last executing test programs: 2m59.699782528s ago: executing program 1 (id=2438): rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) mmap$auto(0x4, 0x400008, 0x4, 0x2000009b72, 0x2, 0x7ffd) mmap$auto(0x0, 0x80000000, 0x20df, 0x9b72, 0xffffffffffffffff, 0x400000008000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) capset$auto(0x0, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r1) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020026bd7000fbdbdf251300000006000e00fdff000016001f002f6465762f736e642f6d69646943324430000000050025000f000000050025000600"/70], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x94) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0x5) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x64801, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) futex_waitv$auto(0x0, 0x1, 0x0, 0x0, 0x623d) setrlimit$auto(0x8, 0x0) mlockall$auto(0x7) mmap$auto(0x400, 0x600, 0x1000, 0x12, 0xffffffffffffffff, 0x100000000) pselect6$auto(0x803ff, &(0x7f0000000000)={[0x9, 0xee6, 0xa, 0xc, 0x8, 0xd9d, 0xfff, 0xfffffffffffeffff, 0x6, 0x424, 0x200004, 0x9, 0x8a, 0x0, 0x200, 0x4]}, &(0x7f0000000080)={[0x839, 0x8, 0x5000000000000000, 0x5, 0xe18, 0x3, 0x0, 0x9, 0x7, 0x8000, 0x8, 0x200, 0xfffffffffffff001, 0x8000000000000000, 0xfffffffffffeffff]}, &(0x7f0000000100)={[0x7ff, 0x4, 0x2, 0xb, 0x4, 0x8, 0xcb0e, 0x8, 0x8, 0x200000000, 0x2, 0xffffffffffffffff, 0x4, 0x6, 0x50, 0x9]}, &(0x7f00000001c0)={0x9, 0x6}, &(0x7f0000000200)="8cc0677b1351b9857e5640644331dfe3ebb1c3810498ce88da823667fa188a28e32cc0f054fdbbc1d61b079aec917c070bcfbd54e5ce318590e21eaf470eb491441f0264c163939a506f25aec4e16c0ae4536f2e9c7c3b9b980603229b4577ccbd2531a7b87215a80ff6c64f4ba3d5c3ef4da93a42cad3c0cd3e6d489b33599508c37bc4d195ebaf8f61fd19bf713c8b8085ccea7832e31a0883f5f4d53aa3d30104777017d03b2934885c77985baf4ffbde3f5ebd3ffe2027a2f53fd0b7e5c802fe9f88d1ac17309010a50f5302005a3ace0f3103c9f4bd813c4a26ca8a527423a1892ea087a0da08013f34400d2791a82c5590997dec06ff") r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r4, 0x0, 0x9) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp1\x00', 0xc2200, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000340)="1bf9d889f25d576b9e36983eed41ddf30926a3a893b3b2655438c08cee5bfb29cfbf22a103b33fd2bf876d51a109d217d1825cbdf6f42e0bb3f0fcf9c03d") ioctl$auto_SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x2000006) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2ea81, 0x0) 2m58.838841595s ago: executing program 1 (id=2441): mmap$auto(0x5, 0x400008, 0x5f, 0x17, 0x2, 0x8002) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x29, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) getsockopt$auto_SO_OOBINLINE(r1, 0x1ff, 0xa, &(0x7f0000000080), &(0x7f0000000180)=0x9) r2 = io_uring_setup$auto(0x12, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x21}, 0x21) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) flock$auto(r1, 0x1) flock$auto(0xffffffffffffffff, 0x2) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffffff, &(0x7f0000000340)="d4b67569a8ef9c9b9c5a90034eee5132b7cabdf3a1a03214398748fa01b431cbe7514359423202aa870dc08942246c2b017fa152a8f40dd1838011e18057f38a05cc936e08eb47e9f4cfef5febc0ae421e58a98cc35dc9cca8c844df885c665220725e82c265bdfa1123b493dea55e4d8dcf33943d2ef1c75c892078b3bb17b2b9126f339e2f29d705829e772e6e55f24f20996c6594402bba15a8f81ed63eb072853d2dd91d034e38ef2448e0446a63bfd77a1369bcfadc32e637efbaa86975b50615154d6bd5e151991b7aac906003e3bd6a3066d03eeb0ccdb7562f5499ac7d79954cf9709599", 0xe8) io_uring_enter$auto(0xffffffffffffffff, 0x800, 0x820e, 0x8b, 0x0, 0x18) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) lsm_get_self_attr$auto(0x9, &(0x7f0000000000)={0x2, 0x1ff, 0xffffffffffff0000, 0xab, "72de5137b4fb1fd628cfa9ce8d67f7fb492e917ece0114def0cd7d34c7ebc779e179ac40c555dcd49cb43516242cfc09373a5079ea462fd1204e2037ec22a97c0ca53dd4f369589d29271bcaf3bb2c5387ea471d8c1b7ebf454233252ad3773aa56d8b72522d79e245ad630c07a1080b6faa5607f40112b16540d704eba27f0821c77b7c27d481ead7d666da2b9c3b0e99f0e2d490164e14d1f796b979316dd33befaa5894e9153b883aba"}, &(0x7f0000000100)=0x4, 0x22e) 2m56.200727059s ago: executing program 1 (id=2446): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) 2m55.173177354s ago: executing program 1 (id=2449): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xc, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x5]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x3, 0x0) 2m54.612189369s ago: executing program 1 (id=2451): unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b4a, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x40000011, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) fcntl$auto_F_SETLK(r1, 0x6, 0x6) r2 = socket(0x28, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000240), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="37050005", @ANYRES16=r3, @ANYBLOB="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"], 0x518}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) mprotect$auto(0x1ffffffff000, 0x100007, 0x0) utime$auto(0x0, &(0x7f0000000140)={0xfffffffffffffff7, 0x1ff}) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r4, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000001080)="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") sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) shmctl$auto_SHM_STAT(0x200, 0xd, &(0x7f00000004c0)={{0x8, 0x0, 0x0, 0x2, 0x2, 0x0, 0x800}, 0x9, 0x80, 0xffffffffffffff80, 0x8d, @raw=0xfffffffa, @inferred=0xffffffffffffffff, 0x3ff, 0x0, &(0x7f0000000200), 0x0}) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff, @inferred=r5}) write$auto(0xffffffffffffffff, 0x0, 0x2) setresuid$auto(0x0, 0x7, 0x8080) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x9, 0x81, 0xffffff7f, 0x6, 0x5, 0xffffffffffffffff, 0x80000001, "787d66d54a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) 2m53.193381391s ago: executing program 0 (id=2454): mmap$auto(0x5, 0x400008, 0x5f, 0x17, 0x2, 0x8002) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x29, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) getsockopt$auto_SO_OOBINLINE(r1, 0x1ff, 0xa, &(0x7f0000000080), &(0x7f0000000180)=0x9) r2 = io_uring_setup$auto(0x12, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x21}, 0x21) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) flock$auto(r1, 0x1) flock$auto(0xffffffffffffffff, 0x2) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffffff, &(0x7f0000000340)="d4b67569a8ef9c9b9c5a90034eee5132b7cabdf3a1a03214398748fa01b431cbe7514359423202aa870dc08942246c2b017fa152a8f40dd1838011e18057f38a05cc936e08eb47e9f4cfef5febc0ae421e58a98cc35dc9cca8c844df885c665220725e82c265bdfa1123b493dea55e4d8dcf33943d2ef1c75c892078b3bb17b2b9126f339e2f29d705829e772e6e55f24f20996c6594402bba15a8f81ed63eb072853d2dd91d034e38ef2448e0446a63bfd77a1369bcfadc32e637efbaa86975b50615154d6bd5e151991b7aac906003e3bd6a3066d03eeb0ccdb7562f5499ac7d79954cf9709599", 0xe8) io_uring_enter$auto(0xffffffffffffffff, 0x800, 0x820e, 0x8b, 0x0, 0x18) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) lsm_get_self_attr$auto(0x9, &(0x7f0000000000)={0x2, 0x1ff, 0xffffffffffff0000, 0xab, "72de5137b4fb1fd628cfa9ce8d67f7fb492e917ece0114def0cd7d34c7ebc779e179ac40c555dcd49cb43516242cfc09373a5079ea462fd1204e2037ec22a97c0ca53dd4f369589d29271bcaf3bb2c5387ea471d8c1b7ebf454233252ad3773aa56d8b72522d79e245ad630c07a1080b6faa5607f40112b16540d704eba27f0821c77b7c27d481ead7d666da2b9c3b0e99f0e2d490164e14d1f796b979316dd33befaa5894e9153b883aba"}, &(0x7f0000000100)=0x4, 0x22e) 2m51.532412252s ago: executing program 1 (id=2456): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x446003, 0x0) r1 = fanotify_init$auto(0x8, 0x2000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x1) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000010c0), r1) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000001200)={&(0x7f0000001040), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, r1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf9}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xe}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$auto_PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000)={0x7, 0xffff1dc8}) write$auto(r0, 0x0, 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) setns(0xc9, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0x37, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="7000000095b8e2845991a1dcab1a2f8b017833a89daa6f556a36ab587c9d2781745dbbc172c03b20eb83b5094d02203ed2e358fc41ba85a733ac1969a029ca8ed69de8f6ec1a37322dcdfd038dc16c143a000000000000000000000000000000005883941ee3b6147499da8d236fccb8d2066f2fa013d553270f35e42f3e8d462232b9aef3e60100a5019bea541963dd872fda1e0694d3d0cbdcdc846dadb293a7f3750770bb0ed5ca750921b3bff7620ed7071a5d1f853932f3c83585e5d7f9aeb8537db26adc8a9031efea7ba4a98deaa2b02301ea2e00d1d4", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf250300000014002000fe8000000000000000000000000000aa1400080064766d727030000000000000000000000500070080000000050004006a000000050012000c0000001400200000000000000000000000000000000001050014001d000000"], 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x1, 0x8e051, r5, 0x4000) select$auto(0x402010, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000400)=""/89, 0x59) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000000c0)='5', 0x1) 2m51.136582972s ago: executing program 0 (id=2457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002980), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f00000029c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x7}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x1}]}, 0x24}}, 0x8010) 2m50.970045394s ago: executing program 0 (id=2460): r0 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x81900, 0x0) pread64$auto(r0, 0x0, 0x7, 0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = socket(0x2, 0x801, 0x100) setsockopt$auto_SO_TIMESTAMPING_OLD(r2, 0x6, 0x18, &(0x7f0000000140)='macsec\x00', 0x3ff) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5, r2) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) keyctl$auto_KEYCTL_PKEY_VERIFY(0x1c, 0x1, 0x5d, 0x42d, 0x5) shmctl$auto_SHM_LOCK(0x7f, 0xb, &(0x7f00000006c0)={{0x1, 0x0, 0x0, 0x5, 0x6, 0x2}, 0x2, 0x0, 0xb32, 0x7, @raw=0xe68, @raw=0x10001, 0xa0, 0x0, &(0x7f0000000540)="9e9dab4c57b4a6b8f2c5cc1cbbb7e63d665e0d9c85e7af0db002af39574e50cfccb9c357996d27d52e1c0b67d69eccb420188cfd0527418511f323ea6d6fa04c892802d805d3c636d03dbff26c3a64ba6b87e320be30ff5ebc6ef15100ec01f5e623ee2fc27b5f58f8f30735ec60d2aef8ab6ebfc7b5c8a3adafccb7a98b9969d13c5481aafb8272459836994d2fbc0fd76330bbef20ae75408be209dbb43df0fe224ae3f1b2be5a7787da4f9f6d817eda4841046590481c6232f241981ef2e79496865d", &(0x7f0000000680)}) setns(0xc9, 0x0) socket(0x2, 0x2, 0x1) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f00000004c0)={{0x8, r3, 0x0, 0x2, 0x2, 0x0, 0x800}, 0x9, 0x80, 0xffffffffffffff81, 0x8d, @raw=0xfffffffa, @inferred=0x0, 0x3ff, 0x0, &(0x7f0000000240), 0x0}) rt_sigprocmask$auto(0x5, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) getpid() r5 = gettid() r6 = getpid() rt_tgsigqueueinfo$auto(r6, r5, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x9, 0xcce3, @_sigfault={0x0, @_trapno=0x3}}}) rt_sigprocmask$auto_SIG_SETMASK(0x2, &(0x7f00000000c0)={0x8000000000000000}, 0x0, 0x8) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0x1ff, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff, @inferred=r4}) setresgid$auto(0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) 2m47.821497687s ago: executing program 0 (id=2462): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x3, 0xa3}, 0x80) r3 = socket(0x23, 0x5, 0x0) bind$auto(r3, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) setsockopt$auto_SO_RESERVE_MEM(r0, 0x8b, 0x49, &(0x7f0000000240)='\x00', 0x16c) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r4, 0x0, 0x4000085) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0x4, 0x200, 0x39, 0x8, 0xf, 0x1, 0x0, 0x2}, 0x6f4) setfsuid$auto(0xee00) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf250200000012a902f0b8e207eeb86d6964694332543005000000000400000800000800040005000000080004000700000008000c0001000080080002000c00000008000800ea00000008000c000406f013"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044044) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket(0x28, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x1e, 0x0, 0x56b) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) getdents$auto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x6, 0x7fff, "ca321acffcd42ba8b16437ba2b7b6b6b1cd8db8816556a3d76d74e35484e7311de9a08467cf85aa06aaf2a536fd5bced28ca4d23eed13714d7924aad638f454056dfc5ff4a3f6e32871edc2d4058d40fe85ff3169531cd97f97897fba65f89dd476a28d4ffeeac328554a038f21e48a9c423b3bef6f07c8edf21540bb1c3c2b420d7497116952396a6377d352b3f1fe2823e07c65af17dbbfc9ec372b0c13752b8784cfe172a7d83d4b1061ee944d23056cf3405dddf5a564da05c9e6c41b1eac9510da5a246cb87f748e63bf051b708e7537b81e28fdbbec996f5f6ca7764b7"}, 0x7f) r5 = socket(0x2, 0x801, 0x106) setsockopt$auto(r5, 0x11, 0x2, 0x0, 0x0) 2m44.715312492s ago: executing program 0 (id=2471): r0 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x81900, 0x0) pread64$auto(r0, 0x0, 0x7, 0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = socket(0x2, 0x801, 0x100) setsockopt$auto_SO_TIMESTAMPING_OLD(r2, 0x6, 0x18, &(0x7f0000000140)='macsec\x00', 0x3ff) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5, r2) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) keyctl$auto_KEYCTL_PKEY_VERIFY(0x1c, 0x1, 0x5d, 0x42d, 0x5) shmctl$auto_SHM_LOCK(0x7f, 0xb, &(0x7f00000006c0)={{0x1, 0x0, 0x0, 0x5, 0x6, 0x2}, 0x2, 0x0, 0xb32, 0x7, @raw=0xe68, @raw=0x10001, 0xa0, 0x0, &(0x7f0000000540)="9e9dab4c57b4a6b8f2c5cc1cbbb7e63d665e0d9c85e7af0db002af39574e50cfccb9c357996d27d52e1c0b67d69eccb420188cfd0527418511f323ea6d6fa04c892802d805d3c636d03dbff26c3a64ba6b87e320be30ff5ebc6ef15100ec01f5e623ee2fc27b5f58f8f30735ec60d2aef8ab6ebfc7b5c8a3adafccb7a98b9969d13c5481aafb8272459836994d2fbc0fd76330bbef20ae75408be209dbb43df0fe224ae3f1b2be5a7787da4f9f6d817eda4841046590481c6232f241981ef2e79496865d", &(0x7f0000000680)}) setns(0xc9, 0x0) socket(0x2, 0x2, 0x1) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f00000004c0)={{0x8, r3, 0x0, 0x2, 0x2, 0x0, 0x800}, 0x9, 0x80, 0xffffffffffffff81, 0x8d, @raw=0xfffffffa, @inferred=0x0, 0x3ff, 0x0, &(0x7f0000000240), 0x0}) rt_sigprocmask$auto(0x5, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) getpid() r5 = gettid() r6 = getpid() rt_tgsigqueueinfo$auto(r6, r5, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x9, 0xcce3, @_sigfault={0x0, @_trapno=0x3}}}) rt_sigprocmask$auto_SIG_SETMASK(0x2, &(0x7f00000000c0)={0x8000000000000000}, 0x0, 0x8) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0x1ff, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff, @inferred=r4}) setresgid$auto(0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) 2m42.622056094s ago: executing program 0 (id=2476): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x9, 0x9, 0x6, 0x7fff}, 0x3b) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) mmap$auto(0x0, 0x20007, 0x1004000000000df, 0x16, 0x401, 0x8000) (async, rerun: 32) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x8bff, 0x64c6, 0x7fff, 0x400004, 0x200000000040000d}) (async, rerun: 32) ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r1, 0x0, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x1f\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) mmap$auto(0xffffffffffffffff, 0x6, 0x7, 0x10be, 0xffffffffffffffff, 0x7ffe) (async) setrlimit$auto(0xa, &(0x7f0000000080)={0x7, 0x5}) (async) socket(0x18, 0x4, 0x0) (async) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) (async) write$auto(r1, 0x0, 0x9) (async) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000200000087c788deb1e689ded72700ac7e75046f5e547f0939e6c37acca832a2dacd007c9e2177923a589076e8dedc15db27d5af71356faabe0cae869409e01eaaf51b3ff9f05159438811b43e8511e85cffde5ac434b65098ab7fd5eca656e770f6a0c84ccb81b98d07eb6826c9de760e875fe12242f37e662835bed249fe0bd132cec7e8cf8e543b8faeebf75fb6961034812a6cefa843b4eafbf2beca656a6ca55464d7de1d56398823d37f8157dcab7d3c42d8bc1af84b34076ffeac979949ba"]) (async) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r3, 0x0, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async, rerun: 64) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async, rerun: 32) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x71) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) 2m27.41835819s ago: executing program 32 (id=2476): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x9, 0x9, 0x6, 0x7fff}, 0x3b) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) mmap$auto(0x0, 0x20007, 0x1004000000000df, 0x16, 0x401, 0x8000) (async, rerun: 32) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x8bff, 0x64c6, 0x7fff, 0x400004, 0x200000000040000d}) (async, rerun: 32) ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r1, 0x0, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x1f\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) mmap$auto(0xffffffffffffffff, 0x6, 0x7, 0x10be, 0xffffffffffffffff, 0x7ffe) (async) setrlimit$auto(0xa, &(0x7f0000000080)={0x7, 0x5}) (async) socket(0x18, 0x4, 0x0) (async) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) (async) write$auto(r1, 0x0, 0x9) (async) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000200000087c788deb1e689ded72700ac7e75046f5e547f0939e6c37acca832a2dacd007c9e2177923a589076e8dedc15db27d5af71356faabe0cae869409e01eaaf51b3ff9f05159438811b43e8511e85cffde5ac434b65098ab7fd5eca656e770f6a0c84ccb81b98d07eb6826c9de760e875fe12242f37e662835bed249fe0bd132cec7e8cf8e543b8faeebf75fb6961034812a6cefa843b4eafbf2beca656a6ca55464d7de1d56398823d37f8157dcab7d3c42d8bc1af84b34076ffeac979949ba"]) (async) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r3, 0x0, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async, rerun: 64) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async, rerun: 32) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) (async, rerun: 32) close_range$auto(0x2, 0xa, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x71) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) 1m37.472912761s ago: executing program 2 (id=2606): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1lP\x88K\xa9\x12a\x13R3\x00VI\xa7\x00\x00\x00\x00\x00\x00\x00\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2', 0x0) bind$auto(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x4) writev$auto(r0, &(0x7f0000001240)={&(0x7f0000000380)="6f1971fe24eed219fcbf8212dcb74dc105cd64bae3dc1b3b809bb8f38d1205c8c71094e0f875891894ab7c727463735e4cc3b81bd56f8c4f72d462d4de0c8ed23f9241f894aa62d65277c65ed6a053303bc9a56563feff56a7bcc2de44444c94b506e41ba2fd339436b4d27375362efd58f4462f57b2ec803c2f657c6f4bcbd3111152719c7c5ebf26923e92bb6b0788acec030e46e45f8565994125be66f14f2ad5f456", 0x9}, 0x7) 1m37.425495347s ago: executing program 2 (id=2607): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x446003, 0x0) r1 = fanotify_init$auto(0x8, 0x2000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x1) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000010c0), r1) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000001200)={&(0x7f0000001040), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, r1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf9}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xe}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$auto_PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000)={0x7, 0xffff1dc8}) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) setns(0xc9, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="7000000095b8e2845991a1dcab1a2f8b017833a89daa6f556a36ab587c9d2781745dbbc172c03b20eb83b5094d02203ed2e358fc41ba85a733ac1969a029ca8ed69de8f6ec1a37322dcdfd038dc16c143a000000000000000000000000000000005883941ee3b6147499da8d236fccb8d2066f2fa013d553270f35e42f3e8d462232b9aef3e60100a5019bea541963dd872fda1e0694d3d0cbdcdc846dadb293a7f3750770bb0ed5ca750921b3bff7620ed7071a5d1f853932f3c83585e5d7f9aeb8537db26adc8a9031efea7ba4a98deaa2b02301ea2e00d1d4", @ANYRES16=r3, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x1, 0x8e051, r5, 0x4000) select$auto(0x402010, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m35.926540509s ago: executing program 2 (id=2610): mmap$auto(0x7c4, 0x4009, 0xb, 0x11, 0x401, 0x10) move_pages$auto(0x0, 0xf56, 0x0, 0x0, 0x0, 0x8000000000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) unshare$auto(0x40000080) r2 = prctl$auto(0xe, 0xe, 0x0, 0x9c, 0x80000000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x280000, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x0, 0x3f, 0x7fff, 0x20000000005, 0x80000000007, 0x1, 0x6, 0xff, 0x0, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x4, 0x9}) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) r4 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x40, 0x0) close_range$auto(0xffffffffffffffff, r4, 0xa) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\xf3&@\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95\xa28\x83\xcf\xc5D\xcc\'r\x81\xb7K5\xd9\xe3\xcc^\x8f8+\x10\x19~\xe2Z\xd9\xf4!