complete_evt+0xfe3/0x16d0 [ 138.823483][ T5589] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 138.823499][ T5589] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 138.823514][ T5589] ? rt_mutex_slowunlock+0x219/0x460 [ 138.823527][ T5589] ? skb_pull_data+0xf0/0x200 [ 138.823547][ T5589] hci_le_conn_complete_evt+0x187/0x470 [ 138.823565][ T5589] hci_event_packet+0x67a/0xf10 [ 138.823576][ T5589] ? reacquire_held_locks+0x117/0x1a0 [ 138.823596][ T5589] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 138.823609][ T5589] ? __pfx_hci_event_packet+0x10/0x10 [ 138.823620][ T5589] ? rt_spin_unlock+0x159/0x200 [ 138.823637][ T5589] ? hci_send_to_monitor+0xe2/0x590 [ 138.823654][ T5589] hci_rx_work+0x3ee/0x1020 [ 138.823670][ T5589] ? process_scheduled_works+0x97a/0x1630 [ 138.823686][ T5589] process_scheduled_works+0xc3d/0x1630 [ 138.823718][ T5589] ? __pfx_process_scheduled_works+0x10/0x10 [ 138.823737][ T5589] ? assign_work+0x3cf/0x5d0 [ 138.823764][ T5589] worker_thread+0xa47/0xfb0 [ 138.823799][ T5589] kthread+0x38b/0x470 [ 138.823812][ T5589] ? __pfx_worker_thread+0x10/0x10 [ 138.823827][ T5589] ? __pfx_kthread+0x10/0x10 [ 138.823839][ T5589] ret_from_fork+0x514/0xb70 [ 138.823852][ T5589] ? __pfx_ret_from_fork+0x10/0x10 [ 138.823864][ T5589] ? __switch_to+0xc89/0x1420 [ 138.823882][ T5589] ? __pfx_kthread+0x10/0x10 [ 138.823895][ T5589] ret_from_fork_asm+0x1a/0x30 [ 138.823915][ T5589] [ 138.823981][ T5589] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 138.824006][ T5589] Bluetooth: hci0: failed to register connection device [ 138.839726][ T5589] Bluetooth: hci0: link tx timeout [ 138.839739][ T5589] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.553014][ T6773] binder_alloc: 6772: binder_alloc_buf, no vma [ 139.553069][ T6773] binder: 6772:6773 ioctl c0306201 200000000c80 returned -14 [ 140.200004][ T6794] batman_adv: batadv0: Adding interface: veth0 [ 140.200022][ T6794] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.200050][ T6794] batman_adv: batadv0: Interface activated: veth0 [ 140.239327][ T6795] usbip-vudc usbip-vudc.0: gadget not bound [ 140.296100][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.296131][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.398069][ T6799] binder_alloc: 6798: binder_alloc_buf, no vma [ 140.398125][ T6799] binder: 6798:6799 ioctl c0306201 200000000c80 returned -14 [ 140.435513][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.435540][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.492577][ T6794] batman_adv: batadv0: Interface deactivated: veth0 [ 140.492699][ T6794] batman_adv: batadv0: Removing interface: veth0 [ 140.933056][ T5589] Bluetooth: hci0: command 0x0406 tx timeout [ 140.972610][ T6811] syz.4.417 uses obsolete (PF_INET,SOCK_PACKET) [ 141.622255][ T6831] usbip-vudc usbip-vudc.0: gadget not bound [ 141.742150][ T6837] binder_alloc: 6835: binder_alloc_buf, no vma [ 141.742243][ T6837] binder: 6835:6837 ioctl c0306201 200000000c80 returned -14 [ 141.937340][ T60] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 142.254968][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 143.528464][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 143.707007][ T6891] tipc: Enabling of bearer rejected, already enabled [ 144.017902][ T6906] netlink: 52 bytes leftover after parsing attributes in process `syz.4.458'. [ 144.017926][ T6906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.458'. [ 144.189366][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.460'. [ 144.241106][ T6915] trusted_key: encrypted_key: keyword 'new!default' not recognized [ 144.615838][ T6931] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 144.785625][ T6931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.968023][ T6943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.474'. [ 145.570855][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 145.945511][ T6976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.490'. [ 147.117862][ T7017] sctp: [Deprecated]: syz.4.507 (pid 7017) Use of int in max_burst socket option. [ 147.117862][ T7017] Use struct sctp_assoc_value instead [ 147.461919][ T7032] faux_driver vgem: [drm] Unknown color mode 5; guessing buffer size. [ 148.050391][ T5589] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 148.050485][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 149.299651][ T7088] FAULT_INJECTION: forcing a failure. [ 149.299651][ T7088] name failslab, interval 1, probability 0, space 0, times 0 [ 149.299679][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.4.538 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.299693][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.299701][ T7088] Call Trace: [ 149.299706][ T7088] [ 149.299712][ T7088] dump_stack_lvl+0xe8/0x150 [ 149.299734][ T7088] should_fail_ex+0x46b/0x600 [ 149.299756][ T7088] should_failslab+0xa8/0x100 [ 149.299771][ T7088] __kmalloc_noprof+0xfb/0x790 [ 149.299790][ T7088] ? __kasan_kmalloc+0x93/0xb0 [ 149.299801][ T7088] ? security_msg_queue_alloc+0x48/0x310 [ 149.299814][ T7088] ? security_msg_queue_alloc+0x48/0x310 [ 149.299831][ T7088] security_msg_queue_alloc+0x48/0x310 [ 149.299846][ T7088] newque+0x10c/0x4a0 [ 149.299861][ T7088] ipcget+0x1db/0xf30 [ 149.299876][ T7088] ? __pfx_do_futex+0x10/0x10 [ 149.299889][ T7088] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 149.299904][ T7088] ? __pfx_ipcget+0x10/0x10 [ 149.299916][ T7088] ? __se_sys_futex+0x3a8/0x450 [ 149.299940][ T7088] __x64_sys_msgget+0x11a/0x160 [ 149.299954][ T7088] ? __pfx___x64_sys_msgget+0x10/0x10 [ 149.299974][ T7088] do_syscall_64+0x166/0x520 [ 149.299989][ T7088] ? trace_irq_disable+0x3b/0x140 [ 149.300005][ T7088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.300016][ T7088] ? clear_bhb_loop+0x70/0xc0 [ 149.300030][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.300040][ T7088] RIP: 0033:0x7f6dfbe3e2d9 [ 149.300051][ T7088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.300060][ T7088] RSP: 002b:00007f6dfa096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 149.300073][ T7088] RAX: ffffffffffffffda RBX: 00007f6dfc0c5fa0 RCX: 00007f6dfbe3e2d9 [ 149.300081][ T7088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.300087][ T7088] RBP: 00007f6dfbed5888 R08: 0000000000000000 R09: 0000000000000000 [ 149.300094][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.300100][ T7088] R13: 00007f6dfc0c6038 R14: 00007f6dfc0c5fa0 R15: 00007ffd04a407a8 [ 149.300118][ T7088] [ 149.714321][ T7099] binder: BINDER_SET_CONTEXT_MGR already set [ 149.714332][ T7099] binder: 7095:7099 ioctl 4018620d 200000000180 returned -16 [ 149.891101][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 150.130409][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 150.130420][ T5589] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 150.396296][ T7130] binder: BINDER_SET_CONTEXT_MGR already set [ 150.396308][ T7130] binder: 7125:7130 ioctl 4018620d 200000000180 returned -16 [ 150.551084][ T7135] Zero length message leads to an empty skb [ 150.661409][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 151.166809][ T7167] 9pnet_fd: Insufficient options for proto=fd [ 152.173887][ T7208] binder_alloc: 7204: pid 7204 spamming oneway? 1 buffers allocated for a total size of 6144 [ 152.173942][ T7208] binder: 7204:7208 ioctl c0306201 200000000c80 returned -14 [ 152.210480][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 152.212019][ T5589] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 152.806543][ T7226] warning: `syz.2.593' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.038432][ T36] audit: type=1400 audit(1791986484.438:12): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7231 comm="syz.3.596" src=65532 dest=20002 netif=wpan0 [ 154.704529][ T7265] FAULT_INJECTION: forcing a failure. [ 154.704529][ T7265] name failslab, interval 1, probability 0, space 0, times 0 [ 154.704566][ T7265] CPU: 1 UID: 0 PID: 7265 Comm: syz.5.608 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.704592][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.704604][ T7265] Call Trace: [ 154.704613][ T7265] [ 154.704622][ T7265] dump_stack_lvl+0xe8/0x150 [ 154.704662][ T7265] should_fail_ex+0x46b/0x600 [ 154.704702][ T7265] should_failslab+0xa8/0x100 [ 154.704726][ T7265] ? ptlock_alloc+0x20/0x70 [ 154.704756][ T7265] kmem_cache_alloc_noprof+0x9e/0x690 [ 154.704786][ T7265] ? ptlock_alloc+0x20/0x70 [ 154.704820][ T7265] ptlock_alloc+0x20/0x70 [ 154.704849][ T7265] pte_alloc_one+0x7e/0x380 [ 154.704878][ T7265] __pte_alloc+0x25/0x1a0 [ 154.704904][ T7265] do_pte_missing+0x1bda/0x28f0 [ 154.704926][ T7265] ? mtree_range_walk+0x70a/0x8c0 [ 154.704961][ T7265] handle_mm_fault+0xf64/0x28c0 [ 154.704996][ T7265] ? handle_mm_fault+0xeb/0x28c0 [ 154.705022][ T7265] ? mt_find+0x186/0x630 [ 154.705052][ T7265] ? __pfx_mt_find+0x10/0x10 [ 154.705090][ T7265] ? __pfx_handle_mm_fault+0x10/0x10 [ 154.705117][ T7265] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 154.705169][ T7265] __get_user_pages+0x1676/0x2650 [ 154.705231][ T7265] populate_vma_page_range+0x2be/0x3c0 [ 154.705262][ T7265] ? __pfx_populate_vma_page_range+0x10/0x10 [ 154.705294][ T7265] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 154.705330][ T7265] __mm_populate+0x25f/0x390 [ 154.705363][ T7265] ? __pfx___mm_populate+0x10/0x10 [ 154.705387][ T7265] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.705420][ T7265] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 154.705449][ T7265] ? up_write+0x5a/0x190 [ 154.705474][ T7265] do_mlock+0x622/0x730 [ 154.705507][ T7265] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 154.705539][ T7265] ? __pfx_do_mlock+0x10/0x10 [ 154.705574][ T7265] ? rcu_is_watching+0x16/0xb0 [ 154.705605][ T7265] __x64_sys_mlock+0x77/0xa0 [ 154.705631][ T7265] do_syscall_64+0x166/0x520 [ 154.705660][ T7265] ? trace_irq_disable+0x3b/0x140 [ 154.705687][ T7265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.705708][ T7265] ? clear_bhb_loop+0x70/0xc0 [ 154.705732][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.705751][ T7265] RIP: 0033:0x7f4a5dade2d9 [ 154.705770][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.705788][ T7265] RSP: 002b:00007f4a5bd36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 154.705811][ T7265] RAX: ffffffffffffffda RBX: 00007f4a5dd65fa0 RCX: 00007f4a5dade2d9 [ 154.705826][ T7265] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 154.705840][ T7265] RBP: 00007f4a5db75888 R08: 0000000000000000 R09: 0000000000000000 [ 154.705853][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.705867][ T7265] R13: 00007f4a5dd66038 R14: 00007f4a5dd65fa0 R15: 00007ffc22f0f398 [ 154.705903][ T7265] [ 156.551754][ T7262] netlink: 'syz.2.605': attribute type 9 has an invalid length. [ 156.551771][ T7262] netlink: 'syz.2.605': attribute type 7 has an invalid length. [ 156.551778][ T7262] netlink: 'syz.2.605': attribute type 8 has an invalid length. [ 157.709657][ T7278] binder: 7276:7278 ioctl c0306201 2000000019c0 returned -22 [ 158.999248][ T7322] process 'syz.5.634' launched './file2' with NULL argv: empty string added [ 159.229884][ T7331] netlink: 'syz.2.639': attribute type 5 has an invalid length. [ 159.366768][ T7334] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 159.573499][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'. [ 160.154556][ T7351] tipc: Started in network mode [ 160.154572][ T7351] tipc: Node identity 1000001, cluster identity 4369 [ 160.154579][ T7351] tipc: Node number set to 16777217 [ 160.154789][ T7351] tipc: Cannot configure node identity twice [ 160.908523][ T36] audit: type=1326 audit(1791986492.328:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7370 comm="syz.0.657" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03264e2d9 code=0x7ffc0000 [ 160.908647][ T36] audit: type=1326 audit(1791986492.328:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7370 comm="syz.0.657" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03264e2d9 code=0x7ffc0000 [ 160.983253][ T36] audit: type=1326 audit(1791986492.408:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7370 comm="syz.0.657" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fb03264e2d9 code=0x7ffc0000 [ 160.983303][ T36] audit: type=1326 audit(1791986492.408:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7370 comm="syz.0.657" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03264e2d9 code=0x7ffc0000 [ 160.983342][ T36] audit: type=1326 audit(1791986492.408:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7370 comm="syz.0.657" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03264e2d9 code=0x7ffc0000 [ 161.271675][ T7378] Bluetooth: (null): Too short H5 packet [ 161.682379][ T1021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.108470][ T1021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.257309][ T7400] IPVS: lc: TCP 127.0.0.1:21 - no destination available [ 162.289522][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.334313][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.350637][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.369547][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.378539][ T47] IPVS: starting estimator thread 0... [ 162.378627][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.508117][ T7405] IPVS: using max 11 ests per chain, 26400 per kthread [ 162.789752][ T1021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.314573][ T1021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.593152][ T5589] Bluetooth: hci2: link tx timeout [ 163.593171][ T5589] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.968638][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.468444][ T1021] bridge_slave_1: left allmulticast mode [ 164.471890][ T1021] bridge_slave_1: left promiscuous mode [ 164.481879][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.530447][ T5589] Bluetooth: hci3: command tx timeout [ 164.701936][ T1021] bridge_slave_0: left allmulticast mode [ 164.701971][ T1021] bridge_slave_0: left promiscuous mode [ 164.702201][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.557914][ T7494] binder: 7493:7494 ioctl 4018620d 0 returned -22 [ 165.642896][ T7497] loop0: detected capacity change from 0 to 1 [ 165.665172][ T5589] Bluetooth: hci2: command 0x0406 tx timeout [ 166.078330][ T7501] Dev loop0: unable to read RDB block 1 [ 166.078366][ T7501] loop0: unable to read partition table [ 166.078481][ T7501] loop0: partition table beyond EOD, truncated [ 166.103428][ T7501] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 166.380471][ T4194] smc: removing ib device syz2 [ 166.505000][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.591200][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.610490][ T60] Bluetooth: hci3: command tx timeout [ 166.635894][ T1021] bond0 (unregistering): Released all slaves [ 166.647446][ T7530] binder: 7527:7530 ioctl 4018620d 0 returned -22 [ 166.651103][ T1021] bond1 (unregistering): Released all slaves [ 167.234941][ T4194] smbdirect: ib_dev[syz2] removed [ 167.447951][ T7542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.723'. [ 167.567914][ T7522] Process accounting resumed [ 167.762546][ T7549] binder: 7546:7549 ioctl c0306201 200000000c80 returned -14 [ 168.288158][ T7563] binder: 7561:7563 ioctl 4018620d 0 returned -22 [ 168.690429][ T60] Bluetooth: hci3: command tx timeout [ 169.310549][ T7589] binder: 7581:7589 ioctl c0306201 200000000c80 returned -14 [ 169.917829][ T7605] binder: BINDER_SET_CONTEXT_MGR already set [ 169.917846][ T7605] binder: 7601:7605 ioctl 4018620d 200000000180 returned -16 [ 170.254008][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 170.781778][ T5589] Bluetooth: hci3: command tx timeout [ 171.212873][ T7626] binder: BINDER_SET_CONTEXT_MGR already set [ 171.212889][ T7626] binder: 7625:7626 ioctl 4018620d 200000000a00 returned -16 [ 171.567686][ T7634] binder: BINDER_SET_CONTEXT_MGR already set [ 171.567703][ T7634] binder: 7631:7634 ioctl 4018620d 200000000180 returned -16 [ 172.528973][ T7678] binder: BINDER_SET_CONTEXT_MGR already set [ 172.528984][ T7678] binder: 7677:7678 ioctl 4018620d 200000000180 returned -16 [ 172.850357][ T5589] Bluetooth: hci3: command 0x0405 tx timeout [ 173.142825][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 173.160451][ T7694] FAULT_INJECTION: forcing a failure. [ 173.160451][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 173.160474][ T7694] CPU: 1 UID: 0 PID: 7694 Comm: syz.5.772 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.160488][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.160496][ T7694] Call Trace: [ 173.160500][ T7694] [ 173.160505][ T7694] dump_stack_lvl+0xe8/0x150 [ 173.160527][ T7694] should_fail_ex+0x46b/0x600 [ 173.160548][ T7694] ? proc_alloc_inode+0x2a/0xc0 [ 173.160566][ T7694] should_failslab+0xa8/0x100 [ 173.160580][ T7694] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 173.160596][ T7694] ? d_alloc_parallel+0x154d/0x16c0 [ 173.160613][ T7694] ? proc_alloc_inode+0x2a/0xc0 [ 173.160632][ T7694] ? __pfx_proc_alloc_inode+0x10/0x10 [ 173.160647][ T7694] proc_alloc_inode+0x2a/0xc0 [ 173.160663][ T7694] alloc_inode+0x6a/0x1b0 [ 173.160676][ T7694] new_inode+0x1f/0x170 [ 173.160688][ T7694] ? proc_pid_make_inode+0x19/0x130 [ 173.160701][ T7694] proc_pid_make_inode+0x21/0x130 [ 173.160714][ T7694] proc_pid_instantiate+0x54/0x2a0 [ 173.160727][ T7694] ? proc_pid_lookup+0xa4/0x420 [ 173.160739][ T7694] proc_pid_lookup+0x2fa/0x420 [ 173.160753][ T7694] proc_root_lookup+0x20/0x50 [ 173.160765][ T7694] __lookup_slow+0x1fb/0x2f0 [ 173.160781][ T7694] lookup_slow+0x53/0x70 [ 173.160795][ T7694] link_path_walk+0x12a5/0x1910 [ 173.160818][ T7694] path_lookupat+0xe4/0x8c0 [ 173.160839][ T7694] filename_lookup+0x265/0x5d0 [ 173.160855][ T7694] ? __pfx_filename_lookup+0x10/0x10 [ 173.160874][ T7694] ? __pfx_proc_put_link+0x10/0x10 [ 173.160895][ T7694] ? __pfx_kfree_link+0x10/0x10 [ 173.160913][ T7694] ? strncpy_from_user+0x150/0x2c0 [ 173.160931][ T7694] ? do_getname+0x151/0x250 [ 173.160944][ T7694] user_path_at+0x40/0x160 [ 173.160959][ T7694] __se_sys_mount+0x2dc/0x420 [ 173.160975][ T7694] ? __pfx___se_sys_mount+0x10/0x10 [ 173.160992][ T7694] ? __x64_sys_mount+0x20/0xc0 [ 173.161006][ T7694] do_syscall_64+0x166/0x520 [ 173.161021][ T7694] ? trace_irq_disable+0x3b/0x140 [ 173.161036][ T7694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.161047][ T7694] ? clear_bhb_loop+0x70/0xc0 [ 173.161061][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.161072][ T7694] RIP: 0033:0x7f4a5dade2d9 [ 173.161085][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.161094][ T7694] RSP: 002b:00007f4a5bd36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.161106][ T7694] RAX: ffffffffffffffda RBX: 00007f4a5dd65fa0 RCX: 00007f4a5dade2d9 [ 173.161114][ T7694] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 173.161121][ T7694] RBP: 00007f4a5db75888 R08: 0000000000000000 R09: 0000000000000000 [ 173.161128][ T7694] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 173.161134][ T7694] R13: 00007f4a5dd66038 R14: 00007f4a5dd65fa0 R15: 00007ffc22f0f398 [ 173.161152][ T7694] [ 173.378960][ T7399] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.379028][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.379162][ T7399] bridge_slave_0: entered allmulticast mode [ 173.521231][ T7399] bridge_slave_0: entered promiscuous mode [ 173.710408][ T1021] hsr_slave_0: left promiscuous mode [ 173.750592][ T1021] hsr_slave_1: left promiscuous mode [ 173.752081][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.752196][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.793674][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.793700][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.937529][ T1021] veth1_macvtap: left promiscuous mode [ 173.937858][ T1021] veth0_macvtap: left promiscuous mode [ 173.938131][ T1021] veth1_vlan: left promiscuous mode [ 173.938487][ T1021] veth0_vlan: left promiscuous mode [ 174.058197][ T7720] binder: 7719:7720 ioctl c0306201 0 returned -14 [ 174.602881][ T7740] binder: BINDER_SET_CONTEXT_MGR already set [ 174.602892][ T7740] binder: 7739:7740 ioctl 4018620d 200000000a00 returned -16 [ 174.772141][ T7744] binder: 7743:7744 ioctl c0306201 0 returned -14 [ 175.041068][ T1021] team0 (unregistering): Port device team_slave_1 removed [ 175.081020][ T1021] team0 (unregistering): Port device team_slave_0 removed [ 175.629868][ T7399] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.630159][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.644273][ T7399] bridge_slave_1: entered allmulticast mode [ 175.661903][ T7771] binder: 7770:7771 ioctl c0306201 200000000c80 returned -14 [ 175.664593][ T7399] bridge_slave_1: entered promiscuous mode [ 176.429679][ T7399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.461295][ T7399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.990910][ T7399] team0: Port device team_slave_0 added [ 177.001161][ T7399] team0: Port device team_slave_1 added [ 177.099348][ T7803] binder: 7801:7803 ioctl c0306201 200000000c80 returned -14 [ 177.392526][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.392547][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.392561][ T7399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.397537][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.397548][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.397561][ T7399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.627813][ T7820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.821'. [ 177.806008][ T7399] hsr_slave_0: entered promiscuous mode [ 177.808832][ T7399] hsr_slave_1: entered promiscuous mode [ 177.809358][ T7399] debugfs: 'hsr0' already exists in 'hsr' [ 177.809378][ T7399] Cannot create hsr debugfs directory [ 177.985669][ T7824] vlan2: entered allmulticast mode [ 177.985689][ T7824] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 178.192716][ T36] audit: type=1400 audit(1791986509.608:18): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7837 comm="syz.4.827" src=65532 dest=20002 netif=wpan0 [ 178.261525][ T7845] binder: 7842:7845 ioctl c0306201 200000000c80 returned -14 [ 179.296926][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 179.357485][ T36] audit: type=1326 audit(1791986510.778:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.3.840" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196e51e2d9 code=0x7ffc0000 [ 179.357609][ T36] audit: type=1326 audit(1791986510.778:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.3.840" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196e51e2d9 code=0x7ffc0000 [ 179.440493][ T36] audit: type=1326 audit(1791986510.838:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.3.840" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196e51e2d9 code=0x7ffc0000 [ 179.441065][ T36] audit: type=1326 audit(1791986510.868:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.3.840" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196e51e2d9 code=0x7ffc0000 [ 179.441204][ T36] audit: type=1326 audit(1791986510.868:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.3.840" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f196e51e2d9 code=0x7ffc0000 [ 179.441328][ T36] audit: type=1326 audit(1791986510.868:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.3.840" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196e51e2d9 code=0x7ffc0000 [ 179.441459][ T36] audit: type=1326 audit(1791986510.868:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.3.840" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f196e51e2d9 code=0x7ffc0000 [ 179.442020][ T36] audit: type=1326 audit(1791986510.868:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.3.840" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f196e51e2d9 code=0x7ffc0000 [ 179.443707][ T36] audit: type=1326 audit(1791986510.868:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7880 comm="syz.3.840" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f196e51e2d9 code=0x7ffc0000 [ 179.846993][ T7887] binder: 7884:7887 ioctl c0306201 200000000c80 returned -14 [ 181.657275][ T7937] binder: 7935:7937 ioctl c0306201 200000000c80 returned -14 [ 183.487922][ T7973] binder: 7972:7973 ioctl c0306201 200000000c80 returned -14 [ 183.849276][ T7914] syzkaller1: entered promiscuous mode [ 183.849294][ T7914] syzkaller1: entered allmulticast mode [ 183.862782][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.857'. [ 183.883464][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 183.977433][ T7969] netlink: 1180 bytes leftover after parsing attributes in process `syz.0.865'. [ 184.280004][ T7990] FAULT_INJECTION: forcing a failure. [ 184.280004][ T7990] name failslab, interval 1, probability 0, space 0, times 0 [ 184.280027][ T7990] CPU: 1 UID: 0 PID: 7990 Comm: syz.0.873 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 184.280047][ T7990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.280054][ T7990] Call Trace: [ 184.280059][ T7990] [ 184.280064][ T7990] dump_stack_lvl+0xe8/0x150 [ 184.280087][ T7990] should_fail_ex+0x46b/0x600 [ 184.280108][ T7990] should_failslab+0xa8/0x100 [ 184.280121][ T7990] ? security_inode_alloc+0x39/0x310 [ 184.280135][ T7990] kmem_cache_alloc_noprof+0x9e/0x690 [ 184.280153][ T7990] ? security_inode_alloc+0x39/0x310 [ 184.280169][ T7990] security_inode_alloc+0x39/0x310 [ 184.280184][ T7990] inode_init_always_gfp+0x983/0xd40 [ 184.280201][ T7990] ? __pfx_proc_alloc_inode+0x10/0x10 [ 184.280218][ T7990] alloc_inode+0x82/0x1b0 [ 184.280238][ T7990] new_inode+0x1f/0x170 [ 184.280258][ T7990] ? proc_get_inode+0x1a/0x6a0 [ 184.280288][ T7990] proc_get_inode+0x22/0x6a0 [ 184.280320][ T7990] proc_lookup_de+0x251/0x340 [ 184.280343][ T7990] __lookup_slow+0x1fb/0x2f0 [ 184.280372][ T7990] lookup_slow+0x53/0x70 [ 184.280397][ T7990] link_path_walk+0xd2a/0x1910 [ 184.280437][ T7990] path_lookupat+0xe4/0x8c0 [ 184.280477][ T7990] filename_lookup+0x265/0x5d0 [ 184.280507][ T7990] ? __pfx_filename_lookup+0x10/0x10 [ 184.280543][ T7990] ? __pfx_proc_put_link+0x10/0x10 [ 184.280576][ T7990] ? __pfx_kfree_link+0x10/0x10 [ 184.280612][ T7990] ? strncpy_from_user+0x150/0x2c0 [ 184.280648][ T7990] ? do_getname+0x151/0x250 [ 184.280674][ T7990] user_path_at+0x40/0x160 [ 184.280704][ T7990] __se_sys_mount+0x2dc/0x420 [ 184.280736][ T7990] ? __pfx___se_sys_mount+0x10/0x10 [ 184.280768][ T7990] ? __x64_sys_mount+0x20/0xc0 [ 184.280795][ T7990] do_syscall_64+0x166/0x520 [ 184.280823][ T7990] ? trace_irq_disable+0x3b/0x140 [ 184.280852][ T7990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.280873][ T7990] ? clear_bhb_loop+0x70/0xc0 [ 184.280900][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.280922][ T7990] RIP: 0033:0x7fb03264e2d9 [ 184.280942][ T7990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.280960][ T7990] RSP: 002b:00007fb0308a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 184.280983][ T7990] RAX: ffffffffffffffda RBX: 00007fb0328d5fa0 RCX: 00007fb03264e2d9 [ 184.281008][ T7990] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 184.281021][ T7990] RBP: 00007fb0326e5888 R08: 0000000000000000 R09: 0000000000000000 [ 184.281035][ T7990] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 184.281049][ T7990] R13: 00007fb0328d6038 R14: 00007fb0328d5fa0 R15: 00007ffee106e4d8 [ 184.281084][ T7990] [ 184.716406][ T7994] tipc: Enabling of bearer rejected, already enabled [ 185.150765][ T8013] mmap: syz.5.880 (8013): VmData 37466112 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 185.377953][ T7399] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.439163][ T7399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.448833][ T7399] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.596729][ T7399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.636801][ T7399] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.691807][ T7399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.694412][ T7399] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.752186][ T7399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.975824][ T8029] syzkaller1: entered promiscuous mode [ 185.975863][ T8029] syzkaller1: entered allmulticast mode [ 186.419003][ T7399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.505922][ T7399] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.669186][ T8062] binder: 8060:8062 ioctl c0306201 2000000019c0 returned -22 [ 186.844309][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 190.748421][ T8102] FAULT_INJECTION: forcing a failure. [ 190.748421][ T8102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.748446][ T8102] CPU: 1 UID: 0 PID: 8102 Comm: syz.3.913 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.748459][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.748466][ T8102] Call Trace: [ 190.748471][ T8102] [ 190.748476][ T8102] dump_stack_lvl+0xe8/0x150 [ 190.748505][ T8102] should_fail_ex+0x46b/0x600 [ 190.748528][ T8102] _copy_from_user+0x2d/0xb0 [ 190.748542][ T8102] uhid_char_write+0x123/0xc90 [ 190.748561][ T8102] ? __pfx_uhid_char_write+0x10/0x10 [ 190.748575][ T8102] vfs_write+0x29f/0xbb0 [ 190.748595][ T8102] ? __pfx_vfs_write+0x10/0x10 [ 190.748611][ T8102] ? __fget_files+0x2a/0x420 [ 190.748629][ T8102] ? __fget_files+0x2a/0x420 [ 190.748641][ T8102] ? __fget_files+0x3a8/0x420 [ 190.748653][ T8102] ? __fget_files+0x2a/0x420 [ 190.748671][ T8102] ksys_write+0x156/0x270 [ 190.748686][ T8102] ? __pfx_ksys_write+0x10/0x10 [ 190.748707][ T8102] do_syscall_64+0x166/0x520 [ 190.748722][ T8102] ? trace_irq_disable+0x3b/0x140 [ 190.748737][ T8102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.748748][ T8102] ? clear_bhb_loop+0x70/0xc0 [ 190.748762][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.748773][ T8102] RIP: 0033:0x7f196e51e2d9 [ 190.748784][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.748794][ T8102] RSP: 002b:00007f196c776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.748807][ T8102] RAX: ffffffffffffffda RBX: 00007f196e7a5fa0 RCX: 00007f196e51e2d9 [ 190.748815][ T8102] RDX: 0000000000000120 RSI: 0000200000000280 RDI: 0000000000000005 [ 190.748822][ T8102] RBP: 00007f196e5b5888 R08: 0000000000000000 R09: 0000000000000000 [ 190.748828][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.748835][ T8102] R13: 00007f196e7a6038 R14: 00007f196e7a5fa0 R15: 00007ffdc9548a18 [ 190.748852][ T8102] [ 191.218022][ T8110] FAULT_INJECTION: forcing a failure. [ 191.218022][ T8110] name failslab, interval 1, probability 0, space 0, times 0 [ 191.218044][ T8110] CPU: 1 UID: 0 PID: 8110 Comm: syz.5.915 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.218057][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 191.218064][ T8110] Call Trace: [ 191.218069][ T8110] [ 191.218075][ T8110] dump_stack_lvl+0xe8/0x150 [ 191.218098][ T8110] should_fail_ex+0x46b/0x600 [ 191.218118][ T8110] ? proc_alloc_inode+0x2a/0xc0 [ 191.218136][ T8110] should_failslab+0xa8/0x100 [ 191.218149][ T8110] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 191.218165][ T8110] ? d_alloc_parallel+0x154d/0x16c0 [ 191.218182][ T8110] ? proc_alloc_inode+0x2a/0xc0 [ 191.218201][ T8110] ? __pfx_proc_alloc_inode+0x10/0x10 [ 191.218216][ T8110] proc_alloc_inode+0x2a/0xc0 [ 191.218232][ T8110] alloc_inode+0x6a/0x1b0 [ 191.218245][ T8110] new_inode+0x1f/0x170 [ 191.218256][ T8110] ? proc_pid_make_inode+0x19/0x130 [ 191.218270][ T8110] proc_pid_make_inode+0x21/0x130 [ 191.218283][ T8110] proc_pid_instantiate+0x54/0x2a0 [ 191.218297][ T8110] ? proc_pid_lookup+0xa4/0x420 [ 191.218308][ T8110] proc_pid_lookup+0x2fa/0x420 [ 191.218322][ T8110] proc_root_lookup+0x20/0x50 [ 191.218334][ T8110] __lookup_slow+0x1fb/0x2f0 [ 191.218350][ T8110] lookup_slow+0x53/0x70 [ 191.218364][ T8110] link_path_walk+0x12a5/0x1910 [ 191.218388][ T8110] path_lookupat+0xe4/0x8c0 [ 191.218413][ T8110] filename_lookup+0x265/0x5d0 [ 191.218437][ T8110] ? __pfx_filename_lookup+0x10/0x10 [ 191.218457][ T8110] ? __pfx_proc_put_link+0x10/0x10 [ 191.218475][ T8110] ? __pfx_kfree_link+0x10/0x10 [ 191.218493][ T8110] ? strncpy_from_user+0x150/0x2c0 [ 191.218512][ T8110] ? do_getname+0x151/0x250 [ 191.218526][ T8110] user_path_at+0x40/0x160 [ 191.218541][ T8110] __se_sys_mount+0x2dc/0x420 [ 191.218558][ T8110] ? __pfx___se_sys_mount+0x10/0x10 [ 191.218574][ T8110] ? __x64_sys_mount+0x20/0xc0 [ 191.218588][ T8110] do_syscall_64+0x166/0x520 [ 191.218604][ T8110] ? trace_irq_disable+0x3b/0x140 [ 191.218619][ T8110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.218631][ T8110] ? clear_bhb_loop+0x70/0xc0 [ 191.218645][ T8110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.218656][ T8110] RIP: 0033:0x7f4a5dade2d9 [ 191.218667][ T8110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.218677][ T8110] RSP: 002b:00007f4a5bd36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.218689][ T8110] RAX: ffffffffffffffda RBX: 00007f4a5dd65fa0 RCX: 00007f4a5dade2d9 [ 191.218697][ T8110] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 191.218704][ T8110] RBP: 00007f4a5db75888 R08: 0000000000000000 R09: 0000000000000000 [ 191.218711][ T8110] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 191.218717][ T8110] R13: 00007f4a5dd66038 R14: 00007f4a5dd65fa0 R15: 00007ffc22f0f398 [ 191.218735][ T8110] [ 191.707736][ T60] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 191.718739][ T8117] usbip-vudc usbip-vudc.0: gadget not bound [ 192.575553][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.575696][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.605499][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.605703][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.451257][ T8145] FAULT_INJECTION: forcing a failure. [ 193.451257][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 193.451283][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.4.927 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.451296][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.451304][ T8145] Call Trace: [ 193.451308][ T8145] [ 193.451314][ T8145] dump_stack_lvl+0xe8/0x150 [ 193.451335][ T8145] should_fail_ex+0x46b/0x600 [ 193.451355][ T8145] ? proc_alloc_inode+0x2a/0xc0 [ 193.451373][ T8145] should_failslab+0xa8/0x100 [ 193.451387][ T8145] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 193.451403][ T8145] ? d_alloc_parallel+0x154d/0x16c0 [ 193.451419][ T8145] ? proc_alloc_inode+0x2a/0xc0 [ 193.451437][ T8145] ? __pfx_proc_alloc_inode+0x10/0x10 [ 193.451453][ T8145] proc_alloc_inode+0x2a/0xc0 [ 193.451468][ T8145] alloc_inode+0x6a/0x1b0 [ 193.451481][ T8145] new_inode+0x1f/0x170 [ 193.451493][ T8145] ? proc_pid_make_inode+0x19/0x130 [ 193.451506][ T8145] proc_pid_make_inode+0x21/0x130 [ 193.451519][ T8145] proc_pid_instantiate+0x54/0x2a0 [ 193.451533][ T8145] ? proc_pid_lookup+0xa4/0x420 [ 193.451545][ T8145] proc_pid_lookup+0x2fa/0x420 [ 193.451558][ T8145] proc_root_lookup+0x20/0x50 [ 193.451573][ T8145] __lookup_slow+0x1fb/0x2f0 [ 193.451589][ T8145] lookup_slow+0x53/0x70 [ 193.451603][ T8145] link_path_walk+0x12a5/0x1910 [ 193.451627][ T8145] path_lookupat+0xe4/0x8c0 [ 193.451648][ T8145] filename_lookup+0x265/0x5d0 [ 193.451664][ T8145] ? __pfx_filename_lookup+0x10/0x10 [ 193.451683][ T8145] ? __pfx_proc_put_link+0x10/0x10 [ 193.451700][ T8145] ? __pfx_kfree_link+0x10/0x10 [ 193.451723][ T8145] ? strncpy_from_user+0x150/0x2c0 [ 193.451741][ T8145] ? do_getname+0x151/0x250 [ 193.451754][ T8145] user_path_at+0x40/0x160 [ 193.451770][ T8145] __se_sys_mount+0x2dc/0x420 [ 193.451786][ T8145] ? __pfx___se_sys_mount+0x10/0x10 [ 193.451803][ T8145] ? __x64_sys_mount+0x20/0xc0 [ 193.451817][ T8145] do_syscall_64+0x166/0x520 [ 193.451832][ T8145] ? trace_irq_disable+0x3b/0x140 [ 193.451848][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.451859][ T8145] ? clear_bhb_loop+0x70/0xc0 [ 193.451873][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.451884][ T8145] RIP: 0033:0x7f6dfbe3e2d9 [ 193.451895][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.451905][ T8145] RSP: 002b:00007f6dfa096028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.451917][ T8145] RAX: ffffffffffffffda RBX: 00007f6dfc0c5fa0 RCX: 00007f6dfbe3e2d9 [ 193.451945][ T8145] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 193.451951][ T8145] RBP: 00007f6dfbed5888 R08: 0000000000000000 R09: 0000000000000000 [ 193.451958][ T8145] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 193.451965][ T8145] R13: 00007f6dfc0c6038 R14: 00007f6dfc0c5fa0 R15: 00007ffd04a407a8 [ 193.451982][ T8145] [ 193.845507][ T8151] usbip-vudc usbip-vudc.0: gadget not bound [ 194.086293][ T8160] FAULT_INJECTION: forcing a failure. [ 194.086293][ T8160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.086333][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.4.933 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.086360][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 194.086373][ T8160] Call Trace: [ 194.086381][ T8160] [ 194.086390][ T8160] dump_stack_lvl+0xe8/0x150 [ 194.086430][ T8160] should_fail_ex+0x46b/0x600 [ 194.086472][ T8160] _copy_from_user+0x2d/0xb0 [ 194.086497][ T8160] ip_mcast_join_leave+0x139/0x260 [ 194.086520][ T8160] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 194.086553][ T8160] ? __pfx_ip_mcast_join_leave+0x10/0x10 [ 194.086603][ T8160] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 194.086633][ T8160] ? lockdep_hardirqs_on+0x7b/0x110 [ 194.086668][ T8160] do_ip_setsockopt+0x1c48/0x2e30 [ 194.086707][ T8160] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 194.086729][ T8160] ? do_futex+0x3e7/0x4e0 [ 194.086759][ T8160] ? lock_acquire+0x115/0x350 [ 194.086800][ T8160] ? __fget_files+0x2a/0x420 [ 194.086830][ T8160] ip_setsockopt+0x66/0x110 [ 194.086852][ T8160] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 194.086879][ T8160] do_sock_setsockopt+0x17c/0x1b0 [ 194.086912][ T8160] __x64_sys_setsockopt+0x143/0x1b0 [ 194.086946][ T8160] do_syscall_64+0x166/0x520 [ 194.086974][ T8160] ? trace_irq_disable+0x3b/0x140 [ 194.087002][ T8160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.087023][ T8160] ? clear_bhb_loop+0x70/0xc0 [ 194.087049][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.087069][ T8160] RIP: 0033:0x7f6dfbe3e2d9 [ 194.087088][ T8160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.087106][ T8160] RSP: 002b:00007f6dfa096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.087129][ T8160] RAX: ffffffffffffffda RBX: 00007f6dfc0c5fa0 RCX: 00007f6dfbe3e2d9 [ 194.087145][ T8160] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 194.087158][ T8160] RBP: 00007f6dfbed5888 R08: 0000000000000088 R09: 0000000000000000 [ 194.087172][ T8160] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 194.087185][ T8160] R13: 00007f6dfc0c6038 R14: 00007f6dfc0c5fa0 R15: 00007ffd04a407a8 [ 194.087218][ T8160] [ 194.089475][ T8164] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967169 out of range (51000000..2150000000) [ 194.224810][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.224875][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.410779][ T7399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.775941][ T8180] syzkaller1: entered promiscuous mode [ 194.775959][ T8180] syzkaller1: entered allmulticast mode [ 195.616824][ T8204] FAULT_INJECTION: forcing a failure. [ 195.616824][ T8204] name failslab, interval 1, probability 0, space 0, times 0 [ 195.616848][ T8204] CPU: 1 UID: 0 PID: 8204 Comm: syz.4.942 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.616862][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 195.616869][ T8204] Call Trace: [ 195.616874][ T8204] [ 195.616880][ T8204] dump_stack_lvl+0xe8/0x150 [ 195.616902][ T8204] should_fail_ex+0x46b/0x600 [ 195.616922][ T8204] ? proc_alloc_inode+0x2a/0xc0 [ 195.616939][ T8204] should_failslab+0xa8/0x100 [ 195.616953][ T8204] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 195.616969][ T8204] ? d_alloc_parallel+0x154d/0x16c0 [ 195.616985][ T8204] ? proc_alloc_inode+0x2a/0xc0 [ 195.617004][ T8204] ? __pfx_proc_alloc_inode+0x10/0x10 [ 195.617019][ T8204] proc_alloc_inode+0x2a/0xc0 [ 195.617035][ T8204] alloc_inode+0x6a/0x1b0 [ 195.617048][ T8204] new_inode+0x1f/0x170 [ 195.617060][ T8204] ? proc_pid_make_inode+0x19/0x130 [ 195.617074][ T8204] proc_pid_make_inode+0x21/0x130 [ 195.617087][ T8204] proc_pid_instantiate+0x54/0x2a0 [ 195.617100][ T8204] ? proc_pid_lookup+0xa4/0x420 [ 195.617112][ T8204] proc_pid_lookup+0x2fa/0x420 [ 195.617126][ T8204] proc_root_lookup+0x20/0x50 [ 195.617137][ T8204] __lookup_slow+0x1fb/0x2f0 [ 195.617154][ T8204] lookup_slow+0x53/0x70 [ 195.617168][ T8204] link_path_walk+0x12a5/0x1910 [ 195.617201][ T8204] path_lookupat+0xe4/0x8c0 [ 195.617222][ T8204] filename_lookup+0x265/0x5d0 [ 195.617238][ T8204] ? __pfx_filename_lookup+0x10/0x10 [ 195.617258][ T8204] ? __pfx_proc_put_link+0x10/0x10 [ 195.617276][ T8204] ? __pfx_kfree_link+0x10/0x10 [ 195.617294][ T8204] ? strncpy_from_user+0x150/0x2c0 [ 195.617314][ T8204] ? do_getname+0x151/0x250 [ 195.617327][ T8204] user_path_at+0x40/0x160 [ 195.617342][ T8204] __se_sys_mount+0x2dc/0x420 [ 195.617359][ T8204] ? __pfx___se_sys_mount+0x10/0x10 [ 195.617375][ T8204] ? __x64_sys_mount+0x20/0xc0 [ 195.617389][ T8204] do_syscall_64+0x166/0x520 [ 195.617405][ T8204] ? trace_irq_disable+0x3b/0x140 [ 195.617422][ T8204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.617433][ T8204] ? clear_bhb_loop+0x70/0xc0 [ 195.617447][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.617458][ T8204] RIP: 0033:0x7f6dfbe3e2d9 [ 195.617470][ T8204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.617479][ T8204] RSP: 