last executing test programs: 1.431553336s ago: executing program 0 (id=755): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 1.376110264s ago: executing program 0 (id=759): syz_emit_ethernet(0xfc9, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@x25={0x805, {0x3, 0x4, 0xf1, "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"}}}}, 0x0) 1.279883487s ago: executing program 0 (id=761): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x401, 0x6}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) 936.781797ms ago: executing program 1 (id=762): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c000) 923.275359ms ago: executing program 0 (id=763): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xe5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=[{0x18, 0x29, 0xb, '/g'}], 0x18}}], 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, 0x0, 0x880) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000004400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r5, &(0x7f0000002480)={0x2020}, 0x2020) 922.206195ms ago: executing program 1 (id=765): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x4, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 864.709173ms ago: executing program 1 (id=766): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@loopback, @mcast1, @loopback, 0x5, 0x2, 0x6c, 0x500, 0x9, 0x2000082}) 774.779682ms ago: executing program 1 (id=768): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x1000) 746.83843ms ago: executing program 0 (id=769): syz_emit_ethernet(0x0, 0x0, 0x0) 639.859148ms ago: executing program 1 (id=772): syz_emit_ethernet(0xfc9, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@x25={0x805, {0x3, 0x4, 0xf1, "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"}}}}, 0x0) 620.975475ms ago: executing program 0 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 619.872193ms ago: executing program 1 (id=776): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 564.042987ms ago: executing program 3 (id=777): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x4, 0x200, &(0x7f0000000880)="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"}) 407.737392ms ago: executing program 2 (id=781): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0xb, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480c0}, 0x0) 346.147049ms ago: executing program 2 (id=783): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r1 = openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xf, 0x3a, '\\.@\\', 0x3a, '}-\\-', 0x3a, './file1'}, 0x2f) close(0x3) pwrite64(r0, &(0x7f0000000100)='U', 0x1, 0x1fe) 308.372438ms ago: executing program 3 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3b8e0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x80}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x34}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x34}}, 0x800) 248.408102ms ago: executing program 2 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1234, 0x4000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x8}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1237, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x8}}}}}, 0x0) 245.644214ms ago: executing program 3 (id=788): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x4f3, 0x0, 0x8b, 0x2, 0xaa8, 'syz0\x00'}) 199.4924ms ago: executing program 2 (id=789): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x1b, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 188.122948ms ago: executing program 4 (id=790): openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) 186.467817ms ago: executing program 3 (id=791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x3c}}, 0x0) 137.954611ms ago: executing program 4 (id=792): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000f00)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x9c, 0x2b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x81}, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "8a2e0b0ec46fadbd18834312e9385e5b91593453652ca34faa9af7e503cdd8a4", "c7d38cffe3874f77f421060f4ddfabe88f79f6a4c06e7f495ebd67c2b83bd11c9b2b5b6508ccf912ff63750351d69e6f", "a9c97a622085dfcf702cb1ae00000000001100", {"18904dfcb9386eca1bb9020b9c18d3e0", "e760555695aaf81ffd8de70c81ecf313"}}}}}}}}, 0x0) 128.450726ms ago: executing program 3 (id=793): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0xb, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480c0}, 0x0) 124.543098ms ago: executing program 2 (id=794): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) 78.81861ms ago: executing program 3 (id=795): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000100)=""/43, 0x2b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 78.545129ms ago: executing program 4 (id=796): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r1 = openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xf, 0x3a, '\\.@\\', 0x3a, '}-\\-', 0x3a, './file1'}, 0x2f) close(0x3) pwrite64(r0, &(0x7f0000000100)='U', 0x1, 0x1fe) 28.592081ms ago: executing program 2 (id=797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1e4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200000, 0x0) unshare(0x40200) r2 = semget(0x2, 0x3, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r2, &(0x7f0000000000)=[{0x2, 0xbbdd}, {0x0, 0x4, 0x1000}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) unshare(0x40400) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 28.169836ms ago: executing program 4 (id=798): syz_emit_ethernet(0x92, &(0x7f00000009c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x58, 0x3a, 0x0, @remote, @mcast2, {[@srh={0x0, 0x4, 0x4, 0x2, 0x6c, 0x0, 0x400, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) 18.753859ms ago: executing program 4 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1237, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x8}}}}}, 0x0) 0s ago: executing program 4 (id=800): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 29.029391][ T4694] cgroup: Unknown subsys name 'net' [ 29.150525][ T4694] cgroup: Unknown subsys name 'cpuset' [ 29.152641][ T4694] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.301033][ T4694] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.732638][ T4707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.733100][ T4707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.733347][ T4707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.733686][ T4707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.733912][ T4707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.752712][ T4707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.753043][ T4707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.753418][ T4707] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.753773][ T4707] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.755343][ T4707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.757018][ T4707] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.757290][ T4707] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.757459][ T4707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.758057][ T4707] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.758260][ T4707] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.779066][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.780898][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.782852][ T4708] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.786269][ T4708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.786558][ T4708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.786887][ T4708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.787095][ T4708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.792854][ T4708] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.798116][ T4708] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.798380][ T4708] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.184282][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.184646][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.184758][ T4705] bridge_slave_0: entered allmulticast mode [ 31.185282][ T4705] bridge_slave_0: entered promiscuous mode [ 31.186750][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.186780][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.186834][ T4705] bridge_slave_1: entered allmulticast mode [ 31.187318][ T4705] bridge_slave_1: entered promiscuous mode [ 31.204729][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.210382][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.240508][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.240627][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.240724][ T4712] bridge_slave_0: entered allmulticast mode [ 31.241138][ T4712] bridge_slave_0: entered promiscuous mode [ 31.266549][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.266593][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.266982][ T4712] bridge_slave_1: entered allmulticast mode [ 31.267435][ T4712] bridge_slave_1: entered promiscuous mode [ 31.273356][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.274062][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.274147][ T4714] bridge_slave_0: entered allmulticast mode [ 31.274618][ T4714] bridge_slave_0: entered promiscuous mode [ 31.290987][ T4705] team0: Port device team_slave_0 added [ 31.291882][ T4705] team0: Port device team_slave_1 added [ 31.298611][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.299631][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.302849][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.302900][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.302989][ T4714] bridge_slave_1: entered allmulticast mode [ 31.303419][ T4714] bridge_slave_1: entered promiscuous mode [ 31.313487][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.313512][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.313536][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.314539][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.314546][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.314560][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.331198][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.332224][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.340855][ T4712] team0: Port device team_slave_0 added [ 31.341606][ T4712] team0: Port device team_slave_1 added [ 31.351310][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.352714][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.357557][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.366922][ T4714] team0: Port device team_slave_0 added [ 31.368135][ T4714] team0: Port device team_slave_1 added [ 31.371747][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.371777][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.371791][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.381147][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.381176][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.381287][ T4711] bridge_slave_0: entered allmulticast