\xd9k\xa2\xa3\xb0\x90\xa3s\xe5\xe1\b\x00\x00\x00\x00\x00\x00\x00\xc6F\xfc5FJHf^.j\x83\xc0\xa3\x11\x131\xf1\xe1-N\xc9\x85\xecx\x9d\xb0r{\xa4\al\xe0\x8cKKoU\xb1nh5{\xe2\xca+\xc7;\xb5\x1f\xb0c\x1ed.\x84#\v6\x15\xea\x1f\xb0\n\x9e\':\xf8g\xf2t\x1d\xb4EBi\x953\xb1[\xa8\xc0\xa3\xc2\xb2A\x1a\xf8?\xb5\xe2A\xaa\x95y.JF\xa7\xce\xb4\xca\xf9 \xd8\x7fBwE\xa9\x00r\x85\x01M\x00\xff(\xb81\x9fD\x88X\xa5\xd1D\xec=\x11\\q\xae\x11\x17\x97Gz\xdc.\xa8\x98\xd6+\xba]I2`R?\x1es\x878\xb4\x04~);\xa8\xa4\xfa\x04\xcd@sN\xb7\xc2\x9d?\xf6\x9b0H\x90\xb8kV\x06\xe3\xf2{\xa0\x1f%\x01]\x9e\xc8\xda<\t\x12\xe9\xa0\xf4\xc8\x9a\xf1v\xe9\xf2', 0x100000a3d9) r1 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x8000, &(0x7f00000001c0)="8e554cc8fadfc0cbe3e98e168a8171c4d24726203769cf4fa21bb42567765acefe445ef606ba49cea84d3ebe643018afe0a034843c7de3289e6a80492d41834237b649a6d677bd37c85e70aace1ab416992b331776f11581a660369fd826f95b6094c41f57676054b67f6dc4e9be09ae5a1f627130f30a347c9b8ee771869957605f232e9f116bcdfb33e6fb1a1ebe188f3f88fb1a64a72d97f5c149e378f8af3dbf9429f0a01a8d086e599f014207748fb202465419d5cf92104100aaeb2c0b1d88ae214a1dde31fb78446d639ebdb5ee1c6bde936a0bb14f717988d5dbeb5f7c1fc71e6bfa11644a95f52b37") syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) unshare$auto(0x40000080) bind$auto(r0, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000a80), 0x101, 0x0) writev$auto(r2, 0x0, 0x7) bind$auto(0xffffffffffffffff, 0x0, 0xe) bind$auto(0xffffffffffffffff, 0x0, 0x65) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3, 0x0) keyctl$auto(0x4, 0x0, 0x0, 0x0, 0x2b0) r4 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r4, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "3d64dc8bff7fff7f610000000024"}, 0x55) mmap$auto(0x0, 0x40009, 0xdf, 0x17, 0x7, 0x28004) io_uring_setup$auto(0x59, 0x0) write$auto(0x3, 0x0, 0xfdef) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x7fffffffffffffff, 0x0, 0x0, 0x0) setns(0xc9, 0x40000000) r5 = socket(0x8, 0x80000, 0x80000003) setsockopt$auto_SO_BROADCAST(r5, 0x71, 0x42020054, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m33.44651063s ago: executing program 2 (id=2614): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1lP\x88K\xa9\x12a\x13R3\x00VI\xa7\x00\x00\x00\x00\x00\x00\x00\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2', 0x0) bind$auto(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x4) writev$auto(r0, &(0x7f0000001240)={&(0x7f0000000380)="6f1971fe24eed219fcbf8212dcb74dc105cd64bae3dc1b3b809bb8f38d1205c8c71094e0f875891894ab7c727463735e4cc3b81bd56f8c4f72d462d4de0c8ed23f9241f894aa62d65277c65ed6a053303bc9a56563feff56a7bcc2de44444c94b506e41ba2fd339436b4d27375362efd58f4462f57b2ec803c2f657c6f4bcbd3111152719c7c5ebf26923e92bb6b0788acec030e46e45f8565994125be66f14f2ad5f456", 0x9}, 0x7) 1m33.342083317s ago: executing program 2 (id=2615): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/cache/index0/type\x00', 0x183142, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000100), 0xffffffffffffffff) socket(0xa, 0x2, 0x73) socket(0x23, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x8) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x18b202, 0x0) sendfile$auto(r0, r0, 0x0, 0x400000000003) lseek$auto(0x3, 0xff, 0x4) sendto$auto(0x4, 0x0, 0x8000, 0x0, &(0x7f0000000100)=@in={0x23, 0x0, @multicast2}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0) clock_adjtime$auto(0x17, 0x0) socket(0x2, 0x2, 0x0) mprotect$auto(0x0, 0x806121, 0x6) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xb, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x82, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0xc, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x0, &(0x7f0000000180)='no_\xe8\xdb\b\x9c\xe7J\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) r2 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000340)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1ccbae5fe40d577ae32c5f31368fdf483f0280b00d6c7b2c28538ecd2b076e6ce388fe3e997a75c9ccf9e65cac293307f6681f9407dca4e18d6d585671861a97e2de71b3d925886daceffe68b57a1ee4fc5cfb14a9b1e72f3e1f9d64e6ed2ce372393a4a0b8b5349965bba09de0b563aebaa89a563b3d7c62eb74f8dde5e26cbd8c0cd8d7d4d97874ee16c3a5ce1997876d7db329b584d83812bf72cd7f5c20628e1d5b66b45a0eeccbebc9e9b9972b6705253451f8c963e791063fa63ae4649d3ea2f6c4c7df9e6f5b2398d97dd47af1dd61d3ea0ce930e075d29f434ce61bb018df3fa2bf268e48c440d4c6c0798ee65558bbd033842c2592faf9ba1afd04", 0x122) unshare$auto(0x40000080) 1m17.685610165s ago: executing program 33 (id=2615): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/cache/index0/type\x00', 0x183142, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000100), 0xffffffffffffffff) socket(0xa, 0x2, 0x73) socket(0x23, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x8) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x18b202, 0x0) sendfile$auto(r0, r0, 0x0, 0x400000000003) lseek$auto(0x3, 0xff, 0x4) sendto$auto(0x4, 0x0, 0x8000, 0x0, &(0x7f0000000100)=@in={0x23, 0x0, @multicast2}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0) clock_adjtime$auto(0x17, 0x0) socket(0x2, 0x2, 0x0) mprotect$auto(0x0, 0x806121, 0x6) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xb, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x82, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0xc, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x0, &(0x7f0000000180)='no_\xe8\xdb\b\x9c\xe7J\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) r2 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000340)="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", 0x122) unshare$auto(0x40000080) 2.600700074s ago: executing program 3 (id=2765): mmap$auto(0x4, 0xa00006, 0xfffffffffffffffe, 0x100000000040eb2, 0x602, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='afs\x00h\xb8d\xbd\\\xc5\x1b\x11\xde\xac\xf3\xc7J~\x7f=\\\xef\xd4w(\xb0.:\xd1\xf2\xa5\x89c\xa11\xe6v\xd2\xfb\xd4w\xf6\x8b\xe8H\xa6\x87\xd7J\xff\x92\x86F.\x94\"}\xba\xdd\x1d\xf2\x83\xf4 \x96\x01\x00\x00\x00\xa3z\x83\x93\x8a\xe1?5\t\xe0QIw\xf9\xb2\x18\x1b\xfe\xa8\xf1\xe8JV\xc5v\x88u\xfe)w\xcd\x87\xa7O\x91.U(97P\x8a[\xfeZ0\xb8@\x99\x16\xbb\xc8\x12\xa6\xa96\xd6\xc6\xb8\x8d\xbe\xe5\xd0Sp\xf7|\x858\xe6\x92[\x1b\x04\xf7\v8v\xb2\x9c\xb9\x00\x1a\x94\x84n\xfc\xc0\x1eQ\xde\xad]\f\x10<\xac\xf9\xb2\xd8@\xa1\x98\xc7\xb6\xff\x8aX0\x98\x03b\x8b\vL-\xaa\xc4n\xa6m.2\r\xcd\xfeeu\x11\xa6\xb8vw{\xf8_\x88\'\xd9p\xe0-\x80X\x81\xab\xbc\xb1\xcc\x96\xba\xf2\xd6\x90\xa6$\x11TmC\xcaU\x8a\xee\xf6\xef\vW\xe5\x8c\xa46\x88\a[\x9dM;2p\xbc\xde\xad/\xd7\xb7\xdc\xdes\xf0\x13\xccVc3\xa3\x00\xebV\xc4b', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80c0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) shutdown$auto(0x200000003, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto_SO_RCVTIMEO_NEW(r2, 0x2, 0x42, &(0x7f0000000140)='+/[){$\'&\x00', 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r4 = open(0x0, 0x0, 0xb5d1af1605322df2) sendfile$auto(0x3, r3, 0x0, 0x400000000006) close_range$auto(0x2, 0x8, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f0000000480)=""/4096, 0x1000) ioctl$auto_SOUND_MIXER_READ_CAPS2(r1, 0x80044dfc, &(0x7f0000000080)) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/uid_map\x00', 0x80000, 0x0) read$auto_proc_uid_map_operations_base(r5, &(0x7f0000000200)=""/189, 0xbd) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr9\x00', 0x40001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x80001, 0x0) 2.230740535s ago: executing program 3 (id=2766): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x446003, 0x0) r1 = fanotify_init$auto(0x8, 0x2000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x1) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000010c0), r1) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000001200)={&(0x7f0000001040), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, r1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf9}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xe}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$auto_PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000)={0x7, 0xffff1dc8}) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) setns(0xc9, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="7000000095b8e2845991a1dcab1a2f8b017833a89daa6f556a36ab587c9d2781745dbbc172c03b20eb83b5094d02203ed2e358fc41ba85a733ac1969a029ca8ed69de8f6ec1a37322dcdfd038dc16c143a000000000000000000000000000000005883941ee3b6147499da8d236fccb8d2066f2fa013d553270f35e42f3e8d462232b9aef3e60100a5019bea541963dd872fda1e0694d3d0cbdcdc846dadb293a7f3750770bb0ed5ca750921b3bff7620ed7071a5d1f853932f3c83585e5d7f9aeb8537db26adc8a9031efea7ba4a98deaa2b02301ea2e00d1d4", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf250300000014002000fe8000000000000000000000000000aa1400080064766d727030000000000000000000000500070080000000050004006a000000050012000c0000001400200000000000000000000000000000000001050014001d0000"], 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x1, 0x8e051, r5, 0x4000) select$auto(0x402010, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1.324648798s ago: executing program 3 (id=2767): unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b4a, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x40000011, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) fcntl$auto_F_SETLK(r1, 0x6, 0x6) r2 = socket(0x28, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000240), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="37050005", @ANYRES16=r3, @ANYBLOB="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"], 0x518}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) mprotect$auto(0x1ffffffff000, 0x100007, 0x0) utime$auto(0x0, &(0x7f0000000140)={0xfffffffffffffff7, 0x1ff}) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r4, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000001080)="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") sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) shmctl$auto_SHM_STAT(0x200, 0xd, &(0x7f00000004c0)={{0x8, 0x0, 0x0, 0x2, 0x2, 0x0, 0x800}, 0x9, 0x80, 0xffffffffffffff80, 0x8d, @raw=0xfffffffa, @inferred=0xffffffffffffffff, 0x3ff, 0x0, &(0x7f0000000200), 0x0}) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff, @inferred=r5}) write$auto(0xffffffffffffffff, 0x0, 0x2) bpf$auto(0x5, 0x0, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) 416.877621ms ago: executing program 3 (id=2768): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="12734dd8c65803c8d6be2f746600000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf25010000000500070093000000050008000000000008000400", @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="05000700790000000c00010001000000000000000c0003000300000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4c080}, 0x90) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) mmap$auto(0x0, 0x1, 0x7, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x52, 0x0) r1 = socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x20, 0x1}, 0x4) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000180)=""/226, 0xe2) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/usb6-port1/power/pm_qos_no_power_off\x00', 0x41102, 0x0) sendfile$auto(r6, r6, 0x0, 0x11) mmap$auto(0x0, 0x2, 0x1ff, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xffffeffe, 0x2) 163.318175ms ago: executing program 3 (id=2769): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xc, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x5]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x3, 0x0) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sda\x00', 0x84100, 0x0) ioctl$auto_IOC_PR_RELEASE(r0, 0x801070cf, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x6f29, 0x0) sendmmsg$auto(r0, &(0x7f0000000500)={{&(0x7f0000000000)="ff021c383d3b8787ecbec33d09abbbc7e7ca6e0e0f6fc8129b859bcf28c8bb7eaeec4967b92792746174499fd3449ad863129c131e19882abf2e898cb40774f09782082684ce868326ce2ff16a0e4acf32c8f07a860000759434b49786c0eb884cefa800c300cf51c9652420425aaba3ade19de055bc", 0x44a672c2, &(0x7f00000003c0)={&(0x7f0000000380)="9e9af70641a7b0d215a10921889509ea966d107f2e9cd3e4afe56b14e34a4f0f780708cf65dd42b36d4753d070cba3e4146c1bdb91bbd0a1", 0xffffffffffffffff}, 0x6, &(0x7f0000000400)="e89ab9695c2a2bfe392674a50ce78428c4ca25ff1bac81de69a3c622dfde94d428b3e7d42d9dcb86761d518a37432778dd37442fb2bdd0fe0aa541dee0b357c9dd2b5bb490f585b803f068272efb59f46077a9837e401d99211f183f38a29e7d07830bbc6d4ac972e20e20fe04ad2b6b0008fa97e21896b1a07f6abc58d6345e8a5d84003dc71f2d52cdd05d11fde3b00d9779c35f5b90e57e28a7077506440422c5679f2d6e1e386ec0691f63216d0cec47d4fb3f81fa64061f1270dc7f6a84abedeaa5f91ef304afcb495a93f2464d12e15d71a1343e7498a284b5fb7a54f08feca6350f4c90403fce6aec5a33", 0x3}, 0xd}, 0x85, 0x7) 0s ago: executing program 3 (id=2770): mmap$auto(0x5, 0x400008, 0x5f, 0x17, 0x2, 0x8002) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x29, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0xd, 0x810004, 0xfffffffffffffffc, 0x8000000008011, 0x3, 0x81000000) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) getsockopt$auto_SO_OOBINLINE(r1, 0x1ff, 0xa, &(0x7f0000000080), &(0x7f0000000180)=0x9) r2 = io_uring_setup$auto(0x12, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x21}, 0x21) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) flock$auto(r1, 0x1) flock$auto(0xffffffffffffffff, 0x2) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffffff, &(0x7f0000000340)="d4b67569a8ef9c9b9c5a90034eee5132b7cabdf3a1a03214398748fa01b431cbe7514359423202aa870dc08942246c2b017fa152a8f40dd1838011e18057f38a05cc936e08eb47e9f4cfef5febc0ae421e58a98cc35dc9cca8c844df885c665220725e82c265bdfa1123b493dea55e4d8dcf33943d2ef1c75c892078b3bb17b2b9126f339e2f29d705829e772e6e55f24f20996c6594402bba15a8f81ed63eb072853d2dd91d034e38ef2448e0446a63bfd77a1369bcfadc32e637efbaa86975b50615154d6bd5e151991b7aac906003e3bd6a3066d03eeb0ccdb7562f5499ac7d79954cf9709599", 0xe8) io_uring_enter$auto(0xffffffffffffffff, 0x800, 0x820e, 0x8b, 0x0, 0x18) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0x4) lsm_get_self_attr$auto(0x9, &(0x7f0000000000)={0x2, 0x1ff, 0xffffffffffff0000, 0xab, "72de5137b4fb1fd628cfa9ce8d67f7fb492e917ece0114def0cd7d34c7ebc779e179ac40c555dcd49cb43516242cfc09373a5079ea462fd1204e2037ec22a97c0ca53dd4f369589d29271bcaf3bb2c5387ea471d8c1b7ebf454233252ad3773aa56d8b72522d79e245ad630c07a1080b6faa5607f40112b16540d704eba27f0821c77b7c27d481ead7d666da2b9c3b0e99f0e2d490164e14d1f796b979316dd33befaa5894e9153b883aba"}, &(0x7f0000000100)=0x4, 0x22e) kernel console output (not intermixed with test programs): sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 767.637223][T14799] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1204'. [ 767.954027][T14799] sd 0:0:1:0: PR command failed: 1026 [ 767.981297][T14799] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 768.016206][T14799] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 771.548412][T14858] program syz.0.1214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.558191][T14858] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 779.333336][T14945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1226'. [ 780.574338][T14956] program syz.2.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.588449][T14956] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 793.953162][T15096] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 794.203284][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 794.224912][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 794.247195][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 794.274936][ T24] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 794.292599][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 800.349643][T15176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1258'. [ 800.773384][T13159] Bluetooth: hci2: command 0x0406 tx timeout [ 804.139536][T15206] sd 0:0:1:0: PR command failed: 1026 [ 804.146441][T15206] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 804.172528][T15206] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 805.072367][T15238] program syz.0.1269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 805.120365][T15238] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 808.437095][T15250] sd 0:0:1:0: PR command failed: 1026 [ 808.466230][T15250] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 808.476443][T15250] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 808.933987][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.941040][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.097718][T15264] sd 0:0:1:0: PR command failed: 1026 [ 809.128023][T15264] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 809.143053][T15264] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 809.687460][T15268] sd 0:0:1:0: PR command failed: 1026 [ 809.696715][T15268] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 809.714111][T15268] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 810.256856][T15291] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 817.431023][T15375] FAULT_INJECTION: forcing a failure. [ 817.431023][T15375] name failslab, interval 1, probability 0, space 0, times 0 [ 817.453404][T15375] CPU: 1 UID: 0 PID: 15375 Comm: syz.2.1292 Not tainted syzkaller #0 PREEMPT(full) [ 817.453442][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.453458][T15375] Call Trace: [ 817.453468][T15375] [ 817.453478][T15375] dump_stack_lvl+0x100/0x190 [ 817.453523][T15375] should_fail_ex.cold+0x5/0xa [ 817.453559][T15375] should_failslab+0xc2/0x120 [ 817.453604][T15375] __kmalloc_cache_noprof+0x91/0x6c0 [ 817.453637][T15375] ? mem_rw+0xbd/0x670 [ 817.453761][T15375] mem_rw+0xbd/0x670 [ 817.453803][T15375] ? __pfx_mem_write+0x10/0x10 [ 817.453836][T15375] vfs_writev+0x5ed/0xdd0 [ 817.453893][T15375] ? __pfx_vfs_writev+0x10/0x10 [ 817.453965][T15375] ? __fget_files+0x21f/0x3d0 [ 817.454005][T15375] ? do_pwritev+0x1ac/0x270 [ 817.454046][T15375] do_pwritev+0x1ac/0x270 [ 817.454093][T15375] ? __pfx_do_pwritev+0x10/0x10 [ 817.454149][T15375] do_syscall_64+0x115/0x840 [ 817.454205][T15375] ? clear_bhb_loop+0x40/0x90 [ 817.454244][T15375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.454275][T15375] RIP: 0033:0x7f9beef9e0d9 [ 817.454301][T15375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.454329][T15375] RSP: 002b:00007f9bed172028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 817.454357][T15375] RAX: ffffffffffffffda RBX: 00007f9bef226360 RCX: 00007f9beef9e0d9 [ 817.454376][T15375] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 000000000000000b [ 817.454394][T15375] RBP: 00007f9bed172090 R08: 000000000000d3b8 R09: 0000000000000000 [ 817.454411][T15375] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 817.454428][T15375] R13: 00007f9bef2263f8 R14: 00007f9bef226360 R15: 00007fffad718c08 [ 817.454468][T15375] [ 821.848313][T15412] sd 0:0:1:0: PR command failed: 1026 [ 821.859214][T15412] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 821.879642][T15412] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 824.338384][T15443] sd 0:0:1:0: PR command failed: 1026 [ 824.358876][T15443] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 824.402127][T15443] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 828.202137][T15485] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.220724][ T5778] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.248334][ T5778] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.285618][ T5778] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.299848][ T5778] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 828.318577][ T5778] rtc rtc0: __rtc_set_alarm: err=-22 [ 828.866126][T15500] sd 0:0:1:0: PR command failed: 1026 [ 828.880702][T15500] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 828.888621][T15500] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 832.282013][T15546] program syz.1.1320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 832.322670][T15546] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 834.677952][T15567] sd 0:0:1:0: PR command failed: 1026 [ 834.694627][T15567] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 834.716874][T15567] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 839.481588][T15649] FAULT_INJECTION: forcing a failure. [ 839.481588][T15649] name failslab, interval 1, probability 0, space 0, times 0 [ 839.602219][T15649] CPU: 1 UID: 0 PID: 15649 Comm: syz.0.1336 Not tainted syzkaller #0 PREEMPT(full) [ 839.602250][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.602261][T15649] Call Trace: [ 839.602267][T15649] [ 839.602274][T15649] dump_stack_lvl+0x100/0x190 [ 839.602304][T15649] should_fail_ex.cold+0x5/0xa [ 839.602327][T15649] should_failslab+0xc2/0x120 [ 839.602356][T15649] kmem_cache_alloc_noprof+0x91/0x6a0 [ 839.602388][T15649] ? do_getname+0x35/0x390 [ 839.602418][T15649] do_getname+0x35/0x390 [ 839.602449][T15649] do_sys_openat2+0xc7/0x1e0 [ 839.602485][T15649] ? __pfx_do_sys_openat2+0x10/0x10 [ 839.602513][T15649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 839.602545][T15649] ? __fget_files+0x21f/0x3d0 [ 839.602573][T15649] __x64_sys_openat+0x12d/0x210 [ 839.602599][T15649] ? __pfx___x64_sys_openat+0x10/0x10 [ 839.602623][T15649] ? ksys_write+0x1ac/0x250 [ 839.602647][T15649] do_syscall_64+0x115/0x840 [ 839.602671][T15649] ? clear_bhb_loop+0x40/0x90 [ 839.602695][T15649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.602714][T15649] RIP: 0033:0x7f5045b9e0d9 [ 839.602730][T15649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.602748][T15649] RSP: 002b:00007f5046a18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 839.602766][T15649] RAX: ffffffffffffffda RBX: 00007f5045e26360 RCX: 00007f5045b9e0d9 [ 839.602778][T15649] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 839.602789][T15649] RBP: 00007f5046a18090 R08: 0000000000000000 R09: 0000000000000000 [ 839.602800][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.602811][T15649] R13: 00007f5045e263f8 R14: 00007f5045e26360 R15: 00007fff62501938 [ 839.602833][T15649] [ 841.166230][T15664] program syz.2.1339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.176169][T15664] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 842.442101][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1341'. [ 844.279194][T15688] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 845.203123][ T5778] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 845.221627][ T5778] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 845.230011][ T5778] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 845.240411][ T5778] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 845.257973][ T5778] rtc rtc0: __rtc_set_alarm: err=-22 [ 848.346436][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'. [ 853.253262][T15810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1362'. [ 853.585550][T15826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1363'. [ 859.133326][T15894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1374'. [ 863.615672][T15935] sd 0:0:1:0: PR command failed: 1026 [ 863.627492][T15935] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 863.643048][T15935] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 863.955975][T13157] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.250166][T13159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 864.267256][T13159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 864.279099][T13159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 864.290985][T13159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 864.303610][T13159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 864.598939][T13157] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.902562][T13157] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.329038][T13157] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.875952][T15980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1385'. [ 866.369059][T13159] Bluetooth: hci1: command tx timeout [ 866.748643][T13157] bridge_slave_1: left allmulticast mode [ 866.768088][T13157] bridge_slave_1: left promiscuous mode [ 866.780161][T13157] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.802648][T13157] bridge_slave_0: left allmulticast mode [ 866.817545][T13157] bridge_slave_0: left promiscuous mode [ 866.824832][T13157] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.141482][T13157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.174456][T13157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.210380][T13157] bond0 (unregistering): Released all slaves [ 867.654945][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 868.448127][T13637] Bluetooth: hci1: command tx timeout [ 869.173528][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 869.201180][T15956] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.215049][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.222967][T15956] bridge_slave_0: entered allmulticast mode [ 869.230737][T15956] bridge_slave_0: entered promiscuous mode [ 869.372431][T15956] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.380056][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.387376][T15956] bridge_slave_1: entered allmulticast mode [ 869.394739][T15956] bridge_slave_1: entered promiscuous mode [ 869.640375][T15956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.676715][T15956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.779076][T15956] team0: Port device team_slave_0 added [ 869.814168][T15956] team0: Port device team_slave_1 added [ 869.903534][T15956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.914122][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.949903][T15956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.963292][T15956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.972156][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.018932][T15956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.372160][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.382579][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.399799][T15956] hsr_slave_0: entered promiscuous mode [ 870.422204][T15956] hsr_slave_1: entered promiscuous mode [ 870.436406][T15956] debugfs: 'hsr0' already exists in 'hsr' [ 870.443253][T15956] Cannot create hsr debugfs directory [ 870.528458][T13159] Bluetooth: hci1: command tx timeout [ 871.907672][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 872.608540][T13159] Bluetooth: hci1: command tx timeout [ 876.201981][T13157] hsr_slave_0: left promiscuous mode [ 876.209984][T13157] hsr_slave_1: left promiscuous mode [ 876.216331][T13157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.225769][T13157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.234227][T13157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.248206][T13157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.264867][T13157] veth1_macvtap: left promiscuous mode [ 876.270486][T13157] veth0_macvtap: left promiscuous mode [ 876.276974][T13157] veth1_vlan: left promiscuous mode [ 876.282931][T13157] veth0_vlan: left promiscuous mode [ 876.492005][T13157] team0 (unregistering): Port device team_slave_1 removed [ 876.516671][T13157] team0 (unregistering): Port device team_slave_0 removed [ 876.620261][T15956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 876.647482][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 876.666427][T15956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 876.691872][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 876.715053][T15956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 876.739458][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 876.763261][T15956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 876.824192][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 879.023969][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.487057][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.610357][T13197] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.617683][T13197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.661542][T13197] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.668836][T13197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.424143][T15956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.923217][T15956] veth0_vlan: entered promiscuous mode [ 884.219018][T15956] veth1_vlan: entered promiscuous mode [ 884.852696][T15956] veth0_macvtap: entered promiscuous mode [ 884.925433][T15956] veth1_macvtap: entered promiscuous mode [ 885.761773][T15956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.101141][T15956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.418708][T13386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.588433][T13386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.626236][T13386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.677876][T13386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.777265][T13197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.799699][T13197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.887477][T13157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.898743][T13157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.622162][T16344] program syz.1.1419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.638404][T16344] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 891.196871][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 894.214086][T16425] sd 0:0:1:0: PR command failed: 1026 [ 894.220080][T16425] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 894.226989][T16425] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 900.674665][T16527] program syz.1.1447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 900.737498][T16527] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 907.334525][T16590] program syz.1.1457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 907.346299][T16590] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 913.441484][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 914.170914][T16682] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 914.905403][T16693] ubi: mtd0 is already attached to ubi0 [ 914.947592][T16689] ubi0: detaching mtd0 [ 915.017950][T16689] ubi0: mtd0 is detached [ 918.322708][T16730] netlink: 'syz.2.1484': attribute type 33 has an invalid length. [ 918.338858][T16730] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1484'. [ 918.487894][T16731] sd 0:0:1:0: PR command failed: 1026 [ 918.502696][T16731] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 918.523367][T16731] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 920.291058][T16749] netlink: 'syz.0.1489': attribute type 33 has an invalid length. [ 920.299348][T16749] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1489'. [ 920.550767][T16757] sd 0:0:1:0: PR command failed: 1026 [ 920.567679][T16757] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 920.577902][T16757] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 921.497023][T16768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1491'. [ 922.732718][T16785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1495'. [ 926.399477][T16828] netlink: 'syz.2.1503': attribute type 33 has an invalid length. [ 926.416305][T16828] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1503'. [ 926.673820][T16828] sd 0:0:1:0: PR command failed: 1026 [ 926.694590][T16828] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 926.715175][T16828] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 929.995075][T16873] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1511'. [ 930.245869][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 931.811020][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.817488][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.098277][T16979] program syz.3.1529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 940.113769][T16979] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 940.302700][T16973] sd 0:0:1:0: PR command failed: 1026 [ 940.318450][T16973] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 940.350292][T16973] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 941.173636][T16994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'. [ 946.063531][T17035] program syz.0.1540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 946.114482][T17035] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 950.437839][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1549'. [ 952.652745][T17123] program syz.0.1554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.662632][T17123] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 957.109032][T17169] sd 0:0:1:0: PR command failed: 1026 [ 957.120342][T17169] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 957.135137][T17169] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 958.686688][T17203] program syz.1.1569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 958.725007][T17203] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 965.196271][T17279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1581'. [ 967.958433][T17319] program syz.2.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 967.996112][T17319] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 976.222581][T17407] program syz.2.1604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 976.232790][T17407] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 977.070353][T17413] sd 0:0:1:0: PR command failed: 1026 [ 977.087426][T17413] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 977.102206][T17413] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 979.166456][T17446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 984.523639][T17507] sd 0:0:1:0: PR command failed: 1026 [ 984.532610][T17507] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 984.558814][T17507] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 985.116924][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1629'. [ 985.155952][T17533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1628'. [ 987.693856][T17562] program syz.0.1634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.782044][T17562] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 988.534448][T17566] sd 0:0:1:0: PR command failed: 1026 [ 988.548179][T17566] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 988.559464][T17566] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 990.212026][T17569] Bluetooth: hci1: command 0x0406 tx timeout [ 990.540308][T17600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'. [ 991.827188][T17616] program syz.2.1644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 991.838743][T17616] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 993.100175][T17624] sd 0:0:1:0: PR command failed: 1026 [ 993.141837][T17624] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 993.166222][T17624] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 993.253978][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.261778][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.501948][T17665] netlink: 'syz.2.1655': attribute type 33 has an invalid length. [ 995.609333][T17665] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1655'. [ 996.040650][T17673] sd 0:0:1:0: PR command failed: 1026 [ 996.097987][T17673] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 996.143771][T17673] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 996.334636][T17670] sd 0:0:1:0: PR command failed: 1026 [ 996.346008][T17670] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 996.362250][T17670] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1001.525914][T17717] sd 0:0:1:0: PR command failed: 1026 [ 1001.537774][T17717] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1001.549623][T17717] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1001.929625][T17726] sd 0:0:1:0: PR command failed: 1026 [ 1001.946657][T17726] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1001.964491][T17726] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1004.990794][T17773] program syz.1.1674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1005.033625][T17773] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1007.087602][T17792] netlink: 'syz.2.1679': attribute type 33 has an invalid length. [ 1007.133920][T17792] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1679'. [ 1007.302074][T17792] sd 0:0:1:0: PR command failed: 1026 [ 1007.318524][T17792] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1007.333507][T17792] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1008.807053][T17829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 1011.686170][T17855] netlink: 'syz.0.1690': attribute type 33 has an invalid length. [ 1011.697882][T17855] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1690'. [ 1011.923630][T17858] sd 0:0:1:0: PR command failed: 1026 [ 1011.940095][T17858] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1011.954704][T17858] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1015.480495][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'. [ 1018.562832][T17957] program syz.1.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1018.581397][T17957] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1021.179115][T17991] program syz.1.1712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1021.199027][T17991] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1021.688876][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'. [ 1022.255077][T18001] ieee80211 phy113: Failed to add default virtual iface [ 1022.467929][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 1023.575058][T18026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1717'. [ 1026.725558][T18056] sd 0:0:1:0: PR command failed: 1026 [ 1026.752591][T18056] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1026.770976][T18056] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1030.878757][T18107] sd 0:0:1:0: PR command failed: 1026 [ 1030.887851][T18107] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1030.894661][T18107] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1036.420138][T18174] sd 0:0:1:0: PR command failed: 1026 [ 1036.485283][T18174] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1036.537919][T18174] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1040.309294][T18221] sd 0:0:1:0: PR command failed: 1026 [ 1040.314859][T18221] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1040.325337][T18221] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1040.606713][T18231] program syz.0.1758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1040.646121][T18231] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1043.826866][T18263] sd 0:0:1:0: PR command failed: 1026 [ 1043.847932][T18263] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1043.867407][T18263] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1046.822257][T18289] program syz.2.1768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1046.833456][T18289] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1054.119238][T18362] sd 0:0:1:0: PR command failed: 1026 [ 1054.125610][T18362] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1054.133891][T18362] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1054.690682][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.697129][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.545151][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 1063.937364][T18488] sd 0:0:1:0: PR command failed: 1026 [ 1063.960892][T18488] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1063.984453][T18488] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1067.871268][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'. [ 1069.075402][T18562] sd 0:0:1:0: PR command failed: 1026 [ 1069.091623][T18562] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1069.113561][T18562] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1077.684965][T18666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1846'. [ 1078.177881][T18662] sd 0:0:1:0: PR command failed: 1026 [ 1078.220891][T18662] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1078.276523][T18662] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1085.113310][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 1091.554411][T18831] sd 0:0:1:0: PR command failed: 1026 [ 1091.568698][T18831] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1091.588403][T18831] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1092.499421][T18838] sd 0:0:1:0: PR command failed: 1026 [ 1092.516539][T18838] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1092.546130][T18838] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1092.844001][T18842] sd 0:0:1:0: PR command failed: 1026 [ 1092.858512][T18842] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1092.878472][T18842] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1096.934457][T18899] sd 0:0:1:0: PR command failed: 1026 [ 1096.942542][T18899] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1096.950943][T18899] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1097.303956][T18907] sd 0:0:1:0: PR command failed: 1026 [ 1097.310180][T18907] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1097.317249][T18907] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1102.613257][T18966] sd 0:0:1:0: PR command failed: 1026 [ 1102.618966][T18966] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1102.627293][T18966] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1102.915651][T18968] sd 