last executing test programs: 29.528571541s ago: executing program 1 (id=1324): r0 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x721800, 0x0) copy_file_range$auto(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xfffeffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x40, 0xb, 0x36ec}, 0x2, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082dbd7000fbdbdf277e00f1ff"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 27.920049746s ago: executing program 1 (id=1327): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x10, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pimreg\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x800, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x4}, 0x5, 0x108) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182983, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000000340)={0x8001, 0x9, 0x9, 0x0, 0x4b9c0000}) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) inotify_init1$auto(0x3000000000000) ioctl$auto(r2, 0x400448fc, r2) recvfrom$auto(r0, &(0x7f0000000180)="c0be0a416ad764bbe6e3504fac4a66bc9c46894e56a1aaefd9bb62a3deeb488a37eedee4439fb067e718c734249c521b860c90e6c92726120bd8b18f181f0b8a89d5bd8ab6d5f306a4e9be30b69c76291324985cf362f3e7f159c17e69289f3dcef7643af26c7d40a60be39a934345e91b174b4b6e858b65db0aa215ed3804774341815c3b120f38b528209cecb6859f5c9a96d1ac60e00f9d9acedebbbc93e650fca4f1db573c0a52e398b190aaafe9d3d27014d4750a8dff73fce89ddb", 0xb0d, 0x10001, &(0x7f0000000240)=@rc={0x1f, @any, 0xe}, &(0x7f0000000280)=0x7) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x542f, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 27.006756104s ago: executing program 0 (id=1336): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) read$auto(0x3, 0x0, 0x8080) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = epoll_create$auto(0x70c) epoll_ctl$auto(r2, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x2, 0x4000a) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x301481, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r3, 0x64cd, r3) getsockopt$auto(0xffffffffffffffff, 0x1, 0x7fffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x7f) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x8000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/binderfs/binder1\x00', 0x80, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000c40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r5) sendmsg$auto_TIPC_NL_BEARER_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)={0x18c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x175, 0x3, 0x0, 0x1, [@generic="a40557dc0ffbe4d65630bff53e29cb00d2e04c3076f571f84c3fc9cd8da828f2009bc1e9ae3d1a976b2bbd474244ba84165c3087a3811eca7872597920947109f80847b34f56e9e02466d87aac0dce55cbd4570bb6fdf066d4d84955aa55c0eedd2997a91a", @nested={0x103, 0x12f, 0x0, 0x1, [@nested={0x4, 0xa2}, @generic="d143a11438a3069633c3c42ca160e5a468a8145e48db7a15eb743df7f999b94f8edea8abc78d548595db13d4c72e5cb57064ec22b6b40b55637041bed709647ae71a302ce3f16a3135fe2294e6eaca6e6cd436291d4d5b1c6251bc47ffbb4e6668e3927f46f72e22d77e36e5cfba5432b169c32fa38eafb395674d86e39792bc181d47ddb4f5cbd2d7b75512566124079ea44aa50c61b1e3dcb08345f05f1d9495f20eb08743b3fc21a52e0d6e7ded4f477f473ea05d50c3e8d0a5fe92c08f0e34e895ca1d9632b036309cf761051df6284dcde42517035c4b45f2009fbe7c1ae29c9efaaa45783b00690186c53f686f90b5cbcea83c0d", @nested={0x4, 0x5a}]}, @typed={0x8, 0x129, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x24040855) recvfrom$auto(r5, &(0x7f0000002300), 0x1000, 0x2, &(0x7f0000002400)=@in={0x2, 0x4e24, @local}, &(0x7f0000002440)=0x5d) 25.846849343s ago: executing program 0 (id=1330): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x90001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x6002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) r2 = socket(0x1d, 0x2, 0x7) setsockopt$auto(r2, 0x6b, 0x1, 0x0, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x81, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000001, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x1f, 0x0, 0x6, 0x48001, 0x6, 0xac, 0xa, 0x8, 0xffffffff, 0x6, 0x1, 0x1003, 0x2, 0x20000000000008, 0x1]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(r4, r0, 0x3) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/stat\x00', 0x400, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000340)=""/118, 0x76) modify_ldt$auto(0x5, 0x0, 0x11) socket(0x18, 0xd, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.15/usb40/40-0:1.0/usb40-port2/usb3_lpm_permit\x00', 0x298c41, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x84) 25.437546039s ago: executing program 1 (id=1331): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0xf, 0x3, 0x2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048004}, 0x20004852) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) settimeofday$auto(&(0x7f0000000180)={0xffffffff, 0x9}, &(0x7f00000001c0)={0x6, 0x6}) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$auto_RTC_ALM_READ(r3, 0x541b, 0x0) r4 = gettid() kill$auto(r4, 0x11) msgctl$auto_MSG_STAT(0x2, 0xb, &(0x7f0000000500)={{0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x800, 0x4, 0x80, 0xa}, &(0x7f0000000480)=0xfa, &(0x7f00000004c0)=0x1, 0x2, 0x7, 0x7fffffff, 0x7, 0x18000, 0xf82, 0x1, 0x5, @inferred=r4, @raw=0xffffffff}) msgctl$auto_MSG_INFO(0x7b, 0xc, &(0x7f00000002c0)={{0x100, 0xee01, r5, 0x3ff, 0x3, 0xfffffffa, 0x9}, &(0x7f0000000240)=0xd0, &(0x7f0000000280)=0x3, 0x35, 0x3, 0x3, 0x0, 0x2000000000000009, 0x9, 0x3, 0x7ff, @inferred=r4, @inferred=r4}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 23.890157728s ago: executing program 0 (id=1335): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x90001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x6002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x7) setsockopt$auto(r2, 0x6b, 0x1, 0x0, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x81, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000001, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x1f, 0x0, 0x6, 0x48001, 0x6, 0xac, 0xa, 0x8, 0xffffffff, 0x6, 0x1, 0x1003, 0x2, 0x20000000000008, 0x1]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(r4, r0, 0x3) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/stat\x00', 0x400, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000340)=""/118, 0x76) modify_ldt$auto(0x5, 0x0, 0x11) socket(0x18, 0xd, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.15/usb40/40-0:1.0/usb40-port2/usb3_lpm_permit\x00', 0x298c41, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x84) 23.280315422s ago: executing program 1 (id=1337): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x9, 0x9, 0x6, 0x7fff}, 0x3b) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) mmap$auto(0x0, 0x20007, 0x1004000000000df, 0x16, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x8bff, 0x64c6, 0x7fff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r1, 0x0, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x1f\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) setrlimit$auto(0xa, &(0x7f0000000080)={0x7, 0x5}) socket(0x18, 0x4, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x9) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000200000087c788deb1e689ded72700ac7e75046f5e547f0939e6c37acca832a2dacd007c9e2177923a589076e8dedc15db27d5af71356faabe0cae869409e01eaaf51b3ff9f05159438811b43e8511e85cffde5ac434b65098ab7fd5eca656e770f6a0c84ccb81b98d07eb6826c9de760e875fe12242f37e662835bed249fe0bd132cec7e8cf8e543b8faeebf75fb6961034812a6cefa843b4eafbf2beca656a6ca55464d7de1d56398823d37f8157dcab7d3c42d8bc1af84b34076ffeac979949ba"]) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) 22.946578497s ago: executing program 2 (id=1338): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(r0, &(0x7f0000000140)={0x0, 0x22000008}, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x100000000000000}, 0x0) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) setns(0xc9, 0x0) r3 = socket(0x8, 0x80000, 0x80000003) getsockopt$auto_SO_NO_CHECK(r3, 0x5, 0x42000004, 0x0, &(0x7f0000000040)=0x2) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f00000005c0)="2f34b2626eecd5d362d4f4ce77bca69ad3688b505465bfaf70eab515d26037f246bc757eb69b598f9e3b8ce5561ea5dd5ecb155f037b8bdf05587605acb72a4d69bc65e839af8687af6579daff7aa45e71ad3552d1108e48179c611c01074603283470c0cf725831b934ed9034a04c1c9d15cf99b59a51d609b7e294d6834d2437d866705a6aa63a3b289971a673a9d6c0b315b6dee8df7f7d22d0d4bab624af8a897b7bd03a66e6") ioctl$auto(0xc8, 0x800454e1, 0x5c8d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r1, 0x80044dff, &(0x7f0000000500)="abea1d71a22c2fb47a06ba2bf74770129de95f60df18198cbb6b7c63d1dc26560bf6d396320c7c001b03e8532e8cc9fded75360724716eab7bb45d899f44452bf543d452757a01dc0526e09ad69a34b6ea5b450e0a502f5c8d7fd9ab35c18a010984f5c84b24c94090f029f95ed37dbf4c1036ad0d41847ace2f390aea14004cebc87293069ac84bec173366d2f85305b4b5347443eb925aaa34d0726444e36d0231d2f287ad90b7c6851144") pidfd_send_signal$auto_SIGCONT(r2, 0x12, &(0x7f0000000200)={@_si_pad}, 0x2f3) 21.756140497s ago: executing program 2 (id=1339): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0xf92c, 0x285, 0xf8, r0, 0x6) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) ioctl$auto(0x3, 0xae47, 0x38) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) socket(0x23, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x2) ptrace$auto_PTRACE_DETACH(0x11, 0x0, 0x6, 0x1) sysfs$auto(0x2, 0x44, 0x6) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0xfe, 0xfffffffffffffffc) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.5/usb20/20-0:1.0/usb20-port1/usb3_lpm_permit\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) close_range$auto(r0, r1, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) 21.571715351s ago: executing program 0 (id=1341): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x9, 0x9, 0x6, 0x7fff}, 0x3b) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) mmap$auto(0x0, 0x20007, 0x1004000000000df, 0x16, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x8bff, 0x64c6, 0x7fff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r1, 0x0, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x1f\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) setrlimit$auto(0xa, &(0x7f0000000080)={0x7, 0x5}) socket(0x18, 0x4, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x9) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000200000087c788deb1e689ded72700ac7e75046f5e547f0939e6c37acca832a2dacd007c9e2177923a589076e8dedc15db27d5af71356faabe0cae869409e01eaaf51b3ff9f05159438811b43e8511e85cffde5ac434b65098ab7fd5eca656e770f6a0c84ccb81b98d07eb6826c9de760e875fe12242f37e662835bed249fe0bd132cec7e8cf8e543b8faeebf75fb6961034812a6cefa843b4eafbf2beca656a6ca55464d7de1d56398823d37f8157dcab7d3c42d8bc1af84b34076ffeac979949ba"]) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) 21.245458424s ago: executing program 1 (id=1342): r0 = socket(0x2b, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x80800, 0x0) pselect6$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000440)=@bpf_attr_5={@target_ifindex, r1, 0x0, 0x5, r0, @relative_fd=r0, 0x6}, 0x6f4) io_getevents$auto(0x6, 0x8, 0x1, &(0x7f0000000000)={0xfc8, 0x5, 0x101, 0x8}, &(0x7f0000000040)={0xb0e, 0x7fff}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x28342, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0xfffffffffffffff6, 0x6, 0x0) epoll_pwait2$auto(r2, &(0x7f00000001c0)={0x9, 0x3}, 0x101, &(0x7f0000000200)={0x5, 0xfffffffffffffffc}, &(0x7f0000000240)={0x5}, 0x8) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-1024kB/stats/anon_fault_fallback\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000003800)=""/168, 0xa8) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000280), 0x7813d709f3148674, 0x0) r4 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/setgroups\x00', 0x200, 0x0) readv$auto(r4, &(0x7f0000000400)={0x0, 0x2}, 0x4) getsockopt$auto(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) sysfs$auto(0x2, 0x3b, 0x0) write$auto(r1, &(0x7f0000000000)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x272) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0) sendfile$auto(r5, r5, 0x0, 0x7cc) 20.308582514s ago: executing program 2 (id=1343): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x90001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x6002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x7) setsockopt$auto(r2, 0x6b, 0x1, 0x0, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x81, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000001, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x1f, 0x0, 0x6, 0x48001, 0x6, 0xac, 0xa, 0x8, 0xffffffff, 0x6, 0x1, 