mode [ 31.381749][ T4711] bridge_slave_0: entered promiscuous mode [ 31.382495][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.382520][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.382568][ T4711] bridge_slave_1: entered allmulticast mode [ 31.382949][ T4711] bridge_slave_1: entered promiscuous mode [ 31.391103][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.392014][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.397396][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.397438][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.397523][ T4706] bridge_slave_0: entered allmulticast mode [ 31.398174][ T4706] bridge_slave_0: entered promiscuous mode [ 31.401562][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.401583][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.401636][ T4706] bridge_slave_1: entered allmulticast mode [ 31.402126][ T4706] bridge_slave_1: entered promiscuous mode [ 31.411429][ T4712] hsr_slave_0: entered promiscuous mode [ 31.411847][ T4712] hsr_slave_1: entered promiscuous mode [ 31.416138][ T4711] team0: Port device team_slave_0 added [ 31.427485][ T4705] hsr_slave_0: entered promiscuous mode [ 31.429216][ T4705] hsr_slave_1: entered promiscuous mode [ 31.430628][ T4705] debugfs: 'hsr0' already exists in 'hsr' [ 31.431747][ T4705] Cannot create hsr debugfs directory [ 31.435833][ T4711] team0: Port device team_slave_1 added [ 31.437175][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.437200][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.437215][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.438162][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.438169][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.438181][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.449030][ T4714] hsr_slave_0: entered promiscuous mode [ 31.449558][ T4714] hsr_slave_1: entered promiscuous mode [ 31.449754][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 31.449764][ T4714] Cannot create hsr debugfs directory [ 31.450748][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.451693][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.466449][ T4706] team0: Port device team_slave_0 added [ 31.478114][ T4706] team0: Port device team_slave_1 added [ 31.483882][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.483892][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.483905][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.497605][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.498358][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.498380][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.513478][ T4711] hsr_slave_0: entered promiscuous mode [ 31.515029][ T4711] hsr_slave_1: entered promiscuous mode [ 31.516612][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 31.517861][ T4711] Cannot create hsr debugfs directory [ 31.521314][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.521337][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.521352][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.523677][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.523685][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.523698][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.555048][ T4706] hsr_slave_0: entered promiscuous mode [ 31.555386][ T4706] hsr_slave_1: entered promiscuous mode [ 31.555604][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 31.555615][ T4706] Cannot create hsr debugfs directory [ 31.654937][ T4705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.659410][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.662564][ T4705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.665011][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.667055][ T4705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.669671][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.670043][ T4705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.671865][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.688330][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.688384][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.688646][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.688695][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.696639][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.699707][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.700046][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.702000][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.702327][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.703415][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.707543][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.710252][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.726795][ T4712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.731689][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.733575][ T4712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.735865][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.737587][ T4712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.740156][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.742134][ T4712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.744496][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.750022][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.750068][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.750156][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.750185][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.772933][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.773000][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.773104][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.773143][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.794171][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.795919][ T4714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.799461][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.801164][ T4714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.803831][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.804251][ T4714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.806645][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.806960][ T4714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.809286][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.830939][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.832498][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.834444][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.836186][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.840939][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.842467][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.846884][ T4706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.849544][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.849905][ T4706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.851707][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.854015][ T4706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.856292][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.856659][ T4706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.859509][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.868894][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.870141][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.883394][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.884071][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.888879][ T535] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.888933][ T535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.894861][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.913517][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.920057][ T535] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.920096][ T535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.923256][ T535] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.923291][ T535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.926353][ T535] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.926387][ T535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.929954][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.929976][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.950740][ T535] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.950798][ T535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.983248][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.999471][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.999521][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.999888][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.999908][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.019691][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.026335][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.035206][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.053154][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.072507][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.072552][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.072909][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.072929][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.204329][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.240822][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.257952][ T4711] veth0_vlan: entered promiscuous mode [ 32.262344][ T4711] veth1_vlan: entered promiscuous mode [ 32.273527][ T4705] veth0_vlan: entered promiscuous mode [ 32.277165][ T4705] veth1_vlan: entered promiscuous mode [ 32.294000][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.302662][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.309894][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.331505][ T4714] veth0_vlan: entered promiscuous mode [ 32.334969][ T4714] veth1_vlan: entered promiscuous mode [ 32.343223][ T4714] veth0_macvtap: entered promiscuous mode [ 32.347002][ T4714] veth1_macvtap: entered promiscuous mode [ 32.354463][ T4711] veth0_macvtap: entered promiscuous mode [ 32.355878][ T4711] veth1_macvtap: entered promiscuous mode [ 32.366480][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.374880][ T4705] veth0_macvtap: entered promiscuous mode [ 32.376880][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.379910][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.390538][ T4705] veth1_macvtap: entered promiscuous mode [ 32.403231][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.405258][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.416146][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.419484][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.424357][ T4712] veth0_vlan: entered promiscuous mode [ 32.428238][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.441935][ T4712] veth1_vlan: entered promiscuous mode [ 