0:0:1:0: PR command failed: 1026 [ 1102.937811][T18968] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1102.973382][T18968] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1106.501118][T19023] sd 0:0:1:0: PR command failed: 1026 [ 1106.519658][T19023] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1106.534376][T19023] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1116.132892][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.142063][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.205461][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1938'. [ 1120.375121][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1946'. [ 1125.378186][T19262] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1958'. [ 1129.035970][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'. [ 1130.030161][T19309] sd 0:0:1:0: PR command failed: 1026 [ 1130.052643][T19309] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1130.078015][T19309] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1130.238775][T19311] sd 0:0:1:0: PR command failed: 1026 [ 1130.262396][T19311] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1130.277841][T19311] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1130.662085][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1975'. [ 1133.268062][T19351] sd 0:0:1:0: PR command failed: 1026 [ 1133.307011][T19351] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1133.328095][T19351] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1134.115675][T19362] sd 0:0:1:0: PR command failed: 1026 [ 1134.130745][T19362] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1134.147955][T19362] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1136.740480][T19398] sd 0:0:1:0: PR command failed: 1026 [ 1136.764894][T19398] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1136.787948][T19398] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1150.206207][T19599] vhci_hcd vhci_hcd.1: invalid port number 16 [ 1150.235162][T19599] vhci_hcd vhci_hcd.1: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 1152.106496][T19637] i2c i2c-0: delete_device: Extra parameters [ 1154.119460][T19649] sd 0:0:1:0: PR command failed: 1026 [ 1154.142125][T19649] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1154.163948][T19649] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1154.560077][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2042'. [ 1154.586490][T19669] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2044'. [ 1154.879934][ T30] audit: type=1800 audit(4294967935.370:11): pid=19673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2045" name="dbroot" dev="configfs" ino=152002 res=0 errno=0 [ 1154.956497][T19676] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 1157.897246][T13386] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.944907][T17569] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1157.956564][T17569] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1157.979152][T17569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1157.994779][T17569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1158.009338][T17569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1158.258888][T13386] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.472031][T13386] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.674286][T13386] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.235717][T13386] bridge_slave_1: left allmulticast mode [ 1159.247890][T13386] bridge_slave_1: left promiscuous mode [ 1159.255429][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.275132][T13386] bridge_slave_0: left allmulticast mode [ 1159.301154][T13386] bridge_slave_0: left promiscuous mode [ 1159.320823][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.047932][T17569] Bluetooth: hci2: command tx timeout [ 1160.092644][T13386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.139649][T13386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.162995][T13386] bond0 (unregistering): Released all slaves [ 1161.080631][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1162.132869][T17569] Bluetooth: hci2: command tx timeout [ 1162.232444][T19724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.239805][T19724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.247092][T19724] bridge_slave_0: entered allmulticast mode [ 1162.263962][T19724] bridge_slave_0: entered promiscuous mode [ 1162.375121][T19724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.394271][T19724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.409868][T19724] bridge_slave_1: entered allmulticast mode [ 1162.441937][T19724] bridge_slave_1: entered promiscuous mode [ 1162.671933][T19724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.726071][T13386] hsr_slave_0: left promiscuous mode [ 1162.743049][T13386] hsr_slave_1: left promiscuous mode [ 1162.754031][T13386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.765485][T13386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.775998][T13386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.799814][T13386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.844468][T13386] veth1_macvtap: left promiscuous mode [ 1162.859457][T13386] veth0_macvtap: left promiscuous mode [ 1162.870646][T13386] veth1_vlan: left promiscuous mode [ 1162.879663][T13386] veth0_vlan: left promiscuous mode [ 1163.482560][T13386] team0 (unregistering): Port device team_slave_1 removed [ 1163.550494][T13386] team0 (unregistering): Port device team_slave_0 removed [ 1163.816515][T19724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.858583][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1163.932735][T19724] team0: Port device team_slave_0 added [ 1163.942869][T19724] team0: Port device team_slave_1 added [ 1164.017021][T19724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.026000][T19724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.056815][T19724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.135521][T19724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.142787][T19724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.205547][T19724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.233179][T17569] Bluetooth: hci2: command tx timeout [ 1164.741283][T19724] hsr_slave_0: entered promiscuous mode [ 1164.770249][T19724] hsr_slave_1: entered promiscuous mode [ 1164.815245][T19816] netlink: 'syz.0.2060': attribute type 33 has an invalid length. [ 1164.839841][T19816] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2060'. [ 1165.085075][T19816] sd 0:0:1:0: PR command failed: 1026 [ 1165.093328][T19816] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1165.103956][T19816] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1165.712788][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1166.296766][T17569] Bluetooth: hci2: command tx timeout [ 1168.725950][T19724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1168.788484][T19724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1168.818146][T19724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1168.852956][T19724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1169.117648][T19724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1169.165878][T19724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1169.189078][T19724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1169.231277][T19724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1169.256678][T19897] netlink: 'syz.3.2068': attribute type 33 has an invalid length. [ 1169.282943][T19900] sd 0:0:1:0: PR command failed: 1026 [ 1169.300943][T19900] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1169.319145][T19897] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2068'. [ 1169.335605][T19900] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1170.046319][T19912] netlink: 'syz.3.2069': attribute type 33 has an invalid length. [ 1170.065982][T19912] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2069'. [ 1170.589103][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2070'. [ 1173.460645][T19724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.597861][T19724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.852818][T13643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.860044][T13643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.066318][T13161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.073537][T13161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.445286][T19724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.571261][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.582321][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.690019][T19724] veth0_vlan: entered promiscuous mode [ 1177.723280][T19724] veth1_vlan: entered promiscuous mode [ 1177.835889][T19724] veth0_macvtap: entered promiscuous mode [ 1177.897072][T19724] veth1_macvtap: entered promiscuous mode [ 1177.991444][T19724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.061789][T19724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.128039][T13643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.180357][T13643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.220976][T13643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.236319][T13643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.422864][T13174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.448557][T13174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.014017][T20053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 1179.630693][T13643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.670345][T13643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.433673][T20124] program syz.0.2098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1184.568820][T20127] random: crng reseeded on system resumption [ 1186.399778][T20150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2101'. [ 1189.178223][T20177] netlink: 'syz.0.2108': attribute type 33 has an invalid length. [ 1189.201707][T20177] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2108'. [ 1191.755349][ T30] audit: type=1800 audit(4294967972.240:12): pid=20214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2115" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1193.376608][T20237] netlink: 'syz.2.2120': attribute type 33 has an invalid length. [ 1193.382411][T20240] sd 0:0:1:0: PR command failed: 1026 [ 1193.396968][T20237] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2120'. [ 1193.399260][T20240] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1193.436532][T20240] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1196.201792][T20275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2127'. [ 1204.534361][T20394] FAULT_INJECTION: forcing a failure. [ 1204.534361][T20394] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.551084][T20394] CPU: 1 UID: 0 PID: 20394 Comm: syz.3.2150 Not tainted syzkaller #0 PREEMPT(full) [ 1204.551123][T20394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1204.551140][T20394] Call Trace: [ 1204.551150][T20394] [ 1204.551160][T20394] dump_stack_lvl+0x100/0x190 [ 1204.551204][T20394] should_fail_ex.cold+0x5/0xa [ 1204.551239][T20394] should_failslab+0xc2/0x120 [ 1204.551284][T20394] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1204.551328][T20394] ? kstrdup_const+0x63/0x80 [ 1204.551371][T20394] kstrdup+0x51/0xe0 [ 1204.551407][T20394] kstrdup_const+0x63/0x80 [ 1204.551441][T20394] alloc_vfsmnt+0xe5/0x710 [ 1204.551562][T20394] clone_mnt+0x4b/0x930 [ 1204.551606][T20394] copy_tree+0x329/0xbf0 [ 1204.551644][T20394] copy_mnt_ns+0x3fa/0x1180 [ 1204.551686][T20394] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1204.551721][T20394] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 1204.551757][T20394] ? create_new_namespaces+0x30/0xac0 [ 1204.551798][T20394] create_new_namespaces+0xd3/0xac0 [ 1204.551828][T20394] ? bpf_lsm_capable+0x9/0x10 [ 1204.551859][T20394] ? security_capable+0x80/0x260 [ 1204.551930][T20394] unshare_nsproxy_namespaces+0xf2/0x220 [ 1204.551967][T20394] ksys_unshare+0x438/0xab0 [ 1204.552007][T20394] ? __pfx_ksys_unshare+0x10/0x10 [ 1204.552044][T20394] ? ksys_write+0x1ac/0x250 [ 1204.552084][T20394] __x64_sys_unshare+0x31/0x40 [ 1204.552120][T20394] do_syscall_64+0x115/0x840 [ 1204.552160][T20394] ? clear_bhb_loop+0x40/0x90 [ 1204.552196][T20394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.552225][T20394] RIP: 0033:0x7f6a8fd9e0d9 [ 1204.552252][T20394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.552277][T20394] RSP: 002b:00007f6a90d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1204.552306][T20394] RAX: ffffffffffffffda RBX: 00007f6a90025fa0 RCX: 00007f6a8fd9e0d9 [ 1204.552325][T20394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1204.552343][T20394] RBP: 00007f6a90d37090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.552361][T20394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.552379][T20394] R13: 00007f6a90026038 R14: 00007f6a90025fa0 R15: 00007ffd73a89218 [ 1204.552429][T20394] [ 1207.615076][T20440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2156'. [ 1211.465102][T20487] netlink: 'syz.2.2165': attribute type 33 has an invalid length. [ 1211.505550][T20487] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2165'. [ 1211.794857][T20487] sd 0:0:1:0: PR command failed: 1026 [ 1211.813503][T20487] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1211.840529][T20487] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1212.492959][T20503] netlink: 'syz.3.2169': attribute type 33 has an invalid length. [ 1212.494655][T20505] sd 0:0:1:0: PR command failed: 1026 [ 1212.515094][T20503] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2169'. [ 1212.532020][T20505] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1212.557051][T20505] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1216.000208][T20553] sd 0:0:1:0: PR command failed: 1026 [ 1216.005719][T20553] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1216.013957][T20553] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1216.031114][T20552] netlink: 'syz.3.2177': attribute type 33 has an invalid length. [ 1216.039706][T20552] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2177'. [ 1218.284455][T20584] sd 0:0:1:0: PR command failed: 1026 [ 1218.304751][T20584] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1218.325682][T20584] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1218.419750][T20581] netlink: 'syz.0.2184': attribute type 33 has an invalid length. [ 1218.428009][T20581] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2184'. [ 1224.279986][T20669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2199'. [ 1227.973116][T20709] netlink: 'syz.3.2205': attribute type 33 has an invalid length. [ 1227.983214][T20709] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2205'. [ 1228.121794][T20709] sd 0:0:1:0: PR command failed: 1026 [ 1228.139431][T20709] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1228.152088][T20709] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1228.904526][T20738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2210'. [ 1231.873599][T20780] FAULT_INJECTION: forcing a failure. [ 1231.873599][T20780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.916055][T20780] CPU: 0 UID: 0 PID: 20780 Comm: syz.2.2220 Not tainted syzkaller #0 PREEMPT(full) [ 1231.916104][T20780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1231.916122][T20780] Call Trace: [ 1231.916132][T20780] [ 1231.916143][T20780] dump_stack_lvl+0x100/0x190 [ 1231.916183][T20780] should_fail_ex.cold+0x5/0xa [ 1231.916218][T20780] _copy_from_user+0x2e/0xd0 [ 1231.916267][T20780] cec_ioctl+0xccd/0x29b0 [ 1231.916395][T20780] ? __pfx_cec_ioctl+0x10/0x10 [ 1231.916433][T20780] ? tomoyo_path_number_perm+0x188/0x580 [ 1231.916477][T20780] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1231.916533][T20780] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1231.916582][T20780] ? do_vfs_ioctl+0x226/0x13e0 [ 1231.916624][T20780] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1231.916679][T20780] ? find_held_lock+0x2b/0x80 [ 1231.916715][T20780] ? __fget_files+0x215/0x3d0 [ 1231.916742][T20780] ? hook_file_ioctl_common+0x140/0x440 [ 1231.916792][T20780] ? __fget_files+0x21f/0x3d0 [ 1231.916825][T20780] ? __pfx_cec_ioctl+0x10/0x10 [ 1231.916869][T20780] __x64_sys_ioctl+0x18e/0x210 [ 1231.916913][T20780] do_syscall_64+0x115/0x840 [ 1231.916950][T20780] ? clear_bhb_loop+0x40/0x90 [ 1231.916985][T20780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.917014][T20780] RIP: 0033:0x7f8157d9e0d9 [ 1231.917038][T20780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.917064][T20780] RSP: 002b:00007f8158d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1231.917101][T20780] RAX: ffffffffffffffda RBX: 00007f8158025fa0 RCX: 00007f8157d9e0d9 [ 1231.917120][T20780] RDX: 0000000000000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 1231.917138][T20780] RBP: 00007f8158d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.917155][T20780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.917170][T20780] R13: 00007f8158026038 R14: 00007f8158025fa0 R15: 00007ffcd5a995b8 [ 1231.917212][T20780] [ 1233.909592][T20797] netlink: 'syz.3.2223': attribute type 33 has an invalid length. [ 1233.935038][T20797] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2223'. [ 1233.964056][T20794] netlink: 'syz.0.2222': attribute type 33 has an invalid length. [ 1233.977800][T20794] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2222'. [ 1234.135507][T20794] sd 0:0:1:0: PR command failed: 1026 [ 1234.149400][T20794] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1234.168493][T20794] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1234.180597][T20797] sd 0:0:1:0: PR command failed: 1026 [ 1234.200473][T20797] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1234.228281][T20797] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1234.465571][T20812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2225'. [ 1239.011944][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.021499][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.270806][T20875] sd 0:0:1:0: PR command failed: 1026 [ 1239.295967][T20874] netlink: 'syz.2.2239': attribute type 33 has an invalid length. [ 1239.315610][T20875] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1239.325733][T20875] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1239.337753][T20874] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2239'. [ 1242.012718][T20917] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1244.750010][T20933] netlink: 'syz.2.2249': attribute type 33 has an invalid length. [ 1244.836262][T20933] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2249'. [ 1244.848985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1244.927519][T20933] sd 0:0:1:0: PR command failed: 1026 [ 1244.942252][T20933] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1244.972425][T20933] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1245.029605][T20936] netlink: 'syz.1.2250': attribute type 33 has an invalid length. [ 1245.067718][T20936] netlink: 322 bytes leftover after parsing attributes in process `syz.1.2250'. [ 1245.283753][T20936] sd 0:0:1:0: PR command failed: 1026 [ 1245.294161][T20936] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1245.303513][T20936] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1257.054279][T21100] netlink: 'syz.3.2279': attribute type 33 has an invalid length. [ 1257.111654][T21100] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2279'. [ 1257.429051][T21111] sd 0:0:1:0: PR command failed: 1026 [ 1257.443469][T21111] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1257.474129][T21111] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1260.746036][T21151] netlink: 'syz.2.2291': attribute type 33 has an invalid length. [ 1260.777964][T21151] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2291'. [ 1260.891356][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2290'. [ 1260.918227][T21151] sd 0:0:1:0: PR command failed: 1026 [ 1260.935474][T21151] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1260.945636][T21151] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1262.184269][T21164] netlink: 'syz.2.2294': attribute type 33 has an invalid length. [ 1262.192809][T21164] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2294'. [ 1262.208227][T21165] sd 0:0:1:0: PR command failed: 1026 [ 1262.216242][T21165] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1262.224503][T21165] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1262.897029][T21175] netlink: 'syz.3.2297': attribute type 33 has an invalid length. [ 1262.925590][T21177] sd 0:0:1:0: PR command failed: 1026 [ 