0x1003, 0x2, 0x20000000000008, 0x1]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(r4, r0, 0x3) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/stat\x00', 0x400, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000340)=""/118, 0x76) modify_ldt$auto(0x5, 0x0, 0x11) socket(0x18, 0xd, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.15/usb40/40-0:1.0/usb40-port2/usb3_lpm_permit\x00', 0x298c41, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x84) 19.054106616s ago: executing program 0 (id=1344): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x39, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) setns(0xc9, 0x0) sendmsg$auto_GTP_CMD_DELPDP(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd26, 0x200, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x10}, @GTPA_I_TEI={0x8, 0x8, 0xa}, @GTPA_FLOW={0x6, 0x6, 0x9}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x24000005) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sg0\x00', 0x108040, 0x0) ioctl$auto_SG_SET_COMMAND_Q2(r1, 0x2271, &(0x7f0000000200)) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0x3, 0x1, 0x4}, 0x5, 0x108) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182983, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000000340)={0x8001, 0x9, 0x9, 0x0, 0x4b9c0000}) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) inotify_init1$auto(0x3000000000000) ioctl$auto(r2, 0x400448fc, r2) recvfrom$auto(r0, &(0x7f0000000180)="c0be0a416ad764bbe6e3504fac4a66bc9c46894e56a1aaefd9bb62a3deeb488a37eedee4439fb067e718c734249c521b860c90e6c92726120bd8b18f181f0b8a89d5bd8ab6d5f306a4e9be30b69c76291324985cf362f3e7f159c17e69289f3dcef7643af26c7d40a60be39a934345e91b174b4b6e858b65db0aa215ed3804774341815c3b120f38b528209cecb6859f5c9a96d1ac60e00f9d9acedebbbc93e650fca4f1db573c0a52e398b190aaafe9d3d27014d4750a8dff73fce89ddb", 0xb0d, 0x10001, &(0x7f0000000240)=@rc={0x1f, @any, 0xe}, &(0x7f0000000280)=0x7) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x542f, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/010/001\x00', 0xab01, 0x0) 15.495098447s ago: executing program 0 (id=1350): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x9, 0x9, 0x6, 0x7fff}, 0x3b) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) mmap$auto(0x0, 0x20007, 0x1004000000000df, 0x16, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x8bff, 0x64c6, 0x7fff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r1, 0x0, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x1f\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) setrlimit$auto(0xa, &(0x7f0000000080)={0x7, 0x5}) socket(0x18, 0x4, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x9) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000200000087c788deb1e689ded72700ac7e75046f5e547f0939e6c37acca832a2dacd007c9e2177923a589076e8dedc15db27d5af71356faabe0cae869409e01eaaf51b3ff9f05159438811b43e8511e85cffde5ac434b65098ab7fd5eca656e770f6a0c84ccb81b98d07eb6826c9de760e875fe12242f37e662835bed249fe0bd132cec7e8cf8e543b8faeebf75fb6961034812a6cefa843b4eafbf2beca656a6ca55464d7de1d56398823d37f8157dcab7d3c42d8bc1af84b34076ffeac979949ba"]) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) 15.169363968s ago: executing program 2 (id=1351): r0 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x721800, 0x0) copy_file_range$auto(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xfffeffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x40, 0xb, 0x36ec}, 0x2, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082dbd7000fbdbdf277e00f1ff"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) 13.865343569s ago: executing program 3 (id=1352): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x23, 0x80805, 0x0) io_uring_setup$auto(0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x1, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x5) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x70, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x0, 0x8000, 0x403000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x1e, 0x4, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x5, 0x2003f2, 0x15) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, r0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 13.840168505s ago: executing program 2 (id=1353): mmap$auto(0x7c4, 0x4009, 0xb, 0x11, 0x401, 0x10) move_pages$auto(0x0, 0xf56, 0x0, 0x0, 0x0, 0x8000000000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) unshare$auto(0x40000080) r2 = prctl$auto(0xe, 0xe, 0x0, 0x9c, 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) r4 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x40, 0x0) close_range$auto(0xffffffffffffffff, r4, 0xa) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\xf3&@\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0xf92c, 0x285, 0xf8, r0, 0x6) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) ioctl$auto(0x3, 0xae47, 0x38) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) socket(0x23, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x2) ptrace$auto_PTRACE_DETACH(0x11, 0x0, 0x6, 0x1) sysfs$auto(0x2, 0x44, 0x6) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0xfe, 0xfffffffffffffffc) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.5/usb20/20-0:1.0/usb20-port1/usb3_lpm_permit\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) close_range$auto(r0, r1, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) 11.769567512s ago: executing program 3 (id=1356): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x90001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x6002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) recvfrom$auto(r1, 0x0, 0x4, 0x10001, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x7) setsockopt$auto(r2, 0x6b, 0x1, 0x0, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x4, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x81, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000001, 0x335b0ef1, 0xffffdfffffffff81, 0x4]}, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x1f, 0x0, 0x6, 0x48001, 0x6, 0xac, 0xa, 0x8, 0xffffffff, 0x6, 0x1, 0x1003, 0x2, 0x20000000000008, 0x1]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(r4, r0, 0x3) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/stat\x00', 0x400, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000340)=""/118, 0x76) modify_ldt$auto(0x5, 0x0, 0x11) socket(0x18, 0xd, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.15/usb40/40-0:1.0/usb40-port2/usb3_lpm_permit\x00', 0x298c41, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x84) 0s ago: executing program 32 (id=1350): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x9, 0x9, 0x6, 0x7fff}, 0x3b) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0) mmap$auto(0x0, 0x20007, 0x1004000000000df, 0x16, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x8bff, 0x64c6, 0x7fff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r1, 0x0, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x1f\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) setrlimit$auto(0xa, &(0x7f0000000080)={0x7, 0x5}) socket(0x18, 0x4, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x9) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000200000087c788deb1e689ded72700ac7e75046f5e547f0939e6c37acca832a2dacd007c9e2177923a589076e8dedc15db27d5af71356faabe0cae869409e01eaaf51b3ff9f05159438811b43e8511e85cffde5ac434b65098ab7fd5eca656e770f6a0c84ccb81b98d07eb6826c9de760e875fe12242f37e662835bed249fe0bd132cec7e8cf8e543b8faeebf75fb6961034812a6cefa843b4eafbf2beca656a6ca55464d7de1d56398823d37f8157dcab7d3c42d8bc1af84b34076ffeac979949ba"]) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) kernel console output (not intermixed with test programs): tered promiscuous mode [ 772.265110][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.481167][T14039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.588007][T14039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.992248][ T1048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.532850][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.622356][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.990748][ T1048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.014522][ T50] Bluetooth: hci1: command tx timeout [ 774.118343][ T47] bridge_slave_1: left allmulticast mode [ 774.143160][ T47] bridge_slave_1: left promiscuous mode [ 774.165967][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.200163][ T47] bridge_slave_0: left allmulticast mode [ 774.219164][ T47] bridge_slave_0: left promiscuous mode [ 774.242378][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.609692][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.634312][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.668409][ T47] bond0 (unregistering): Released all slaves [ 775.407675][ T47] hsr_slave_0: left promiscuous mode [ 775.437166][ T47] hsr_slave_1: left promiscuous mode [ 775.463330][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.505740][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.560424][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.604183][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.675609][ T47] veth1_macvtap: left promiscuous mode [ 775.702875][ T47] veth0_macvtap: left promiscuous mode [ 775.713613][ T47] veth1_vlan: left promiscuous mode [ 775.731510][ T47] veth0_vlan: left promiscuous mode [ 776.090586][ T50] Bluetooth: hci1: command tx timeout [ 776.577417][ T47] team0 (unregistering): Port device team_slave_1 removed [ 776.637101][ T47] team0 (unregistering): Port device team_slave_0 removed [ 777.172367][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.220396][T14160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.232801][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.547534][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.578565][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.169429][ T50] Bluetooth: hci1: command tx timeout [ 778.356577][T14160] veth0_vlan: entered promiscuous mode [ 778.702352][T14160] veth1_vlan: entered promiscuous mode [ 779.573737][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 779.934306][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.942541][T14363] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.950825][T14363] bridge_slave_0: entered allmulticast mode [ 779.959506][T14363] bridge_slave_0: entered promiscuous mode [ 779.995842][T14363] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.003414][T14363] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.015012][T14363] bridge_slave_1: entered allmulticast mode [ 780.024967][T14363] bridge_slave_1: entered promiscuous mode [ 780.203062][T14363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.249612][ T50] Bluetooth: hci1: command tx timeout [ 780.266165][T14363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.379460][T14363] team0: Port device team_slave_0 added [ 780.401963][T14160] veth0_macvtap: entered promiscuous mode [ 780.434498][T14363] team0: Port device team_slave_1 added [ 780.615260][T14160] veth1_macvtap: entered promiscuous mode [ 780.663465][T14363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.709312][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.845077][T14363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.923190][T14363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.956543][T14363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.079366][T14363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.308844][T14160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.376406][T14363] hsr_slave_0: entered promiscuous mode [ 781.419284][T14363] hsr_slave_1: entered promiscuous mode [ 781.456043][T14363] debugfs: 'hsr0' already exists in 'hsr' [ 781.489986][T14363] Cannot create hsr debugfs directory [ 781.652932][T14160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.796472][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 782.180123][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.452676][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.466960][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.515789][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.534656][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.047078][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.229909][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.273389][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.554434][T14567] futex_wake_op: syz.1.962 tries to shift op by -2048; fix this program [ 785.647882][T14567] futex_wake_op: syz.1.962 tries to shift op by -2048; fix this program [ 786.428203][T14363] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 