32.448602][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.448634][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.476378][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.476407][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.478541][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478569][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478588][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478606][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478623][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478639][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478656][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478672][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478687][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.478702][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.479063][ T4712] veth0_macvtap: entered promiscuous mode [ 32.482252][ T4706] veth0_vlan: entered promiscuous mode [ 32.483930][ T4706] veth1_vlan: entered promiscuous mode [ 32.506882][ T4712] veth1_macvtap: entered promiscuous mode [ 32.516060][ T4706] veth0_macvtap: entered promiscuous mode [ 32.518891][ T4706] veth1_macvtap: entered promiscuous mode [ 32.529922][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.529951][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.532840][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.533895][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.538344][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.538862][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.538965][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.539246][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.552415][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.563379][ T4714] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.571162][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.571192][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.573205][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.616139][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.616173][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.629086][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.629127][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.629162][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.629183][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.637314][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.637341][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.650347][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.650367][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.678201][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.678230][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.696649][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.696686][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.818457][ T4707] Bluetooth: hci1: command tx timeout [ 32.818756][ T4707] Bluetooth: hci3: command tx timeout [ 32.819014][ T4707] Bluetooth: hci0: command tx timeout [ 32.823317][ T51] Bluetooth: hci2: command tx timeout [ 32.824880][ T4708] Bluetooth: hci4: command tx timeout [ 32.976528][ T4891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.991950][ T800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.991985][ T800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.376028][ T535] IPVS: starting estimator thread 0... [ 33.405487][ T4900] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.405809][ T4900] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.478091][ T4907] IPVS: using max 59 ests per chain, 141600 per kthread [ 33.499106][ T4900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.503521][ T4900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.283220][ T4930] input: syz0 as /devices/virtual/input/input2 [ 34.538714][ T535] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.538775][ T535] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.538883][ T535] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.538917][ T535] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.565952][ T4939] loop1: detected capacity change from 0 to 512 [ 34.572221][ T4938] tipc: Started in network mode [ 34.574611][ T4938] tipc: Node identity ac14140f, cluster identity 4711 [ 34.577299][ T4938] tipc: New replicast peer: 255.255.255.255 [ 34.579331][ T4938] tipc: Enabled bearer , priority 10 [ 34.659817][ T4943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'. [ 34.892057][ T4943] null_blk: disk nullb1 created [ 34.897896][ T51] Bluetooth: hci0: command tx timeout [ 34.897937][ T51] Bluetooth: hci3: command tx timeout [ 34.897962][ T51] Bluetooth: hci1: command tx timeout [ 34.901722][ T4708] Bluetooth: hci2: command tx timeout [ 34.901772][ T4722] Bluetooth: hci4: command tx timeout [ 34.954204][ T4949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 34.998547][ T4951] FAULT_INJECTION: forcing a failure. [ 34.998547][ T4951] name failslab, interval 1, probability 0, space 0, times 1 [ 35.001442][ T4951] CPU: 1 UID: 0 PID: 4951 Comm: syz.2.21 Not tainted syzkaller #0 PREEMPT [ 35.001466][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.001473][ T4951] Call trace: [ 35.001477][ T4951] show_stack+0x2c/0x3c (C) [ 35.001501][ T4951] __dump_stack+0x30/0x40 [ 35.001516][ T4951] dump_stack_lvl+0xd8/0x12c [ 35.001528][ T4951] dump_stack+0x1c/0x28 [ 35.001540][ T4951] should_fail_ex+0x41c/0x590 [ 35.001552][ T4951] should_failslab+0xc4/0x120 [ 35.001565][ T4951] __kmalloc_cache_noprof+0x94/0x5fc [ 35.001574][ T4951] assoc_array_insert+0x90/0x1d60 [ 35.001586][ T4951] __key_link_begin+0xc4/0x1c4 [ 35.001595][ T4951] key_instantiate_and_link+0x1b4/0x3b8 [ 35.001608][ T4951] keyring_alloc+0x94/0xe0 [ 35.001616][ T4951] keyctl_get_persistent+0x46c/0x634 [ 35.001627][ T4951] __arm64_sys_keyctl+0x320/0x3e8 [ 35.001636][ T4951] invoke_syscall+0x98/0x244 [ 35.001648][ T4951] el0_svc_common+0xec/0x23c [ 35.001660][ T4951] do_el0_svc+0x4c/0x5c [ 35.001671][ T4951] el0_svc+0x64/0x260 [ 35.001681][ T4951] el0t_64_sync_handler+0x44/0x104 [ 35.001691][ T4951] el0t_64_sync+0x198/0x19c [ 35.129798][ T4961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.132193][ T4961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.550664][ T4965] ======================================================= [ 35.550664][ T4965] WARNING: The mand mount option has been deprecated and [ 35.550664][ T4965] and is ignored by this kernel. Remove the mand [ 35.550664][ T4965] option from the mount to silence this warning. [ 35.550664][ T4965] ======================================================= [ 35.712016][ T4827] tipc: Node number set to 2886997007 [ 36.208191][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.208418][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.218848][ T4973] bridge0: port 3(netdevsim0) entered blocking state [ 36.218989][ T4973] bridge0: port 3(netdevsim0) entered disabled state [ 36.219154][ T4973] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 36.226082][ T4973] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 36.232556][ T4973] bridge0: port 3(netdevsim0) entered blocking state [ 36.232645][ T4973] bridge0: port 3(netdevsim0) entered forwarding state [ 36.373819][ T4975] netlink: 256 bytes leftover after parsing attributes in process `syz.0.28'. [ 36.562387][ T4973] netlink: 'syz.4.27': attribute type 10 has an invalid length. [ 36.564292][ T4973] bridge0: port 3(netdevsim0) entered disabled state [ 36.564432][ T4973] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.564600][ T4973] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.574444][ T4973] bridge0: port 3(netdevsim0) entered blocking state [ 36.574504][ T4973] bridge0: port 3(netdevsim0) entered forwarding state [ 36.574623][ T4973] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.574665][ T4973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.574757][ T4973] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.574811][ T4973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.587570][ T4973] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 36.992773][ T4722] Bluetooth: hci4: command tx timeout [ 36.992813][ T4722] Bluetooth: hci2: command tx timeout [ 36.992844][ T4722] Bluetooth: hci1: command tx timeout [ 36.992863][ T4722] Bluetooth: hci3: command tx timeout [ 36.992882][ T4722] Bluetooth: hci0: command tx timeout [ 37.031833][ T4989] loop0: detected capacity change from 0 to 256 [ 37.584757][ T5018] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 37.584950][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.585178][ T5018] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.588772][ T5018] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.588802][ T5018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.588911][ T5018] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.588949][ T5018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.590625][ T5018] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 37.655630][ T5023] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.683828][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 37.722931][ T5031] 9pnet_virtio: no channels available for device syz [ 37.870047][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 38.004505][ T5065] socket: no more sockets [ 38.012122][ T5065] socket: no more sockets [ 38.020890][ T5065] socket: no more sockets [ 38.022933][ T5065] socket: no more sockets [ 38.029058][ T5065] socket: no more sockets [ 38.035317][ T5065] socket: no more sockets [ 38.041058][ T5065] socket: no more sockets [ 38.054159][ T5065] socket: no more sockets [ 38.056492][ T5065] socket: no more sockets [ 38.060500][ T5065] socket: no more sockets [ 38.135470][ T5078] loop3: detected capacity change from 0 to 512 [ 38.147324][ T5078] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 38.155937][ T5081] binder: 5080:5081 tried to acquire reference to desc 0, got 1 instead [ 38.156177][ T5081] binder: 5080:5081 got transaction with invalid parent offset or type [ 38.156241][ T5081] binder: 5080:5081 transaction call to 5080:0 failed 5/29201/-22, code 0 size 96-24 line 3617 [ 38.156459][ T4820] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.196526][ T5086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 38.263685][ T5093] bridge0: port 3(netdevsim0) entered blocking state [ 38.265377][ T5093] bridge0: port 3(netdevsim0) entered disabled state [ 38.267280][ T5093] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 38.269762][ T5093] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 38.272612][ T5093] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 38.275905][ T5093] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 38.402438][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.404889][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.460649][ T5112] gadgetfs: bound to dummy_udc driver [ 38.483071][ T5112] Could not create tracefs directory 'options' [ 38.486743][ T5112] ERROR: Could not create tracefs directory 'per_cpu/0' [ 38.492205][ T5112] Could not create tracefs 'free_buffer' entry [ 38.494136][ T5112] Could not create tracefs 'trace_marker' entry [ 38.498786][ T5112] Could not create tracefs 'trace_marker_raw' entry [ 38.500987][ T5112] Could not create tracefs 'buffer_percent' entry [ 38.502346][ T5112] Could not create tracefs 'syscall_user_buf_size' entry [ 38.503688][ T5112] Could not create tracefs 'tracing_on' entry [ 38.505013][ T5112] Could not create tracefs 'error_log' entry [ 38.506359][ T5112] Could not create tracefs directory 'options' [ 38.506375][ T5112] ERROR: Failed to create trace option: test_nop_accept [ 38.508839][ T5112] Could not create tracefs directory 'options' [ 38.598056][ T5120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.599139][ T5120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.934891][ T4805] hid-generic 0005:04F3:0000.0001: item fetching failed at offset 0/1 [ 38.935064][ T4805] hid-generic 0005:04F3:0000.0001: probe with driver hid-generic failed with error -22 [ 38.972883][ T5128] Bluetooth: hci5: Frame reassembly failed (-90) [ 39.058530][ T4707] Bluetooth: hci3: command tx timeout [ 39.058593][ T4707] Bluetooth: hci1: command tx timeout [ 39.058621][ T4707] Bluetooth: hci2: command tx timeout [ 39.058642][ T4707] Bluetooth: hci4: command tx timeout [ 39.062464][ T4722] Bluetooth: hci0: command tx timeout [ 39.069379][ T5134] warning: `syz.2.