1262.937738][T21175] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2297'. [ 1262.946943][T21177] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1262.956179][T21177] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1263.074374][T21187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2298'. [ 1263.506586][T21194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2299'. [ 1265.092204][T21200] sd 0:0:1:0: PR command failed: 1026 [ 1265.102215][T21200] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1265.117771][T21200] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1265.141900][T21199] netlink: 'syz.0.2300': attribute type 33 has an invalid length. [ 1265.151069][T21199] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2300'. [ 1266.483129][T21219] netlink: 'syz.0.2305': attribute type 33 has an invalid length. [ 1266.532297][T21219] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2305'. [ 1266.600089][T21221] mmap: syz.2.2306 (21221) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1266.646148][T21219] sd 0:0:1:0: PR command failed: 1026 [ 1266.664513][T21219] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1266.690692][T21219] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1266.792110][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 1270.475545][T21270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2312'. [ 1272.491387][T21299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2317'. [ 1274.456373][T21319] vhci_hcd: not connected 4 [ 1275.304031][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2324'. [ 1275.835996][T21347] sd 0:0:1:0: PR command failed: 1026 [ 1275.850533][T21347] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1275.871061][T21347] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1275.962906][T21344] netlink: 'syz.1.2325': attribute type 33 has an invalid length. [ 1275.976272][T21344] netlink: 322 bytes leftover after parsing attributes in process `syz.1.2325'. [ 1276.732785][T21365] FAULT_INJECTION: forcing a failure. [ 1276.732785][T21365] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.759254][T21365] CPU: 0 UID: 0 PID: 21365 Comm: syz.1.2329 Not tainted syzkaller #0 PREEMPT(full) [ 1276.759294][T21365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1276.759312][T21365] Call Trace: [ 1276.759322][T21365] [ 1276.759334][T21365] dump_stack_lvl+0x100/0x190 [ 1276.759375][T21365] should_fail_ex.cold+0x5/0xa [ 1276.759412][T21365] should_failslab+0xc2/0x120 [ 1276.759455][T21365] __kmalloc_noprof+0xfc/0x820 [ 1276.759492][T21365] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1276.759533][T21365] ? lsm_blob_alloc+0x68/0x90 [ 1276.759569][T21365] lsm_blob_alloc+0x68/0x90 [ 1276.759598][T21365] security_sk_alloc+0x2d/0x290 [ 1276.759699][T21365] sk_prot_alloc+0x1d1/0x2a0 [ 1276.759738][T21365] sk_alloc+0x36/0xe80 [ 1276.759779][T21365] inet_create+0x3a0/0x1060 [ 1276.759935][T21365] ? inet_create+0x94/0x1060 [ 1276.759982][T21365] __sock_create+0x339/0x860 [ 1276.760023][T21365] inet_ctl_sock_create+0x94/0x230 [ 1276.760064][T21365] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 1276.760104][T21365] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1276.760135][T21365] ? lockdep_init_map_type+0x5c/0x250 [ 1276.760169][T21365] ? lockdep_init_map_type+0x5c/0x250 [ 1276.760202][T21365] ? __pfx_igmp_net_init+0x10/0x10 [ 1276.760276][T21365] igmp_net_init+0xd0/0x150 [ 1276.760319][T21365] ops_init+0x1e2/0x5f0 [ 1276.760399][T21365] setup_net+0x118/0x3a0 [ 1276.760443][T21365] ? __pfx_setup_net+0x10/0x10 [ 1276.760491][T21365] ? mutex_init_lockdep+0xf1/0x120 [ 1276.760525][T21365] copy_net_ns+0x46f/0x7c0 [ 1276.760557][T21365] create_new_namespaces+0x3ea/0xac0 [ 1276.760599][T21365] unshare_nsproxy_namespaces+0xf2/0x220 [ 1276.760637][T21365] ksys_unshare+0x438/0xab0 [ 1276.760678][T21365] ? __pfx_ksys_unshare+0x10/0x10 [ 1276.760732][T21365] __x64_sys_unshare+0x31/0x40 [ 1276.760768][T21365] do_syscall_64+0x115/0x840 [ 1276.760809][T21365] ? clear_bhb_loop+0x40/0x90 [ 1276.760847][T21365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.760876][T21365] RIP: 0033:0x7f1ce659e0d9 [ 1276.760905][T21365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.760933][T21365] RSP: 002b:00007f1ce73f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1276.760963][T21365] RAX: ffffffffffffffda RBX: 00007f1ce6826090 RCX: 00007f1ce659e0d9 [ 1276.760982][T21365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1276.760999][T21365] RBP: 00007f1ce6635024 R08: 0000000000000000 R09: 0000000000000000 [ 1276.761016][T21365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.761034][T21365] R13: 00007f1ce6826128 R14: 00007f1ce6826090 R15: 00007ffd6ada1518 [ 1276.761074][T21365] [ 1276.763387][T21365] Failed to initialize the IGMP autojoin socket (err -12) [ 1280.151783][T21411] sd 0:0:1:0: PR command failed: 1026 [ 1280.157521][T21411] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1280.164389][T21411] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1280.178948][T21410] netlink: 'syz.3.2335': attribute type 33 has an invalid length. [ 1280.186921][T21410] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2335'. [ 1280.846771][T21425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2337'. [ 1280.976032][T21427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2339'. [ 1281.873764][T21444] FAULT_INJECTION: forcing a failure. [ 1281.873764][T21444] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1281.939961][T21444] CPU: 0 UID: 0 PID: 21444 Comm: syz.3.2342 Not tainted syzkaller #0 PREEMPT(full) [ 1281.940005][T21444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1281.940024][T21444] Call Trace: [ 1281.940035][T21444] [ 1281.940047][T21444] dump_stack_lvl+0x100/0x190 [ 1281.940086][T21444] should_fail_ex.cold+0x5/0xa [ 1281.940119][T21444] get_futex_key+0x1d2/0x14f0 [ 1281.940163][T21444] ? __pfx_get_futex_key+0x10/0x10 [ 1281.940191][T21444] ? __pfx_get_futex_key+0x10/0x10 [ 1281.940220][T21444] ? refill_pi_state_cache+0x91/0x260 [ 1281.940265][T21444] futex_wait_setup+0x91/0x540 [ 1281.940319][T21444] __futex_wait+0x19f/0x300 [ 1281.940366][T21444] ? __pfx___futex_wait+0x10/0x10 [ 1281.940406][T21444] ? futex_hash+0x311/0x400 [ 1281.940442][T21444] ? __pfx_futex_wake_mark+0x10/0x10 [ 1281.940491][T21444] ? __pfx_futex_hash+0x10/0x10 [ 1281.940535][T21444] futex_wait+0xe6/0x370 [ 1281.940577][T21444] ? __pfx_futex_wait+0x10/0x10 [ 1281.940628][T21444] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1281.940667][T21444] ? find_held_lock+0x2b/0x80 [ 1281.940705][T21444] ? ksys_write+0x190/0x250 [ 1281.940743][T21444] do_futex+0x265/0x440 [ 1281.940780][T21444] ? __pfx_do_futex+0x10/0x10 [ 1281.940818][T21444] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1281.940873][T21444] __x64_sys_futex+0x34f/0x4d0 [ 1281.940914][T21444] ? __pfx___x64_sys_futex+0x10/0x10 [ 1281.940965][T21444] do_syscall_64+0x115/0x840 [ 1281.941005][T21444] ? clear_bhb_loop+0x40/0x90 [ 1281.941043][T21444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.941076][T21444] RIP: 0033:0x7f6a8fd9e0d9 [ 1281.941103][T21444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.941134][T21444] RSP: 002b:00007f6a90d160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1281.941177][T21444] RAX: ffffffffffffffda RBX: 00007f6a90026098 RCX: 00007f6a8fd9e0d9 [ 1281.941198][T21444] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6a90026098 [ 1281.941217][T21444] RBP: 00007f6a90026090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.941237][T21444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.941255][T21444] R13: 00007f6a90026128 R14: 00007ffd73a89130 R15: 00007ffd73a89218 [ 1281.941298][T21444] [ 1282.204446][T17569] Bluetooth: hci2: command 0x0406 tx timeout [ 1282.476251][T21453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2343'. [ 1285.384040][T17569] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1285.402977][T17569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1285.419885][T17569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1285.437750][T17569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1285.448516][T17569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1287.443298][T21507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'. [ 1287.483168][T19994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.569534][T17569] Bluetooth: hci4: command tx timeout [ 1287.674191][T19994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.860383][T19994] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.221102][T19994] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.648188][T17569] Bluetooth: hci4: command tx timeout [ 1290.491402][T21479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.499825][T21479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.508453][T21479] bridge_slave_0: entered allmulticast mode [ 1290.516321][T21479] bridge_slave_0: entered promiscuous mode [ 1290.565326][T19994] bridge_slave_1: left allmulticast mode [ 1290.583500][T19994] bridge_slave_1: left promiscuous mode [ 1290.602169][T19994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.605302][T21547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2359'. [ 1290.621713][T19994] bridge_slave_0: left allmulticast mode [ 1290.627450][T19994] bridge_slave_0: left promiscuous mode [ 1290.635116][T19994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.925415][T19994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.944604][T19994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.957012][T19994] bond0 (unregistering): Released all slaves [ 1290.984222][T21479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.998087][T21479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.005447][T21479] bridge_slave_1: entered allmulticast mode [ 1291.030489][T21479] bridge_slave_1: entered promiscuous mode [ 1291.179633][T21479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.266377][T21479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.436922][T21479] team0: Port device team_slave_0 added [ 1291.549306][T21479] team0: Port device team_slave_1 added [ 1291.727897][T17569] Bluetooth: hci4: command tx timeout [ 1292.007149][T21479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.020589][T21479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.091089][T21479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.452518][T21479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.473689][T21479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.529326][T21479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.031971][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1293.494773][T21479] hsr_slave_0: entered promiscuous mode [ 1293.502204][T21479] hsr_slave_1: entered promiscuous mode [ 1293.509526][T21479] debugfs: 'hsr0' already exists in 'hsr' [ 1293.516402][T21479] Cannot create hsr debugfs directory [ 1293.808277][T17569] Bluetooth: hci4: command tx timeout [ 1294.747280][T21609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2363'. [ 1294.805759][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1298.604189][T21479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1298.633641][T21479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1298.656385][T21479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1298.686463][T21479] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1298.835745][T21479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1298.854391][T21479] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1299.030650][T21479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1299.044480][T21479] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1299.713382][T21703] Line length is too long: Should be less than 4094 [ 1300.459289][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.469748][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.559035][T21479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.642806][T19994] hsr_slave_0: left promiscuous mode [ 1301.665423][T19994] hsr_slave_1: left promiscuous mode [ 1301.695857][T19994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.709907][T19994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.758910][T19994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.774150][T19994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.814870][T19994] veth1_macvtap: left promiscuous mode [ 1301.834521][T19994] veth0_macvtap: left promiscuous mode [ 1301.861365][T19994] veth1_vlan: left promiscuous mode [ 1301.890255][T19994] veth0_vlan: left promiscuous mode [ 1302.491812][T19994] team0 (unregistering): Port device team_slave_1 removed [ 1302.559714][T19994] team0 (unregistering): Port device team_slave_0 removed [ 1302.944896][T21479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.989579][T13151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.996841][T13151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.212155][T13151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.219443][T13151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.252879][T21788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2377'. [ 1306.092817][T21479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.232175][T21479] veth0_vlan: entered promiscuous mode [ 1306.260681][T21479] veth1_vlan: entered promiscuous mode [ 1306.378894][T21479] veth0_macvtap: entered promiscuous mode [ 1306.393302][T21479] veth1_macvtap: entered promiscuous mode [ 1306.468336][T21479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.494705][T21479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.538809][T13157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.858436][T19994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.033572][T19994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.311408][T13151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.328198][T13197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.358082][T13151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.166721][T19994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.186436][T19994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.351186][T21878] NFSD: Failed to start, no listeners configured. [ 1311.329880][T21891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2390'. [ 1314.606046][T21933] FAULT_INJECTION: forcing a failure. [ 1314.606046][T21933] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.637273][T21933] CPU: 0 UID: 0 PID: 21933 Comm: syz.0.2400 Not tainted syzkaller #0 PREEMPT(full) [ 1314.637315][T21933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1314.637334][T21933] Call Trace: [ 1314.637344][T21933] [ 1314.637356][T21933] dump_stack_lvl+0x100/0x190 [ 1314.637403][T21933] should_fail_ex.cold+0x5/0xa [ 1314.637440][T21933] should_failslab+0xc2/0x120 [ 1314.637485][T21933] __kmalloc_cache_noprof+0x91/0x6c0 [ 1314.637515][T21933] ? __x64_sys_futex+0x34f/0x4d0 [ 1314.637551][T21933] ? __x64_sys_futex+0x358/0x4d0 [ 1314.637584][T21933] ? fsnotify_alloc_group+0x8d/0x320 [ 1314.637722][T21933] fsnotify_alloc_group+0x8d/0x320 [ 1314.637756][T21933] do_inotify_init+0x4b/0x5e0 [ 1314.637828][T21933] __x64_sys_inotify_init1+0x30/0x40 [ 1314.637870][T21933] do_syscall_64+0x115/0x840 [ 1314.637913][T21933] ? clear_bhb_loop+0x40/0x90 [ 1314.637951][T21933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.637982][T21933] RIP: 0033:0x7f5045b9e0d9 [ 1314.638010][T21933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.638048][T21933] RSP: 002b:00007f5046a9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 1314.638081][T21933] RAX: ffffffffffffffda RBX: 00007f5045e25fa0 RCX: 00007f5045b9e0d9 [ 1314.638101][T21933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 1314.638121][T21933] RBP: 00007f5045c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1314.638140][T21933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.638159][T21933] R13: 00007f5045e26038 R14: 00007f5045e25fa0 R15: 00007fff62501938 [ 1314.638199][T21933] [ 1315.068890][T21934] FAULT_INJECTION: forcing a failure. [ 1315.068890][T21934] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1315.210531][T21934] CPU: 0 UID: 0 PID: 21934 Comm: syz.1.2399 Not tainted syzkaller #0 PREEMPT(full) [ 1315.210571][T21934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1315.210584][T21934] Call Trace: [ 1315.210591][T21934] [ 1315.210598][T21934] dump_stack_lvl+0x100/0x190 [ 1315.210626][T21934] should_fail_ex.cold+0x5/0xa [ 1315.210651][T21934] get_futex_key+0x1d2/0x14f0 [ 1315.210673][T21934] ? __pfx_get_futex_key+0x10/0x10 [ 1315.210692][T21934] ? wakeup_preempt_fair+0x640/0x1060 [ 1315.210727][T21934] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1315.210779][T21934] futex_wait_setup+0x91/0x540 [ 1315.210816][T21934] __futex_wait+0x19f/0x300 [ 1315.210842][T21934] ? __pfx___futex_wait+0x10/0x10 [ 1315.210865][T21934] ? __pfx_try_to_wake_up+0x10/0x10 [ 1315.210886][T21934] ? futex_hash+0x311/0x400 [ 1315.210905][T21934] ? __pfx_futex_wake_mark+0x10/0x10 [ 1315.210933][T21934] ? find_held_lock+0x2b/0x80 [ 1315.210954][T21934] ? futex_wake+0x4ea/0x5e0 [ 1315.210983][T21934] futex_wait+0xe6/0x370 [ 1315.211007][T21934] ? __pfx_futex_wait+0x10/0x10 [ 1315.211036][T21934] ? putname+0xb1/0x110 [ 1315.211055][T21934] ? kmem_cache_free+0x127/0x6b0 [ 1315.211078][T21934] do_futex+0x265/0x440 [ 1315.211098][T21934] ? __pfx_do_futex+0x10/0x10 [ 1315.211116][T21934] ? __pfx_do_sys_openat2+0x10/0x10 [ 1315.211146][T21934] __x64_sys_futex+0x34f/0x4d0 [ 1315.211167][T21934] ? __x64_sys_openat+0x12d/0x210 [ 1315.211192][T21934] ? __pfx___x64_sys_futex+0x10/0x10 [ 1315.211221][T21934] do_syscall_64+0x115/0x840 [ 1315.211245][T21934] ? clear_bhb_loop+0x40/0x90 [ 1315.211267][T21934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.211286][T21934] RIP: 0033:0x7f6cb599e0d9 [ 1315.211302][T21934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.211320][T21934] RSP: 002b:00007f6cb68de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1315.211338][T21934] RAX: ffffffffffffffda RBX: 00007f6cb5c26098 RCX: 00007f6cb599e0d9 [ 1315.211350][T21934] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6cb5c26098 [ 1315.211361][T21934] RBP: 00007f6cb5c26090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.211379][T21934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1315.211390][T21934] R13: 00007f6cb5c26128 R14: 00007ffdab2f0a20 R15: 00007ffdab2f0b08 [ 1315.211414][T21934] [ 1316.445779][T21953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2402'. [ 1322.369975][T22021] netlink: 'syz.0.2416': attribute type 33 has an invalid length. [ 1322.378138][T22021] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2416'. [ 1322.616870][T22034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2417'. [ 1322.645160][T22021] sd 0:0:1:0: PR command failed: 1026 [ 1322.665929][T22021] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1322.696403][T22021] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1324.496402][T22058] FAULT_INJECTION: forcing a failure. [ 1324.496402][T22058] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.547392][T22058] CPU: 0 UID: 0 PID: 22058 Comm: syz.3.2420 Not tainted syzkaller #0 PREEMPT(full) [ 1324.547433][T22058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1324.547450][T22058] Call Trace: [ 1324.547460][T22058] [ 1324.547471][T22058] dump_stack_lvl+0x100/0x190 [ 1324.547510][T22058] should_fail_ex.cold+0x5/0xa [ 1324.547546][T22058] should_failslab+0xc2/0x120 [ 1324.547585][T22058] __kmalloc_cache_noprof+0x91/0x6c0 [ 1324.547616][T22058] ? alloc_pipe_info+0x10e/0x590 [ 1324.547655][T22058] alloc_pipe_info+0x10e/0x590 [ 1324.547688][T22058] splice_direct_to_actor+0x78f/0xa30 [ 1324.547790][T22058] ? __pfx_direct_splice_actor+0x10/0x10 [ 1324.547823][T22058] ? __pfx_aa_file_perm+0x10/0x10 [ 1324.547872][T22058] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1324.547914][T22058] do_splice_direct+0x174/0x240 [ 1324.547944][T22058] ? __pfx_do_splice_direct+0x10/0x10 [ 1324.547975][T22058] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1324.548020][T22058] ? rw_verify_area+0xce/0x6d0 [ 1324.548065][T22058] do_sendfile+0xadc/0xe20 [ 1324.548116][T22058] ? __pfx_do_sendfile+0x10/0x10 [ 1324.548157][T22058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1324.548199][T22058] ? __fget_files+0x21f/0x3d0 [ 1324.548236][T22058] __x64_sys_sendfile64+0x1d8/0x220 [ 1324.548267][T22058] ? ksys_write+0x1ac/0x250 [ 1324.548294][T22058] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1324.548341][T22058] do_syscall_64+0x115/0x840 [ 1324.548379][T22058] ? clear_bhb_loop+0x40/0x90 [ 1324.548416][T22058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.548445][T22058] RIP: 0033:0x7f6a8fd9e0d9 [ 1324.548471][T22058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.548497][T22058] RSP: 