786.472116][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 786.694081][T14363] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 786.786535][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 786.842250][T14363] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 786.908766][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 786.937828][T14363] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 786.993274][T14363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.176573][T14363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.507632][T14363] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.578692][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.586120][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.666982][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.674304][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.644641][T14363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.672597][T14644] vhci_hcd vhci_hcd.2: invalid port number 16 [ 790.723251][T14644] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 792.271121][T14363] veth0_vlan: entered promiscuous mode [ 792.786291][T14363] veth1_vlan: entered promiscuous mode [ 793.505455][T14685] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 794.619263][T14363] veth0_macvtap: entered promiscuous mode [ 795.054603][T14363] veth1_macvtap: entered promiscuous mode [ 795.748097][T14363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.847124][T14363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.190711][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.435987][ T1048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.556027][T14717] FAULT_INJECTION: forcing a failure. [ 796.556027][T14717] name failslab, interval 1, probability 0, space 0, times 0 [ 796.603366][T14717] CPU: 0 UID: 0 PID: 14717 Comm: syz.3.976 Tainted: G U L syzkaller #0 PREEMPT(full) [ 796.603412][T14717] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 796.603422][T14717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.603438][T14717] Call Trace: [ 796.603446][T14717] [ 796.603456][T14717] dump_stack_lvl+0x100/0x190 [ 796.603495][T14717] should_fail_ex.cold+0x5/0xa [ 796.603525][T14717] should_failslab+0xc2/0x120 [ 796.603562][T14717] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 796.603599][T14717] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 796.603629][T14717] ? __d_alloc+0x35/0xa50 [ 796.603660][T14717] __d_alloc+0x35/0xa50 [ 796.603690][T14717] d_alloc_pseudo+0x1c/0xc0 [ 796.603724][T14717] alloc_file_pseudo+0x118/0x290 [ 796.603758][T14717] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 796.603803][T14717] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 796.603851][T14717] create_pipe_files+0x360/0x970 [ 796.603883][T14717] do_pipe2+0xbd/0x1e0 [ 796.603909][T14717] ? __pfx_do_pipe2+0x10/0x10 [ 796.603935][T14717] ? xfd_validate_state+0x129/0x190 [ 796.603991][T14717] __x64_sys_pipe2+0x54/0x80 [ 796.604018][T14717] do_syscall_64+0x115/0x840 [ 796.604054][T14717] ? clear_bhb_loop+0x70/0xc0 [ 796.604083][T14717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.604108][T14717] RIP: 0033:0x7f18a4f9e0d9 [ 796.604136][T14717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.604162][T14717] RSP: 002b:00007f18a254b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 796.604188][T14717] RAX: ffffffffffffffda RBX: 00007f18a5226450 RCX: 00007f18a4f9e0d9 [ 796.604204][T14717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 796.604220][T14717] RBP: 00007f18a5035024 R08: 0000000000000000 R09: 0000000000000000 [ 796.604235][T14717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.604250][T14717] R13: 00007f18a52264e8 R14: 00007f18a5226450 R15: 00007fff0f2e4a78 [ 796.604281][T14717] [ 796.830595][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.870432][ T1048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.887728][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.898803][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.185964][ T1048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.344494][ T1048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.396255][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.410748][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.716138][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.732900][T11271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 797.745331][T11271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 797.756413][T11271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 797.766702][T11271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 797.775125][T11271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 797.797670][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.172886][ T1048] bridge_slave_1: left allmulticast mode [ 798.205955][ T1048] bridge_slave_1: left promiscuous mode [ 798.226321][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.295256][ T1048] bridge_slave_0: left allmulticast mode [ 798.333073][ T1048] bridge_slave_0: left promiscuous mode [ 798.352693][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.924785][ T1048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.963612][ T1048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.003818][ T1048] bond0 (unregistering): Released all slaves [ 799.838246][T11271] Bluetooth: hci2: command tx timeout [ 800.045301][ T1048] hsr_slave_0: left promiscuous mode [ 800.078126][ T1048] hsr_slave_1: left promiscuous mode [ 800.104891][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.146799][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.180304][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.217496][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.307294][ T1048] veth1_macvtap: left promiscuous mode [ 800.325489][ T1048] veth0_macvtap: left promiscuous mode [ 800.335686][ T1048] veth1_vlan: left promiscuous mode [ 800.354056][ T1048] veth0_vlan: left promiscuous mode [ 800.563888][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 800.582502][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 800.592725][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 800.602624][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 800.617095][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 800.962553][ T1048] team0 (unregistering): Port device team_slave_1 removed [ 800.984966][ T1048] team0 (unregistering): Port device team_slave_0 removed [ 801.215660][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 801.921488][ T50] Bluetooth: hci2: command tx timeout [ 802.636382][ T50] Bluetooth: hci0: command tx timeout [ 802.683228][ T1048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.781742][T14783] ======================================================= [ 802.781742][T14783] WARNING: The mand mount option has been deprecated and [ 802.781742][T14783] and is ignored by this kernel. Remove the mand [ 802.781742][T14783] option from the mount to silence this warning. [ 802.781742][T14783] ======================================================= [ 803.131161][ T1048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.335265][T14777] zswap: compressor not available [ 803.568995][ T1048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.873889][ T1048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.961845][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 803.996047][ T50] Bluetooth: hci2: command tx timeout [ 804.715364][ T50] Bluetooth: hci0: command tx timeout [ 805.382340][ T1048] bridge_slave_1: left allmulticast mode [ 805.406820][ T1048] bridge_slave_1: left promiscuous mode [ 805.434205][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.482961][ T1048] bridge_slave_0: left allmulticast mode [ 805.505000][ T1048] bridge_slave_0: left promiscuous mode [ 805.530007][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.050022][ T1048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.062845][ T1048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.074907][ T50] Bluetooth: hci2: command tx timeout [ 806.082433][ T1048] bond0 (unregistering): Released all slaves [ 806.185594][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 806.464541][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.483547][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.499493][T14721] bridge_slave_0: entered allmulticast mode [ 806.508353][T14721] bridge_slave_0: entered promiscuous mode [ 806.645138][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.664821][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.682177][T14721] bridge_slave_1: entered allmulticast mode [ 806.702439][T14721] bridge_slave_1: entered promiscuous mode [ 806.795843][ T50] Bluetooth: hci0: command tx timeout [ 806.921403][ T1048] hsr_slave_0: left promiscuous mode [ 806.936784][ T1048] hsr_slave_1: left promiscuous mode [ 806.948239][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.966091][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.987023][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.006716][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.041257][ T1048] veth1_macvtap: left promiscuous mode [ 807.054455][ T1048] veth0_macvtap: left promiscuous mode [ 807.066971][ T1048] veth1_vlan: left promiscuous mode [ 807.078411][ T1048] veth0_vlan: left promiscuous mode [ 807.652470][ T1048] team0 (unregistering): Port device team_slave_1 removed [ 807.698986][ T1048] team0 (unregistering): Port device team_slave_0 removed [ 807.970205][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 808.034989][T14721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.061817][T14721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.104660][T14759] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.113954][T14759] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.122589][T14759] bridge_slave_0: entered allmulticast mode [ 808.132386][T14759] bridge_slave_0: entered promiscuous mode [ 808.227698][T14759] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.255809][T14759] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.274771][T14759] bridge_slave_1: entered allmulticast mode [ 808.287122][T14759] bridge_slave_1: entered promiscuous mode [ 808.447671][T14721] team0: Port device team_slave_0 added [ 808.472030][T14721] team0: Port device team_slave_1 added [ 808.521967][T14759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.605395][T14759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.842789][T14759] team0: Port device team_slave_0 added [ 808.874240][ T50] Bluetooth: hci0: command tx timeout [ 808.909031][T14721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.925606][T14866] futex_wake_op: syz.0.984 tries to shift op by -2048; fix this program [ 808.938451][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.970862][T14866] futex_wake_op: syz.0.984 tries to shift op by -2048; fix this program [ 808.986805][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.994188][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.027750][T14866] 0x000000000001-0x000000020000 : "" [ 809.070523][T14721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.112737][T14866] ftl_cs: FTL header corrupt! [ 809.150107][T14759] team0: Port device team_slave_1 added [ 809.380109][T14721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.414255][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.538528][T14721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.711561][T14759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.740486][T14759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.820152][T14759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.923474][T14759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.932003][T14759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.992134][T14759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.105550][T14721] hsr_slave_0: entered promiscuous mode [ 810.122403][T14721] hsr_slave_1: entered promiscuous mode [ 810.299832][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 810.559144][T14759] hsr_slave_0: entered promiscuous mode [ 810.567420][T14759] hsr_slave_1: entered promiscuous mode [ 810.576304][T14759] debugfs: 'hsr0' already exists in 'hsr' [ 810.582547][T14759] Cannot create hsr debugfs directory [ 812.219388][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 813.379914][T14921] vhci_hcd vhci_hcd.2: invalid port number 16 [ 813.444731][T14921] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 813.820347][T14721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 