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 39.122704][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 39.184495][ T5142] netlink: 'syz.4.103': attribute type 10 has an invalid length. [ 39.184670][ T5142] bridge0: port 3(netdevsim0) entered disabled state [ 39.184763][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.184859][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.341851][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.342708][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.499327][ T4805] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 39.513220][ T5174] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 39.657731][ T4805] usb 1-1: not running at top speed; connect to a high speed hub [ 39.657824][ T4805] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 39.661885][ T4805] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 39.661922][ T4805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.667543][ T4805] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 39.672259][ T4805] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 39.841840][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 39.902449][ T4805] usb 1-1: USB disconnect, device number 2 [ 39.910176][ T4805] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 39.910548][ T4805] cyberjack 1-1:1.0: device disconnected [ 39.995178][ T5192] bridge0: port 4(syz_tun) entered blocking state [ 39.995277][ T5192] bridge0: port 4(syz_tun) entered disabled state [ 39.995386][ T5192] syz_tun: entered allmulticast mode [ 39.995940][ T5192] syz_tun: entered promiscuous mode [ 40.218877][ T5205] Zero length message leads to an empty skb [ 40.219106][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 40.253351][ T5209] loop4: detected capacity change from 0 to 128 [ 40.265235][ T5209] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.280199][ T4706] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.390428][ T5221] bridge0: port 3(netdevsim0) entered blocking state [ 40.390514][ T5221] bridge0: port 3(netdevsim0) entered disabled state [ 40.390621][ T5221] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 40.392715][ T5221] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 40.394350][ T5221] bridge0: port 3(netdevsim0) entered blocking state [ 40.394379][ T5221] bridge0: port 3(netdevsim0) entered forwarding state [ 40.527961][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 40.686331][ T5245] loop4: detected capacity change from 0 to 512 [ 40.691774][ T5245] EXT4-fs: Ignoring removed nobh option [ 40.722627][ T5245] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 40.722767][ T5245] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 40.722816][ T5245] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.150: inode has both inline data and extents flags [ 40.722863][ T5245] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 40.730081][ T5245] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.150: couldn't read orphan inode 13 (err -117) [ 40.730178][ T5245] loop4: lost filesystem error report for type 5 error -117 [ 40.735278][ T5245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.740273][ T5253] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 40.742664][ T5253] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 40.800170][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.849864][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 40.912721][ T5273] netlink: 'syz.0.163': attribute type 10 has an invalid length. [ 40.963496][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 40.977965][ T4722] Bluetooth: hci5: command 0x1003 tx timeout [ 40.978810][ T4708] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 41.031217][ T5288] FAULT_INJECTION: forcing a failure. [ 41.031217][ T5288] name failslab, interval 1, probability 0, space 0, times 0 [ 41.031255][ T5288] CPU: 1 UID: 0 PID: 5288 Comm: syz.0.171 Not tainted syzkaller #0 PREEMPT [ 41.031270][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.031278][ T5288] Call trace: [ 41.031282][ T5288] show_stack+0x2c/0x3c (C) [ 41.031310][ T5288] __dump_stack+0x30/0x40 [ 41.031324][ T5288] dump_stack_lvl+0xd8/0x12c [ 41.031336][ T5288] dump_stack+0x1c/0x28 [ 41.031347][ T5288] should_fail_ex+0x41c/0x590 [ 41.031360][ T5288] should_failslab+0xc4/0x120 [ 41.031373][ T5288] __kvmalloc_node_noprof+0x160/0x7fc [ 41.031383][ T5288] bpf_compute_postorder+0xd0/0x768 [ 41.031393][ T5288] bpf_check+0x1c60/0x243c [ 41.031405][ T5288] bpf_prog_load+0xf4c/0x1554 [ 41.031414][ T5288] __sys_bpf+0x7d4/0x82c [ 41.031423][ T5288] __arm64_sys_bpf+0xd0/0xec [ 41.031431][ T5288] invoke_syscall+0x98/0x244 [ 41.031443][ T5288] el0_svc_common+0xec/0x23c [ 41.031454][ T5288] do_el0_svc+0x4c/0x5c [ 41.031465][ T5288] el0_svc+0x64/0x260 [ 41.031476][ T5288] el0t_64_sync_handler+0x44/0x104 [ 41.031486][ T5288] el0t_64_sync+0x198/0x19c [ 41.161499][ T5307] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 41.246455][ T5322] bond1 (unregistering): Released all slaves [ 41.284113][ T5329] FAULT_INJECTION: forcing a failure. [ 41.284113][ T5329] name failslab, interval 1, probability 0, space 0, times 0 [ 41.287214][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT [ 41.287229][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.287235][ T5329] Call trace: [ 41.287238][ T5329] show_stack+0x2c/0x3c (C) [ 41.287257][ T5329] __dump_stack+0x30/0x40 [ 41.287269][ T5329] dump_stack_lvl+0xd8/0x12c [ 41.287281][ T5329] dump_stack+0x1c/0x28 [ 41.287295][ T5329] should_fail_ex+0x41c/0x590 [ 41.287309][ T5329] should_failslab+0xc4/0x120 [ 41.287322][ T5329] __kvmalloc_node_noprof+0x160/0x7fc [ 41.287331][ T5329] bpf_compute_postorder+0x8c/0x768 [ 41.287341][ T5329] bpf_check+0x1c60/0x243c [ 41.287353][ T5329] bpf_prog_load+0xf4c/0x1554 [ 41.287362][ T5329] __sys_bpf+0x7d4/0x82c [ 41.287371][ T5329] __arm64_sys_bpf+0xd0/0xec [ 41.287380][ T5329] invoke_syscall+0x98/0x244 [ 41.287391][ T5329] el0_svc_common+0xec/0x23c [ 41.287403][ T5329] do_el0_svc+0x4c/0x5c [ 41.287414][ T5329] el0_svc+0x64/0x260 [ 41.287424][ T5329] el0t_64_sync_handler+0x44/0x104 [ 41.287434][ T5329] el0t_64_sync+0x198/0x19c [ 41.372700][ T5338] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 41.386057][ T5338] bridge0: port 3(netdevsim0) entered disabled state [ 41.386160][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.386318][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.393784][ T5338] bridge0: port 3(netdevsim0) entered blocking state [ 41.393843][ T5338] bridge0: port 3(netdevsim0) entered forwarding state [ 41.393954][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.393997][ T5338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.394079][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.394138][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.398505][ T5338] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 41.629604][ T5370] netlink: 'syz.2.209': attribute type 10 has an invalid length. [ 41.797947][ T5370] bridge0: port 3(netdevsim0) entered disabled state [ 41.798041][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.798130][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.838886][ T5366] infiniband syz0: set down [ 41.838925][ T5366] infiniband syz0: added bond0 [ 41.862342][ T5366] RDS/IB: syz0: added [ 41.862465][ T5366] smc: adding ib device syz0 with port count 1 [ 41.862494][ T5366] smc: ib device syz0 port 1 has no pnetid [ 41.892143][ T5379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.895244][ T5379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.063563][ T5399] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 42.221848][ T5418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.236881][ T5420] syz0: rxe_newlink: already configured on bond0 [ 42.265607][ T5402] FAULT_INJECTION: forcing a failure. [ 42.265607][ T5402] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.265652][ T5402] CPU: 1 UID: 0 PID: 5402 Comm: syz.4.222 Not tainted syzkaller #0 PREEMPT [ 42.265668][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.265674][ T5402] Call trace: [ 42.265678][ T5402] show_stack+0x2c/0x3c (C) [ 42.265700][ T5402] __dump_stack+0x30/0x40 [ 42.265712][ T5402] dump_stack_lvl+0xd8/0x12c [ 42.265724][ T5402] dump_stack+0x1c/0x28 [ 42.265735][ T5402] should_fail_ex+0x41c/0x590 [ 42.265748][ T5402] should_fail+0x14/0x24 [ 42.265759][ T5402] should_fail_usercopy+0x20/0x30 [ 42.265771][ T5402] arch_do_signal_or_restart+0x1000/0x444c [ 42.265783][ T5402] exit_to_user_mode_loop+0x70/0x17c [ 42.265795][ T5402] el0_svc+0x18c/0x260 [ 42.265805][ T5402] el0t_64_sync_handler+0x44/0x104 [ 42.265815][ T5402] el0t_64_sync+0x198/0x19c [ 42.306970][ T5426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.308725][ T5426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.317329][ T5428] netlink: 'syz.4.234': attribute type 10 has an invalid length. [ 42.431778][ T5436] loop4: detected capacity change from 0 to 2048 [ 42.478887][ T5436] loop4: p2 p3 < > p4 < p5 > [ 42.478918][ T5436] loop4: partition table partially beyond EOD, truncated [ 42.480913][ T5436] loop4: p3 start 4225 is beyond EOD, truncated [ 42.749124][ T5453] netlink: 'syz.2.246': attribute type 10 has an invalid length. [ 42.955104][ T5476] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 43.019312][ T5484] loop1: detected capacity change from 0 to 256 [ 43.037612][ T5484] overlayfs: workdir and upperdir must reside under the same mount [ 43.165359][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 43.202242][ T5509] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 43.204222][ T5509] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.204418][ T5509] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.215862][ T5509] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.215917][ T5509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.216032][ T5509] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.216074][ T5509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.227939][ T5509] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 43.436558][ T3070] IPVS: starting estimator thread 0... [ 43.446973][ T5543] loop3: detected capacity change from 0 to 128 [ 43.468295][ T5543] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.494379][ T4712] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.517962][ T5542] IPVS: using max 57 ests per chain, 136800 per kthread [ 43.576572][ T5552] batman_adv: batadv0: Adding interface: ipvlan0 [ 43.576602][ T5552] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.576632][ T5552] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 43.833416][ T4395] veth0_vlan: left promiscuous mode [ 43.846589][ T4791] veth0_vlan: entered promiscuous mode [ 43.861657][ T5599] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 43.869437][ T5601] fuse: Bad value for 'fd' [ 44.110906][ T5630] loop3: detected capacity change from 0 to 512 [ 44.123571][ T5630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.181385][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.212168][ T5635] loop3: detected capacity change from 0 to 512 [ 44.229494][ T5635] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8842c028, mo2=0002] [ 44.232110][ T5635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.251721][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.349238][ T5645] loop3: detected capacity change from 0 to 2048 [ 44.382634][ T5645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.402868][ T4708] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 44.402901][ T4708] CPU: 1 UID: 0 PID: 4708 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT [ 44.402914][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 44.402920][ T4708] Workqueue: hci4 hci_rx_work [ 44.402938][ T4708] Call trace: [ 44.402941][ T4708] show_stack+0x2c/0x3c (C) [ 44.402956][ T4708] __dump_stack+0x30/0x40 [ 44.402969][ T4708] dump_stack_lvl+0xd8/0x12c [ 44.402980][ T4708] dump_stack+0x1c/0x28 [ 44.402991][ T4708] sysfs_warn_dup+0x9c/0xb8 [ 44.403004][ T4708] sysfs_create_dir_ns+0x190/0x1f4 [ 44.403016][ T4708] kobject_add_internal+0x290/0x6f0 [ 44.403029][ T4708] kobject_add_varg+0x9c/0xe8 [ 44.403039][ T4708] kobject_add+0x110/0x1c8 [ 44.403050][ T4708] device_add+0x394/0x9e0 [ 44.403059][ T4708] hci_conn_add_sysfs+0xbc/0x1e8 [ 44.403068][ T4708] le_conn_complete_evt+0xc84/0x122c [ 44.403080][ T4708] hci_le_conn_complete_evt+0x114/0x3d8 [ 44.403091][ T4708] hci_le_meta_evt+0x2b0/0x46c [ 44.403099][ T4708] hci_event_packet+0x4c0/0x9c8 [ 44.403111][ T4708] hci_rx_work+0x2f4/0xd78 [ 44.403121][ T4708] process_scheduled_works+0x91c/0x1250 [ 44.403132][ T4708] worker_thread+0x798/0xbd0 [ 44.403142][ T4708] kthread+0x304/0x3d4 [ 44.403151][ T4708] ret_from_fork+0x10/0x20 [ 44.403166][ T4708] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 44.403181][ T4708] Bluetooth: hci4: failed to register connection device [ 44.455750][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.818482][ T4722] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 44.820619][ T4722] Bluetooth: hci2: Injecting HCI hardware error event [ 44.821191][ T4722] Bluetooth: hci2: hardware error 0x00 [ 46.370730][ T5669] SET target dimension over the limit! [ 46.451913][ T5683] binder: 5682:5683 ioctl 40045567 19 returned -22 [ 46.452098][ T5683] binder: 5682:5683 tried to acquire reference to desc 0, got 1 instead [ 46.452401][ T5683] binder: 5682:5683 got reply transaction with no transaction stack [ 46.452417][ T5683] binder: 5682:5683 transaction reply to 0:0 failed 11/29201/-71, code 0 size 0-0 line 3155 [ 46.452643][ T5683] binder: 5682:5683 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 46.452653][ T5683] binder: 5683 RLIMIT_NICE not set [ 46.452776][ T5683] binder: undelivered transaction 10, put_user failed [ 46.452789][ T5683] binder: 5682:5683 ioctl c0306201 20000680 returned -14 [ 46.453046][ T4805] binder: undelivered TRANSACTION_COMPLETE [ 46.453058][ T4805] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.515485][ T5693] process 'syz.3.330' launched '/dev/fd/4' with NULL argv: empty string added [ 46.549358][ T5700] netlink: 'syz.1.332': attribute type 10 has an invalid length. [ 46.551518][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.551625][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.678051][ T5712] FAULT_INJECTION: forcing a failure. [ 46.678051][ T5712] name failslab, interval 1, probability 0, space 0, times 0 [ 46.681351][ T5712] CPU: 1 UID: 0 PID: 5712 Comm: syz.1.338 Not tainted syzkaller #0 PREEMPT [ 46.681377][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 46.681385][ T5712] Call trace: [ 46.681389][ T5712] show_stack+0x2c/0x3c (C) [ 46.681414][ T5712] __dump_stack+0x30/0x40 [ 46.681428][ T5712] dump_stack_lvl+0xd8/0x12c [ 46.681440][ T5712] dump_stack+0x1c/0x28 [ 46.681451][ T5712] should_fail_ex+0x41c/0x590 [ 46.681464][ T5712] should_failslab+0xc4/0x120 [ 46.681477][ T5712] __kmalloc_noprof+0x108/0x6c8 [ 46.681485][ T5712] usb_hcd_submit_urb+0x6c0/0x169c [ 46.681500][ T5712] usb_submit_urb+0xd44/0x1458 [ 46.681508][ T5712] usb_start_wait_urb+0x104/0x478 [ 46.681517][ T5712] usb_control_msg+0x1e8/0x378 [ 46.681526][ T5712] hub_ext_port_status+0x154/0x5a4 [ 46.681537][ T5712] hub_activate+0x59c/0x15c4 [ 46.681549][ T5712] hub_resume+0x64/0x2bc [ 46.681561][ T5712] usb_resume_interface+0x214/0x3c0 [ 46.681572][ T5712] usb_resume_both+0x494/0x798 [ 46.681582][ T5712] usb_runtime_resume+0x24/0x34 [ 46.681592][ T5712] __rpm_callback+0x124/0x2f8 [ 46.681602][ T5712] rpm_callback+0x70/0x138 [ 46.681610][ T5712] rpm_resume+0xab8/0x10d8 [ 46.681622][ T5712] __pm_runtime_resume+0xfc/0x180 [ 46.681635][ T5712] usb_autoresume_device+0x2c/0x118 [ 46.681645][ T5712] usbdev_open+0x164/0x674 [ 46.681653][ T5712] chrdev_open+0x398/0x3e8 [ 46.681664][ T5712] do_dentry_open+0x5c4/0xfc0 [ 46.681676][ T5712] vfs_open+0x44/0x2dc [ 46.681686][ T5712] path_openat+0x1084/0x18f4 [ 46.681696][ T5712] do_file_open+0x1c8/0x2e8 [ 46.681706][ T5712] do_sys_openat2+0x114/0x1e8 [ 46.681717][ T5712] do_sys_open+0xb0/0xe0 [ 46.681727][ T5712] __arm64_sys_openat+0xa8/0xc4 [ 46.681739][ T5712] invoke_syscall+0x98/0x244 [ 46.681750][ T5712] el0_svc_common+0xec/0x23c [ 46.681762][ T5712] do_el0_svc+0x4c/0x5c [ 46.681773][ T5712] el0_svc+0x64/0x260 [ 46.681784][ T5712] el0t_64_sync_handler+0x44/0x104 [ 46.681793][ T5712] el0t_64_sync+0x198/0x19c [ 46.761784][ T5728] 9pnet_virtio: no channels available for device syz [ 46.824754][ T5726] FAULT_INJECTION: forcing a failure. [ 46.824754][ T5726] name failslab, interval 1, probability 0, space 0, times 0 [ 46.827518][ T5726] CPU: 1 UID: 0 PID: 5726 Comm: syz.1.343 Not tainted syzkaller #0 PREEMPT [ 46.827533][ T5726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 46.827539][ T5726] Call trace: [ 46.827543][ T5726] show_stack+0x2c/0x3c (C) [ 46.827565][ T5726] __dump_stack+0x30/0x40 [ 46.827579][ T5726] dump_stack_lvl+0xd8/0x12c [ 46.827592][ T5726] dump_stack+0x1c/0x28 [ 46.827603][ T5726] should_fail_ex+0x41c/0x590 [ 46.827618][ T5726] should_failslab+0xc4/0x120 [ 46.827632][ T5726] kmem_cache_alloc_noprof+0x94/0x5d4 [ 46.827645][ T5726] key_alloc+0x288/0xd30 [ 46.827659][ T5726] keyring_alloc+0x68/0xe0 [ 46.827667][ T5726] install_thread_keyring_to_cred+0x98/0x12c [ 46.827678][ T5726] lookup_user_key+0x1b0/0xd4c [ 46.827687][ T5726] __arm64_sys_add_key+0x34c/0x43c [ 46.827696][ T5726] invoke_syscall+0x98/0x244 [ 46.827708][ T5726] el0_svc_common+0xec/0x23c [ 46.827720][ T5726] do_el0_svc+0x4c/0x5c [ 46.827731][ T5726] el0_svc+0x64/0x260 [ 46.827742][ T5726] el0t_64_sync_handler+0x44/0x104 [ 46.827752][ T5726] el0t_64_sync+0x198/0x19c [ 46.911268][ T5738] netlink: 'syz.4.347': attribute type 10 has an invalid length. [ 46.979143][ T4722] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 47.066227][ T5761] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 47.405577][ T5798] FAULT_INJECTION: forcing a failure. [ 47.405577][ T5798] name fail_futex, interval 1, probability 0, space 0, times 1 [ 47.408481][ T5798] CPU: 1 UID: 0 PID: 5798 Comm: syz.0.371 Not tainted syzkaller #0 PREEMPT [ 47.408501][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.408510][ T5798] Call trace: [ 47.408515][ T5798] show_stack+0x2c/0x3c (C) [ 47.408538][ T5798] __dump_stack+0x30/0x40 [ 47.408551][ T5798] dump_stack_lvl+0xd8/0x12c [ 47.408563][ T5798] dump_stack+0x1c/0x28 [ 47.408574][ T5798] should_fail_ex+0x41c/0x590 [ 47.408587][ T5798] should_fail+0x14/0x24 [ 47.408598][ T5798] get_futex_key+0x1ec/0x12b0 [ 47.408609][ T5798] futex_wait_setup+0x58/0x674 [ 47.408620][ T5798] __futex_wait+0x108/0x25c [ 47.408631][ T5798] futex_wait+0x108/0x2c0 [ 47.408642][ T5798] do_futex+0x320/0x378 [ 47.408652][ T5798] __arm64_sys_futex+0x2e4/0x418 [ 47.408662][ T5798] invoke_syscall+0x98/0x244 [ 47.408674][ T5798] el0_svc_common+0xec/0x23c [ 47.408686][ T5798] do_el0_svc+0x4c/0x5c [ 47.408697][ T5798] el0_svc+0x64/0x260 [ 47.408707][ T5798] el0t_64_sync_handler+0x44/0x104 [ 47.408717][ T5798] el0t_64_sync+0x198/0x19c [ 47.464043][ T5804] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 47.465657][ T5804] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 47.469925][ T5804] tipc: Started in network mode [ 47.471064][ T5804] tipc: Node identity 080211, cluster identity 4711 [ 47.472775][ T5804] tipc: Enabled bearer , priority 0 [ 47.475731][ T5804] tipc: Resetting bearer [ 47.498235][ T5808] loop0: detected capacity change from 0 to 2048 [ 47.511781][ T5808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.571245][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.668241][ T5819] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 47.669948][ T5819] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 47.671971][ T5819] gadgetfs expected dummy_udc controller not usbip-vudc [ 47.677366][ T5819] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 47.682273][ T5819] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 47.700988][ T5830] smc: net device ip6erspan0 applied user defined pnetid SYZ2 [ 47.860934][ T4722] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 47.860988][ T4722] Bluetooth: hci4: Injecting HCI hardware error event [ 47.861543][ T51] Bluetooth: hci4: hardware error 0x00 [ 47.885445][ T5857] netlink: 48 bytes leftover after parsing attributes in process `syz.4.399'. [ 47.955661][ T5863] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 48.160900][ T5874] syz_tun: entered promiscuous mode [ 48.160931][ T5874] syz_tun: entered allmulticast mode [ 48.165936][ T5874] FAULT_INJECTION: forcing a failure. [ 48.165936][ T5874] name failslab, interval 1, probability 0, space 0, times 0 [ 48.165974][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: syz.1.407 Tainted: G L syzkaller #0 PREEMPT [ 48.165997][ T5874] Tainted: [L]=SOFTLOCKUP [ 48.166004][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.166012][ T5874] Call trace: [ 48.166017][ T5874] show_stack+0x2c/0x3c (C) [ 48.166039][ T5874] __dump_stack+0x30/0x40 [ 48.166053][ T5874] dump_stack_lvl+0xd8/0x12c [ 48.166065][ T5874] dump_stack+0x1c/0x28 [ 48.166078][ T5874] should_fail_ex+0x41c/0x590 [ 48.166091][ T5874] should_failslab+0xc4/0x120 [ 48.166104][ T5874] __kmalloc_noprof+0x108/0x6c8 [ 48.166113][ T5874] nsim_fib_event_nb+0x238/0xc5c [ 48.166123][ T5874] notifier_call_chain+0x1a4/0x624 [ 48.166135][ T5874] atomic_notifier_call_chain+0xf0/0x1ac [ 48.166146][ T5874] call_fib_notifiers+0x44/0x74 [ 48.166159][ T5874] call_fib6_notifiers+0x50/0x80 [ 48.166171][ T5874] fib6_del+0xd34/0x1248 [ 48.166183][ T5874] fib6_clean_node+0x234/0x4e0 [ 48.166195][ T5874] fib6_walk_continue+0x568/0x784 [ 48.166207][ T5874] fib6_walk+0x98/0xec [ 48.166218][ T5874] __fib6_clean_all+0x218/0x364 [ 48.166230][ T5874] fib6_clean_all+0x3c/0x50 [ 48.166241][ T5874] rt6_sync_down_dev+0xf8/0x15c [ 48.166250][ T5874] rt6_disable_ip+0x44/0x570 [ 48.166260][ T5874] addrconf_ifdown+0x134/0x11b4 [ 48.166270][ T5874] addrconf_notify+0x29c/0xbbc [ 48.166282][ T5874] notifier_call_chain+0x1a4/0x624 [ 48.166294][ T5874] raw_notifier_call_chain+0x3c/0x50 [ 48.166309][ T5874] call_netdevice_notifiers_info+0xb8/0x120 [ 48.166322][ T5874] __dev_notify_flags+0x260/0x438 [ 48.166333][ T5874] netif_change_flags+0xd0/0x15c [ 48.166343][ T5874] do_setlink+0xc28/0x31e8 [ 48.166352][ T5874] rtnl_setlink+0x3cc/0x550 [ 48.166359][ T5874] rtnetlink_rcv_msg+0x66c/0x9bc [ 48.166372][ T5874] netlink_rcv_skb+0x238/0x414 [ 48.166382][ T5874] rtnetlink_rcv+0x28/0x38 [ 48.166394][ T5874] netlink_unicast+0x600/0x7f8 [ 48.166403][ T5874] netlink_sendmsg+0x648/0x948 [ 48.166412][ T5874] __sock_sendmsg+0xc8/0x17c [ 48.166421][ T5874] ____sys_sendmsg+0x3d0/0x6c8 [ 48.166430][ T5874] ___sys_sendmsg+0x198/0x224 [ 48.166440][ T5874] __sys_sendmsg+0x158/0x204 [ 48.166449][ T5874] __arm64_sys_sendmsg+0x88/0x9c [ 48.166458][ T5874] invoke_syscall+0x98/0x244 [ 48.166470][ T5874] el0_svc_common+0xec/0x23c [ 48.166482][ T5874] do_el0_svc+0x4c/0x5c [ 48.166493][ T5874] el0_svc+0x64/0x260 [ 48.166503][ T5874] el0t_64_sync_handler+0x44/0x104 [ 48.166513][ T5874] el0t_64_sync+0x198/0x19c [ 48.478510][ T26] tipc: Node number set to 134353152 [ 48.577732][ T4708] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 48.577759][ T4722] Bluetooth: hci5: command 0x1003 tx timeout [ 48.836826][ T5889] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 48.839887][ T5889] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 48.944887][ T5902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.419'. [ 49.069549][ T5913] net_ratelimit: 4 callbacks suppressed [ 49.069592][ T5913] netlink: zone id is out of range [ 49.069605][ T5913] netlink: zone id is out of range [ 49.069670][ T5913] netlink: set zone limit has 4 unknown bytes [ 49.121980][ T5919] loop4: detected capacity change from 0 to 512 [ 49.122457][ T5919] EXT4-fs: Ignoring removed nobh option [ 49.139862][ T5919] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 49.307295][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.307505][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.313937][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 49.313979][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.313996][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.318993][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.319018][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.400664][ T5940] configfs-gadget.g1 gadget.0: HOST MAC 8e:11:56:e7:6b:58 [ 49.400710][ T5940] configfs-gadget.g1 gadget.0: MAC be:38:a3:72:2f:6d [ 49.423719][ T5954] bridge0: port 4(syz_tun) entered blocking state [ 49.425070][ T5954] bridge0: port 4(syz_tun) entered disabled state [ 49.426403][ T5954] syz_tun: entered allmulticast mode [ 49.428274][ T5954] syz_tun: entered promiscuous mode [ 49.495778][ T5962] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 49.522114][ T5965] FAULT_INJECTION: forcing a failure. [ 49.522114][ T5965] name failslab, interval 1, probability 0, space 0, times 0 [ 49.524875][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: syz.3.449 Tainted: G L syzkaller #0 PREEMPT [ 49.524896][ T5965] Tainted: [L]=SOFTLOCKUP [ 49.524900][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.524906][ T5965] Call trace: [ 49.524910][ T5965] show_stack+0x2c/0x3c (C) [ 49.524932][ T5965] __dump_stack+0x30/0x40 [ 49.524946][ T5965] dump_stack_lvl+0xd8/0x12c [ 49.524958][ T5965] dump_stack+0x1c/0x28 [ 49.524969][ T5965] should_fail_ex+0x41c/0x590 [ 49.524982][ T5965] should_failslab+0xc4/0x120 [ 49.524995][ T5965] kmem_cache_alloc_noprof+0x94/0x5d4 [ 49.525008][ T5965] alloc_empty_file+0x6c/0x1cc [ 49.525017][ T5965] path_openat+0x78/0x18f4 [ 49.525027][ T5965] do_file_open+0x1c8/0x2e8 [ 49.525037][ T5965] do_sys_openat2+0x114/0x1e8 [ 49.525048][ T5965] do_sys_open+0xb0/0xe0 [ 49.525059][ T5965] __arm64_sys_openat+0xa8/0xc4 [ 49.525071][ T5965] invoke_syscall+0x98/0x244 [ 49.525082][ T5965] el0_svc_common+0xec/0x23c [ 49.525094][ T5965] do_el0_svc+0x4c/0x5c [ 49.525105][ T5965] el0_svc+0x64/0x260 [ 49.525116][ T5965] el0t_64_sync_handler+0x44/0x104 [ 49.525126][ T5965] el0t_64_sync+0x198/0x19c [ 49.553508][ T5969] Illegal XDP return value 268435456 on prog (id 7) dev syz_tun, expect packet loss! [ 49.593590][ T5977] netlink: 48 bytes leftover after parsing attributes in process `syz.1.451'. [ 49.684761][ T5992] netlink: 'syz.3.454': attribute type 1 has an invalid length. [ 49.684809][ T5992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.684818][ T5992] IPv6: NLM_F_CREATE should be set when creating new route [ 49.754327][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.754529][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.770116][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 49.878964][ T6017] FAULT_INJECTION: forcing a failure. [ 49.878964][ T6017] name failslab, interval 1, probability 0, space 0, times 0 [ 49.879011][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.3.466 Tainted: G L syzkaller #0 PREEMPT [ 49.879027][ T6017] Tainted: [L]=SOFTLOCKUP [ 49.879031][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.879036][ T6017] Call trace: [ 49.879039][ T6017] show_stack+0x2c/0x3c (C) [ 49.879061][ T6017] __dump_stack+0x30/0x40 [ 49.879073][ T6017] dump_stack_lvl+0xd8/0x12c [ 49.879085][ T6017] dump_stack+0x1c/0x28 [ 49.879096][ T6017] should_fail_ex+0x41c/0x590 [ 49.879109][ T6017] should_failslab+0xc4/0x120 [ 49.879122][ T6017] __kmalloc_cache_node_noprof+0x98/0x618 [ 49.879131][ T6017] __get_vm_area_node+0x188/0x32c [ 49.879140][ T6017] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 49.879150][ T6017] __vmalloc_node_noprof+0xec/0x14c [ 49.879160][ T6017] vzalloc_noprof+0x3c/0x4c [ 49.879169][ T6017] n_tty_open+0x24/0x170 [ 49.879179][ T6017] tty_ldisc_open+0x9c/0x144 [ 49.879190][ T6017] tty_ldisc_setup+0xac/0xf8 [ 49.879200][ T6017] tty_init_dev+0x1f0/0x3a4 [ 49.879208][ T6017] ptmx_open+0x100/0x2d8 [ 49.879216][ T6017] chrdev_open+0x398/0x3e8 [ 49.879227][ T6017] do_dentry_open+0x5c4/0xfc0 [ 49.879238][ T6017] vfs_open+0x44/0x2dc [ 49.879248][ T6017] path_openat+0x1084/0x18f4 [ 49.879258][ T6017] do_file_open+0x1c8/0x2e8 [ 49.879267][ T6017] do_sys_openat2+0x114/0x1e8 [ 49.879279][ T6017] do_sys_open+0xb0/0xe0 [ 49.879289][ T6017] __arm64_sys_openat+0xa8/0xc4 [ 49.879305][ T6017] invoke_syscall+0x98/0x244 [ 49.879320][ T6017] el0_svc_common+0xec/0x23c [ 49.879332][ T6017] do_el0_svc+0x4c/0x5c [ 49.879343][ T6017] el0_svc+0x64/0x260 [ 49.879353][ T6017] el0t_64_sync_handler+0x44/0x104 [ 49.879363][ T6017] el0t_64_sync+0x198/0x19c [ 49.879476][ T6017] syz.3.466: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 49.879603][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.3.466 Tainted: G L syzkaller #0 PREEMPT [ 49.879615][ T6017] Tainted: [L]=SOFTLOCKUP [ 49.879618][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.879622][ T6017] Call trace: [ 49.879625][ T6017] show_stack+0x2c/0x3c (C) [ 49.879638][ T6017] __dump_stack+0x30/0x40 [ 49.879650][ T6017] dump_stack_lvl+0xd8/0x12c [ 49.879661][ T6017] dump_stack+0x1c/0x28 [ 49.879672][ T6017] warn_alloc+0x1c4/0x1d8 [ 49.879685][ T6017] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 49.879696][ T6017] __vmalloc_node_noprof+0xec/0x14c [ 49.879705][ T6017] vzalloc_noprof+0x3c/0x4c [ 49.879714][ T6017] n_tty_open+0x24/0x170 [ 49.879724][ T6017] tty_ldisc_open+0x9c/0x144 [ 49.879735][ T6017] tty_ldisc_setup+0xac/0xf8 [ 49.879746][ T6017] tty_init_dev+0x1f0/0x3a4 [ 49.879754][ T6017] ptmx_open+0x100/0x2d8 [ 49.879762][ T6017] chrdev_open+0x398/0x3e8 [ 49.879773][ T6017] do_dentry_open+0x5c4/0xfc0 [ 49.879785][ T6017] vfs_open+0x44/0x2dc [ 49.879796][ T6017] path_openat+0x1084/0x18f4 [ 49.879806][ T6017] do_file_open+0x1c8/0x2e8 [ 49.879816][ T6017] do_sys_openat2+0x114/0x1e8 [ 49.879827][ T6017] do_sys_open+0xb0/0xe0 [ 49.879838][ T6017] __arm64_sys_openat+0xa8/0xc4 [ 49.879849][ T6017] invoke_syscall+0x98/0x244 [ 49.879861][ T6017] el0_svc_common+0xec/0x23c [ 49.879873][ T6017] do_el0_svc+0x4c/0x5c [ 49.879885][ T6017] el0_svc+0x64/0x260 [ 49.879894][ T6017] el0t_64_sync_handler+0x44/0x104 [ 49.879905][ T6017] el0t_64_sync+0x198/0x19c [ 49.879914][ T6017] Mem-Info: [ 49.879919][ T6017] active_anon:71 inactive_anon:5688 isolated_anon:0 [ 49.879919][ T6017] active_file:2418 inactive_file:4471 isolated_file:0 [ 49.879919][ T6017] unevictable:768 dirty:1741 writeback:1 [ 49.879919][ T6017] slab_reclaimable:8759 slab_unreclaimable:91534 [ 49.879919][ T6017] mapped:29301 shmem:1017 pagetables:1354 [ 49.879919][ T6017] sec_pagetables:0 bounce:0 [ 49.879919][ T6017] kernel_misc_reclaimable:0 [ 49.879919][ T6017] free:1484679 free_pcp:3021 free_cma:7616 [ 49.879941][ T6017] Node 0 active_anon:284kB inactive_anon:22752kB active_file:9672kB inactive_file:17884kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117204kB dirty:6964kB writeback:4kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9096kB pagetables:5416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 49.879962][ T6017] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 49.879987][ T6017] lowmem_reserve[]: 0 0 3650 3650 3650 [ 49.880006][ T6017] Node 0 Normal free:2860828kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:284kB inactive_anon:22752kB active_file:9672kB inactive_file:17884kB unevictable:3072kB writepending:6968kB zspages:0kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:12084kB local_pcp:8720kB free_cma:0kB [ 49.880031][ T6017] lowmem_reserve[]: 0 0 0 0 0 [ 49.880050][ T6017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 49.880132][ T6017] Node 0 Normal: 55*4kB (UME) 672*8kB (UME) 676*16kB (UM) 279*32kB (UM) 158*64kB (UME) 97*128kB (UME) 64*256kB (UM) 24*512kB (UM) 17*1024kB (M) 11*2048kB (UM) 670*4096kB (UM) = 