002b:00007f6a90d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1324.548524][T22058] RAX: ffffffffffffffda RBX: 00007f6a90025fa0 RCX: 00007f6a8fd9e0d9 [ 1324.548543][T22058] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1324.548560][T22058] RBP: 00007f6a90d37090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.548577][T22058] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1324.548595][T22058] R13: 00007f6a90026038 R14: 00007f6a90025fa0 R15: 00007ffd73a89218 [ 1324.548634][T22058] [ 1325.078907][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2421'. [ 1325.794151][T22063] netlink: 'syz.2.2422': attribute type 33 has an invalid length. [ 1325.837844][T22063] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2422'. [ 1325.888789][T22063] sd 0:0:1:0: PR command failed: 1026 [ 1325.899180][T22063] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1325.911230][T22063] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1326.139321][T22069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1326.160493][T22069] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1326.248695][T22069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1326.274198][T22069] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1326.372689][T22069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1326.397100][T22069] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1326.447238][T22069] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1326.470238][T22069] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1326.522240][T22069] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1327.649992][T17569] Bluetooth: hci3: command 0x0406 tx timeout [ 1328.290110][T17569] Bluetooth: hci1: command 0x0406 tx timeout [ 1328.367697][T17569] Bluetooth: hci2: command 0x0406 tx timeout [ 1328.449188][T17569] Bluetooth: hci4: command 0x0c1a tx timeout [ 1329.737854][T17569] Bluetooth: hci3: command 0x0406 tx timeout [ 1330.377942][T17569] Bluetooth: hci1: command 0x0406 tx timeout [ 1330.447648][T17569] Bluetooth: hci2: command 0x0406 tx timeout [ 1330.529837][T17569] Bluetooth: hci4: command 0x0c1a tx timeout [ 1331.436105][T22128] syz.0.2431 (22128): attempted to duplicate a private mapping with mremap. This is not supported. [ 1332.620176][T17569] Bluetooth: hci4: command 0x0c1a tx timeout [ 1335.020658][T22172] FAULT_INJECTION: forcing a failure. [ 1335.020658][T22172] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.064196][T22172] CPU: 0 UID: 0 PID: 22172 Comm: syz.2.2440 Not tainted syzkaller #0 PREEMPT(full) [ 1335.064246][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1335.064264][T22172] Call Trace: [ 1335.064275][T22172] [ 1335.064288][T22172] dump_stack_lvl+0x100/0x190 [ 1335.064330][T22172] should_fail_ex.cold+0x5/0xa [ 1335.064368][T22172] should_failslab+0xc2/0x120 [ 1335.064425][T22172] __kmalloc_noprof+0xfc/0x820 [ 1335.064463][T22172] ? lockdep_init_map_type+0x5c/0x250 [ 1335.064495][T22172] ? ops_init+0x77/0x5f0 [ 1335.064552][T22172] ops_init+0x77/0x5f0 [ 1335.064604][T22172] setup_net+0x118/0x3a0 [ 1335.064653][T22172] ? __pfx_setup_net+0x10/0x10 [ 1335.064701][T22172] ? copy_net_ns+0x45d/0x7c0 [ 1335.064738][T22172] copy_net_ns+0x46f/0x7c0 [ 1335.064769][T22172] create_new_namespaces+0x3ea/0xac0 [ 1335.064809][T22172] unshare_nsproxy_namespaces+0xf2/0x220 [ 1335.064843][T22172] ksys_unshare+0x438/0xab0 [ 1335.064882][T22172] ? __pfx_ksys_unshare+0x10/0x10 [ 1335.064933][T22172] __x64_sys_unshare+0x31/0x40 [ 1335.064967][T22172] do_syscall_64+0x115/0x840 [ 1335.065006][T22172] ? clear_bhb_loop+0x40/0x90 [ 1335.065039][T22172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.065067][T22172] RIP: 0033:0x7f8157d9e0d9 [ 1335.065091][T22172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.065118][T22172] RSP: 002b:00007f8158d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1335.065147][T22172] RAX: ffffffffffffffda RBX: 00007f8158026090 RCX: 00007f8157d9e0d9 [ 1335.065166][T22172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1335.065182][T22172] RBP: 00007f8157e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1335.065199][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.065216][T22172] R13: 00007f8158026128 R14: 00007f8158026090 R15: 00007ffcd5a995b8 [ 1335.065256][T22172] [ 1338.281170][T22213] FAULT_INJECTION: forcing a failure. [ 1338.281170][T22213] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.329026][T22213] CPU: 1 UID: 0 PID: 22213 Comm: syz.1.2446 Not tainted syzkaller #0 PREEMPT(full) [ 1338.329069][T22213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1338.329088][T22213] Call Trace: [ 1338.329098][T22213] [ 1338.329111][T22213] dump_stack_lvl+0x100/0x190 [ 1338.329156][T22213] should_fail_ex.cold+0x5/0xa [ 1338.329194][T22213] should_failslab+0xc2/0x120 [ 1338.329239][T22213] __kmalloc_cache_noprof+0x91/0x6c0 [ 1338.329276][T22213] ? ipv4_mib_init_net+0x277/0x500 [ 1338.329330][T22213] ipv4_mib_init_net+0x277/0x500 [ 1338.329376][T22213] ? __pfx_ipv4_mib_init_net+0x10/0x10 [ 1338.329419][T22213] ops_init+0x1e2/0x5f0 [ 1338.329468][T22213] setup_net+0x118/0x3a0 [ 1338.329513][T22213] ? __pfx_setup_net+0x10/0x10 [ 1338.329561][T22213] ? mutex_init_lockdep+0xf1/0x120 [ 1338.329601][T22213] copy_net_ns+0x46f/0x7c0 [ 1338.329637][T22213] create_new_namespaces+0x3ea/0xac0 [ 1338.329681][T22213] unshare_nsproxy_namespaces+0xf2/0x220 [ 1338.329720][T22213] ksys_unshare+0x438/0xab0 [ 1338.329763][T22213] ? __pfx_ksys_unshare+0x10/0x10 [ 1338.329819][T22213] __x64_sys_unshare+0x31/0x40 [ 1338.329860][T22213] do_syscall_64+0x115/0x840 [ 1338.329910][T22213] ? clear_bhb_loop+0x40/0x90 [ 1338.329947][T22213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.329980][T22213] RIP: 0033:0x7f6cb599e0d9 [ 1338.330006][T22213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.330035][T22213] RSP: 002b:00007f6cb68de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1338.330066][T22213] RAX: ffffffffffffffda RBX: 00007f6cb5c26090 RCX: 00007f6cb599e0d9 [ 1338.330086][T22213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1338.330105][T22213] RBP: 00007f6cb5a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1338.330123][T22213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.330141][T22213] R13: 00007f6cb5c26128 R14: 00007f6cb5c26090 R15: 00007ffdab2f0b08 [ 1338.330183][T22213] [ 1338.625313][T22220] FAULT_INJECTION: forcing a failure. [ 1338.625313][T22220] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.638136][T22220] CPU: 1 UID: 0 PID: 22220 Comm: syz.2.2448 Not tainted syzkaller #0 PREEMPT(full) [ 1338.638181][T22220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1338.638199][T22220] Call Trace: [ 1338.638210][T22220] [ 1338.638222][T22220] dump_stack_lvl+0x100/0x190 [ 1338.638265][T22220] should_fail_ex.cold+0x5/0xa [ 1338.638302][T22220] should_failslab+0xc2/0x120 [ 1338.638359][T22220] __kmalloc_cache_noprof+0x91/0x6c0 [ 1338.638395][T22220] ? ipv4_mib_init_net+0x277/0x500 [ 1338.638446][T22220] ipv4_mib_init_net+0x277/0x500 [ 1338.638491][T22220] ? __pfx_ipv4_mib_init_net+0x10/0x10 [ 1338.638536][T22220] ops_init+0x1e2/0x5f0 [ 1338.638589][T22220] setup_net+0x118/0x3a0 [ 1338.638638][T22220] ? __pfx_setup_net+0x10/0x10 [ 1338.638686][T22220] ? mutex_init_lockdep+0xf1/0x120 [ 1338.638727][T22220] copy_net_ns+0x46f/0x7c0 [ 1338.638763][T22220] create_new_namespaces+0x3ea/0xac0 [ 1338.638808][T22220] unshare_nsproxy_namespaces+0xf2/0x220 [ 1338.638846][T22220] ksys_unshare+0x438/0xab0 [ 1338.638890][T22220] ? __pfx_ksys_unshare+0x10/0x10 [ 1338.638944][T22220] __x64_sys_unshare+0x31/0x40 [ 1338.638985][T22220] do_syscall_64+0x115/0x840 [ 1338.639026][T22220] ? clear_bhb_loop+0x40/0x90 [ 1338.639064][T22220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.639097][T22220] RIP: 0033:0x7f8157d9e0d9 [ 1338.639125][T22220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.639155][T22220] RSP: 002b:00007f8158d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1338.639186][T22220] RAX: ffffffffffffffda RBX: 00007f8158026090 RCX: 00007f8157d9e0d9 [ 1338.639207][T22220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1338.639226][T22220] RBP: 00007f8157e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1338.639245][T22220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.639263][T22220] R13: 00007f8158026128 R14: 00007f8158026090 R15: 00007ffcd5a995b8 [ 1338.639305][T22220] [ 1342.842654][T19994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.050946][T19994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.239986][T19994] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.441269][T19994] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.495367][T22282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1343.520216][T22282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1343.535411][T22282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1343.545850][T22282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1343.554262][T22282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1345.648282][T17569] Bluetooth: hci0: command tx timeout [ 1345.953654][T19994] bridge_slave_1: left allmulticast mode [ 1345.961377][T19994] bridge_slave_1: left promiscuous mode [ 1345.967133][T19994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.980304][T19994] bridge_slave_0: left allmulticast mode [ 1345.988000][T19994] bridge_slave_0: left promiscuous mode [ 1345.993805][T19994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.144114][T19994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.156447][T19994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.173850][T19994] bond0 (unregistering): Released all slaves [ 1347.611217][T19994] hsr_slave_0: left promiscuous mode [ 1347.644404][T19994] hsr_slave_1: left promiscuous mode [ 1347.675310][T19994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.710169][T19994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.731137][T17569] Bluetooth: hci0: command tx timeout [ 1347.756342][T22343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2465'. [ 1347.781400][T19994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.789550][T19994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.813700][T19994] veth1_macvtap: left promiscuous mode [ 1347.837742][T19994] veth0_macvtap: left promiscuous mode [ 1347.858404][T19994] veth1_vlan: left promiscuous mode [ 1347.874813][T19994] veth0_vlan: left promiscuous mode [ 1348.429209][T19994] team0 (unregistering): Port device team_slave_1 removed [ 1348.492356][T19994] team0 (unregistering): Port device team_slave_0 removed [ 1348.713717][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1348.941887][T22281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.950251][T22281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.961484][T22281] bridge_slave_0: entered allmulticast mode [ 1348.972274][T22281] bridge_slave_0: entered promiscuous mode [ 1349.022434][T22281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.038606][T22281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.046164][T22281] bridge_slave_1: entered allmulticast mode [ 1349.072266][T22281] bridge_slave_1: entered promiscuous mode [ 1349.178798][T22281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.204502][T22281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.350505][T22281] team0: Port device team_slave_0 added [ 1349.385940][T22281] team0: Port device team_slave_1 added [ 1349.499458][T22281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.515924][T22281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.582357][T22281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.617352][T22281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.640833][T22281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.667473][T22281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.681341][T22360] netlink: 'syz.2.2469': attribute type 33 has an invalid length. [ 1349.689708][T22360] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2469'. [ 1349.809489][T17569] Bluetooth: hci0: command tx timeout [ 1349.830884][T22360] sd 0:0:1:0: PR command failed: 1026 [ 1349.849467][T22281] hsr_slave_0: entered promiscuous mode [ 1349.851557][T22360] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1349.862732][T22360] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1349.871820][T22281] hsr_slave_1: entered promiscuous mode [ 1349.881724][T22281] debugfs: 'hsr0' already exists in 'hsr' [ 1349.889855][T22281] Cannot create hsr debugfs directory [ 1350.721351][T22388] sd 0:0:1:0: PR command failed: 1026 [ 1350.735300][T22388] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1350.750206][T22385] netlink: 'syz.2.2472': attribute type 33 has an invalid length. [ 1350.765838][T22388] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1350.780010][T22385] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2472'. [ 1350.808126][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1351.888234][T17569] Bluetooth: hci0: command tx timeout [ 1352.964759][T22393] Process accounting resumed [ 1353.222729][T22440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2479'. [ 1354.905259][T22474] netlink: 'syz.2.2482': attribute type 33 has an invalid length. [ 1354.930912][T22474] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2482'. [ 1355.077956][T22474] sd 0:0:1:0: PR command failed: 1026 [ 1355.090933][T22474] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1355.109197][T22474] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1359.050666][T22534] FAULT_INJECTION: forcing a failure. [ 1359.050666][T22534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.064329][T22534] CPU: 0 UID: 0 PID: 22534 Comm: syz.3.2491 Not tainted syzkaller #0 PREEMPT(full) [ 1359.064369][T22534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1359.064387][T22534] Call Trace: [ 1359.064396][T22534] [ 1359.064408][T22534] dump_stack_lvl+0x100/0x190 [ 1359.064449][T22534] should_fail_ex.cold+0x5/0xa [ 1359.064483][T22534] _copy_from_iter+0x1f4/0x1690 [ 1359.064608][T22534] ? __pfx__copy_from_iter+0x10/0x10 [ 1359.064662][T22534] ? __pfx___might_resched+0x10/0x10 [ 1359.064707][T22534] ? kfree+0x1e5/0x6c0 [ 1359.064741][T22534] file_tty_write.isra.0+0x45b/0x890 [ 1359.064825][T22534] redirected_tty_write+0xd4/0x120 [ 1359.064865][T22534] vfs_write+0x6ac/0x1050 [ 1359.064895][T22534] ? __pfx_redirected_tty_write+0x10/0x10 [ 1359.064942][T22534] ? __pfx_vfs_write+0x10/0x10 [ 1359.064967][T22534] ? find_held_lock+0x2b/0x80 [ 1359.065031][T22534] ksys_write+0x12a/0x250 [ 1359.065070][T22534] ? __pfx_ksys_write+0x10/0x10 [ 1359.065119][T22534] do_syscall_64+0x115/0x840 [ 1359.065159][T22534] ? clear_bhb_loop+0x40/0x90 [ 1359.065196][T22534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.065228][T22534] RIP: 0033:0x7f6a8fd9e0d9 [ 1359.065254][T22534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.065283][T22534] RSP: 002b:00007f6a90d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1359.065313][T22534] RAX: ffffffffffffffda RBX: 00007f6a90025fa0 RCX: 00007f6a8fd9e0d9 [ 1359.065333][T22534] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 1359.065351][T22534] RBP: 00007f6a90d37090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.065368][T22534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.065385][T22534] R13: 00007f6a90026038 R14: 00007f6a90025fa0 R15: 00007ffd73a89218 [ 1359.065426][T22534] [ 1359.134551][T22536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2490'. [ 1360.682701][T22557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2494'. [ 1361.891037][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.901798][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.953286][T22599] netlink: 'syz.2.2501': attribute type 33 has an invalid length. [ 1364.961492][T22599] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2501'. [ 1365.065655][T22599] sd 0:0:1:0: PR command failed: 1026 [ 1365.077668][T22599] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1365.084505][T22599] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1366.626746][T22631] NFSD: Failed to start, no listeners configured. [ 1367.135662][T22634] NFSD: Failed to start, no listeners configured. [ 1367.242242][T22282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1367.255973][T22282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1367.265869][T22282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1367.274360][T22282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1367.287906][T22282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1368.100264][T22662] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1368.557584][T22676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2515'. [ 1369.300659][T22637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.320084][T22637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.327474][T22637] bridge_slave_0: entered allmulticast mode [ 1369.327779][T22282] Bluetooth: hci4: command tx timeout [ 1369.336937][T22637] bridge_slave_0: entered promiscuous mode [ 1369.379044][T22637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.386362][T22637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.394148][T22637] bridge_slave_1: entered allmulticast mode [ 1369.402559][T22637] bridge_slave_1: entered promiscuous mode [ 1369.495349][T22637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.517139][T22637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.562737][T22637] team0: Port device team_slave_0 added [ 1369.581393][T22637] team0: Port device team_slave_1 added [ 1369.627003][T22637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.634707][T22637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.661343][T22637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.674846][T22637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.682374][T22637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.709217][T22637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.927346][T22693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2517'. [ 1369.980873][T22637] hsr_slave_0: entered promiscuous mode [ 1369.995630][T22637] hsr_slave_1: entered promiscuous mode [ 1370.008473][T22637] debugfs: 'hsr0' already exists in 'hsr' [ 1370.026651][T22637] Cannot create hsr debugfs directory [ 1370.121512][T22695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2518'. [ 1371.190881][T22702] kernel read not supported for file /\*)A (pid: 22702 comm: syz.2.2519) [ 1371.199919][ T30] audit: type=1800 audit(4294967413.690:13): pid=22702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2519" name="\*)A" dev="mqueue" ino=179286 res=0 errno=0 [ 1371.407816][T22282] Bluetooth: hci4: command tx timeout [ 1372.364260][T22724] NFSD: Failed to start, no listeners configured. [ 1373.048199][T22731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2523'. [ 1373.489824][T22282] Bluetooth: hci4: command tx timeout [ 1374.668592][T22751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2526'. [ 1375.567687][T22282] Bluetooth: hci4: command tx timeout [ 1378.937784][ T30] audit: type=1807 audit(4294967421.420:14): UNKNOWN=nl80211 res=0 [ 1378.952784][ T30] audit: type=1802 audit(4294967421.420:15): pid=22796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2533" res=0 errno=0 [ 1379.774013][T22794] ima: policy update failed [ 1379.784797][ T30] audit: type=1802 audit(4294967422.270:16): pid=22794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2533" res=0 errno=0 [ 1380.738049][T22824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2536'. [ 1382.327267][T22834] netlink: 'syz.3.2538': attribute type 33 has an invalid length. [ 1382.335470][T22834] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1382.407077][T22834] sd 0:0:1:0: PR command failed: 1026 [ 1382.412803][T22834] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1382.420121][T22834] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1382.673995][T22837] netlink: 'syz.3.2539': attribute type 33 has an invalid length. [ 1382.682150][T22837] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2539'. [ 1382.776920][T22837] sd 0:0:1:0: PR command failed: 1026 [ 1382.783409][T22837] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1382.791701][T22837] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1383.175749][T22842] Process accounting paused [ 1384.299534][T22856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2544'. [ 1386.446195][T22876] netlink: 'syz.3.2548': attribute type 33 has an invalid length. [ 1386.487959][T22876] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2548'. [ 1386.519707][T22877] sd 0:0:1:0: PR command failed: 1026 [ 1386.540540][T22877] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1386.553780][T22877] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1388.063563][T22909] netlink: 