813.871693][T14721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.903346][T14721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 813.931763][T14721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.058436][T14721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 814.101081][T14721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.319133][T14721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 814.366540][T14721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.895051][T14959] futex_wake_op: syz.0.992 tries to shift op by -2048; fix this program [ 814.936601][T14959] futex_wake_op: syz.0.992 tries to shift op by -2048; fix this program [ 815.426976][T14721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.655732][T14949] random: crng reseeded on system resumption [ 816.001802][T14721] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.441344][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.448607][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.901697][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.908952][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.043067][T14759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 817.111829][T14759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.152661][T14759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 817.212721][T14759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.521202][T14759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 817.568629][T14759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.602962][T14759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 817.665562][T14759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.696652][T14759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.833790][T14759] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.910800][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.918097][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.020884][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.028164][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.022984][T14721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.555178][T14721] veth0_vlan: entered promiscuous mode [ 821.610235][T14721] veth1_vlan: entered promiscuous mode [ 821.758524][T14721] veth0_macvtap: entered promiscuous mode [ 821.805015][T14721] veth1_macvtap: entered promiscuous mode [ 822.041295][T14759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.135496][T14721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.210063][T14721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.499316][ T117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.561817][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.628577][T14759] veth0_vlan: entered promiscuous mode [ 822.757286][ T1048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.794280][T14759] veth1_vlan: entered promiscuous mode [ 822.816662][ T1048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.875823][T15017] kexec: Could not allocate control_code_buffer [ 822.947064][T14759] veth0_macvtap: entered promiscuous mode [ 822.980640][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.011224][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.051457][T14759] veth1_macvtap: entered promiscuous mode [ 823.151370][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.214310][T14759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.222473][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.292464][T14759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.396558][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.436669][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.657563][T15095] IPVS: length: 131 != 8 [ 823.706531][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.056046][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.400011][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.449785][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.729494][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.767740][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.128358][T15142] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 827.164056][ T47] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.849439][T15151] vhci_hcd vhci_hcd.2: invalid port number 16 [ 827.892053][T15151] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 831.526150][T15193] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 835.280866][T15232] futex_wake_op: syz.1.1009 tries to shift op by -2048; fix this program [ 835.304232][T15240] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 835.351742][T15232] futex_wake_op: syz.1.1009 tries to shift op by -2048; fix this program [ 835.398292][T15236] 0x000000000001-0x000000020000 : "" [ 835.468984][T15241] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 835.498449][T15236] ftl_cs: FTL header corrupt! [ 835.685082][ T30] audit: type=1804 audit(1843104530.815:8): pid=15241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1017" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=1069 res=1 errno=0 [ 835.807302][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 836.736246][T15260] vhci_hcd vhci_hcd.2: invalid port number 16 [ 836.810298][T15260] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 842.333935][T15327] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 845.724074][T15342] futex_wake_op: syz.3.1024 tries to shift op by -2048; fix this program [ 845.772320][T15342] futex_wake_op: syz.3.1024 tries to shift op by -2048; fix this program [ 845.810967][T15349] 0x000000000001-0x000000020000 : "" [ 845.880769][T15349] ftl_cs: FTL header corrupt! [ 847.299414][T15370] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 847.347512][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 847.392600][T15372] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 847.481556][ T30] audit: type=1804 audit(1843104542.611:9): pid=15370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1026" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=1069 res=1 errno=0 [ 847.611873][ T30] audit: type=1804 audit(1843104542.711:10): pid=15372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1026" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=1069 res=1 errno=0 [ 848.835833][T15341] kexec: Could not allocate control_code_buffer [ 856.666101][T15453] vhci_hcd vhci_hcd.2: invalid port number 16 [ 856.745020][T15453] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 856.967442][T15463] futex_wake_op: syz.0.1042 tries to shift op by -2048; fix this program [ 857.008707][T15463] futex_wake_op: syz.0.1042 tries to shift op by -2048; fix this program [ 857.063910][T15466] 0x000000000001-0x000000020000 : "" [ 857.128132][T15466] ftl_cs: FTL header corrupt! [ 860.543304][T15502] netlink: 'syz.3.1048': attribute type 22 has an invalid length. [ 860.581513][T15502] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1048'. [ 860.803808][T15506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1048'. [ 860.952175][T15506] macvlan0: entered promiscuous mode [ 860.980064][T15506] macvlan0: entered allmulticast mode [ 861.038197][T15506] veth1_vlan: entered allmulticast mode [ 867.162666][T15586] netlink: 'syz.0.1059': attribute type 22 has an invalid length. [ 867.198392][T15586] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1059'. [ 867.419476][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1059'. [ 867.477805][T15590] macvlan0: entered promiscuous mode [ 867.499007][T15590] macvlan0: entered allmulticast mode [ 867.530476][T15590] veth1_vlan: entered allmulticast mode [ 868.065707][T15561] kexec: Could not allocate control_code_buffer [ 868.283280][T15595] netlink: 'syz.1.1070': attribute type 22 has an invalid length. [ 868.333584][T15595] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1070'. [ 868.587734][T15601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1070'. [ 868.647312][T15601] macvlan0: entered promiscuous mode [ 868.681650][T15601] macvlan0: entered allmulticast mode [ 868.737797][T15601] veth1_vlan: entered allmulticast mode [ 870.368293][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.375585][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.296449][T15665] warning: `syz.3.1073' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 873.386765][T15665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1073'. [ 873.654126][T15665] bond0: (slave bond_slave_0): Releasing backup interface [ 876.450631][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.073962][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.374780][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.633317][T15727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.650933][T15727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.661617][T15727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.674018][T15727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.683504][T15727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 878.176843][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.797809][T15727] Bluetooth: hci3: command tx timeout [ 880.199921][ T36] bridge_slave_1: left allmulticast mode [ 880.239448][ T36] bridge_slave_1: left promiscuous mode [ 880.262978][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.313796][ T36] bridge_slave_0: left allmulticast mode [ 880.345425][ T36] bridge_slave_0: left promiscuous mode [ 880.380839][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.069137][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.095318][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.118300][ T36] bond0 (unregistering): Released all slaves [ 881.881290][T15727] Bluetooth: hci3: command tx timeout [ 881.968959][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 882.028713][ T36] hsr_slave_0: left promiscuous mode [ 882.044996][ T36] hsr_slave_1: left promiscuous mode [ 882.063700][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.083518][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.104526][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.128782][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.162087][ T36] veth1_macvtap: left promiscuous mode [ 882.177922][ T36] veth0_macvtap: left promiscuous mode [ 882.192547][ T36] veth1_vlan: left allmulticast mode [ 882.207663][ T36] veth1_vlan: left promiscuous mode [ 882.224098][ T36] veth0_vlan: left promiscuous mode [ 882.579633][ T36] team0 (unregistering): Port device team_slave_1 removed [ 882.602741][ T36] team0 (unregistering): Port device team_slave_0 removed [ 883.529620][T15781] netlink: 'syz.1.1086': attribute type 22 has an invalid length. [ 883.573800][T15781] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1086'. [ 883.769396][T15786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1086'. [ 883.955721][T15727] Bluetooth: hci3: command tx timeout [ 884.448752][T15725] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.504545][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.563594][T15725] bridge_slave_0: entered allmulticast mode [ 884.616654][T15725] bridge_slave_0: entered promiscuous mode [ 884.777687][T15725] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.828402][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.872576][T15725] bridge_slave_1: entered allmulticast mode [ 884.928331][T15725] bridge_slave_1: entered promiscuous mode [ 885.432204][T15725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.760832][T15725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.825276][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 886.034650][T15727] Bluetooth: hci3: command tx timeout [ 886.550303][T15725] team0: Port device team_slave_0 added [ 886.585558][T15725] team0: Port device team_slave_1 added [ 887.021046][T15725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.056659][T15725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.159108][T15725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.341238][T15725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.359375][T15725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.416257][T15725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.891866][T15725] hsr_slave_0: entered promiscuous mode [ 887.926563][T15725] hsr_slave_1: entered promiscuous mode [ 887.951342][T15725] debugfs: 'hsr0' already exists in 'hsr' [ 887.971350][T15725] Cannot create hsr debugfs directory [ 889.024554][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 894.423443][T15725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 894.465290][T15725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 894.590094][T15725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 