002b:00007f6dfa096028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.617492][ T8204] RAX: ffffffffffffffda RBX: 00007f6dfc0c5fa0 RCX: 00007f6dfbe3e2d9 [ 195.617499][ T8204] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 195.617506][ T8204] RBP: 00007f6dfbed5888 R08: 0000000000000000 R09: 0000000000000000 [ 195.617513][ T8204] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 195.617519][ T8204] R13: 00007f6dfc0c6038 R14: 00007f6dfc0c5fa0 R15: 00007ffd04a407a8 [ 195.617537][ T8204] [ 196.086036][ T7399] veth0_vlan: entered promiscuous mode [ 196.139503][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.944'. [ 196.139564][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.944'. [ 196.179565][ T7399] veth1_vlan: entered promiscuous mode [ 196.423985][ T7399] veth0_macvtap: entered promiscuous mode [ 196.491714][ T7399] veth1_macvtap: entered promiscuous mode [ 196.641888][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.720921][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.851991][ T3349] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.852262][ T3349] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.852787][ T154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.852828][ T154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.285980][ T8213] Process accounting resumed [ 197.755307][ T8240] FAULT_INJECTION: forcing a failure. [ 197.755307][ T8240] name failslab, interval 1, probability 0, space 0, times 0 [ 197.755331][ T8240] CPU: 1 UID: 0 PID: 8240 Comm: syz.4.954 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 197.755344][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.755352][ T8240] Call Trace: [ 197.755357][ T8240] [ 197.755362][ T8240] dump_stack_lvl+0xe8/0x150 [ 197.755384][ T8240] should_fail_ex+0x46b/0x600 [ 197.755409][ T8240] ? proc_alloc_inode+0x2a/0xc0 [ 197.755428][ T8240] should_failslab+0xa8/0x100 [ 197.755445][ T8240] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 197.755461][ T8240] ? d_alloc_parallel+0x154d/0x16c0 [ 197.755477][ T8240] ? proc_alloc_inode+0x2a/0xc0 [ 197.755500][ T8240] ? __pfx_proc_alloc_inode+0x10/0x10 [ 197.755515][ T8240] proc_alloc_inode+0x2a/0xc0 [ 197.755531][ T8240] alloc_inode+0x6a/0x1b0 [ 197.755547][ T8240] new_inode+0x1f/0x170 [ 197.755559][ T8240] ? proc_pid_make_inode+0x19/0x130 [ 197.755573][ T8240] proc_pid_make_inode+0x21/0x130 [ 197.755590][ T8240] proc_pid_instantiate+0x54/0x2a0 [ 197.755607][ T8240] ? proc_pid_lookup+0xa4/0x420 [ 197.755619][ T8240] proc_pid_lookup+0x2fa/0x420 [ 197.755633][ T8240] proc_root_lookup+0x20/0x50 [ 197.755645][ T8240] __lookup_slow+0x1fb/0x2f0 [ 197.755661][ T8240] lookup_slow+0x53/0x70 [ 197.755675][ T8240] link_path_walk+0x12a5/0x1910 [ 197.755699][ T8240] path_lookupat+0xe4/0x8c0 [ 197.755721][ T8240] filename_lookup+0x265/0x5d0 [ 197.755737][ T8240] ? __pfx_filename_lookup+0x10/0x10 [ 197.755755][ T8240] ? __pfx_proc_put_link+0x10/0x10 [ 197.755773][ T8240] ? __pfx_kfree_link+0x10/0x10 [ 197.755791][ T8240] ? strncpy_from_user+0x150/0x2c0 [ 197.755809][ T8240] ? do_getname+0x151/0x250 [ 197.755822][ T8240] user_path_at+0x40/0x160 [ 197.755838][ T8240] __se_sys_mount+0x2dc/0x420 [ 197.755854][ T8240] ? __pfx___se_sys_mount+0x10/0x10 [ 197.755870][ T8240] ? __x64_sys_mount+0x20/0xc0 [ 197.755884][ T8240] do_syscall_64+0x166/0x520 [ 197.755900][ T8240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.755911][ T8240] ? clear_bhb_loop+0x70/0xc0 [ 197.755925][ T8240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.755942][ T8240] RIP: 0033:0x7f6dfbe3e2d9 [ 197.755954][ T8240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.755964][ T8240] RSP: 002b:00007f6dfa096028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.755978][ T8240] RAX: ffffffffffffffda RBX: 00007f6dfc0c5fa0 RCX: 00007f6dfbe3e2d9 [ 197.755986][ T8240] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 197.755993][ T8240] RBP: 00007f6dfbed5888 R08: 0000000000000000 R09: 0000000000000000 [ 197.756000][ T8240] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 197.756007][ T8240] R13: 00007f6dfc0c6038 R14: 00007f6dfc0c5fa0 R15: 00007ffd04a407a8 [ 197.756025][ T8240] [ 198.493196][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.493218][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.493976][ T8249] syzkaller1: entered promiscuous mode [ 198.494000][ T8249] syzkaller1: entered allmulticast mode [ 198.997413][ T8268] FAULT_INJECTION: forcing a failure. [ 198.997413][ T8268] name failslab, interval 1, probability 0, space 0, times 0 [ 198.997439][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.3.966 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.997452][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 198.997459][ T8268] Call Trace: [ 198.997465][ T8268] [ 198.997470][ T8268] dump_stack_lvl+0xe8/0x150 [ 198.997493][ T8268] should_fail_ex+0x46b/0x600 [ 198.997515][ T8268] should_failslab+0xa8/0x100 [ 198.997529][ T8268] __kmalloc_cache_noprof+0xa1/0x680 [ 198.997547][ T8268] ? proc_self_get_link+0xe5/0x180 [ 198.997563][ T8268] ? proc_self_get_link+0xe5/0x180 [ 198.997579][ T8268] ? __task_pid_nr_ns+0x399/0x470 [ 198.997593][ T8268] proc_self_get_link+0xe5/0x180 [ 198.997608][ T8268] ? __pfx_proc_self_get_link+0x10/0x10 [ 198.997624][ T8268] pick_link+0x72f/0xfe0 [ 198.997643][ T8268] step_into_slowpath+0x646/0xa20 [ 198.997660][ T8268] ? __pfx_step_into_slowpath+0x10/0x10 [ 198.997679][ T8268] link_path_walk+0xd5e/0x1910 [ 198.997703][ T8268] path_lookupat+0xe4/0x8c0 [ 198.997724][ T8268] filename_lookup+0x265/0x5d0 [ 198.997740][ T8268] ? __pfx_filename_lookup+0x10/0x10 [ 198.997758][ T8268] ? __pfx_proc_put_link+0x10/0x10 [ 198.997780][ T8268] ? strncpy_from_user+0x150/0x2c0 [ 198.997798][ T8268] ? do_getname+0x151/0x250 [ 198.997825][ T8268] user_path_at+0x40/0x160 [ 198.997841][ T8268] __se_sys_mount+0x2dc/0x420 [ 198.997857][ T8268] ? __pfx___se_sys_mount+0x10/0x10 [ 198.997874][ T8268] ? __x64_sys_mount+0x20/0xc0 [ 198.997889][ T8268] do_syscall_64+0x166/0x520 [ 198.997905][ T8268] ? trace_irq_disable+0x3b/0x140 [ 198.997920][ T8268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.997931][ T8268] ? clear_bhb_loop+0x70/0xc0 [ 198.997945][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.997956][ T8268] RIP: 0033:0x7f196e51e2d9 [ 198.997968][ T8268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.997977][ T8268] RSP: 002b:00007f196c776028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.997990][ T8268] RAX: ffffffffffffffda RBX: 00007f196e7a5fa0 RCX: 00007f196e51e2d9 [ 198.997998][ T8268] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 198.998005][ T8268] RBP: 00007f196e5b5888 R08: 0000000000000000 R09: 0000000000000000 [ 198.998011][ T8268] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 198.998018][ T8268] R13: 00007f196e7a6038 R14: 00007f196e7a5fa0 R15: 00007ffdc9548a18 [ 198.998035][ T8268] [ 199.336729][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.336751][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.610598][ T8274] tipc: Started in network mode [ 199.610619][ T8274] tipc: Node identity 7f000001, cluster identity 4711 [ 199.610814][ T8274] tipc: New replicast peer: 127.0.0.1 [ 199.736365][ T8274] tipc: Enabled bearer , priority 10 [ 200.449446][ T8264] Process accounting resumed [ 200.919169][ T5587] tipc: Node number set to 2130706433 [ 201.495822][ T8313] syzkaller1: entered promiscuous mode [ 201.495840][ T8313] syzkaller1: entered allmulticast mode [ 202.241599][ T8322] bridge1: entered allmulticast mode [ 202.865702][ T8345] FAULT_INJECTION: forcing a failure. [ 202.865702][ T8345] name failslab, interval 1, probability 0, space 0, times 0 [ 202.865739][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.0.989 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 202.865763][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 202.865776][ T8345] Call Trace: [ 202.865784][ T8345] [ 202.865793][ T8345] dump_stack_lvl+0xe8/0x150 [ 202.865826][ T8345] should_fail_ex+0x46b/0x600 [ 202.865862][ T8345] ? proc_alloc_inode+0x2a/0xc0 [ 202.865895][ T8345] should_failslab+0xa8/0x100 [ 202.865920][ T8345] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 202.865950][ T8345] ? d_alloc_parallel+0x154d/0x16c0 [ 202.865979][ T8345] ? proc_alloc_inode+0x2a/0xc0 [ 202.866016][ T8345] ? __pfx_proc_alloc_inode+0x10/0x10 [ 202.866046][ T8345] proc_alloc_inode+0x2a/0xc0 [ 202.866077][ T8345] alloc_inode+0x6a/0x1b0 [ 202.866102][ T8345] new_inode+0x1f/0x170 [ 202.866125][ T8345] ? proc_pid_make_inode+0x19/0x130 [ 202.866151][ T8345] proc_pid_make_inode+0x21/0x130 [ 202.866177][ T8345] proc_pid_instantiate+0x54/0x2a0 [ 202.866203][ T8345] ? proc_pid_lookup+0xa4/0x420 [ 202.866226][ T8345] proc_pid_lookup+0x2fa/0x420 [ 202.866252][ T8345] proc_root_lookup+0x20/0x50 [ 202.866275][ T8345] __lookup_slow+0x1fb/0x2f0 [ 202.866307][ T8345] lookup_slow+0x53/0x70 [ 202.866333][ T8345] link_path_walk+0x12a5/0x1910 [ 202.866380][ T8345] path_lookupat+0xe4/0x8c0 [ 202.866429][ T8345] filename_lookup+0x265/0x5d0 [ 202.866461][ T8345] ? __pfx_filename_lookup+0x10/0x10 [ 202.866498][ T8345] ? __pfx_proc_put_link+0x10/0x10 [ 202.866531][ T8345] ? __pfx_kfree_link+0x10/0x10 [ 202.866566][ T8345] ? strncpy_from_user+0x150/0x2c0 [ 202.866602][ T8345] ? do_getname+0x151/0x250 [ 202.866629][ T8345] user_path_at+0x40/0x160 [ 202.866659][ T8345] __se_sys_mount+0x2dc/0x420 [ 202.866692][ T8345] ? __pfx___se_sys_mount+0x10/0x10 [ 202.866724][ T8345] ? __x64_sys_mount+0x20/0xc0 [ 202.866752][ T8345] do_syscall_64+0x166/0x520 [ 202.866781][ T8345] ? trace_irq_disable+0x3b/0x140 [ 202.866809][ T8345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.866830][ T8345] ? clear_bhb_loop+0x70/0xc0 [ 202.866857][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.866878][ T8345] RIP: 0033:0x7fb03264e2d9 [ 202.866897][ T8345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.866917][ T8345] RSP: 002b:00007fb0308a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.866939][ T8345] RAX: ffffffffffffffda RBX: 00007fb0328d5fa0 RCX: 00007fb03264e2d9 [ 202.866956][ T8345] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 202.866970][ T8345] RBP: 00007fb0326e5888 R08: 0000000000000000 R09: 0000000000000000 [ 202.866983][ T8345] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 202.866997][ T8345] R13: 00007fb0328d6038 R14: 00007fb0328d5fa0 R15: 00007ffee106e4d8 [ 202.867033][ T8345] [ 203.377575][ T8327] Process accounting resumed [ 204.262038][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 204.870455][ T8392] FAULT_INJECTION: forcing a failure. [ 204.870455][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 204.870493][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.6.1003 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.870517][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.870530][ T8392] Call Trace: [ 204.870538][ T8392] [ 204.870548][ T8392] dump_stack_lvl+0xe8/0x150 [ 204.870585][ T8392] should_fail_ex+0x46b/0x600 [ 204.870622][ T8392] ? proc_alloc_inode+0x2a/0xc0 [ 204.870654][ T8392] should_failslab+0xa8/0x100 [ 204.870679][ T8392] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 204.870710][ T8392] ? d_alloc_parallel+0x154d/0x16c0 [ 204.870740][ T8392] ? proc_alloc_inode+0x2a/0xc0 [ 204.870775][ T8392] ? __pfx_proc_alloc_inode+0x10/0x10 [ 204.870804][ T8392] proc_alloc_inode+0x2a/0xc0 [ 204.870834][ T8392] alloc_inode+0x6a/0x1b0 [ 204.870860][ T8392] new_inode+0x1f/0x170 [ 204.870882][ T8392] ? proc_pid_make_inode+0x19/0x130 [ 204.870908][ T8392] proc_pid_make_inode+0x21/0x130 [ 204.870934][ T8392] proc_pid_instantiate+0x54/0x2a0 [ 204.870961][ T8392] ? proc_pid_lookup+0xa4/0x420 [ 204.871005][ T8392] proc_pid_lookup+0x2fa/0x420 [ 204.871033][ T8392] proc_root_lookup+0x20/0x50 [ 204.871056][ T8392] __lookup_slow+0x1fb/0x2f0 [ 204.871086][ T8392] lookup_slow+0x53/0x70 [ 204.871113][ T8392] link_path_walk+0x12a5/0x1910 [ 204.871161][ T8392] path_lookupat+0xe4/0x8c0 [ 204.871203][ T8392] filename_lookup+0x265/0x5d0 [ 204.871235][ T8392] ? __pfx_filename_lookup+0x10/0x10 [ 204.871271][ T8392] ? __pfx_proc_put_link+0x10/0x10 [ 204.871311][ T8392] ? __pfx_kfree_link+0x10/0x10 [ 204.871347][ T8392] ? strncpy_from_user+0x150/0x2c0 [ 204.871382][ T8392] ? do_getname+0x151/0x250 [ 204.871408][ T8392] user_path_at+0x40/0x160 [ 204.871439][ T8392] __se_sys_mount+0x2dc/0x420 [ 204.871471][ T8392] ? __pfx___se_sys_mount+0x10/0x10 [ 204.871503][ T8392] ? __x64_sys_mount+0x20/0xc0 [ 204.871530][ T8392] do_syscall_64+0x166/0x520 [ 204.871559][ T8392] ? trace_irq_disable+0x3b/0x140 [ 204.871590][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.871611][ T8392] ? clear_bhb_loop+0x70/0xc0 [ 204.871637][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.871658][ T8392] RIP: 0033:0x7f04ae97e2d9 [ 204.871677][ T8392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.871695][ T8392] RSP: 002b:00007f04acbd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.871718][ T8392] RAX: ffffffffffffffda RBX: 00007f04aec05fa0 RCX: 00007f04ae97e2d9 [ 204.871734][ T8392] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 204.871748][ T8392] RBP: 00007f04aea15888 R08: 0000000000000000 R09: 0000000000000000 [ 204.871761][ T8392] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 204.871774][ T8392] R13: 00007f04aec06038 R14: 00007f04aec05fa0 R15: 00007ffe43718b68 [ 204.871809][ T8392] [ 206.525617][ T8422] FAULT_INJECTION: forcing a failure. [ 206.525617][ T8422] name failslab, interval 1, probability 0, space 0, times 0 [ 206.525641][ T8422] CPU: 1 UID: 0 PID: 8422 Comm: syz.0.1015 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.525654][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 206.525661][ T8422] Call Trace: [ 206.525666][ T8422] [ 206.525674][ T8422] dump_stack_lvl+0xe8/0x150 [ 206.525696][ T8422] should_fail_ex+0x46b/0x600 [ 206.525718][ T8422] should_failslab+0xa8/0x100 [ 206.525731][ T8422] ? security_inode_alloc+0x39/0x310 [ 206.525745][ T8422] kmem_cache_alloc_noprof+0x9e/0x690 [ 206.525762][ T8422] ? security_inode_alloc+0x39/0x310 [ 206.525779][ T8422] security_inode_alloc+0x39/0x310 [ 206.525794][ T8422] inode_init_always_gfp+0x983/0xd40 [ 206.525810][ T8422] ? __pfx_proc_alloc_inode+0x10/0x10 [ 206.525826][ T8422] alloc_inode+0x82/0x1b0 [ 206.525839][ T8422] new_inode+0x1f/0x170 [ 206.525851][ T8422] ? proc_pid_make_inode+0x19/0x130 [ 206.525864][ T8422] proc_pid_make_inode+0x21/0x130 [ 206.525877][ T8422] proc_pid_instantiate+0x54/0x2a0 [ 206.525891][ T8422] ? proc_pid_lookup+0xa4/0x420 [ 206.525903][ T8422] proc_pid_lookup+0x2fa/0x420 [ 206.525916][ T8422] proc_root_lookup+0x20/0x50 [ 206.525928][ T8422] __lookup_slow+0x1fb/0x2f0 [ 206.525944][ T8422] lookup_slow+0x53/0x70 [ 206.525958][ T8422] link_path_walk+0x12a5/0x1910 [ 206.525982][ T8422] path_lookupat+0xe4/0x8c0 [ 206.526003][ T8422] filename_lookup+0x265/0x5d0 [ 206.526019][ T8422] ? __pfx_filename_lookup+0x10/0x10 [ 206.526038][ T8422] ? __pfx_proc_put_link+0x10/0x10 [ 206.526055][ T8422] ? __pfx_kfree_link+0x10/0x10 [ 206.526073][ T8422] ? strncpy_from_user+0x150/0x2c0 [ 206.526091][ T8422] ? do_getname+0x151/0x250 [ 206.526111][ T8422] user_path_at+0x40/0x160 [ 206.526127][ T8422] __se_sys_mount+0x2dc/0x420 [ 206.526144][ T8422] ? __pfx___se_sys_mount+0x10/0x10 [ 206.526162][ T8422] ? __x64_sys_mount+0x20/0xc0 [ 206.526176][ T8422] do_syscall_64+0x166/0x520 [ 206.526192][ T8422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.526203][ T8422] ? clear_bhb_loop+0x70/0xc0 [ 206.526217][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.526228][ T8422] RIP: 0033:0x7fb03264e2d9 [ 206.526239][ T8422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.526248][ T8422] RSP: 002b:00007fb0308a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.526261][ T8422] RAX: ffffffffffffffda RBX: 00007fb0328d5fa0 RCX: 00007fb03264e2d9 [ 206.526269][ T8422] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 206.526276][ T8422] RBP: 00007fb0326e5888 R08: 0000000000000000 R09: 0000000000000000 [ 206.526282][ T8422] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 206.526289][ T8422] R13: 00007fb0328d6038 R14: 00007fb0328d5fa0 R15: 00007ffee106e4d8 [ 206.526306][ T8422] [ 206.530549][ T5598] Bluetooth: hci0: command 0x0406 tx timeout [ 206.530604][ T5593] Bluetooth: hci1: command 0x0406 tx timeout [ 207.307461][ T8432] binder: BINDER_SET_CONTEXT_MGR already set [ 207.307472][ T8432] binder: 8431:8432 ioctl 4018620d 200000000180 returned -16 [ 207.805225][ T8407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1008'. [ 207.989977][ T8455] FAULT_INJECTION: forcing a failure. [ 207.989977][ T8455] name failslab, interval 1, probability 0, space 0, times 0 [ 207.990013][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: syz.0.1028 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 207.990027][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 207.990035][ T8455] Call Trace: [ 207.990040][ T8455] [ 207.990045][ T8455] dump_stack_lvl+0xe8/0x150 [ 207.990068][ T8455] should_fail_ex+0x46b/0x600 [ 207.990090][ T8455] should_failslab+0xa8/0x100 [ 207.990103][ T8455] ? security_inode_alloc+0x39/0x310 [ 207.990118][ T8455] kmem_cache_alloc_noprof+0x9e/0x690 [ 207.990135][ T8455] ? security_inode_alloc+0x39/0x310 [ 207.990152][ T8455] security_inode_alloc+0x39/0x310 [ 207.990167][ T8455] inode_init_always_gfp+0x983/0xd40 [ 207.990182][ T8455] ? __pfx_proc_alloc_inode+0x10/0x10 [ 207.990199][ T8455] alloc_inode+0x82/0x1b0 [ 207.990211][ T8455] new_inode+0x1f/0x170 [ 207.990226][ T8455] ? proc_pid_make_inode+0x19/0x130 [ 207.990248][ T8455] proc_pid_make_inode+0x21/0x130 [ 207.990271][ T8455] proc_pident_instantiate+0x6d/0x2a0 [ 207.990299][ T8455] proc_pident_lookup+0x1b7/0x270 [ 207.990328][ T8455] __lookup_slow+0x1fb/0x2f0 [ 207.990357][ T8455] lookup_slow+0x53/0x70 [ 207.990383][ T8455] link_path_walk+0x12a5/0x1910 [ 207.990428][ T8455] path_lookupat+0xe4/0x8c0 [ 207.990466][ T8455] filename_lookup+0x265/0x5d0 [ 207.990496][ T8455] ? __pfx_filename_lookup+0x10/0x10 [ 207.990530][ T8455] ? __pfx_proc_put_link+0x10/0x10 [ 207.990563][ T8455] ? __pfx_kfree_link+0x10/0x10 [ 207.990598][ T8455] ? strncpy_from_user+0x150/0x2c0 [ 207.990634][ T8455] ? do_getname+0x151/0x250 [ 207.990660][ T8455] user_path_at+0x40/0x160 [ 207.990691][ T8455] __se_sys_mount+0x2dc/0x420 [ 207.990742][ T8455] ? __pfx___se_sys_mount+0x10/0x10 [ 207.990775][ T8455] ? __x64_sys_mount+0x20/0xc0 [ 207.990803][ T8455] do_syscall_64+0x166/0x520 [ 207.990832][ T8455] ? trace_irq_disable+0x3b/0x140 [ 207.990861][ T8455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.990883][ T8455] ? clear_bhb_loop+0x70/0xc0 [ 207.990910][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.990932][ T8455] RIP: 0033:0x7fb03264e2d9 [ 207.990951][ T8455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.990970][ T8455] RSP: 002b:00007fb0308a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.991000][ T8455] RAX: ffffffffffffffda RBX: 00007fb0328d5fa0 RCX: 00007fb03264e2d9 [ 207.991017][ T8455] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 207.991032][ T8455] RBP: 00007fb0326e5888 R08: 0000000000000000 R09: 0000000000000000 [ 207.991046][ T8455] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 207.991060][ T8455] R13: 00007fb0328d6038 R14: 00007fb0328d5fa0 R15: 00007ffee106e4d8 [ 207.991096][ T8455] [ 209.208233][ T8481] binder: BINDER_SET_CONTEXT_MGR already set [ 209.208244][ T8481] binder: 8480:8481 ioctl 4018620d 200000000180 returned -16 [ 209.874501][ T8507] FAULT_INJECTION: forcing a failure. [ 209.874501][ T8507] name failslab, interval 1, probability 0, space 0, times 0 [ 209.874525][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.6.1045 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.874539][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 209.874546][ T8507] Call Trace: [ 209.874551][ T8507] [ 209.874557][ T8507] dump_stack_lvl+0xe8/0x150 [ 209.874579][ T8507] should_fail_ex+0x46b/0x600 [ 209.874599][ T8507] ? proc_alloc_inode+0x2a/0xc0 [ 209.874617][ T8507] should_failslab+0xa8/0x100 [ 209.874631][ T8507] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 209.874648][ T8507] ? d_alloc_parallel+0x154d/0x16c0 [ 209.874664][ T8507] ? proc_alloc_inode+0x2a/0xc0 [ 209.874683][ T8507] ? __pfx_proc_alloc_inode+0x10/0x10 [ 209.874699][ T8507] proc_alloc_inode+0x2a/0xc0 [ 209.874715][ T8507] alloc_inode+0x6a/0x1b0 [ 209.874729][ T8507] new_inode+0x1f/0x170 [ 209.874740][ T8507] ? proc_pid_make_inode+0x19/0x130 [ 209.874754][ T8507] proc_pid_make_inode+0x21/0x130 [ 209.874767][ T8507] proc_pident_instantiate+0x6d/0x2a0 [ 209.874783][ T8507] proc_pident_lookup+0x1b7/0x270 [ 209.874799][ T8507] __lookup_slow+0x1fb/0x2f0 [ 209.874815][ T8507] lookup_slow+0x53/0x70 [ 209.874829][ T8507] link_path_walk+0x12a5/0x1910 [ 209.874853][ T8507] path_lookupat+0xe4/0x8c0 [ 209.874882][ T8507] filename_lookup+0x265/0x5d0 [ 209.874900][ T8507] ? __pfx_filename_lookup+0x10/0x10 [ 209.874919][ T8507] ? __pfx_proc_put_link+0x10/0x10 [ 209.874937][ T8507] ? __pfx_kfree_link+0x10/0x10 [ 209.874956][ T8507] ? strncpy_from_user+0x150/0x2c0 [ 209.874975][ T8507] ? do_getname+0x151/0x250 [ 209.874989][ T8507] user_path_at+0x40/0x160 [ 209.875007][ T8507] __se_sys_mount+0x2dc/0x420 [ 209.875025][ T8507] ? __pfx___se_sys_mount+0x10/0x10 [ 209.875041][ T8507] ? __x64_sys_mount+0x20/0xc0 [ 209.875055][ T8507] do_syscall_64+0x166/0x520 [ 209.875070][ T8507] ? trace_irq_disable+0x3b/0x140 [ 209.875086][ T8507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.875097][ T8507] ? clear_bhb_loop+0x70/0xc0 [ 209.875111][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.875121][ T8507] RIP: 0033:0x7f04ae97e2d9 [ 209.875133][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.875143][ T8507] RSP: 002b:00007f04acbd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.875156][ T8507] RAX: ffffffffffffffda RBX: 00007f04aec05fa0 RCX: 00007f04ae97e2d9 [ 209.875164][ T8507] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 209.875171][ T8507] RBP: 00007f04aea15888 R08: 0000000000000000 R09: 0000000000000000 [ 209.875178][ T8507] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 209.875185][ T8507] R13: 00007f04aec06038 R14: 00007f04aec05fa0 R15: 00007ffe43718b68 [ 209.875203][ T8507] [ 209.970379][ T5589] Bluetooth: hci2: command 0x0406 tx timeout [ 210.990446][ T8528] binder: 8527:8528 ioctl 4018620d 0 returned -22 [ 211.015673][ T8528] binder: 8527:8528 ioctl c0306201 200000000c80 returned -14 [ 211.317846][ T8543] FAULT_INJECTION: forcing a failure. [ 211.317846][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 211.317869][ T8543] CPU: 1 UID: 0 PID: 8543 Comm: syz.4.1057 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 211.317883][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.317891][ T8543] Call Trace: [ 211.317895][ T8543] [ 211.317901][ T8543] dump_stack_lvl+0xe8/0x150 [ 211.317923][ T8543] should_fail_ex+0x46b/0x600 [ 211.317944][ T8543] should_failslab+0xa8/0x100 [ 211.317958][ T8543] ? security_inode_alloc+0x39/0x310 [ 211.317973][ T8543] kmem_cache_alloc_noprof+0x9e/0x690 [ 211.317991][ T8543] ? security_inode_alloc+0x39/0x310 [ 211.318008][ T8543] security_inode_alloc+0x39/0x310 [ 211.318022][ T8543] inode_init_always_gfp+0x983/0xd40 [ 211.318039][ T8543] ? __pfx_proc_alloc_inode+0x10/0x10 [ 211.318055][ T8543] alloc_inode+0x82/0x1b0 [ 211.318068][ T8543] new_inode+0x1f/0x170 [ 211.318080][ T8543] ? proc_pid_make_inode+0x19/0x130 [ 211.318093][ T8543] proc_pid_make_inode+0x21/0x130 [ 211.318107][ T8543] proc_pident_instantiate+0x6d/0x2a0 [ 211.318122][ T8543] proc_pident_lookup+0x1b7/0x270 [ 211.318138][ T8543] __lookup_slow+0x1fb/0x2f0 [ 211.318155][ T8543] lookup_slow+0x53/0x70 [ 211.318169][ T8543] link_path_walk+0x12a5/0x1910 [ 211.318193][ T8543] path_lookupat+0xe4/0x8c0 [ 211.318215][ T8543] filename_lookup+0x265/0x5d0 [ 211.318231][ T8543] ? __pfx_filename_lookup+0x10/0x10 [ 211.318250][ T8543] ? __pfx_proc_put_link+0x10/0x10 [ 211.318270][ T8543] ? __pfx_kfree_link+0x10/0x10 [ 211.318290][ T8543] ? strncpy_from_user+0x150/0x2c0 [ 211.318309][ T8543] ? do_getname+0x151/0x250 [ 211.318331][ T8543] user_path_at+0x40/0x160 [ 211.318348][ T8543] __se_sys_mount+0x2dc/0x420 [ 211.318364][ T8543] ? __pfx___se_sys_mount+0x10/0x10 [ 211.318381][ T8543] ? __x64_sys_mount+0x20/0xc0 [ 211.318396][ T8543] do_syscall_64+0x166/0x520 [ 211.318411][ T8543] ? trace_irq_disable+0x3b/0x140 [ 211.318427][ T8543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.318438][ T8543] ? clear_bhb_loop+0x70/0xc0 [ 211.318452][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.318464][ T8543] RIP: 0033:0x7f6dfbe3e2d9 [ 211.318476][ T8543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.318487][ T8543] RSP: 002b:00007f6dfa096028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 211.318501][ T8543] RAX: ffffffffffffffda RBX: 00007f6dfc0c5fa0 RCX: 00007f6dfbe3e2d9 [ 211.318509][ T8543] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 211.318516][ T8543] RBP: 00007f6dfbed5888 R08: 0000000000000000 R09: 0000000000000000 [ 211.318522][ T8543] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 211.318529][ T8543] R13: 00007f6dfc0c6038 R14: 00007f6dfc0c5fa0 R15: 00007ffd04a407a8 [ 211.318547][ T8543] [ 211.854546][ T8556] binder: BINDER_SET_CONTEXT_MGR already set [ 211.854557][ T8556] binder: 8555:8556 ioctl 4018620d 200000000a00 returned -16 [ 212.570465][ T8524] tipc: Started in network mode [ 212.570488][ T8524] tipc: Node identity 1000001, cluster identity 4369 [ 212.570500][ T8524] tipc: Node number set to 16777217 [ 212.570734][ T8524] tipc: Cannot configure node identity twice [ 212.571315][ T8531] tipc: New replicast peer: 127.0.0.1 [ 212.573775][ T8531] tipc: Enabled bearer , priority 10 [ 212.689750][ T8560] FAULT_INJECTION: forcing a failure. [ 212.689750][ T8560] name failslab, interval 1, probability 0, space 0, times 0 [ 212.689775][ T8560] CPU: 1 UID: 0 PID: 8560 Comm: syz.3.1064 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.689789][ T8560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 212.689797][ T8560] Call Trace: [ 212.689802][ T8560] [ 212.689807][ T8560] dump_stack_lvl+0xe8/0x150 [ 212.689830][ T8560] should_fail_ex+0x46b/0x600 [ 212.689851][ T8560] should_failslab+0xa8/0x100 [ 212.689864][ T8560] ? skb_clone+0x212/0x3a0 [ 212.689880][ T8560] kmem_cache_alloc_noprof+0x9e/0x690 [ 212.689898][ T8560] ? skb_clone+0x212/0x3a0 [ 212.689916][ T8560] skb_clone+0x212/0x3a0 [ 212.689935][ T8560] ? netlink_trim+0x166/0x2c0 [ 212.689952][ T8560] netlink_trim+0x17d/0x2c0 [ 212.689969][ T8560] netlink_broadcast_filtered+0x6d/0xea0 [ 212.689989][ T8560] ? __alloc_skb+0x4d0/0x7a0 [ 212.690005][ T8560] nlmsg_notify+0xe3/0x1a0 [ 212.690024][ T8560] qdisc_graft+0x1226/0x1810 [ 212.690044][ T8560] ? __pfx_qdisc_graft+0x10/0x10 [ 212.690057][ T8560] ? trace_qdisc_create+0x83/0x200 [ 212.690071][ T8560] ? qdisc_create+0xa62/0xf00 [ 212.690087][ T8560] tc_modify_qdisc+0x1968/0x2390 [ 212.690107][ T8560] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 212.690127][ T8560] ? rtnetlink_rcv_msg+0x767/0xc00 [ 212.690147][ T8560] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 212.690159][ T8560] rtnetlink_rcv_msg+0x7b9/0xc00 [ 212.690174][ T8560] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 212.690187][ T8560] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.690199][ T8560] ? ref_tracker_free+0x668/0x820 [ 212.690212][ T8560] ? __pfx_ref_tracker_free+0x10/0x10 [ 212.690224][ T8560] ? __asan_memcpy+0x40/0x70 [ 212.690246][ T8560] ? __skb_clone+0x5c/0x6c0 [ 212.690275][ T8560] netlink_rcv_skb+0x226/0x4a0 [ 212.690304][ T8560] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.690342][ T8560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.690365][ T8560] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.690382][ T8560] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.690401][ T8560] netlink_unicast+0x7f5/0x990 [ 212.690423][ T8560] netlink_sendmsg+0x813/0xb40 [ 212.690440][ T8560] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 212.690457][ T8560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.690475][ T8560] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 212.690493][ T8560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.690509][ T8560] sock_sendmsg_nosec+0x13a/0x180 [ 212.690522][ T8560] ____sys_sendmsg+0x565/0x870 [ 212.690543][ T8560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.690568][ T8560] ? import_iovec+0x73/0xa0 [ 212.690583][ T8560] ___sys_sendmsg+0x2a5/0x360 [ 212.690597][ T8560] ? __lock_acquire+0x747/0x2de0 [ 212.690616][ T8560] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.690634][ T8560] ? futex_wait+0x2a2/0x390 [ 212.690664][ T8560] ? __fget_files+0x2a/0x420 [ 212.690677][ T8560] ? __fget_files+0x3a8/0x420 [ 212.690696][ T8560] __x64_sys_sendmsg+0x1b7/0x290 [ 212.690712][ T8560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.690740][ T8560] do_syscall_64+0x166/0x520 [ 212.690755][ T8560] ? trace_irq_disable+0x3b/0x140 [ 212.690770][ T8560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.690781][ T8560] ? clear_bhb_loop+0x70/0xc0 [ 212.690795][ T8560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.690806][ T8560] RIP: 0033:0x7f196e51e2d9 [ 212.690819][ T8560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.690828][ T8560] RSP: 002b:00007f196c755028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.690841][ T8560] RAX: ffffffffffffffda RBX: 00007f196e7a6090 RCX: 00007f196e51e2d9 [ 212.690849][ T8560] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006 [ 212.690857][ T8560] RBP: 00007f196e5b5888 R08: 0000000000000000 R09: 0000000000000000 [ 212.690864][ T8560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.690870][ T8560] R13: 00007f196e7a6128 R14: 00007f196e7a6090 R15: 00007ffdc9548a18 [ 212.690888][ T8560] [ 213.824042][ T60] Bluetooth: hci5: command 0x1003 tx timeout [ 213.824208][ T5593] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 214.045424][ T8586] tipc: Enabling of bearer rejected, already enabled [ 214.087800][ T8584] binder: BINDER_SET_CONTEXT_MGR already set [ 214.087812][ T8584] binder: 8583:8584 ioctl 4018620d 200000000a00 returned -16 [ 214.310906][ T8596] FAULT_INJECTION: forcing a failure. [ 214.310906][ T8596] name failslab, interval 1, probability 0, space 0, times 0 [ 214.310934][ T8596] CPU: 1 UID: 0 PID: 8596 Comm: syz.3.1078 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.310963][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.310979][ T8596] Call Trace: [ 214.310988][ T8596] [ 214.310998][ T8596] dump_stack_lvl+0xe8/0x150 [ 214.311041][ T8596] should_fail_ex+0x46b/0x600 [ 214.311089][ T8596] should_failslab+0xa8/0x100 [ 214.311120][ T8596] __kmalloc_noprof+0xfb/0x790 [ 214.311158][ T8596] ? tomoyo_realpath_from_path+0xef/0x640 [ 214.311187][ T8596] ? tomoyo_realpath_from_path+0xef/0x640 [ 214.311225][ T8596] tomoyo_realpath_from_path+0xef/0x640 [ 214.311271][ T8596] tomoyo_path_perm+0x283/0x560 [ 214.311309][ T8596] ? tomoyo_path_perm+0x251/0x560 [ 214.311347][ T8596] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 214.311420][ T8596] security_inode_getattr+0x12b/0x310 [ 214.311437][ T8596] vfs_getattr+0x23/0x70 [ 214.311450][ T8596] vfs_statx_path+0x2b/0x230 [ 214.311462][ T8596] ? vfs_statx+0x107/0x200 [ 214.311483][ T8596] vfs_statx+0x12e/0x200 [ 214.311496][ T8596] ? __pfx_vfs_statx+0x10/0x10 [ 214.311514][ T8596] vfs_fstatat+0x11b/0x170 [ 214.311528][ T8596] __x64_sys_newfstatat+0x151/0x200 [ 214.311545][ T8596] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 214.311569][ T8596] ? rcu_is_watching+0x16/0xb0 [ 214.311587][ T8596] do_syscall_64+0x166/0x520 [ 214.311603][ T8596] ? trace_irq_disable+0x3b/0x140 [ 214.311619][ T8596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.311630][ T8596] ? clear_bhb_loop+0x70/0xc0 [ 214.311644][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.311656][ T8596] RIP: 0033:0x7f196e51e2d9 [ 214.311668][ T8596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.311678][ T8596] RSP: 002b:00007f196c776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 214.311691][ T8596] RAX: ffffffffffffffda RBX: 00007f196e7a5fa0 RCX: 00007f196e51e2d9 [ 214.311699][ T8596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 214.311706][ T8596] RBP: 00007f196e5b5888 R08: 0000000000000000 R09: 0000000000000000 [ 214.311714][ T8596] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 214.311720][ T8596] R13: 00007f196e7a6038 R14: 00007f196e7a5fa0 R15: 00007ffdc9548a18 [ 214.311738][ T8596] [ 214.616885][ T8596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.838289][ T8604] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1083'. [ 215.693683][ T8633] tipc: Enabling of bearer rejected, already enabled [ 215.770051][ T8626] sctp: [Deprecated]: syz.3.1091 (pid 8626) Use of int in max_burst socket option deprecated. [ 215.770051][ T8626] Use struct sctp_assoc_value instead [ 215.897267][ T67] Bluetooth: hci6: Frame reassembly failed (-84) [ 216.305480][ T8645] binder: BINDER_SET_CONTEXT_MGR already set [ 216.305491][ T8645] binder: 8644:8645 ioctl 4018620d 200000001780 returned -16 [ 216.305808][ T8645] binder: 8644:8645 ioctl c0306201 2000000019c0 returned -22 [ 216.658125][ T8661] FAULT_INJECTION: forcing a failure. [ 216.658125][ T8661] name fail_futex, interval 1, probability 0, space 0, times 1 [ 216.658149][ T8661] CPU: 1 UID: 0 PID: 8661 Comm: syz.3.1105 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.658162][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.658170][ T8661] Call Trace: [ 216.658175][ T8661] [ 216.658180][ T8661] dump_stack_lvl+0xe8/0x150 [ 216.658202][ T8661] should_fail_ex+0x46b/0x600 [ 216.658223][ T8661] get_futex_key+0x1b4/0x1580 [ 216.658249][ T8661] ? __pfx_get_futex_key+0x10/0x10 [ 216.658264][ T8661] ? __lock_acquire+0x747/0x2de0 [ 216.658286][ T8661] futex_wake+0x119/0x600 [ 216.658310][ T8661] ? __pfx_futex_wake+0x10/0x10 [ 216.658327][ T8661] ? __seccomp_filter+0x3e4/0x1de0 [ 216.658345][ T8661] do_futex+0x458/0x4e0 [ 216.658360][ T8661] ? __pfx_do_futex+0x10/0x10 [ 216.658371][ T8661] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 216.658388][ T8661] __se_sys_futex+0x3a8/0x450 [ 216.658406][ T8661] ? __pfx___se_sys_futex+0x10/0x10 [ 216.658419][ T8661] ? __pfx_ksys_write+0x10/0x10 [ 216.658436][ T8661] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 216.658447][ T8661] ? __x64_sys_futex+0x21/0xf0 [ 216.658460][ T8661] do_syscall_64+0x166/0x520 [ 216.658476][ T8661] ? trace_irq_disable+0x3b/0x140 [ 216.658492][ T8661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.658503][ T8661] ? clear_bhb_loop+0x70/0xc0 [ 216.658516][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.658527][ T8661] RIP: 0033:0x7f196e51e2d9 [ 216.658538][ T8661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.658548][ T8661] RSP: 002b:00007f196c7760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 216.658561][ T8661] RAX: ffffffffffffffda RBX: 00007f196e7a5fa8 RCX: 00007f196e51e2d9 [ 216.658569][ T8661] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f196e7a5fac [ 216.658577][ T8661] RBP: 00007f196e7a5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 216.658584][ T8661] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 216.658591][ T8661] R13: 00007f196e7a6038 R14: 00007ffdc9548930 R15: 00007ffdc9548a18 [ 216.658608][ T8661] [ 217.890811][ T5589] Bluetooth: hci6: command 0x1003 tx timeout [ 217.920197][ T5593] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 217.976229][ T60] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 219.147756][ T8725] syzkaller0: entered promiscuous mode [ 219.147774][ T8725] syzkaller0: entered allmulticast mode [ 219.189738][ T8725] tipc: Enabled bearer , priority 0 [ 219.321221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.321328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.321358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.321386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.330124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.330194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.419340][ T8725] tipc: Resetting bearer [ 219.508070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.508099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.550557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.621045][ T8724] tipc: Resetting bearer [ 220.659535][ T8724] tipc: Disabling bearer [ 228.454299][ T8797] Process accounting resumed [ 233.687949][ T8833] bridge_slave_0: left allmulticast mode [ 233.687973][ T8833] bridge_slave_0: left promiscuous mode [ 233.688196][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.942113][ T8833] bridge_slave_1: left allmulticast mode [ 234.942137][ T8833] bridge_slave_1: left promiscuous mode [ 234.942264][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.388866][ T8833] bond0: (slave bond_slave_0): Releasing backup interface [ 235.566387][ T8833] bond0: (slave bond_slave_1): Releasing backup interface [ 236.957161][ T8833] team0: Port device team_slave_0 removed [ 237.514667][ T8833] team0: Port device team_slave_1 removed [ 237.516417][ T8833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.547261][ T8835] tipc: Enabled bearer , priority 0 [ 237.626125][ T8833] syz.3.1173 (8833) used greatest stack depth: 17280 bytes left [ 239.014364][ T36] audit: type=1326 audit(1791986570.438:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8870 comm="syz.6.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04ae97e2d9 code=0x7ffc0000 [ 239.014415][ T36] audit: type=1326 audit(1791986570.438:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8870 comm="syz.6.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04ae97e2d9 code=0x7ffc0000 [ 239.147132][ T36] audit: type=1326 audit(1791986570.568:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8870 comm="syz.6.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f04ae97e2d9 code=0x7ffc0000 [ 239.147271][ T36] audit: type=1326 audit(1791986570.568:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8870 comm="syz.6.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04ae97e2d9 code=0x7ffc0000 [ 239.147405][ T36] audit: type=1326 audit(1791986570.568:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8870 comm="syz.6.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04ae97e2d9 code=0x7ffc0000 [ 239.479383][ T49] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 242.610711][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 243.250403][ T49] usb 5-1: device not accepting address 2, error -71 [ 245.632404][ T8882] syzkaller0: entered promiscuous mode [ 245.632420][ T8882] syzkaller0: entered allmulticast mode [ 245.799791][ T8882] tipc: Enabled bearer , priority 0 [ 245.852565][ T8879] tipc: Resetting bearer [ 248.421634][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.445346][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.446721][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.948916][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.963154][ T8879] tipc: Disabling bearer [ 249.004003][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.681643][ T8911] tipc: Enabling of bearer rejected, already enabled [ 251.492111][ T60] Bluetooth: hci5: command tx timeout [ 253.570463][ T60] Bluetooth: hci5: command tx timeout [ 254.703100][ T8941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1212'. [ 255.448956][ T8950] tipc: Enabling of bearer rejected, already enabled [ 255.653500][ T60] Bluetooth: hci5: command tx timeout [ 255.659966][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.660036][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.730482][ T60] Bluetooth: hci5: command tx timeout [ 263.823771][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.884637][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.906972][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.910525][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.911242][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.170631][ T60] Bluetooth: hci1: command tx timeout [ 269.140967][ T8991] tipc: Enabling of bearer rejected, already enabled [ 269.250314][ T60] Bluetooth: hci1: command tx timeout [ 270.971507][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.971577][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.971696][ T8894] bridge_slave_0: entered allmulticast mode [ 270.976508][ T8894] bridge_slave_0: entered promiscuous mode [ 271.330366][ T60] Bluetooth: hci1: command tx timeout [ 271.875521][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.875592][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.875706][ T8894] bridge_slave_1: entered allmulticast mode [ 271.903778][ T8894] bridge_slave_1: entered promiscuous mode [ 272.066861][ T9017] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 273.181108][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1232'. [ 273.392967][ T8894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.410379][ T60] Bluetooth: hci1: command tx timeout [ 273.517670][ T8894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.659134][ T9021] FAULT_INJECTION: forcing a failure. [ 273.659134][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 273.659160][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.3.1233 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.659175][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.659187][ T9021] Call Trace: [ 273.659193][ T9021] [ 273.659198][ T9021] dump_stack_lvl+0xe8/0x150 [ 273.659222][ T9021] should_fail_ex+0x46b/0x600 [ 