'syz.2.2553': attribute type 3 has an invalid length. [ 1388.076406][T22909] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2553'. [ 1388.368133][T22919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2554'. [ 1403.684303][T17569] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1403.695280][T17569] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1403.705021][T17569] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1403.715927][T17569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1403.726898][T17569] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1403.942067][T23086] netlink: 'syz.3.2579': attribute type 33 has an invalid length. [ 1403.982051][T23086] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1405.546428][T23081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.554079][T23081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.561600][T23081] bridge_slave_0: entered allmulticast mode [ 1405.571332][T23081] bridge_slave_0: entered promiscuous mode [ 1405.601224][T23081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.617904][T23081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.635977][T23081] bridge_slave_1: entered allmulticast mode [ 1405.651543][T23081] bridge_slave_1: entered promiscuous mode [ 1405.807807][T17569] Bluetooth: hci5: command tx timeout [ 1405.834787][T23081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.983960][T23081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.251348][T23081] team0: Port device team_slave_0 added [ 1406.272919][T23081] team0: Port device team_slave_1 added [ 1406.388517][T23081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.395552][T23081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.425442][T23081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.679121][T23081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.686309][T23081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1406.730696][T23081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.807412][T23081] hsr_slave_0: entered promiscuous mode [ 1406.816475][T17569] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1406.817128][T23081] hsr_slave_1: entered promiscuous mode [ 1406.833541][T23081] debugfs: 'hsr0' already exists in 'hsr' [ 1406.841960][T23081] Cannot create hsr debugfs directory [ 1407.887708][T22282] Bluetooth: hci5: command tx timeout [ 1408.848520][T17569] Bluetooth: hci1: command 0x0406 tx timeout [ 1409.968672][T22282] Bluetooth: hci5: command tx timeout [ 1410.927724][T22282] Bluetooth: hci1: command 0x0406 tx timeout [ 1412.047771][T17569] Bluetooth: hci5: command tx timeout [ 1412.143728][T23203] FAULT_INJECTION: forcing a failure. [ 1412.143728][T23203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.160011][T23203] CPU: 0 UID: 0 PID: 23203 Comm: syz.2.2595 Not tainted syzkaller #0 PREEMPT(full) [ 1412.160037][T23203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1412.160048][T23203] Call Trace: [ 1412.160054][T23203] [ 1412.160061][T23203] dump_stack_lvl+0x100/0x190 [ 1412.160088][T23203] should_fail_ex.cold+0x5/0xa [ 1412.160109][T23203] _copy_to_user+0x32/0xd0 [ 1412.160141][T23203] simple_read_from_buffer+0xcb/0x170 [ 1412.160241][T23203] proc_fail_nth_read+0x1af/0x230 [ 1412.160269][T23203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1412.160299][T23203] ? rw_verify_area+0xce/0x6d0 [ 1412.160326][T23203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1412.160351][T23203] vfs_read+0x1e4/0xb40 [ 1412.160371][T23203] ? __pfx_vfs_read+0x10/0x10 [ 1412.160388][T23203] ? __fget_files+0x215/0x3d0 [ 1412.160410][T23203] ? __fget_files+0x21f/0x3d0 [ 1412.160433][T23203] ksys_read+0x12a/0x250 [ 1412.160450][T23203] ? __pfx_ksys_read+0x10/0x10 [ 1412.160473][T23203] do_syscall_64+0x115/0x840 [ 1412.160499][T23203] ? clear_bhb_loop+0x40/0x90 [ 1412.160521][T23203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.160540][T23203] RIP: 0033:0x7f8157d5e90e [ 1412.160556][T23203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1412.160574][T23203] RSP: 002b:00007f8158d1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1412.160593][T23203] RAX: ffffffffffffffda RBX: 00007f8158d1e6c0 RCX: 00007f8157d5e90e [ 1412.160605][T23203] RDX: 000000000000000f RSI: 00007f8158d1e0a0 RDI: 0000000000000005 [ 1412.160616][T23203] RBP: 00007f8158d1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.160627][T23203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.160637][T23203] R13: 00007f8158026128 R14: 00007f8158026090 R15: 00007ffcd5a995b8 [ 1412.160660][T23203] [ 1412.970720][T23219] FAULT_INJECTION: forcing a failure. [ 1412.970720][T23219] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.983656][T23219] CPU: 1 UID: 0 PID: 23219 Comm: syz.2.2597 Not tainted syzkaller #0 PREEMPT(full) [ 1412.983697][T23219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1412.983714][T23219] Call Trace: [ 1412.983723][T23219] [ 1412.983734][T23219] dump_stack_lvl+0x100/0x190 [ 1412.983773][T23219] should_fail_ex.cold+0x5/0xa [ 1412.983808][T23219] should_failslab+0xc2/0x120 [ 1412.983851][T23219] __kmalloc_noprof+0xfc/0x820 [ 1412.983890][T23219] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1412.983932][T23219] ? lsm_blob_alloc+0x68/0x90 [ 1412.983972][T23219] lsm_blob_alloc+0x68/0x90 [ 1412.983999][T23219] security_sk_alloc+0x2d/0x290 [ 1412.984034][T23219] sk_prot_alloc+0x1d1/0x2a0 [ 1412.984070][T23219] sk_alloc+0x36/0xe80 [ 1412.984113][T23219] inet_create+0x3a0/0x1060 [ 1412.984158][T23219] ? inet_create+0x94/0x1060 [ 1412.984209][T23219] __sock_create+0x339/0x860 [ 1412.984252][T23219] inet_ctl_sock_create+0x94/0x230 [ 1412.984296][T23219] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 1412.984337][T23219] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1412.984367][T23219] ? lockdep_init_map_type+0x5c/0x250 [ 1412.984399][T23219] ? lockdep_init_map_type+0x5c/0x250 [ 1412.984431][T23219] ? __pfx_igmp_net_init+0x10/0x10 [ 1412.984477][T23219] igmp_net_init+0xd0/0x150 [ 1412.984518][T23219] ops_init+0x1e2/0x5f0 [ 1412.984579][T23219] setup_net+0x118/0x3a0 [ 1412.984652][T23219] ? __pfx_setup_net+0x10/0x10 [ 1412.984699][T23219] ? mutex_init_lockdep+0xf1/0x120 [ 1412.984735][T23219] copy_net_ns+0x46f/0x7c0 [ 1412.984762][T23219] create_new_namespaces+0x3ea/0xac0 [ 1412.984803][T23219] unshare_nsproxy_namespaces+0xf2/0x220 [ 1412.984841][T23219] ksys_unshare+0x438/0xab0 [ 1412.984884][T23219] ? __pfx_ksys_unshare+0x10/0x10 [ 1412.984936][T23219] __x64_sys_unshare+0x31/0x40 [ 1412.984975][T23219] do_syscall_64+0x115/0x840 [ 1412.985012][T23219] ? clear_bhb_loop+0x40/0x90 [ 1412.985045][T23219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.985076][T23219] RIP: 0033:0x7f8157d9e0d9 [ 1412.985102][T23219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.985129][T23219] RSP: 002b:00007f8158d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1412.985159][T23219] RAX: ffffffffffffffda RBX: 00007f8158026090 RCX: 00007f8157d9e0d9 [ 1412.985176][T23219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1412.985191][T23219] RBP: 00007f8157e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1412.985210][T23219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1412.985228][T23219] R13: 00007f8158026128 R14: 00007f8158026090 R15: 00007ffcd5a995b8 [ 1412.985269][T23219] [ 1412.985499][T23219] Failed to initialize the IGMP autojoin socket (err -12) [ 1415.431383][T23248] ubi0: attaching mtd0 [ 1415.442917][T23248] ubi0 error: validate_ec_hdr: bad VID header offset 64, expected 65 [ 1415.453041][T23248] ubi0 error: validate_ec_hdr: bad EC header [ 1415.459895][T23248] Erase counter header dump: [ 1415.464787][T23248] magic 0x55424923 [ 1415.469954][T23248] version 1 [ 1415.473911][T23248] ec 1 [ 1415.481081][T23248] vid_hdr_offset 64 [ 1415.489835][T23248] data_offset 128 [ 1415.499426][T23248] image_seq -862183689 [ 1415.509709][T23248] hdr_crc 0x4e72e267 [ 1415.521522][T23248] erase counter header hexdump: [ 1415.533057][T23248] CPU: 1 UID: 0 PID: 23248 Comm: syz.2.2603 Not tainted syzkaller #0 PREEMPT(full) [ 1415.533091][T23248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1415.533109][T23248] Call Trace: [ 1415.533119][T23248] [ 1415.533130][T23248] dump_stack_lvl+0x100/0x190 [ 1415.533170][T23248] validate_ec_hdr+0x2d0/0x330 [ 1415.533220][T23248] ubi_io_read_ec_hdr+0x656/0x6d0 [ 1415.533262][T23248] ubi_attach+0x601/0x4d30 [ 1415.533321][T23248] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1415.533367][T23248] ? ubi_msg+0x114/0x159 [ 1415.533437][T23248] ? __pfx_ubi_msg+0x10/0x10 [ 1415.533468][T23248] ? __pfx_ubi_attach+0x10/0x10 [ 1415.533510][T23248] ? lockdep_init_map_type+0x5c/0x250 [ 1415.533544][T23248] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1415.533587][T23248] ? __vmalloc_node_noprof+0xad/0xf0 [ 1415.533631][T23248] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 1415.533685][T23248] ubi_attach_mtd_dev+0x139f/0x32a0 [ 1415.533748][T23248] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 1415.533798][T23248] ? __pfx_get_mtd_device+0x10/0x10 [ 1415.533907][T23248] ctrl_cdev_ioctl+0x36a/0x400 [ 1415.533938][T23248] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1415.533978][T23248] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1415.534009][T23248] __x64_sys_ioctl+0x18e/0x210 [ 1415.534054][T23248] do_syscall_64+0x115/0x840 [ 1415.534090][T23248] ? clear_bhb_loop+0x40/0x90 [ 1415.534130][T23248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.534162][T23248] RIP: 0033:0x7f8157d9e0d9 [ 1415.534187][T23248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.534226][T23248] RSP: 002b:00007f8158d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.534256][T23248] RAX: ffffffffffffffda RBX: 00007f8158025fa0 RCX: 00007f8157d9e0d9 [ 1415.534277][T23248] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000004 [ 1415.534296][T23248] RBP: 00007f8157e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1415.534315][T23248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.534332][T23248] R13: 00007f8158026038 R14: 00007f8158025fa0 R15: 00007ffcd5a995b8 [ 1415.534370][T23248] [ 1415.535929][T23248] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 1415.908854][T23248] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1422.109611][T23340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2616'. [ 1423.331171][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.338091][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.758136][T23370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2622'. [ 1427.088443][T22282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1427.102007][T22282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1427.115038][T22282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1427.123846][T22282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1427.133511][T22282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1428.063836][T23380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.071265][T23380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.079332][T23380] bridge_slave_0: entered allmulticast mode [ 1428.089396][T23380] bridge_slave_0: entered promiscuous mode [ 1428.098695][T23380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.105949][T23380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.114614][T23380] bridge_slave_1: entered allmulticast mode [ 1428.122287][T23380] bridge_slave_1: entered promiscuous mode [ 1428.153493][T23380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1428.165653][T23380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.198215][T23380] team0: Port device team_slave_0 added [ 1428.206244][T23380] team0: Port device team_slave_1 added [ 1428.235967][T23380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.242972][T23380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.269429][T23380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.282314][T23380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.289679][T23380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.315895][T23380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.361102][T23380] hsr_slave_0: entered promiscuous mode [ 1428.367927][T23380] hsr_slave_1: entered promiscuous mode [ 1428.374188][T23380] debugfs: 'hsr0' already exists in 'hsr' [ 1428.380206][T23380] Cannot create hsr debugfs directory [ 1429.169323][T22282] Bluetooth: hci6: command tx timeout [ 1431.247934][T22282] Bluetooth: hci6: command tx timeout [ 1432.916697][T23455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2632'. [ 1433.327983][T22282] Bluetooth: hci6: command tx timeout [ 1435.407860][T22282] Bluetooth: hci6: command tx timeout [ 1436.767137][T17569] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1436.781902][T17569] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1436.795773][T17569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1436.804655][T17569] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1436.816217][T17569] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1437.601260][T23481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.608935][T23481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.616188][T23481] bridge_slave_0: entered allmulticast mode [ 1437.623838][T23481] bridge_slave_0: entered promiscuous mode [ 1437.632910][T23481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.640297][T23481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.648034][T23481] bridge_slave_1: entered allmulticast mode [ 1437.655390][T23481] bridge_slave_1: entered promiscuous mode [ 1437.685951][T23481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.698539][T23481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.731993][T23481] team0: Port device team_slave_0 added [ 1437.740678][T23481] team0: Port device team_slave_1 added [ 1437.770035][T23481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.787780][T23481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.822699][T23481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.838873][T23481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.847397][T23481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.879946][T23481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.049972][T23481] hsr_slave_0: entered promiscuous mode [ 1438.064709][T23481] hsr_slave_1: entered promiscuous mode [ 1438.077815][T23481] debugfs: 'hsr0' already exists in 'hsr' [ 1438.089668][T23481] Cannot create hsr debugfs directory [ 1438.848635][T17569] Bluetooth: hci7: command tx timeout [ 1440.927817][T17569] Bluetooth: hci7: command tx timeout [ 1443.008585][T17569] Bluetooth: hci7: command tx timeout [ 1445.087852][T22282] Bluetooth: hci7: command tx timeout [ 1446.664326][T23579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2656'. [ 1459.428854][T23680] netlink: 'syz.3.2674': attribute type 33 has an invalid length. [ 1459.436748][T23680] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2674'. [ 1461.944019][T23701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2678'. [ 1463.663102][T17569] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1463.674635][T17569] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1463.684262][T17569] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1463.698373][T17569] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1463.710117][T17569] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1464.779285][T23716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.786670][T23716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.794550][T23716] bridge_slave_0: entered allmulticast mode [ 1464.802067][T23716] bridge_slave_0: entered promiscuous mode [ 1464.810442][T23716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.817874][T23716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.825524][T23716] bridge_slave_1: entered allmulticast mode [ 1464.833198][T23716] bridge_slave_1: entered promiscuous mode [ 1464.864512][T23716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.876558][T23716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.910009][T23716] team0: Port device team_slave_0 added [ 1464.918894][T23716] team0: Port device team_slave_1 added [ 1464.948150][T23716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.955207][T23716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.981466][T23716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.993931][T23716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1465.001305][T23716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1465.046295][T23716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.204747][T23716] hsr_slave_0: entered promiscuous mode [ 1465.211466][T23716] hsr_slave_1: entered promiscuous mode [ 1465.219812][T23716] debugfs: 'hsr0' already exists in 'hsr' [ 1465.225601][T23716] Cannot create hsr debugfs directory [ 1465.808516][T17569] Bluetooth: hci8: command tx timeout [ 1466.371441][T17569] Bluetooth: hci0: command 0x0406 tx timeout [ 1467.888004][T22282] Bluetooth: hci8: command tx timeout [ 1469.968559][T22282] Bluetooth: hci8: command tx timeout [ 1472.047782][T22282] Bluetooth: hci8: command tx timeout [ 1483.136427][T23903] netlink: 'syz.3.2718': attribute type 33 has an invalid length. [ 1483.145308][T23903] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2718'. [ 1484.768784][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.775860][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.135089][T23922] netlink: 'syz.3.2721': attribute type 33 has an invalid length. [ 1485.143176][T23922] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2721'. [ 1485.428501][T23924] netlink: 'syz.3.2722': attribute type 33 has an invalid length. [ 1485.437713][T23924] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2722'. [ 1487.174952][T23943] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2726'. [ 1487.823594][T17569] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1487.841347][T17569] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1487.854379][T17569] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1487.872149][T17569] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1487.880330][T17569] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1488.559603][T23951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.566938][T23951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.574497][T23951] bridge_slave_0: entered allmulticast mode [ 1488.581927][T23951] bridge_slave_0: entered promiscuous mode [ 1488.590590][T23951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.597969][T23951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.605184][T23951] bridge_slave_1: entered allmulticast mode [ 1488.612980][T23951] bridge_slave_1: entered promiscuous mode [ 1488.645510][T23951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.658286][T23951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.692849][T23951] team0: Port device team_slave_0 added [ 1488.701208][T23951] team0: Port device team_slave_1 added [ 1488.731545][T23951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.747740][T23951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.782909][T23951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.797292][T23951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.804685][T23951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.830853][T23951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.962856][T23951] hsr_slave_0: entered promiscuous mode [ 1488.970972][T23951] hsr_slave_1: entered promiscuous mode [ 1488.978469][T23951] debugfs: 'hsr0' already exists in 'hsr' [ 1488.984353][T23951] Cannot create hsr debugfs directory [ 1489.967707][T17569] Bluetooth: hci9: command tx timeout [ 1491.967774][T17569] Bluetooth: hci4: command 0x0406 tx timeout [ 1492.047727][T22282] Bluetooth: hci9: command tx timeout [ 1493.104700][T24009] netlink: 'syz.3.2735': attribute type 33 has an invalid length. [ 1493.112620][T24009] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2735'. [ 1494.127779][T22282] Bluetooth: hci9: command tx timeout [ 1496.207705][T22282] Bluetooth: hci9: command tx timeout [ 1496.881843][T17569] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1496.893560][T17569] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1496.906758][T17569] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1496.918247][T17569] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1496.927350][T17569] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1498.146403][T24051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.164285][T24051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.172047][T24051] bridge_slave_0: entered allmulticast mode [ 1498.179617][T24051] bridge_slave_0: entered promiscuous mode [ 1498.188511][T24051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.195738][T24051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.203528][T24051] bridge_slave_1: entered allmulticast mode [ 1498.211863][T24051] bridge_slave_1: entered promiscuous mode [ 1498.265532][T24051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.291399][T24051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.347912][T24051] team0: Port device team_slave_0 added [ 1498.360464][T24051] team0: Port device team_slave_1 added [ 1498.403025][T24051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.410129][T24051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.443930][T24051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.456363][T24051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.463562][T24051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.489566][T24051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.549241][T24051] hsr_slave_0: entered promiscuous mode [ 1498.555794][T24051] hsr_slave_1: entered promiscuous mode [ 1498.562394][T24051] debugfs: 'hsr0' already exists in 'hsr' [ 1498.568208][T24051] Cannot create hsr debugfs directory [ 1499.007791][T17569] Bluetooth: hci10: command tx timeout [ 1501.087752][T17569] Bluetooth: hci10: command tx timeout [ 1503.168236][T17569] Bluetooth: hci10: command tx timeout [ 1505.247805][T17569] Bluetooth: hci10: command tx timeout [ 1509.783425][T24172] netlink: 'syz.3.2762': attribute type 33 has an invalid length. [ 1509.791566][T24172] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2762'. [ 1511.814532][T24191] kAFS: No cell specified [ 1514.201279][T24208] netlink: 'syz.3.2769': attribute type 33 has an invalid length. [ 1514.209936][T24208] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2769'. [ 1514.858010][ T31] INFO: task syz-executor:22281 blocked for more than 143 seconds. [ 1514.866229][ T31] Not tainted syzkaller #0 [ 1514.871820][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1514.880746][ T31] task:syz-executor state:D stack:24608 pid:22281 tgid:22281 ppid:1 task_flags:0x480140 flags:0x00080003 [ 1514.893028][ T31] Call Trace: [ 1514.896382][ T31] [ 1514.899416][ T31] __schedule+0x125c/0x6730 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1514.903979][ T31] ? __pfx___schedule+0x10/0x10 [ 1514.908935][ T31] ? find_held_lock+0x2b/0x80 [ 1514.914199][ T31] ? schedule+0x225/0x2c0 [ 1514.919048][ T31] schedule+0xdd/0x2c0 [ 1514.923207][ T31] schedule_timeout+0x1b2/0x280 [ 1514.928303][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1514.933785][ T31] ? mark_held_locks+0x40/0x70 [ 1514.938763][ T31] __wait_for_common+0x2e7/0x4c0 [ 1514.943786][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1514.949482][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1514.955027][ T31] remove_one+0x312/0x420 [ 1514.959672][ T31] ? up_write+0x2e5/0x5c0 [ 1514.964087][ T31] __simple_recursive_removal+0x148/0x5c0 [ 1514.969938][ T31] ? __pfx_remove_one+0x10/0x10 [ 1514.974878][ T31] debugfs_remove+0x5d/0x80 [ 1514.979624][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 1514.984925][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 1514.990566][ T31] nsim_drv_remove+0x52/0x1e0 [ 1514.995304][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1515.000875][ T31] device_remove+0xcb/0x180 [ 1515.005643][ T31] device_release_driver_internal+0x44e/0x620 [ 1515.012406][ T31] bus_remove_device+0x2bc/0x560 [ 1515.017616][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1515.023157][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 1515.029016][ T31] device_del+0x376/0x9b0 [ 1515.033415][ T31] ? __pfx_device_del+0x10/0x10 [ 1515.038512][ T31] device_unregister+0x1d/0xe0 [ 1515.043361][ T31] del_device_store+0x346/0x480 [ 1515.048326][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1515.053750][ T31] ? find_held_lock+0x2b/0x80 [ 1515.058608][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1515.063635][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1515.068631][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1515.074064][ T31] bus_attr_store+0x74/0xb0 [ 1515.079030][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1515.084358][ T31] sysfs_kf_write+0xf2/0x150 [ 1515.089214][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1515.094573][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1515.099993][ T31] vfs_write+0x6ac/0x1050 [ 1515.104395][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1515.110409][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1515.127595][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1515.134423][ T31] ksys_write+0x12a/0x250 [ 1515.147599][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1515.154040][ T31] do_syscall_64+0x115/0x840 [ 1515.164475][ T31] ? clear_bhb_loop+0x40/0x90 [ 1515.170236][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.176245][ T31] RIP: 0033:0x7f91db55e90e [ 1515.180833][ T31] RSP: 002b:00007ffedf3d0c98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1515.189444][ T31] RAX: ffffffffffffffda RBX: 000055555685d500 RCX: 00007f91db55e90e [ 1515.197572][ T31] RDX: 0000000000000001 RSI: 00007ffedf3d0d20 RDI: 0000000000000005 [ 1515.205598][ T31] RBP: 00007f91db6358a7 R08: 0000000000000000 R09: 0000000000000000 [ 1515.213786][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.221993][ T31] R13: 00007ffedf3d0d20 R14: 00007f91dc354620 R15: 0000000000000003 [ 1515.230219][ T31] [ 1515.233400][ T31] INFO: task syz.0.2476:22411 blocked for more than 143 seconds. [ 1515.241334][ T31] Not tainted syzkaller #0 [ 1515.246304][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1515.255221][ T31] task:syz.0.2476 state:D stack:28664 pid:22411 tgid:22406 ppid:12033 task_flags:0x400040 flags:0x00080002 [ 1515.267316][ T31] Call Trace: [ 1515.270823][ T31] [ 1515.274005][ T31] __schedule+0x125c/0x6730 [ 1515.279171][ T31] ? __pfx___schedule+0x10/0x10 [ 1515.284135][ T31] ? find_held_lock+0x2b/0x80 [ 1515.289745][ T31] ? schedule+0x225/0x2c0 [ 1515.294422][ T31] schedule+0xdd/0x2c0 [ 1515.298832][ T31] schedule_preempt_disabled+0x13/0x30 [ 1515.304374][ T31] __mutex_lock+0xccc/0x1bd0 [ 1515.309645][ T31] ? devlink_health_report+0x656/0xb00 [ 1515.315293][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1515.320893][ T31] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 1515.328149][ T31] ? devlink_health_report+0x656/0xb00 [ 1515.350449][ T31] devlink_health_report+0x656/0xb00 [ 1515.377886][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 1515.397033][ T31] ? _copy_from_user+0x59/0xd0 [ 1515.416246][ T31] nsim_dev_health_break_write+0x166/0x210 [ 1515.425600][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1515.432123][ T31] full_proxy_write+0x135/0x1a0 [ 1515.437033][ T31] vfs_write+0x2aa/0x1050 [ 1515.441647][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1515.447572][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1515.452396][ T31] ? __fget_files+0x215/0x3d0 [ 1515.458978][ T31] ? __fget_files+0x21f/0x3d0 [ 1515.463835][ T31] ksys_write+0x12a/0x250 [ 1515.468255][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1515.473151][ T31] do_syscall_64+0x115/0x840 [ 1515.477971][ T31] ? clear_bhb_loop+0x40/0x90 [ 1515.482723][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.489890][ T31] RIP: 0033:0x7f5045b9e0d9 [ 1515.494362][ T31] RSP: 002b:00007f5046a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1515.503950][ T31] RAX: ffffffffffffffda RBX: 00007f5045e26090 RCX: 00007f5045b9e0d9 [ 1515.511996][ T31] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1515.520912][ T31] RBP: 00007f5045c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1515.528969][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1515.536968][ T31] R13: 00007f5045e26128 R14: 00007f5045e26090 R15: 00007fff62501938 [ 1515.545339][ T31] [ 1515.550011][ T31] INFO: task syz-executor:22637 blocked for more than 144 seconds. [ 1515.573098][ T31] Not tainted syzkaller #0 [ 1515.584102][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1515.597654][ T31] task:syz-executor state:D stack:24168 pid:22637 tgid:22637 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1515.613447][ T31] Call Trace: [ 1515.616792][ T31] [ 1515.619857][ T31] __schedule+0x125c/0x6730 [ 1515.624449][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1515.629643][ T31] ? __pfx___schedule+0x10/0x10 [ 1515.634545][ T31] ? find_held_lock+0x2b/0x80 [ 1515.639410][ T31] ? schedule+0x225/0x2c0 [ 1515.643799][ T31] schedule+0xdd/0x2c0 [ 1515.648074][ T31] schedule_preempt_disabled+0x13/0x30 [ 1515.653775][ T31] __mutex_lock+0xccc/0x1bd0 [ 1515.658554][ T31] ? del_device_store+0xd1/0x480 [ 1515.663560][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1515.668790][ T31] ? sscanf+0xc7/0x100 [ 1515.672922][ T31] ? __pfx_sscanf+0x10/0x10 [ 1515.677519][ T31] ? __lock_acquire+0x49f/0x1a40 [ 1515.682533][ T31] ? del_device_store+0xd1/0x480 [ 1515.687694][ T31] del_device_store+0xd1/0x480 [ 1515.692561][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1515.698070][ T31] ? find_held_lock+0x2b/0x80 [ 1515.702804][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1515.707839][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1515.712779][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1515.718254][ T31] bus_attr_store+0x74/0xb0 [ 1515.722797][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1515.728594][ T31] sysfs_kf_write+0xf2/0x150 [ 1515.733349][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1515.738767][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1515.744009][ T31] vfs_write+0x6ac/0x1050 [ 1515.748536][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1515.754526][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1515.759401][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1515.764651][ T31] ksys_write+0x12a/0x250 [ 1515.769127][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1515.774174][ T31] do_syscall_64+0x115/0x840 [ 1515.778988][ T31] ? clear_bhb_loop+0x40/0x90 [ 1515.783750][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.789896][ T31] RIP: 0033:0x7f522b75e90e [ 1515.794404][ T31] RSP: 002b:00007ffcebebbaf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1515.802991][ T31] RAX: ffffffffffffffda RBX: 000055558c19d500 RCX: 00007f522b75e90e [ 1515.811635][ T31] RDX: 0000000000000001 RSI: 00007ffcebebbb80 RDI: 0000000000000005 [ 1515.819714][ T31] RBP: 00007f522b8358a7 R08: 0000000000000000 R09: 0000000000000000 [ 1515.827825][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.835851][ T31] R13: 00007ffcebebbb80 R14: 00007f522c554620 R15: 0000000000000003 [ 1515.843913][ T31] [ 1515.846995][ T31] [ 1515.846995][ T31] Showing all locks held in the system: [ 1515.871984][ T31] 1 lock held by ksoftirqd/0/15: [ 1515.887657][ T31] 1 lock held by khungtaskd/31: [ 1515.892601][ T31] #0: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1515.927054][ T31] 2 locks held by getty/9222: [ 1515.931986][ T31] #0: ffff888036cfe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1515.941969][ T31] #1: ffffc900035932e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1515.952264][ T31] 4 locks held by kworker/u10:1/13157: [ 1515.957873][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1515.968436][ T31] #1: ffffc900045cfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1515.978524][ T31] #2: ffffffff90a8a0c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1515.988001][ T31] #3: ffffffff8ebf3aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1515.998260][ T31] 7 locks held by syz-executor/22281: [ 1516.003689][ T31] #0: ffff888036b68450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.012814][ T31] #1: ffff88806a522480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1516.022808][ T31] #2: ffff888029f53d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1516.047532][ T31] #3: ffffffff900100e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1516.059573][ T31] #4: ffff888077ed4128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1516.087575][ T31] #5: ffff888077ed3258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1516.097875][ T31] #6: ffff888076791e20 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1516.110149][ T31] 3 locks held by syz.0.2476/22411: [ 1516.115509][ T31] #0: ffff8880340262b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1516.124834][ T31] #1: ffff888020aaa450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.134707][ T31] #2: ffff888077ed3258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 [ 1516.145632][ T31] 4 locks held by syz-executor/22637: [ 1516.151077][ T31] #0: ffff888036b68450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.160197][ T31] #1: ffff88807efdc880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1516.170164][ T31] #2: ffff888029f53d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1516.180717][ T31] #3: ffffffff900100e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1516.191488][ T31] 4 locks held by syz-executor/23081: [ 1516.196926][ T31] #0: ffff888036b68450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.206484][ T31] #1: ffff88805969a880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1516.217067][ T31] #2: ffff888029f53d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1516.227733][ T31] #3: ffffffff900100e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1516.238845][ T31] 5 locks held by syz.2.2615/23331: [ 1516.244164][ T31] #0: ffff88807f106d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1516.253916][ T31] #1: ffff888036b68450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.263169][ T31] #2: ffff88806a766880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1516.273096][ T31] #3: ffff888029f53d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1516.283222][ T31] #4: ffffffff900100e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1516.293630][ T31] 4 locks held by syz-executor/23380: [ 1516.299122][ T31] #0: ffff888036b68450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.308290][ T31] #1: ffff888077edf880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1516.318277][ T31] #2: ffff888029f53d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1516.328544][ T31] #3: ffffffff900100e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1516.338943][ T31] 4 locks held by syz-executor/23481: [ 1516.344338][ T31] #0: ffff888036b68450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.353423][ T31] #1: ffff888029d8fc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1516.363292][ T31] #2: ffff888029f53d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1516.373623][ T31] #3: ffffffff900100e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1516.384236][ T31] 4 locks held by syz-executor/23716: [ 1516.389970][ T31] #0: ffff888036b68450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.399036][ T31] #1: ffff888054f5f880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1516.408943][ T31] #2: ffff888029f53d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1516.419097][ T31] #3: ffffffff900100e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1516.429570][ T31] 4 locks held by syz-executor/23951: [ 1516.434941][ T31] #0: ffff888036b68450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.444151][ T31] #1: ffff8880298e1880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1516.454167][ T31] #2: ffff888029f53d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1516.464363][ T31] #3: ffffffff900100e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1516.474774][ T31] 4 locks held by syz-executor/24051: [ 1516.480251][ T31] #0: ffff888036b68450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1516.489409][ T31] #1: ffff888054716480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1516.499408][ T31] #2: ffff888029f53d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1516.509573][ T31] #3: ffffffff900100e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1516.520079][ T31] [ 1516.522513][ T31] ============================================= [ 1516.522513][ T31] [ 1516.531510][ T31] NMI backtrace for cpu 1 [ 1516.531532][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1516.531564][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1516.531579][ T31] Call Trace: [ 1516.531588][ T31] [ 1516.531598][ T31] dump_stack_lvl+0x100/0x190 [ 1516.531637][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1516.531672][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1516.531708][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1516.531799][ T31] sys_info+0x141/0x190 [ 1516.531816][ T31] watchdog+0xcb1/0x1030 [ 1516.531848][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1516.531871][ T31] ? __pfx_watchdog+0x10/0x10 [ 1516.531897][ T31] ? __kthread_parkme+0x18c/0x230 [ 1516.531942][ T31] ? kthread+0x13a/0x450 [ 1516.531965][ T31] ? __pfx_watchdog+0x10/0x10 [ 1516.531990][ T31] kthread+0x370/0x450 [ 1516.532013][ T31] ? __pfx_kthread+0x10/0x10 [ 1516.532039][ T31] ret_from_fork+0x72b/0xd50 [ 1516.532062][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1516.532086][ T31] ? __switch_to+0x800/0x10f0 [ 1516.532114][ T31] ? __switch_to_asm+0x39/0x70 [ 1516.532138][ T31] ? __pfx_kthread+0x10/0x10 [ 1516.532163][ T31] ret_from_fork_asm+0x1a/0x30 [ 1516.532197][ T31] [ 1516.532218][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1516.663557][ C0] NMI backtrace for cpu 0 [ 1516.663580][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1516.663603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1516.663619][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1516.663653][ C0] Code: 76 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 0e 13 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1516.663674][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 1516.663694][ C0] RAX: 00000000005ac1a1 RBX: ffffffff8e891480 RCX: ffffffff8bb892d5 [ 1516.663710][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a9b0a RDI: ffffffff8c400a80 [ 1516.663724][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1516.663739][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1516.663752][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1516.663767][ C0] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1516.663807][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1516.663823][ C0] CR2: 00005567e184eee8 CR3: 000000000e994000 CR4: 00000000003526f0 [ 1516.663838][ C0] Call Trace: [ 1516.663846][ C0] [ 1516.663854][ C0] default_idle+0x9/0x10 [ 1516.663883][ C0] default_idle_call+0x6c/0xb0 [ 1516.663912][ C0] do_idle+0x3a7/0x5b0 [ 1516.663938][ C0] ? __pfx_do_idle+0x10/0x10 [ 1516.663960][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1516.663990][ C0] cpu_startup_entry+0x4f/0x60 [ 1516.664014][ C0] rest_init+0x251/0x260 [ 1516.664033][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1516.664148][ C0] start_kernel+0x48e/0x490 [ 1516.664187][ C0] x86_64_start_reservations+0x24/0x30 [ 1516.664219][ C0] x86_64_start_kernel+0x12b/0x130 [ 1516.664252][ C0] common_startup_64+0x13e/0x158 [ 1516.664290][ C0] [ 1516.853161][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1516.860057][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1516.869190][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1516.879260][ T31] Call Trace: [ 1516.882556][ T31] [ 1516.885510][ T31] dump_stack_lvl+0x100/0x190 [ 1516.890222][ T31] vpanic+0x552/0x970 [ 1516.894256][ T31] ? __pfx_vpanic+0x10/0x10 [ 1516.898785][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1516.904973][ T31] panic+0xd1/0xe0 [ 1516.908708][ T31] ? __pfx_panic+0x10/0x10 [ 1516.913144][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1516.919330][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1516.925543][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1516.931735][ T31] ? watchdog.cold+0x1ec/0x234 [ 1516.936525][ T31] ? watchdog+0xcc1/0x1030 [ 1516.940970][ T31] watchdog.cold+0x1fd/0x234 [ 1516.945585][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1516.951417][ T31] ? __pfx_watchdog+0x10/0x10 [ 1516.956121][ T31] ? __kthread_parkme+0x18c/0x230 [ 1516.961167][ T31] ? kthread+0x13a/0x450 [ 1516.965520][ T31] ? __pfx_watchdog+0x10/0x10 [ 1516.970266][ T31] kthread+0x370/0x450 [ 1516.974366][ T31] ? __pfx_kthread+0x10/0x10 [ 1516.978983][ T31] ret_from_fork+0x72b/0xd50 [ 1516.983595][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1516.988736][ T31] ? __switch_to+0x800/0x10f0 [ 1516.993473][ T31] ? __switch_to_asm+0x39/0x70 [ 1516.998310][ T31] ? __pfx_kthread+0x10/0x10 [ 1517.002933][ T31] ret_from_fork_asm+0x1a/0x30 [ 1517.007848][ T31] [ 1517.011258][ T31] Kernel Offset: disabled [ 1517.015669][ T31] Rebooting in 86400 seconds..