894.637069][T15725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 894.669111][T15725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 894.729339][T15725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.767008][T15725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 894.828520][T15725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.937934][T15725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.072616][T15725] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.146206][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.153472][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.244298][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.251626][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.037405][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 897.051233][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 897.063298][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 897.080764][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 897.092026][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 899.149799][ T50] Bluetooth: hci1: command tx timeout [ 899.773953][T15725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.227811][ T50] Bluetooth: hci1: command tx timeout [ 901.253478][T15725] veth0_vlan: entered promiscuous mode [ 901.326519][T15725] veth1_vlan: entered promiscuous mode [ 901.531705][T15725] veth0_macvtap: entered promiscuous mode [ 901.601906][T15725] veth1_macvtap: entered promiscuous mode [ 901.881785][T15725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.911582][T15990] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.933092][T15990] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.960523][T15990] bridge_slave_0: entered allmulticast mode [ 901.993241][T15990] bridge_slave_0: entered promiscuous mode [ 902.018041][T15990] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.045695][T15990] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.080049][T15990] bridge_slave_1: entered allmulticast mode [ 902.111492][T15990] bridge_slave_1: entered promiscuous mode [ 902.147638][T15725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.283970][T15990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.332539][T15990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.387000][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.550528][T15990] team0: Port device team_slave_0 added [ 902.570771][T15990] team0: Port device team_slave_1 added [ 902.713605][T15990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.751505][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.821583][T15990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.939822][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.980525][T15990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.008729][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.074187][T15990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.306035][ T50] Bluetooth: hci1: command tx timeout [ 903.341644][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.373636][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.390597][T15990] hsr_slave_0: entered promiscuous mode [ 903.449840][T15990] hsr_slave_1: entered promiscuous mode [ 903.479123][T15990] debugfs: 'hsr0' already exists in 'hsr' [ 903.503957][T15990] Cannot create hsr debugfs directory [ 903.791785][ T30] audit: type=1800 audit(4294967313.599:11): pid=16085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1113" name="dbroot" dev="configfs" ino=87986 res=0 errno=0 [ 903.876603][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.893316][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.275629][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.322470][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.740266][T15990] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.386409][ T50] Bluetooth: hci1: command tx timeout [ 905.445097][T15990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.647856][T15990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.739841][T15990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.911622][T15990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.844008][T15990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 907.865509][T15990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 907.884916][T15990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 907.906315][T15990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 908.078450][T15990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 908.102834][T15990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 908.344947][T15990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 908.368029][T15990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.096784][T15990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.198079][T15990] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.255221][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.262490][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.362257][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.369567][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.740008][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.127653][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.376241][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.505528][T15727] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 912.525246][T15727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 912.537908][T15727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 912.548334][T15727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 912.559375][T15727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 912.731631][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.840616][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 912.858329][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 912.877462][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 912.889045][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 912.897517][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 913.484407][T15990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.785307][ T47] bridge_slave_1: left allmulticast mode [ 913.796037][ T47] bridge_slave_1: left promiscuous mode [ 913.802499][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.826944][ T47] bridge_slave_0: left allmulticast mode [ 913.846807][ T47] bridge_slave_0: left promiscuous mode [ 913.861735][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.219031][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.241822][ T47] bond0 (unregistering): Released all slaves [ 914.390136][T15990] veth0_vlan: entered promiscuous mode [ 914.536610][T15990] veth1_vlan: entered promiscuous mode [ 914.661431][ T50] Bluetooth: hci0: command tx timeout [ 914.980647][ T50] Bluetooth: hci3: command tx timeout [ 915.098682][ T47] hsr_slave_0: left promiscuous mode [ 915.127155][ T47] hsr_slave_1: left promiscuous mode [ 915.152592][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.187513][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.216101][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.243356][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.298448][ T47] veth1_macvtap: left promiscuous mode [ 915.327812][ T47] veth0_macvtap: left promiscuous mode [ 915.347110][ T47] veth1_vlan: left allmulticast mode [ 915.372886][ T47] veth1_vlan: left promiscuous mode [ 915.392674][ T47] veth0_vlan: left promiscuous mode [ 915.898282][ T47] team0 (unregistering): Port device team_slave_1 removed [ 915.920890][ T47] team0 (unregistering): Port device team_slave_0 removed [ 916.077729][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 916.252234][T15990] veth0_macvtap: entered promiscuous mode [ 916.379380][T15990] veth1_macvtap: entered promiscuous mode [ 916.741034][ T50] Bluetooth: hci0: command tx timeout [ 916.804041][T15990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.059830][ T50] Bluetooth: hci3: command tx timeout [ 917.168421][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.392765][T15990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.545326][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.778305][T16247] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 917.965837][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.996034][T16247] File: /dev/nullb0 PID: 16247 Comm: syz.1.1128 [ 918.227537][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.289600][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 918.308543][ T3365] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.540469][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.640249][ T3365] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.818344][ T50] Bluetooth: hci0: command tx timeout [ 918.873916][T16188] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.899618][T16188] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.930691][T16188] bridge_slave_0: entered allmulticast mode [ 918.948434][T16188] bridge_slave_0: entered promiscuous mode [ 919.077727][T16188] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.101576][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.125941][T16188] bridge_slave_1: entered allmulticast mode [ 919.139273][ T50] Bluetooth: hci3: command tx timeout [ 919.161776][T16188] bridge_slave_1: entered promiscuous mode [ 919.301764][T16196] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.327947][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.349450][T16196] bridge_slave_0: entered allmulticast mode [ 919.385361][T16196] bridge_slave_0: entered promiscuous mode [ 919.510414][T16196] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.517806][T16009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.559681][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.571904][T16009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.598982][T16196] bridge_slave_1: entered allmulticast mode [ 919.629455][T16196] bridge_slave_1: entered promiscuous mode [ 919.695324][T16188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.794430][ T3365] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.942705][T16196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.976760][T16188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.156837][T16196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.304125][T16188] team0: Port device team_slave_0 added [ 920.331645][T16188] team0: Port device team_slave_1 added [ 920.432786][T16196] team0: Port device team_slave_0 added [ 920.473819][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 920.535157][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.559426][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.635115][T16196] team0: Port device team_slave_1 added [ 920.649663][ T47] bridge_slave_1: left allmulticast mode [ 920.661314][ T47] bridge_slave_1: left promiscuous mode [ 920.675590][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.704072][ T47] bridge_slave_0: left allmulticast mode [ 920.721618][ T47] bridge_slave_0: left promiscuous mode [ 920.736774][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.920901][ T50] Bluetooth: hci0: command tx timeout [ 921.112498][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.124803][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.135759][ T47] bond0 (unregistering): Released all slaves [ 921.153577][T16188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.187943][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.220070][ T50] Bluetooth: hci3: command tx timeout [ 921.250676][T16188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.282913][T16188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.308274][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.338073][T16188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.682427][T16196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.693350][T16196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.736510][T16196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.971243][T16196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.000626][T16196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.102012][T16196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.210862][ T47] hsr_slave_0: left promiscuous mode [ 922.229132][ T47] hsr_slave_1: left promiscuous mode [ 922.251576][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.283896][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.314008][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.348128][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.409040][ T47] veth1_macvtap: left promiscuous mode [ 922.434656][ T47] veth0_macvtap: left promiscuous mode [ 922.460712][ T47] veth1_vlan: left promiscuous mode [ 922.481413][ T47] veth0_vlan: left promiscuous mode [ 923.113288][ T47] team0 (unregistering): Port device team_slave_1 removed [ 923.155103][ T47] team0 (unregistering): Port device team_slave_0 removed [ 923.333183][T16188] hsr_slave_0: entered promiscuous mode [ 923.350782][T16188] hsr_slave_1: entered promiscuous mode [ 923.373470][T16188] debugfs: 'hsr0' already exists in 'hsr' [ 923.389352][T16188] Cannot create hsr debugfs directory [ 923.414741][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 923.625201][T15727] Bluetooth: hci2: command 0x0406 tx timeout [ 923.768323][T16196] hsr_slave_0: entered promiscuous mode [ 923.783275][T16196] hsr_slave_1: entered promiscuous mode [ 923.792596][T16196] debugfs: 'hsr0' already exists in 'hsr' [ 923.798946][T16196] Cannot create hsr debugfs directory [ 924.504925][ T30] audit: type=1800 audit(4294967334.319:12): pid=16317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1130" name="dbroot" dev="configfs" ino=90330 res=0 errno=0 [ 924.638598][T16314] db_root: cannot open: /var/target [ 924.908809][T16322] random: crng reseeded on system resumption [ 926.538948][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 928.971669][T16377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 930.101045][T16196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 930.139786][T16196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 930.303474][T16196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 930.358233][T16196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 930.409696][T16196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 930.446234][T16196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 930.474494][T16196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 930.517016][T16196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 931.609660][T16188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 931.674218][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.786297][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.794788][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.987210][T16188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 932.036424][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 932.073255][T16188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 932.126701][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 932.428783][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.547159][T15727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 932.561333][T15727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 932.576768][T15727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 932.585913][T15727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 932.598414][T15727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 932.864065][T16188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 932.912768][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 933.107361][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.627922][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.007900][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.437459][T16196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.650444][T15727] Bluetooth: hci1: command tx timeout [ 935.015884][ T13] bridge_slave_1: left allmulticast mode [ 935.041672][ T13] bridge_slave_1: left promiscuous mode [ 935.068061][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.102762][ T13] bridge_slave_0: left allmulticast mode [ 935.126604][ T13] bridge_slave_0: left promiscuous mode [ 935.158308][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.923102][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.965150][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.008970][ T13] bond0 (unregistering): Released all slaves [ 936.074066][T16196] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.200652][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.207896][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.447703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.454986][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.682610][T16188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.731243][T15727] Bluetooth: hci1: command tx timeout [ 936.808268][ T13] hsr_slave_0: left promiscuous mode [ 936.834904][ T13] hsr_slave_1: left promiscuous mode [ 936.859891][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.877787][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.913503][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.932503][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.966494][ T13] veth1_macvtap: left promiscuous mode [ 936.983077][ T13] veth0_macvtap: left promiscuous mode [ 936.995879][ T13] veth1_vlan: left promiscuous mode [ 937.009724][ T13] veth0_vlan: left promiscuous mode [ 937.612835][ T13] team0 (unregistering): Port device team_slave_1 removed [ 937.651123][ T13] team0 (unregistering): Port device team_slave_0 removed [ 938.276677][T16188] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.341488][T16196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 938.552420][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.559775][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.718987][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.726241][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.813908][T15727] Bluetooth: hci1: command tx timeout [ 938.866196][ T13] bridge_slave_1: left allmulticast mode [ 938.901314][ T13] bridge_slave_1: left promiscuous mode [ 938.934841][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.977123][ T13] bridge_slave_0: left allmulticast mode [ 939.016551][ T13] bridge_slave_0: left promiscuous mode [ 939.053828][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.654931][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.695517][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.731312][ T13] bond0 (unregistering): Released all slaves [ 940.122199][T16436] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.160432][T16436] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.196939][T16436] bridge_slave_0: entered allmulticast mode [ 940.232134][T16436] bridge_slave_0: entered promiscuous mode [ 940.365634][T16436] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.381670][T16436] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.390862][T16436] bridge_slave_1: entered allmulticast mode [ 940.400534][T16436] bridge_slave_1: entered promiscuous mode [ 940.543570][ T13] hsr_slave_0: left promiscuous mode [ 940.560594][ T13] hsr_slave_1: left promiscuous mode [ 940.573907][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.593752][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.615209][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.627901][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.651852][ T13] veth1_macvtap: left promiscuous mode [ 940.665205][ T13] veth0_macvtap: left promiscuous mode [ 940.680334][ T13] veth1_vlan: left promiscuous mode [ 940.693333][ T13] veth0_vlan: left promiscuous mode [ 940.891374][T15727] Bluetooth: hci1: command tx timeout [ 941.221049][ T13] team0 (unregistering): Port device team_slave_1 removed [ 941.264440][ T13] team0 (unregistering): Port device team_slave_0 removed [ 941.645258][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 941.743270][T16436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.860099][T16436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.105874][T16436] team0: Port device team_slave_0 added [ 942.147992][T16436] team0: Port device team_slave_1 added [ 942.289365][T16436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.333129][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.442865][T16436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.529896][T16436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.581804][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.719804][T16436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.837542][T16196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.011980][T16436] hsr_slave_0: entered promiscuous mode [ 943.050266][T16436] hsr_slave_1: entered promiscuous mode [ 943.081021][T16436] debugfs: 'hsr0' already exists in 'hsr' [ 943.111737][T16436] Cannot create hsr debugfs directory [ 943.838810][T16196] veth0_vlan: entered promiscuous mode [ 943.939370][T16196] veth1_vlan: entered promiscuous mode [ 944.399036][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 944.477978][T16596] futex_wake_op: syz.1.1142 tries to shift op by -1; fix this program [ 944.500180][T16196] veth0_macvtap: entered promiscuous mode [ 944.682325][T16196] veth1_macvtap: entered promiscuous mode [ 944.963558][T16188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.161597][T16196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.221983][T16196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.389497][ T1048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.455603][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.515456][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.689496][T16188] veth0_vlan: entered promiscuous mode [ 946.065267][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.216644][T16188] veth1_vlan: entered promiscuous mode [ 946.391904][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.418419][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.690710][T16436] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 946.717585][T16436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.758506][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.788493][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.801435][T16436] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 946.829123][T16436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.847473][T16436] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 946.874979][T16436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.957072][T16436] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 946.988257][T16436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 947.087798][T16188] veth0_macvtap: entered promiscuous mode [ 947.178952][T16188] veth1_macvtap: entered promiscuous mode [ 947.403333][T16188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.621922][T16188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.033353][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.163124][ T1048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.270973][T16436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.343913][ T1048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.527112][ T1048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.704357][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.746569][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.796666][T16436] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.959995][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.967375][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.270929][ T1048] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.278176][ T1048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.375904][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.421966][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.718164][T16749] FAULT_INJECTION: forcing a failure. [ 954.718164][T16749] name failslab, interval 1, probability 0, space 0, times 0 [ 954.751259][T16749] CPU: 0 UID: 0 PID: 16749 Comm: syz.1.1152 Tainted: G U L syzkaller #0 PREEMPT(full) [ 954.751301][T16749] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 954.751310][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.751326][T16749] Call Trace: [ 954.751335][T16749] [ 954.751344][T16749] dump_stack_lvl+0x100/0x190 [ 954.751384][T16749] should_fail_ex.cold+0x5/0xa [ 954.751415][T16749] should_failslab+0xc2/0x120 [ 954.751453][T16749] kmem_cache_alloc_noprof+0x91/0x6a0 [ 954.751486][T16749] ? __kernfs_new_node+0xd2/0xa10 [ 954.751520][T16749] __kernfs_new_node+0xd2/0xa10 [ 954.751558][T16749] ? __pfx___kernfs_new_node+0x10/0x10 [ 954.751595][T16749] ? find_held_lock+0x2b/0x80 [ 954.751627][T16749] ? kernfs_root+0xee/0x2a0 [ 954.751656][T16749] ? kernfs_root+0xee/0x2a0 [ 954.751685][T16749] kernfs_new_node+0x117/0x150 [ 954.751717][T16749] __kernfs_create_file+0x53/0x350 [ 954.751754][T16749] sysfs_add_file_mode_ns+0x207/0x3c0 [ 954.751799][T16749] sysfs_merge_group+0x194/0x340 [ 954.751825][T16749] ? __pfx_sysfs_merge_group+0x10/0x10 [ 