2860796kB [ 49.880215][ T6017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 49.880223][ T6017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 49.880229][ T6017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 49.880236][ T6017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 49.880243][ T6017] 7903 total pagecache pages [ 49.880247][ T6017] 1 pages in swap cache [ 49.880250][ T6017] Free swap = 124992kB [ 49.880254][ T6017] Total swap = 124996kB [ 49.880258][ T6017] 2097152 pages RAM [ 49.880261][ T6017] 0 pages HighMem/MovableOnly [ 49.880265][ T6017] 392568 pages reserved [ 49.880268][ T6017] 8192 pages cma reserved [ 49.880272][ T6017] 0 pages hwpoisoned [ 49.880401][ T6017] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 50.014042][ T6031] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.017858][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 50.203090][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.206156][ T6062] netlink: 48 bytes leftover after parsing attributes in process `syz.4.481'. [ 50.438349][ T6084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.492'. [ 50.656719][ T6110] SET target dimension over the limit! [ 50.923167][ T6142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.519'. [ 50.940268][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 50.942698][ T6142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.519'. [ 50.981252][ T2988] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.983169][ T2988] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.983208][ T2988] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.983249][ T2988] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.397895][ T6185] syz.4.533 uses obsolete (PF_INET,SOCK_PACKET) [ 53.872756][ T6217] Cannot find del_set index 8192 as target [ 54.118146][ T6222] __nla_validate_parse: 2 callbacks suppressed [ 54.118215][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.545'. [ 54.291904][ T6221] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 54.967968][ T6247] input: syz1 as /devices/virtual/input/input3 [ 56.439576][ T6326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.570'. [ 61.492028][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 64.405219][ T6448] loop1: detected capacity change from 0 to 8192 [ 64.501373][ T10] cfg80211: failed to load regulatory.db [ 64.502241][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.502268][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.918534][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.612'. [ 65.101046][ T6459] FAULT_INJECTION: forcing a failure. [ 65.101046][ T6459] name fail_futex, interval 1, probability 0, space 0, times 0 [ 65.101086][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.1.613 Tainted: G L syzkaller #0 PREEMPT [ 65.101103][ T6459] Tainted: [L]=SOFTLOCKUP [ 65.101108][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 65.101114][ T6459] Call trace: [ 65.101117][ T6459] show_stack+0x2c/0x3c (C) [ 65.101137][ T6459] __dump_stack+0x30/0x40 [ 65.101148][ T6459] dump_stack_lvl+0xd8/0x12c [ 65.101157][ T6459] dump_stack+0x1c/0x28 [ 65.101167][ T6459] should_fail_ex+0x41c/0x590 [ 65.101178][ T6459] should_fail+0x14/0x24 [ 65.101187][ T6459] get_futex_key+0xd0c/0x12b0 [ 65.101197][ T6459] futex_wake+0x10c/0x594 [ 65.101206][ T6459] do_futex+0x2c4/0x378 [ 65.101215][ T6459] mm_exit_exec_release+0x190/0x27c [ 65.101223][ T6459] exit_mm+0x54/0x264 [ 65.101233][ T6459] do_exit+0x524/0x1a74 [ 65.101242][ T6459] do_group_exit+0x198/0x238 [ 65.101253][ T6459] get_signal+0xfb0/0x1094 [ 65.101260][ T6459] arch_do_signal_or_restart+0x288/0x444c [ 65.101270][ T6459] exit_to_user_mode_loop+0x70/0x17c [ 65.101280][ T6459] el0_svc+0x18c/0x260 [ 65.101290][ T6459] el0t_64_sync_handler+0x44/0x104 [ 65.101298][ T6459] el0t_64_sync+0x198/0x19c [ 65.448785][ T6490] FAULT_INJECTION: forcing a failure. [ 65.448785][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.448835][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.3.622 Tainted: G L syzkaller #0 PREEMPT [ 65.448851][ T6490] Tainted: [L]=SOFTLOCKUP [ 65.448854][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 65.448860][ T6490] Call trace: [ 65.448863][ T6490] show_stack+0x2c/0x3c (C) [ 65.448882][ T6490] __dump_stack+0x30/0x40 [ 65.448896][ T6490] dump_stack_lvl+0xd8/0x12c [ 65.448906][ T6490] dump_stack+0x1c/0x28 [ 65.448915][ T6490] should_fail_ex+0x41c/0x590 [ 65.448928][ T6490] should_fail+0x14/0x24 [ 65.448937][ T6490] should_fail_usercopy+0x20/0x30 [ 65.448947][ T6490] arch_do_signal_or_restart+0xf80/0x444c [ 65.448958][ T6490] exit_to_user_mode_loop+0x70/0x17c [ 65.448968][ T6490] el0_svc+0x18c/0x260 [ 65.448978][ T6490] el0t_64_sync_handler+0x44/0x104 [ 65.448986][ T6490] el0t_64_sync+0x198/0x19c [ 66.409479][ T6525] capability: warning: `syz.0.630' uses deprecated v2 capabilities in a way that may be insecure [ 66.414055][ T6517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.629'. [ 67.956523][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 68.155359][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 68.163234][ T6588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.651'. [ 68.209402][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.651'. [ 69.088279][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 69.237444][ T6612] loop0: detected capacity change from 0 to 4096 [ 69.695958][ T6612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.734059][ T6612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.326689][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 71.029523][ T6671] fuse: Unknown parameter '(00000000000000000000' [ 71.368606][ T6684] loop3: detected capacity change from 0 to 1024 [ 71.406256][ T6684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.426086][ T6684] EXT4-fs (loop3): shut down requested (1) [ 71.453138][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.238015][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.696'. [ 77.374099][ T6733] loop0: detected capacity change from 0 to 2048 [ 77.394640][ T6733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.707835][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.730378][ T6741] loop3: detected capacity change from 0 to 1024 [ 77.754919][ T6741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.795340][ T6737] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 1: comm syz.3.701: lblock 1 mapped to illegal pblock 1 (length 5) [ 77.805019][ T6737] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 77.808672][ T6737] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.808672][ T6737] [ 77.825111][ T6737] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.701: bg 0: block 112: padding at end of block bitmap is not set [ 77.831340][ T6737] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 77.835722][ T6737] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.835722][ T6737] [ 77.838081][ T6737] EXT4-fs (loop3): Total free blocks count 0 [ 77.839521][ T6737] EXT4-fs (loop3): Free/Dirty block details [ 77.839553][ T6737] EXT4-fs (loop3): free_blocks=0 [ 77.839580][ T6737] EXT4-fs (loop3): dirty_blocks=32 [ 77.839596][ T6737] EXT4-fs (loop3): Block reservation details [ 77.999622][ T6760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.707'. [ 78.186417][ T6767] bridge0: port 4(syz_tun) entered blocking state [ 78.186507][ T6767] bridge0: port 4(syz_tun) entered disabled state [ 78.186634][ T6767] syz_tun: entered allmulticast mode [ 78.187148][ T6767] syz_tun: entered promiscuous mode [ 78.704532][ T41] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 78.719033][ T4712] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 78.821028][ T6790] netlink: 48 bytes leftover after parsing attributes in process `syz.1.719'. [ 79.152668][ T6809] smc: net device ip6erspan0 applied user defined pnetid SYZ2 [ 79.222409][ T6816] netlink: 48 bytes leftover after parsing attributes in process `syz.4.732'. [ 79.261250][ T6820] bridge0: port 3(syz_tun) entered blocking state [ 79.261313][ T6820] bridge0: port 3(syz_tun) entered disabled state [ 79.366988][ T6830] syz_tun: entered promiscuous mode [ 79.374555][ T6830] syz_tun: entered allmulticast mode [ 79.502197][ T6837] rdma_rxe: rxe_newlink: failed to add bond0 [ 79.693209][ T6853] loop3: detected capacity change from 0 to 2048 [ 79.723852][ T6853] loop3: p2 p3 < > p4 < p5 > [ 79.723885][ T6853] loop3: partition table partially beyond EOD, truncated [ 79.739955][ T6853] loop3: p3 start 4225 is beyond EOD, truncated [ 79.766052][ T6859] FAULT_INJECTION: forcing a failure. [ 79.766052][ T6859] name fail_futex, interval 1, probability 0, space 0, times 0 [ 79.766098][ T6859] CPU: 1 UID: 0 PID: 6859 Comm: syz.4.752 Tainted: G L syzkaller #0 PREEMPT [ 79.766114][ T6859] Tainted: [L]=SOFTLOCKUP [ 79.766118][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 79.766124][ T6859] Call trace: [ 79.766128][ T6859] show_stack+0x2c/0x3c (C) [ 79.766149][ T6859] __dump_stack+0x30/0x40 [ 79.766162][ T6859] dump_stack_lvl+0xd8/0x12c [ 79.766173][ T6859] dump_stack+0x1c/0x28 [ 79.766184][ T6859] should_fail_ex+0x41c/0x590 [ 79.766197][ T6859] should_fail+0x14/0x24 [ 79.766208][ T6859] get_futex_key+0x1ec/0x12b0 [ 79.766220][ T6859] futex_wait_setup+0x58/0x674 [ 79.766232][ T6859] __futex_wait+0x108/0x25c [ 79.766243][ T6859] futex_wait+0x108/0x2c0 [ 79.766253][ T6859] do_futex+0x320/0x378 [ 79.766264][ T6859] __arm64_sys_futex+0x2e4/0x418 [ 79.766274][ T6859] invoke_syscall+0x98/0x244 [ 79.766287][ T6859] el0_svc_common+0xec/0x23c [ 79.766298][ T6859] do_el0_svc+0x4c/0x5c [ 79.766318][ T6859] el0_svc+0x64/0x260 [ 79.766330][ T6859] el0t_64_sync_handler+0x44/0x104 [ 79.766342][ T6859] el0t_64_sync+0x198/0x19c [ 80.575293][ T6892] FAULT_INJECTION: forcing a failure. [ 80.575293][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 80.575329][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.0.763 Tainted: G L syzkaller #0 PREEMPT [ 80.575348][ T6892] Tainted: [L]=SOFTLOCKUP [ 80.575352][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 80.575357][ T6892] Call trace: [ 80.575361][ T6892] show_stack+0x2c/0x3c (C) [ 80.575380][ T6892] __dump_stack+0x30/0x40 [ 80.575392][ T6892] dump_stack_lvl+0xd8/0x12c [ 80.575404][ T6892] dump_stack+0x1c/0x28 [ 80.575415][ T6892] should_fail_ex+0x41c/0x590 [ 80.575428][ T6892] should_failslab+0xc4/0x120 [ 80.575441][ T6892] __kmalloc_cache_noprof+0x94/0x5fc [ 80.575449][ T6892] fuse_chan_new+0x54/0x274 [ 80.575460][ T6892] fuse_dev_chan_new+0x1c/0xb0 [ 80.575470][ T6892] fuse_get_tree+0x4c/0x31c [ 80.575480][ T6892] vfs_get_tree+0x90/0x28c [ 80.575490][ T6892] fc_mount+0x24/0xac [ 80.575500][ T6892] do_new_mount+0x2a4/0x538 [ 80.575510][ T6892] path_mount+0x5f0/0xa88 [ 80.575520][ T6892] do_mount+0xe8/0x148 [ 80.575530][ T6892] __arm64_sys_mount+0x33c/0x388 [ 80.575541][ T6892] invoke_syscall+0x98/0x244 [ 80.575552][ T6892] el0_svc_common+0xec/0x23c [ 80.575564][ T6892] do_el0_svc+0x4c/0x5c [ 80.575575][ T6892] el0_svc+0x64/0x260 [ 80.575586][ T6892] el0t_64_sync_handler+0x44/0x104 [ 80.575596][ T6892] el0t_64_sync+0x198/0x19c [ 81.281884][ T6945] batman_adv: batadv0: Removing interface: ipvlan0 [ 81.447737][ T6960] ================================================================== [ 81.447756][ T6960] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x58/0x70 [ 81.447778][ T6960] Read of size 1 at addr ffff0000d93a2018 by task syz.3.795/6960 [ 81.447787][ T6960] [ 81.447793][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.3.795 Tainted: G L syzkaller #0 PREEMPT [ 81.447805][ T6960] Tainted: [L]=SOFTLOCKUP [ 81.447808][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.447813][ T6960] Call trace: [ 81.447816][ T6960] show_stack+0x2c/0x3c (C) [ 81.447831][ T6960] __dump_stack+0x30/0x40 [ 81.447843][ T6960] dump_stack_lvl+0xd8/0x12c [ 81.447854][ T6960] print_address_description+0xb0/0x238 [ 81.447863][ T6960] print_report+0x68/0x84 [ 81.447870][ T6960] kasan_report+0x8c/0xc4 [ 81.447880][ T6960] __kasan_check_byte+0x3c/0x54 [ 81.447888][ T6960] lock_acquire+0xa4/0x370 [ 81.447898][ T6960] _raw_spin_lock_irq+0x58/0x70 [ 81.447908][ T6960] gadget_dev_open+0x50/0x1c4 [ 81.447920][ T6960] do_dentry_open+0x5c4/0xfc0 [ 81.447931][ T6960] vfs_open+0x44/0x2dc [ 81.447941][ T6960] path_openat+0x1084/0x18f4 [ 81.447951][ T6960] do_file_open+0x1c8/0x2e8 [ 81.447961][ T6960] do_sys_openat2+0x114/0x1e8 [ 81.447971][ T6960] do_sys_open+0xb0/0xe0 [ 81.447982][ T6960] __arm64_sys_openat+0xa8/0xc4 [ 81.447993][ T6960] invoke_syscall+0x98/0x244 [ 81.448005][ T6960] el0_svc_common+0xec/0x23c [ 81.448016][ T6960] do_el0_svc+0x4c/0x5c [ 81.448027][ T6960] el0_svc+0x64/0x260 [ 81.448036][ T6960] el0t_64_sync_handler+0x44/0x104 [ 81.448046][ T6960] el0t_64_sync+0x198/0x19c [ 81.448055][ T6960] [ 81.448057][ T6960] Allocated by task 41: [ 81.448062][ T6960] kasan_save_track+0x40/0x78 [ 81.448069][ T6960] kasan_save_alloc_info+0x40/0x50 [ 81.448077][ T6960] __kasan_kmalloc+0x9c/0xb4 [ 81.448084][ T6960] __kmalloc_noprof+0x34c/0x6c8 [ 81.448091][ T6960] ieee802_11_parse_elems_full+0x114/0x2208 [ 81.448100][ T6960] ieee80211_inform_bss+0x114/0xd70 [ 81.448109][ T6960] cfg80211_inform_single_bss_data+0xabc/0x19dc [ 81.448119][ T6960] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 81.448129][ T6960] cfg80211_inform_bss_frame_data+0x348/0x838 [ 81.448139][ T6960] ieee80211_bss_info_update+0x5d0/0x944 [ 81.448148][ T6960] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 81.448159][ T6960] ieee80211_iface_work+0x600/0xd3c [ 81.448165][ T6960] cfg80211_wiphy_work+0x278/0x588 [ 81.448176][ T6960] process_scheduled_works+0x91c/0x1250 [ 81.448185][ T6960] worker_thread+0x798/0xbd0 [ 81.448193][ T6960] kthread+0x304/0x3d4 [ 81.448200][ T6960] ret_from_fork+0x10/0x20 [ 81.448206][ T6960] [ 81.448208][ T6960] Freed by task 41: [ 81.448211][ T6960] kasan_save_track+0x40/0x78 [ 81.448217][ T6960] kasan_save_free_info+0x54/0x6c [ 81.448226][ T6960] __kasan_slab_free+0x74/0xa4 [ 81.448232][ T6960] kfree+0x188/0x698 [ 81.448242][ T6960] ieee80211_inform_bss+0x914/0xd70 [ 81.448251][ T6960] cfg80211_inform_single_bss_data+0xabc/0x19dc [ 81.448261][ T6960] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 81.448271][ T6960] cfg80211_inform_bss_frame_data+0x348/0x838 [ 81.448281][ T6960] ieee80211_bss_info_update+0x5d0/0x944 [ 81.448289][ T6960] ieee80211_ibss_rx_queued_mgmt+0x834/0x2548 [ 81.448301][ T6960] ieee80211_iface_work+0x600/0xd3c [ 81.448313][ T6960] cfg80211_wiphy_work+0x278/0x588 [ 81.448325][ T6960] process_scheduled_works+0x91c/0x1250 [ 81.448334][ T6960] worker_thread+0x798/0xbd0 [ 81.448342][ T6960] kthread+0x304/0x3d4 [ 81.448349][ T6960] ret_from_fork+0x10/0x20 [ 81.448354][ T6960] [ 81.448356][ T6960] The buggy address belongs to the object at ffff0000d93a2000 [ 81.448356][ T6960] which belongs to the cache kmalloc-1k of size 1024 [ 81.448363][ T6960] The buggy address is located 24 bytes inside of [ 81.448363][ T6960] freed 1024-byte region [ffff0000d93a2000, ffff0000d93a2400) [ 81.448371][ T6960] [ 81.448373][ T6960] The buggy address belongs to the physical page: [ 81.448377][ T6960] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d93a4000 pfn:0x1193a0 [ 81.448385][ T6960] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.448391][ T6960] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 81.448400][ T6960] page_type: f5(slab) [ 81.448408][ T6960] raw: 05ffc00000000240 ffff0000c0001dc0 fffffdffc3c2ce10 fffffdffc310d610 [ 81.448415][ T6960] raw: ffff0000d93a4000 000000000010000e 00000000f5000000 0000000000000000 [ 81.448422][ T6960] head: 05ffc00000000240 ffff0000c0001dc0 fffffdffc3c2ce10 fffffdffc310d610 [ 81.448429][ T6960] head: ffff0000d93a4000 000000000010000e 00000000f5000000 0000000000000000 [ 81.448436][ T6960] head: 05ffc00000000003 fffffdffc364e801 00000000ffffffff 00000000ffffffff [ 81.448443][ T6960] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 81.448447][ T6960] page dumped because: kasan: bad access detected [ 81.448450][ T6960] [ 81.448452][ T6960] Memory state around the buggy address: [ 81.448456][ T6960] ffff0000d93a1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.448462][ T6960] ffff0000d93a1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.448467][ T6960] >ffff0000d93a2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.448471][ T6960] ^ [ 81.448475][ T6960] ffff0000d93a2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.448480][ T6960] ffff0000d93a2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.448484][ T6960] ================================================================== [ 81.448487][ T6960] Disabling lock debugging due to kernel taint [ 81.448491][ T6960] ------------[ cut here ]------------ [ 81.448494][ T6960] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9 [ 81.448500][ T6960] index 13100 is out of range for type 'unsigned long[8]' [ 81.448506][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.3.795 Tainted: G B L syzkaller #0 PREEMPT [ 81.448517][ T6960] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 81.448520][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.448524][ T6960] Call trace: [ 81.448526][ T6960] show_stack+0x2c/0x3c (C) [ 81.448538][ T6960] __dump_stack+0x30/0x40 [ 81.448550][ T6960] dump_stack_lvl+0xd8/0x12c [ 81.448561][ T6960] dump_stack+0x1c/0x28 [ 81.448571][ T6960] ubsan_epilogue+0x14/0x48 [ 81.448581][ T6960] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 81.448594][ T6960] queued_spin_lock_slowpath+0x834/0xd04 [ 81.448604][ T6960] do_raw_spin_lock+0x21c/0x2d0 [ 81.448615][ T6960] _raw_spin_lock_irq+0x60/0x70 [ 81.448624][ T6960] gadget_dev_open+0x50/0x1c4 [ 81.448635][ T6960] do_dentry_open+0x5c4/0xfc0 [ 81.448646][ T6960] vfs_open+0x44/0x2dc [ 81.448656][ T6960] path_openat+0x1084/0x18f4 [ 81.448665][ T6960] do_file_open+0x1c8/0x2e8 [ 81.448674][ T6960] do_sys_openat2+0x114/0x1e8 [ 81.448685][ T6960] do_sys_open+0xb0/0xe0 [ 81.448695][ T6960] __arm64_sys_openat+0xa8/0xc4 [ 81.448706][ T6960] invoke_syscall+0x98/0x244 [ 81.448718][ T6960] el0_svc_common+0xec/0x23c [ 81.448729][ T6960] do_el0_svc+0x4c/0x5c [ 81.448740][ T6960] el0_svc+0x64/0x260 [ 81.448749][ T6960] el0t_64_sync_handler+0x44/0x104 [ 81.448758][ T6960] el0t_64_sync+0x198/0x19c [ 81.448766][ T6960] ---[ end trace ]--- [ 81.448778][ T6960] Unable to handle kernel paging request at virtual address ffff800088bb9120 [ 81.448783][ T6960] KASAN: probably user-memory-access in range [0x0000000445dc8900-0x0000000445dc8907] [ 81.448789][ T6960] Mem abort info: [ 81.448791][ T6960] ESR = 0x0000000096000047 [ 81.448794][ T6960] EC = 0x25: DABT (current EL), IL = 32 bits [ 81.448799][ T6960] SET = 0, FnV = 0 [ 81.448802][ T6960] EA = 0, S1PTW = 0 [ 81.448805][ T6960] FSC = 0x07: level 3 translation fault [ 81.448808][ T6960] Data abort info: [ 81.448810][ T6960] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 81.448814][ T6960] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 81.448819][ T6960] GCS = 0, Overlay = 0, DirtyBit = 0 [ 81.448823][ T6960] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021af03000 [ 81.448829][ T6960] [ffff800088bb9120] pgd=0000000000000000, p4d=1000000221211003, pud=1000000221212003, pmd=1000000221216003, pte=0000000000000000 [ 81.448849][ T6960] Internal error: Oops: 0000000096000047 [#1] SMP [ 81.582815][ T6960] Modules linked in: [ 81.583509][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.3.795 Tainted: G B L syzkaller #0 PREEMPT [ 81.585365][ T6960] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 81.586318][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.588118][ T6960] pstate: 834000c5 (Nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 81.589442][ T6960] pc : queued_spin_lock_slowpath+0x544/0xd04 [ 81.590478][ T6960] lr : queued_spin_lock_slowpath+0x834/0xd04 [ 81.591559][ T6960] sp : ffff8000962f7620 [ 81.592323][ T6960] x29: ffff8000962f76c0 x28: ffff800088bb9120 x27: 1fffe00019983b12 [ 81.593628][ T6960] x26: 1fffe0001b274400 x25: ffff0001add33108 x24: dfff800000000000 [ 81.594999][ T6960] x23: ffff700012c5eec8 x22: ffff0001add33100 x21: 1fffe00035ba6620 [ 81.596352][ T6960] x20: ffff0000ccc1d890 x19: ffff0000d93a2000 x18: 0000000000000000 [ 81.597735][ T6960] x17: 363a682e6b636f6c x16: 0000000000000001 x15: 0000000000000000 [ 81.599093][ T6960] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000004 [ 81.600466][ T6960] x11: ffff70001148186c x10: ffff800088bb9100 x9 : ffff800088bb9120 [ 81.601861][ T6960] x8 : 0000000000000000 x7 : 0000000000000001 x6 : ffff80008048e314 [ 81.603287][ T6960] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f85d8 [ 81.604786][ T6960] x2 : 0000000000000002 x1 : 0000000000000004 x0 : ffff0001add33108 [ 81.606213][ T6960] Call trace: [ 81.606735][ T6960] queued_spin_lock_slowpath+0x544/0xd04 (P) [ 81.607782][ T6960] do_raw_spin_lock+0x21c/0x2d0 [ 81.608628][ T6960] _raw_spin_lock_irq+0x60/0x70 [ 81.609449][ T6960] gadget_dev_open+0x50/0x1c4 [ 81.610247][ T6960] do_dentry_open+0x5c4/0xfc0 [ 81.611036][ T6960] vfs_open+0x44/0x2dc [ 81.611733][ T6960] path_openat+0x1084/0x18f4 [ 81.612554][ T6960] do_file_open+0x1c8/0x2e8 [ 81.613339][ T6960] do_sys_openat2+0x114/0x1e8 [ 81.614136][ T6960] do_sys_open+0xb0/0xe0 [ 81.614871][ T6960] __arm64_sys_openat+0xa8/0xc4 [ 81.615728][ T6960] invoke_syscall+0x98/0x244 [ 81.616535][ T6960] el0_svc_common+0xec/0x23c [ 81.617327][ T6960] do_el0_svc+0x4c/0x5c [ 81.618060][ T6960] el0_svc+0x64/0x260 [ 81.618787][ T6960] el0t_64_sync_handler+0x44/0x104 [ 81.619750][ T6960] el0t_64_sync+0x198/0x19c [ 81.620626][ T6960] Code: aa1c03e0 96884c85 910022c0 52800081 (f9000396) [ 81.621809][ T6960] ---[ end trace 0000000000000000 ]--- [ 81.892067][ T6960] Kernel panic - not syncing: Oops: Fatal exception [ 81.893254][ T6960] SMP: stopping secondary CPUs [ 81.894139][ T6960] Kernel Offset: disabled [ 81.894894][ T6960] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 81.896153][ T6960] Memory Limit: none [ 82.171052][ T6960] Rebooting in 86400 seconds..