273.659244][ T9021] should_failslab+0xa8/0x100 [ 273.659258][ T9021] __kmalloc_cache_noprof+0xa1/0x680 [ 273.659276][ T9021] ? userio_char_open+0xe9/0x1b0 [ 273.659290][ T9021] ? userio_char_open+0xe9/0x1b0 [ 273.659305][ T9021] ? __init_waitqueue_head+0xad/0x160 [ 273.659321][ T9021] userio_char_open+0xe9/0x1b0 [ 273.659336][ T9021] ? __pfx_userio_char_open+0x10/0x10 [ 273.659350][ T9021] misc_open+0x2de/0x350 [ 273.659367][ T9021] chrdev_open+0x4dc/0x600 [ 273.659379][ T9021] ? __pfx_chrdev_open+0x10/0x10 [ 273.659390][ T9021] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 273.659410][ T9021] ? __pfx_chrdev_open+0x10/0x10 [ 273.659420][ T9021] do_dentry_open+0x849/0x1420 [ 273.659438][ T9021] vfs_open+0x3b/0x350 [ 273.659448][ T9021] ? path_openat+0x142d/0x1d60 [ 273.659465][ T9021] path_openat+0x1448/0x1d60 [ 273.659618][ T9021] do_file_open+0x23e/0x4a0 [ 273.659639][ T9021] ? __pfx_do_file_open+0x10/0x10 [ 273.659670][ T9021] ? alloc_fd+0x654/0x6d0 [ 273.659689][ T9021] do_sys_openat2+0x115/0x200 [ 273.659703][ T9021] ? __se_sys_futex+0x3a8/0x450 [ 273.659715][ T9021] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.659734][ T9021] ? rcu_is_watching+0x16/0xb0 [ 273.659749][ T9021] __x64_sys_openat+0x138/0x170 [ 273.659765][ T9021] do_syscall_64+0x166/0x520 [ 273.659783][ T9021] ? trace_irq_disable+0x3b/0x140 [ 273.659798][ T9021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.659809][ T9021] ? clear_bhb_loop+0x70/0xc0 [ 273.659823][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.659834][ T9021] RIP: 0033:0x7f196e51e2d9 [ 273.659855][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.659865][ T9021] RSP: 002b:00007f196c776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 273.659879][ T9021] RAX: ffffffffffffffda RBX: 00007f196e7a5fa0 RCX: 00007f196e51e2d9 [ 273.659887][ T9021] RDX: 0000000000101402 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 273.659895][ T9021] RBP: 00007f196e5b5888 R08: 0000000000000000 R09: 0000000000000000 [ 273.659903][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.659910][ T9021] R13: 00007f196e7a6038 R14: 00007f196e7a5fa0 R15: 00007ffdc9548a18 [ 273.659928][ T9021] [ 278.795063][ T8894] team0: Port device team_slave_0 added [ 278.797098][ T8894] team0: Port device team_slave_1 added [ 279.689405][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.689424][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.689439][ T8894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.776264][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.776280][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.776295][ T8894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.469271][ T5589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.429693][ T5589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 283.444821][ T5589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.465287][ T5589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.466049][ T5589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.970327][ T5589] Bluetooth: hci6: command tx timeout [ 288.478223][ T5589] Bluetooth: hci3: command 0x0405 tx timeout [ 289.539738][ T8894] hsr_slave_0: entered promiscuous mode [ 289.633109][ T8894] hsr_slave_1: entered promiscuous mode [ 289.636875][ T8894] debugfs: 'hsr0' already exists in 'hsr' [ 289.636901][ T8894] Cannot create hsr debugfs directory [ 290.051372][ T60] Bluetooth: hci6: command tx timeout [ 292.130409][ T60] Bluetooth: hci6: command tx timeout [ 294.273742][ T5589] Bluetooth: hci6: command tx timeout [ 297.122327][ T9073] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 298.166902][ T9073] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 298.522217][ T9079] tipc: Enabled bearer , priority 0 [ 298.616813][ T9070] tipc: Resetting bearer [ 303.643776][ T9069] tipc: Disabling bearer [ 308.957945][ T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.972817][ T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.976857][ T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.994371][ T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.995253][ T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.092952][ T8980] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.093023][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.093172][ T8980] bridge_slave_0: entered allmulticast mode [ 309.096300][ T9095] 9p: Bad value for 'rfdno' [ 309.099801][ T8980] bridge_slave_0: entered promiscuous mode [ 309.201343][ T8980] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.201472][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.201670][ T8980] bridge_slave_1: entered allmulticast mode [ 309.208108][ T8980] bridge_slave_1: entered promiscuous mode [ 310.336200][ T8980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.489306][ T8980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.092536][ T60] Bluetooth: hci7: command tx timeout [ 313.175338][ T5589] Bluetooth: hci7: command tx timeout [ 313.383079][ T8980] team0: Port device team_slave_0 added [ 313.418386][ T8980] team0: Port device team_slave_1 added [ 313.418979][ T5593] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 313.456007][ T5593] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 313.459844][ T5593] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 313.478946][ T5593] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 313.491984][ T5593] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 313.893426][ T60] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 315.250400][ T60] Bluetooth: hci7: command tx timeout [ 315.730744][ T60] Bluetooth: hci9: command tx timeout [ 317.103518][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.103589][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.308745][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.308763][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.308781][ T8980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.330468][ T60] Bluetooth: hci7: command tx timeout [ 317.393799][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.393818][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.393844][ T8980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.810488][ T60] Bluetooth: hci9: command tx timeout [ 319.890458][ T60] Bluetooth: hci9: command tx timeout [ 321.970495][ T60] Bluetooth: hci9: command tx timeout [ 323.645682][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.669469][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.709813][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.725136][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.729247][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.890516][ T60] Bluetooth: hci5: command tx timeout [ 327.970576][ T60] Bluetooth: hci5: command tx timeout [ 329.121972][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.144530][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.147877][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.173923][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.176634][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.052580][ T5589] Bluetooth: hci5: command tx timeout [ 332.130489][ T60] Bluetooth: hci1: command tx timeout [ 332.130510][ T5589] Bluetooth: hci5: command tx timeout [ 334.210534][ T60] Bluetooth: hci1: command tx timeout [ 336.290509][ T60] Bluetooth: hci1: command tx timeout [ 338.033987][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.034218][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.034434][ T9032] bridge_slave_0: entered allmulticast mode [ 338.062038][ T9032] bridge_slave_0: entered promiscuous mode [ 338.370442][ T60] Bluetooth: hci1: command tx timeout [ 341.228252][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.228323][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.228455][ T9032] bridge_slave_1: entered allmulticast mode [ 341.229906][ T9032] bridge_slave_1: entered promiscuous mode [ 344.093896][ T5589] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 344.126223][ T5589] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 344.146790][ T5589] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 344.149470][ T5589] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 344.150012][ T5589] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 346.290617][ T60] Bluetooth: hci8: command tx timeout [ 348.370525][ T60] Bluetooth: hci8: command tx timeout [ 350.450420][ T60] Bluetooth: hci8: command tx timeout [ 352.530490][ T60] Bluetooth: hci8: command tx timeout [ 359.726158][ T9094] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.726283][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.726413][ T9094] bridge_slave_0: entered allmulticast mode [ 359.812721][ T9094] bridge_slave_0: entered promiscuous mode [ 360.254154][ T9094] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.254415][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.254563][ T9094] bridge_slave_1: entered allmulticast mode [ 360.255967][ T9094] bridge_slave_1: entered promiscuous mode [ 363.157680][ T9094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.254866][ T9094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.435682][ T5589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.468038][ T5589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.469270][ T5589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.533447][ T5589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.537315][ T5589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.646045][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.646180][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.646397][ T9118] bridge_slave_0: entered allmulticast mode [ 364.679539][ T9118] bridge_slave_0: entered promiscuous mode [ 366.692628][ T60] Bluetooth: hci6: command tx timeout [ 368.642287][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.642417][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.642620][ T9118] bridge_slave_1: entered allmulticast mode [ 368.671023][ T9118] bridge_slave_1: entered promiscuous mode [ 368.770425][ T60] Bluetooth: hci6: command tx timeout [ 370.860780][ T60] Bluetooth: hci6: command tx timeout [ 373.430669][ T5589] Bluetooth: hci6: command tx timeout [ 374.570054][ T5589] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.617813][ T5589] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.638203][ T5589] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.660974][ T5589] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.664315][ T5589] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.770554][ T60] Bluetooth: hci7: command tx timeout [ 378.850489][ T60] Bluetooth: hci7: command tx timeout [ 378.865248][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.865317][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.930601][ T60] Bluetooth: hci7: command tx timeout [ 383.010518][ T5589] Bluetooth: hci7: command tx timeout [ 383.288790][ T60] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 383.319592][ T60] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 383.329966][ T60] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 383.747139][ T60] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 383.825772][ T60] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 387.065074][ T5589] Bluetooth: hci9: command tx timeout [ 388.936404][ T60] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 388.985398][ T60] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 388.988435][ T60] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 389.006367][ T60] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 389.007186][ T60] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 389.095573][ T60] Bluetooth: hci9: command tx timeout [ 389.374882][ T9148] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 391.645753][ T5593] Bluetooth: hci9: command tx timeout [ 391.645752][ T5589] Bluetooth: hci10: command tx timeout [ 393.650487][ T5589] Bluetooth: hci9: command tx timeout [ 393.730397][ T5589] Bluetooth: hci10: command tx timeout [ 396.109954][ T5589] Bluetooth: hci10: command tx timeout [ 398.130714][ T5589] Bluetooth: hci10: command tx timeout [ 408.591825][ T5593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.598327][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.599528][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.638857][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.639548][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.360414][ T5589] Bluetooth: hci1: command tx timeout [ 413.412539][ T5589] Bluetooth: hci1: command tx timeout [ 418.009534][ T5589] Bluetooth: hci1: command tx timeout [ 420.052495][ T5589] Bluetooth: hci1: command tx timeout [ 425.250736][ T37] INFO: task syz.4.1223:8970 blocked for more than 143 seconds. [ 425.250765][ T37] Not tainted syzkaller #0 [ 425.250776][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 425.250786][ T37] task:syz.4.1223 state:D stack:21160 pid:8970 tgid:8970 ppid:5583 task_flags:0x400040 flags:0x00080002 [ 425.250846][ T37] Call Trace: [ 425.250854][ T37] [ 425.250870][ T37] __schedule+0x16d9/0x5700 [ 425.250911][ T37] ? hrtimer_start_range_ns_common+0x7fc/0xb70 [ 425.250955][ T37] ? __pfx___schedule+0x10/0x10 [ 425.250996][ T37] rt_mutex_schedule+0x76/0xf0 [ 425.251024][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 425.251063][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 425.251089][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 425.251113][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 425.251156][ T37] ? rcu_barrier+0x4c/0x530 [ 425.251184][ T37] ? rcu_barrier+0x4c/0x530 [ 425.251204][ T37] mutex_lock_nested+0x168/0x1d0 [ 425.251224][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 425.251252][ T37] rcu_barrier+0x4c/0x530 [ 425.251285][ T37] netdev_run_todo+0x2fc/0x1060 [ 425.251327][ T37] ? __pfx_netif_state_change+0x10/0x10 [ 425.251350][ T37] ? __pfx_netdev_run_todo+0x10/0x10 [ 425.251376][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 425.251406][ T37] ? lockdep_hardirqs_on+0x7b/0x110 [ 425.251441][ T37] ? netdev_state_change+0x1bc/0x210 [ 425.251470][ T37] tun_chr_close+0x13f/0x1c0 [ 425.251490][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 425.251510][ T37] __fput+0x41f/0xa80 [ 425.251543][ T37] task_work_run+0x1d9/0x270 [ 425.251570][ T37] ? __pfx_task_work_run+0x10/0x10 [ 425.251604][ T37] exit_to_user_mode_loop+0x204/0x770 [ 425.251631][ T37] ? rcu_is_watching+0x16/0xb0 [ 425.251656][ T37] do_syscall_64+0x328/0x520 [ 425.251683][ T37] ? trace_irq_disable+0x3b/0x140 [ 425.251710][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.251730][ T37] ? clear_bhb_loop+0x70/0xc0 [ 425.251755][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.251781][ T37] RIP: 0033:0x7f6dfbe3e2d9 [ 425.251801][ T37] RSP: 002b:00007ffd04a40908 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 425.251822][ T37] RAX: 0000000000000000 RBX: 00007f6dfc0c7da0 RCX: 00007f6dfbe3e2d9 [ 425.251836][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 425.251849][ T37] RBP: 00007f6dfc0c7da0 R08: 00007f6dfc0c6128 R09: 0000000000000000 [ 425.251863][ T37] R10: 00000000005f67e4 R11: 0000000000000246 R12: 000000000003fee1 [ 425.251876][ T37] R13: 00007f6dfc0c618c R14: 000000000003fea5 R15: 00007f6dfc0c6180 [ 425.251910][ T37] [ 425.251967][ T37] [ 425.251967][ T37] Showing all locks held in the system: [ 425.251978][ T37] locks held by rcuc/1/28: 4, last CPU#1: [ 425.252021][ T37] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 425.252080][ T37] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 425.252129][ T37] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 425.252180][ T37] #3: ffffffff8f9d5000 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x3b/0x80 [ 425.252231][ T37] locks held by khungtaskd/37: 1, last CPU#0: [ 425.252246][ T37] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 425.252295][ T37] locks held by kworker/u8:3/57: 2, on CPU#0: [ 425.252315][ T37] #0: ffff88801ebf9938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 425.252370][ T37] #1: ffffc9000123fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 425.252426][ T37] locks held by kworker/u8:4/67: 3, on CPU#0: [ 425.252439][ T37] #0: ffff888033d39138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 425.252491][ T37] #1: ffffc9000152fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 425.252545][ T37] #2: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 425.252633][ T37] locks held by getty/5333: 2, on CPU#1: [ 425.252647][ T37] #0: ffff88802981c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 425.252700][ T37] #1: ffffc900044d32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 425.252749][ T37] locks held by syz-executor/5569: 1, last CPU#1: [ 425.252764][ T37] #0: ffffffff8f311970 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 425.252824][ T37] locks held by syz.0.1155/8788: 1, on CPU#1: [ 425.252838][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.252887][ T37] locks held by syz.6.1194/8879: 1, on CPU#1: [ 425.252901][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.252950][ T37] locks held by syz-executor/8894: 1, on CPU#1: [ 425.252964][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253012][ T37] locks held by syz.4.1223/8970: 1, on CPU#1: [ 425.253026][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253073][ T37] locks held by syz-executor/8980: 1, on CPU#1: [ 425.253086][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253136][ T37] locks held by syz-executor/9032: 1, on CPU#1: [ 425.253150][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253198][ T37] locks held by kworker/u8:15/9068: 3, on CPU#0: [ 425.253212][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 425.253266][ T37] #1: ffffc900046ffc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 425.253327][ T37] #2: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 425.253382][ T37] locks held by syz.5.1247/9069: 1, on CPU#1: [ 425.253396][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253445][ T37] locks held by syz-executor/9094: 1, on CPU#1: [ 425.253458][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253506][ T37] locks held by syz.3.1253/9103: 3, on CPU#1: [ 425.253520][ T37] #0: ffff88803c5580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0xb8/0x520 [ 425.253574][ T37] #1: ffff88808cc140a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0xdc/0x520 [ 425.253632][ T37] #2: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253681][ T37] locks held by syz-executor/9118: 1, on CPU#1: [ 425.253695][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253743][ T37] locks held by syz-executor/9132: 1, on CPU#1: [ 425.253757][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253806][ T37] locks held by syz-executor/9148: 1, on CPU#1: [ 425.253819][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253867][ T37] locks held by syz-executor/9169: 1, on CPU#1: [ 425.253881][ T37] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 425.253929][ T37] locks held by syz-executor/9196: 1, on CPU#1: [ 425.253943][ T37] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 425.253993][ T37] locks held by syz-executor/9208: 1, on CPU#1: [ 425.254007][ T37] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 425.254057][ T37] locks held by syz-executor/9239: 4, last CPU#1: [ 425.254071][ T37] #0: ffffffff905c8040 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 425.254119][ T37] #1: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 425.254166][ T37] #2: ffffffff8f311970 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 425.254220][ T37] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 425.254271][ T37] locks held by syz-executor/9245: 2, on CPU#1: [ 425.254285][ T37] #0: ffffffff905c8040 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 425.254340][ T37] #1: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 425.254387][ T37] locks held by syz-executor/9269: 1, on CPU#1: [ 425.254401][ T37] #0: ffffffff905d6878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 425.254453][ T37] [ 425.254458][ T37] ============================================= [ 425.254458][ T37] [ 425.254474][ T37] NMI backtrace for cpu 0 [ 425.254499][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.254549][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 425.254559][ T37] Call Trace: [ 425.254567][ T37] [ 425.254575][ T37] dump_stack_lvl+0xe8/0x150 [ 425.254606][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 425.254628][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 425.254652][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 425.254678][ T37] sys_info+0x135/0x170 [ 425.254697][ T37] watchdog+0xfd7/0x1030 [ 425.254731][ T37] ? watchdog+0x1c7/0x1030 [ 425.254764][ T37] kthread+0x38b/0x470 [ 425.254786][ T37] ? __pfx_watchdog+0x10/0x10 [ 425.254809][ T37] ? __pfx_kthread+0x10/0x10 [ 425.254831][ T37] ret_from_fork+0x514/0xb70 [ 425.254854][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 425.254875][ T37] ? __switch_to+0xc89/0x1420 [ 425.254906][ T37] ? __pfx_kthread+0x10/0x10 [ 425.254928][ T37] ret_from_fork_asm+0x1a/0x30 [ 425.254963][ T37] [ 425.254970][ T37] Sending NMI from CPU 0 to CPUs 1: [ 425.255000][ C1] NMI backtrace for cpu 1 [ 425.255016][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.255038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 425.255049][ C1] RIP: 0010:__lock_acquire+0xa0/0x2de0 [ 425.255078][ C1] Code: 08 72 0d 83 3d b0 85 0d 19 00 0f 84 c9 01 00 00 83 fe 01 77 74 89 f0 48 8b 44 c3 08 48 85 c0 74 68 48 3d 90 04 66 94 0f 93 c1 <48> 3d 90 04 4d 94 0f 82 01 02 00 00 84 c9 75 4f 48 c7 c1 90 04 4d [ 425.255096][ C1] RSP: 0018:ffffc90000a2eac0 EFLAGS: 00000087 [ 425.255113][ C1] RAX: ffffffff944d32a8 RBX: ffff8880b8546cf0 RCX: 0000000000000000 [ 425.255128][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b8546cf0 [ 425.255141][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 425.255152][ C1] R10: dffffc0000000000 R11: fffffbfff2164730 R12: ffff8880b8546cf0 [ 425.255167][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 425.255180][ C1] FS: 0000000000000000(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 [ 425.255196][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.255210][ C1] CR2: 00007f8361be5dd8 CR3: 000000002cd90000 CR4: 00000000003526f0 [ 425.255228][ C1] Call Trace: [ 425.255235][ C1] [ 425.255245][ C1] ? __lock_acquire+0x747/0x2de0 [ 425.255281][ C1] lock_acquire+0x115/0x350 [ 425.255307][ C1] ? rt_mutex_slowunlock+0xbf/0xa30 [ 425.255333][ C1] ? rcu_is_watching+0x16/0xb0 [ 425.255353][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 425.255379][ C1] ? rt_mutex_slowunlock+0xbf/0xa30 [ 425.255401][ C1] rt_mutex_slowunlock+0xbf/0xa30 [ 425.255424][ C1] ? reacquire_held_locks+0x117/0x1a0 [ 425.255455][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 425.255480][ C1] ? kmem_cache_alloc_node_noprof+0x29e/0x660 [ 425.255513][ C1] rt_spin_unlock+0x10f/0x200 [ 425.255535][ C1] kmem_cache_alloc_node_noprof+0x29e/0x660 [ 425.255565][ C1] ? __alloc_skb+0x1db/0x7a0 [ 425.255587][ C1] ? __alloc_skb+0x1db/0x7a0 [ 425.255612][ C1] __alloc_skb+0x1db/0x7a0 [ 425.255637][ C1] synproxy_send_client_synack+0x175/0xde0 [ 425.255663][ C1] ? lock_acquire+0x115/0x350 [ 425.255689][ C1] ? synproxy_pernet+0x45/0x270 [ 425.255718][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 425.255742][ C1] ? nft_tproxy_eval+0x8d0/0x1c80 [ 425.255767][ C1] ? synproxy_pernet+0x45/0x270 [ 425.255796][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 425.255832][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 425.255861][ C1] ? nf_ip_checksum+0x13c/0x510 [ 425.255888][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 425.255917][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 425.255953][ C1] nft_do_chain+0x48d/0x1b10 [ 425.255988][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 425.256026][ C1] ? __lock_acquire+0x747/0x2de0 [ 425.256053][ C1] ? __lock_acquire+0x747/0x2de0 [ 425.256083][ C1] nft_do_chain_inet+0x360/0x4b0 [ 425.256111][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 425.256136][ C1] ? __lock_acquire+0x747/0x2de0 [ 425.256167][ C1] ? lock_acquire+0x115/0x350 [ 425.256194][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 425.256222][ C1] nf_hook_slow+0xc5/0x220 [ 425.256244][ C1] NF_HOOK+0x21f/0x3c0 [ 425.256268][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 425.256292][ C1] ? NF_HOOK+0x9e/0x3c0 [ 425.256313][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 425.256337][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 425.256365][ C1] ? ip_local_deliver+0x113/0x190 [ 425.256389][ C1] NF_HOOK+0x336/0x3c0 [ 425.256413][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 425.256436][ C1] ? NF_HOOK+0x9e/0x3c0 [ 425.256458][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 425.256481][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 425.256507][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 425.256530][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 425.256553][ C1] ? process_backlog+0x261/0xc50 [ 425.256573][ C1] process_backlog+0x564/0xc50 [ 425.256594][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 425.256628][ C1] __napi_poll+0xae/0x550 [ 425.256649][ C1] net_rx_action+0x621/0xd70 [ 425.256676][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 425.256696][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 425.256726][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 425.256764][ C1] handle_softirqs+0x1da/0x6d0 [ 425.256796][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 425.256828][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 425.256857][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 425.256884][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 425.256912][ C1] rcu_cpu_kthread+0xb6c/0x1740 [ 425.256951][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 425.256988][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 425.257017][ C1] smpboot_thread_fn+0x565/0xa70 [ 425.257048][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 425.257081][ C1] kthread+0x38b/0x470 [ 425.257101][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 425.257130][ C1] ? __pfx_kthread+0x10/0x10 [ 425.257150][ C1] ret_from_fork+0x514/0xb70 [ 425.257171][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 425.257190][ C1] ? __switch_to+0xc89/0x1420 [ 425.257219][ C1] ? __pfx_kthread+0x10/0x10 [ 425.257239][ C1] ret_from_fork_asm+0x1a/0x30 [ 425.257266][ C1] [ 425.258004][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 426.695400][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 426.705041][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 426.715104][ T37] Call Trace: [ 426.718393][ T37] [ 426.721330][ T37] vpanic+0x56d/0xa60 [ 426.725328][ T37] ? __pfx_vpanic+0x10/0x10 [ 426.729839][ T37] ? console_srcu_read_unlock+0x3a/0x60 [ 426.735409][ T37] panic+0xc5/0xd0 [ 426.739134][ T37] ? __pfx_panic+0x10/0x10 [ 426.743571][ T37] ? wq_watchdog_touch+0xf9/0x160 [ 426.748614][ T37] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 426.754782][ T37] watchdog+0x1030/0x1030 [ 426.759136][ T37] ? watchdog+0x1c7/0x1030 [ 426.763575][ T37] kthread+0x38b/0x470 [ 426.767654][ T37] ? __pfx_watchdog+0x10/0x10 [ 426.772345][ T37] ? __pfx_kthread+0x10/0x10 [ 426.776942][ T37] ret_from_fork+0x514/0xb70 [ 426.781550][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 426.786667][ T37] ? __switch_to+0xc89/0x1420 [ 426.791387][ T37] ? __pfx_kthread+0x10/0x10 [ 426.795993][ T37] ret_from_fork_asm+0x1a/0x30 [ 426.800782][ T37] [ 426.804058][ T37] Kernel Offset: disabled [ 426.808372][ T37] Rebooting in 86400 seconds..