954.751849][T16749] ? bus_add_device+0x2e2/0x6c0 [ 954.751883][T16749] ? __pfx_bus_add_device+0x10/0x10 [ 954.751911][T16749] ? __pfx_dev_add_physical_location+0x10/0x10 [ 954.752064][T16749] dpm_sysfs_add+0x237/0x280 [ 954.752106][T16749] device_add+0x9f4/0x1970 [ 954.752149][T16749] ? __pfx_device_add+0x10/0x10 [ 954.752190][T16749] ? lockdep_init_map_type+0x5c/0x250 [ 954.752214][T16749] ? __init_waitqueue_head+0xca/0x150 [ 954.752248][T16749] rfkill_register+0x1ad/0xb30 [ 954.752318][T16749] nfc_register_device+0x11f/0x3e0 [ 954.752390][T16749] nci_register_device+0x7f1/0xb80 [ 954.752499][T16749] ? __pfx_nci_register_device+0x10/0x10 [ 954.752532][T16749] ? lockdep_init_map_type+0x5c/0x250 [ 954.752561][T16749] virtual_ncidev_open+0x141/0x220 [ 954.752639][T16749] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 954.752685][T16749] misc_open+0x26d/0x450 [ 954.752739][T16749] ? __pfx_misc_open+0x10/0x10 [ 954.752764][T16749] chrdev_open+0x234/0x6a0 [ 954.752791][T16749] ? __pfx_apparmor_file_open+0x10/0x10 [ 954.752824][T16749] ? __pfx_chrdev_open+0x10/0x10 [ 954.752851][T16749] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 954.752905][T16749] do_dentry_open+0x6ab/0x14d0 [ 954.752931][T16749] ? __pfx_chrdev_open+0x10/0x10 [ 954.752963][T16749] vfs_open+0x82/0x3f0 [ 954.752999][T16749] path_openat+0x2873/0x4280 [ 954.753037][T16749] ? __pfx_path_openat+0x10/0x10 [ 954.753072][T16749] do_file_open+0x20e/0x430 [ 954.753100][T16749] ? __pfx_do_file_open+0x10/0x10 [ 954.753148][T16749] ? alloc_fd+0x471/0x7a0 [ 954.753175][T16749] ? do_getname+0x191/0x390 [ 954.753211][T16749] do_sys_openat2+0x10f/0x1e0 [ 954.753244][T16749] ? __pfx_do_sys_openat2+0x10/0x10 [ 954.753279][T16749] ? __fget_files+0x21f/0x3d0 [ 954.753308][T16749] __x64_sys_openat+0x12d/0x210 [ 954.753343][T16749] ? __pfx___x64_sys_openat+0x10/0x10 [ 954.753388][T16749] do_syscall_64+0x115/0x840 [ 954.753425][T16749] ? clear_bhb_loop+0x70/0xc0 [ 954.753457][T16749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.753481][T16749] RIP: 0033:0x7fbdaaf9e0d9 [ 954.753503][T16749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.753527][T16749] RSP: 002b:00007fbdabe46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 954.753551][T16749] RAX: ffffffffffffffda RBX: 00007fbdab225fa0 RCX: 00007fbdaaf9e0d9 [ 954.753567][T16749] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 954.753583][T16749] RBP: 00007fbdab035024 R08: 0000000000000000 R09: 0000000000000000 [ 954.753597][T16749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.753612][T16749] R13: 00007fbdab226038 R14: 00007fbdab225fa0 R15: 00007ffdde2279a8 [ 954.753643][T16749] [ 955.546849][T16755] ima: policy update failed [ 955.601160][ T30] audit: type=1802 audit(4294967302.733:13): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1152" res=0 errno=0 [ 955.907033][T16436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.817151][T16436] veth0_vlan: entered promiscuous mode [ 958.271350][T16436] veth1_vlan: entered promiscuous mode [ 958.565023][T16436] veth0_macvtap: entered promiscuous mode [ 958.605300][T16436] veth1_macvtap: entered promiscuous mode [ 958.703868][T16436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.773133][T16436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.028158][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.107592][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.238130][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.283955][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.402325][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.456107][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.858871][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.012004][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.042300][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.342664][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.546768][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 960.563207][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 960.575908][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 960.593533][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 960.603816][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 960.701091][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 960.982739][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.385426][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.637229][ T50] Bluetooth: hci0: command tx timeout [ 963.011687][T16830] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 963.129361][ T13] bridge_slave_1: left allmulticast mode [ 963.158827][ T13] bridge_slave_1: left promiscuous mode [ 963.180548][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.211650][ T13] bridge_slave_0: left allmulticast mode [ 963.232468][ T13] bridge_slave_0: left promiscuous mode [ 963.254075][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.194660][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.226000][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.246008][ T13] bond0 (unregistering): Released all slaves [ 964.725684][ T50] Bluetooth: hci0: command tx timeout [ 965.268115][ T13] hsr_slave_0: left promiscuous mode [ 965.290424][ T13] hsr_slave_1: left promiscuous mode [ 965.310677][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.339628][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.379339][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.408173][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.448800][ T13] veth1_macvtap: left promiscuous mode [ 965.474017][ T13] veth0_macvtap: left promiscuous mode [ 965.489526][ T13] veth1_vlan: left promiscuous mode [ 965.509134][ T13] veth0_vlan: left promiscuous mode [ 966.255348][ T13] team0 (unregistering): Port device team_slave_1 removed [ 966.298361][ T13] team0 (unregistering): Port device team_slave_0 removed [ 966.783080][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 966.794197][ T50] Bluetooth: hci0: command tx timeout [ 968.875395][ T50] Bluetooth: hci0: command tx timeout [ 969.331037][T16801] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.351853][T16801] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.362173][T16801] bridge_slave_0: entered allmulticast mode [ 969.370234][T16801] bridge_slave_0: entered promiscuous mode [ 969.394068][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 969.420534][T16801] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.446231][T16801] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.454859][T16801] bridge_slave_1: entered allmulticast mode [ 969.462660][T16801] bridge_slave_1: entered promiscuous mode [ 969.756493][T16801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.803427][T16801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.982965][T16801] team0: Port device team_slave_0 added [ 970.025443][T16801] team0: Port device team_slave_1 added [ 970.263922][T16801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.316240][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.469012][T16801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.555428][T16801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.596638][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.740778][T16801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.120693][T16801] hsr_slave_0: entered promiscuous mode [ 971.162587][T16801] hsr_slave_1: entered promiscuous mode [ 971.193996][T16801] debugfs: 'hsr0' already exists in 'hsr' [ 971.222705][T16801] Cannot create hsr debugfs directory [ 972.099965][T16944] hub 1-0:1.0: USB hub found [ 972.200199][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 972.223147][T16944] hub 1-0:1.0: 1 port detected [ 975.225334][T16009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.968346][T15727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 975.981481][T15727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 976.004711][T15727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 976.015630][T15727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 976.026302][T15727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 976.098350][T16009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.666719][T16009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.052437][T16009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.625403][T16801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 977.699780][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.820197][T16801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 977.877418][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.917419][T16801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 978.023132][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.070656][T15727] Bluetooth: hci2: command tx timeout [ 978.338558][T16801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 978.392890][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 978.594217][T16009] bridge_slave_1: left allmulticast mode [ 978.617393][T16009] bridge_slave_1: left promiscuous mode [ 978.641191][T17048] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 978.653248][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.679811][T16009] bridge_slave_0: left allmulticast mode [ 978.696509][T16009] bridge_slave_0: left promiscuous mode [ 978.715894][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.171952][T16009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.209245][T16009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.235894][T16009] bond0 (unregistering): Released all slaves [ 980.137521][T15727] Bluetooth: hci2: command tx timeout [ 980.622678][T16009] hsr_slave_0: left promiscuous mode [ 980.649150][T16009] hsr_slave_1: left promiscuous mode [ 980.677022][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.716111][T16009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.751800][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.784947][T16009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.836150][T16009] veth1_macvtap: left promiscuous mode [ 980.857315][T16009] veth0_macvtap: left promiscuous mode [ 980.879038][T16009] veth1_vlan: left allmulticast mode [ 980.900217][T16009] veth1_vlan: left promiscuous mode [ 980.922401][T16009] veth0_vlan: left promiscuous mode [ 981.723693][T16009] team0 (unregistering): Port device team_slave_1 removed [ 981.772260][T16009] team0 (unregistering): Port device team_slave_0 removed [ 982.205637][T15727] Bluetooth: hci2: command tx timeout [ 982.388744][T16801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.824522][T16801] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.908361][T17001] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.949954][T17001] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.992164][T17001] bridge_slave_0: entered allmulticast mode [ 983.028160][T17001] bridge_slave_0: entered promiscuous mode [ 983.063688][T17001] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.098161][T17001] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.137002][T17001] bridge_slave_1: entered allmulticast mode [ 983.174988][T17001] bridge_slave_1: entered promiscuous mode [ 983.226380][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.233751][ T3365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.336988][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.344369][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.580844][T17001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.633395][T17001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.107019][T17001] team0: Port device team_slave_0 added [ 984.139768][T17001] team0: Port device team_slave_1 added [ 984.273834][T15727] Bluetooth: hci2: command tx timeout [ 984.443944][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 984.550675][T17001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.568773][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.621508][T17001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.676026][T17001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.690675][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.722601][T17001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.243142][T17001] hsr_slave_0: entered promiscuous mode [ 985.273073][T17001] hsr_slave_1: entered promiscuous mode [ 986.340654][T17145] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1186'. [ 986.408306][T17151] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1186'. [ 986.531025][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 988.259916][T16801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.818574][T16801] veth0_vlan: entered promiscuous mode [ 988.964470][T16801] veth1_vlan: entered promiscuous mode [ 989.125133][T17001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 989.180255][T17001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 989.235680][T17001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 989.280647][T17001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 989.340600][T17001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 989.376279][T17001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 989.404966][T17001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 989.460923][T17001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 989.511994][T16801] veth0_macvtap: entered promiscuous mode [ 989.590165][T16801] veth1_macvtap: entered promiscuous mode [ 989.721607][T16801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.809172][T16801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.924718][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.040851][T16009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.087473][T16009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.229631][T16009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.487044][T17001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.642544][T16009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.656264][T17001] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.705716][T16009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.780166][T16009] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.787477][T16009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.956823][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.964024][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.049987][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.120158][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.106466][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.115117][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.250510][T17001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.564725][T17001] veth0_vlan: entered promiscuous mode [ 994.740194][T17001] veth1_vlan: entered promiscuous mode [ 995.060412][ T30] audit: type=1800 audit(4294969390.306:14): pid=17286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1196" name="dbroot" dev="configfs" ino=97901 res=0 errno=0 [ 995.109879][T17286] ERROR: Out of memory at tomoyo_memory_ok. [ 995.181194][T17286] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci-qemu-gce-upstream-auto/syz-executor /root/ci-qemu-gce-upstream-auto/syz-executor /newroot/15/file0' not defined. [ 996.225641][T17001] veth0_macvtap: entered promiscuous mode [ 996.796296][T17001] veth1_macvtap: entered promiscuous mode [ 996.916762][T17001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.973950][T17001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.110478][T16009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.180703][T16009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.244360][T16009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.321165][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.438658][T17310] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 997.840115][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.889011][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.576432][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.618062][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.438278][T17350] random: crng reseeded on system resumption [ 1001.652557][T17350] hub 1-0:1.0: USB hub found [ 1001.681035][T17350] hub 1-0:1.0: 1 port detected [ 1003.275159][T17367] FAULT_INJECTION: forcing a failure. [ 1003.275159][T17367] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.336859][T17367] CPU: 0 UID: 0 PID: 17367 Comm: syz.3.1206 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1003.336909][T17367] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1003.336919][T17367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1003.336935][T17367] Call Trace: [ 1003.336944][T17367] [ 1003.336954][T17367] dump_stack_lvl+0x100/0x190 [ 1003.336992][T17367] should_fail_ex.cold+0x5/0xa [ 1003.337020][T17367] should_failslab+0xc2/0x120 [ 1003.337083][T17367] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1003.337118][T17367] ? __kernfs_new_node+0xd2/0xa10 [ 1003.337149][T17367] __kernfs_new_node+0xd2/0xa10 [ 1003.337188][T17367] ? __pfx___kernfs_new_node+0x10/0x10 [ 1003.337222][T17367] ? find_held_lock+0x2b/0x80 [ 1003.337253][T17367] ? kernfs_root+0xee/0x2a0 [ 1003.337275][T17367] ? kernfs_root+0xee/0x2a0 [ 1003.337303][T17367] kernfs_new_node+0x117/0x150 [ 1003.337336][T17367] __kernfs_create_file+0x53/0x350 [ 1003.337373][T17367] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1003.337418][T17367] sysfs_merge_group+0x194/0x340 [ 1003.337447][T17367] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1003.337471][T17367] ? bus_add_device+0x2e2/0x6c0 [ 1003.337505][T17367] ? __pfx_bus_add_device+0x10/0x10 [ 1003.337533][T17367] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1003.337581][T17367] dpm_sysfs_add+0x237/0x280 [ 1003.337605][T17367] device_add+0x9f4/0x1970 [ 1003.337647][T17367] ? __pfx_device_add+0x10/0x10 [ 1003.337688][T17367] ? lockdep_init_map_type+0x5c/0x250 [ 1003.337713][T17367] ? __init_waitqueue_head+0xca/0x150 [ 1003.337747][T17367] rfkill_register+0x1ad/0xb30 [ 1003.337780][T17367] nfc_register_device+0x11f/0x3e0 [ 1003.337819][T17367] nci_register_device+0x7f1/0xb80 [ 1003.337850][T17367] ? __pfx_nci_register_device+0x10/0x10 [ 1003.337885][T17367] ? lockdep_init_map_type+0x5c/0x250 [ 1003.337915][T17367] virtual_ncidev_open+0x141/0x220 [ 1003.337956][T17367] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1003.337995][T17367] misc_open+0x26d/0x450 [ 1003.338021][T17367] ? __pfx_misc_open+0x10/0x10 [ 1003.338045][T17367] chrdev_open+0x234/0x6a0 [ 1003.338071][T17367] ? __pfx_apparmor_file_open+0x10/0x10 [ 1003.338100][T17367] ? __pfx_chrdev_open+0x10/0x10 [ 1003.338127][T17367] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1003.338163][T17367] do_dentry_open+0x6ab/0x14d0 [ 1003.338195][T17367] ? __pfx_chrdev_open+0x10/0x10 [ 1003.338227][T17367] vfs_open+0x82/0x3f0 [ 1003.338263][T17367] path_openat+0x2873/0x4280 [ 1003.338303][T17367] ? __pfx_path_openat+0x10/0x10 [ 1003.338337][T17367] do_file_open+0x20e/0x430 [ 1003.338365][T17367] ? __pfx_do_file_open+0x10/0x10 [ 1003.338412][T17367] ? alloc_fd+0x471/0x7a0 [ 1003.338439][T17367] ? do_getname+0x191/0x390 [ 1003.338473][T17367] do_sys_openat2+0x10f/0x1e0 [ 1003.338507][T17367] ? __pfx_do_sys_openat2+0x10/0x10 [ 1003.338542][T17367] ? __fget_files+0x21f/0x3d0 [ 1003.338571][T17367] __x64_sys_openat+0x12d/0x210 [ 1003.338604][T17367] ? __pfx___x64_sys_openat+0x10/0x10 [ 1003.338650][T17367] do_syscall_64+0x115/0x840 [ 1003.338687][T17367] ? clear_bhb_loop+0x70/0xc0 [ 1003.338718][T17367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.338743][T17367] RIP: 0033:0x7f01b3b9e0d9 [ 1003.338765][T17367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.338788][T17367] RSP: 002b:00007f01b1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1003.338813][T17367] RAX: ffffffffffffffda RBX: 00007f01b3e25fa0 RCX: 00007f01b3b9e0d9 [ 1003.338829][T17367] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1003.338844][T17367] RBP: 00007f01b3c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1003.338860][T17367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.338874][T17367] R13: 00007f01b3e26038 R14: 00007f01b3e25fa0 R15: 00007ffdc4af0db8 [ 1003.338906][T17367] [ 1004.205495][T17374] ima: policy update failed [ 1004.308699][ T30] audit: type=1802 audit(4294967297.323:15): pid=17374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1206" res=0 errno=0 [ 1006.153960][T17395] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1007.469408][T17405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'. [ 1007.739137][T17405] bond0: (slave bond_slave_0): Releasing backup interface [ 1010.105462][T17441] futex_wake_op: syz.3.1218 tries to shift op by -1; fix this program [ 1010.361193][T17443] ERROR: Out of memory at tomoyo_memory_ok. [ 1012.526588][T16009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.956018][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1012.970778][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1012.980382][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1012.992885][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1013.003610][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1013.298882][T16009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.662703][T16009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.911260][T16009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.856328][T17499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'. [ 1015.060795][ T50] Bluetooth: hci1: command tx timeout [ 1015.469235][T16009] bridge_slave_1: left allmulticast mode [ 1015.502355][T16009] bridge_slave_1: left promiscuous mode [ 1015.533891][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.596907][T16009] bridge_slave_0: left allmulticast mode [ 1015.640201][T16009] bridge_slave_0: left promiscuous mode [ 1015.686989][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.355803][T15727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1016.369935][T15727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1016.380315][T15727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1016.392537][T15727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1016.407611][T15727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1016.535526][T16009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.591717][T16009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.624129][T16009] bond0 (unregistering): Released all slaves [ 1017.129468][ T50] Bluetooth: hci1: command tx timeout [ 1017.192034][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1018.018772][T16009] hsr_slave_0: left promiscuous mode [ 1018.035634][T16009] hsr_slave_1: left promiscuous mode [ 1018.051714][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.076620][T16009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.106985][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.136762][T16009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.205193][T16009] veth1_macvtap: left promiscuous mode [ 1018.227738][T16009] veth0_macvtap: left promiscuous mode [ 1018.255862][T16009] veth1_vlan: left promiscuous mode [ 1018.274442][T16009] veth0_vlan: left promiscuous mode [ 1018.478981][ T50] Bluetooth: hci2: command tx timeout [ 1019.108469][T16009] team0 (unregistering): Port device team_slave_1 removed [ 1019.153976][T16009] team0 (unregistering): Port device team_slave_0 removed [ 1019.200562][ T50] Bluetooth: hci1: command tx timeout [ 1019.417786][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1020.546724][ T50] Bluetooth: hci2: command tx timeout [ 1020.839431][T16009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.231572][T17484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.264177][ T50] Bluetooth: hci1: command tx timeout [ 1021.274163][T17484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.306982][T17484] bridge_slave_0: entered allmulticast mode [ 1021.347420][T17484] bridge_slave_0: entered promiscuous mode [ 1021.469130][T16009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.570200][T17484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.614064][T17484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.638468][T17484] bridge_slave_1: entered allmulticast mode [ 1021.674993][T17484] bridge_slave_1: entered promiscuous mode [ 1021.992787][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1022.071875][T17484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.223995][T16009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.320475][T17484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.616877][ T50] Bluetooth: hci2: command tx timeout [ 1022.927414][T16009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.060272][T17484] team0: Port device team_slave_0 added [ 1023.167321][T17484] team0: Port device team_slave_1 added [ 1023.713816][T17484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.749918][T17484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.843413][T17484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.924235][T17484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.955805][T17484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.069578][T17484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.559013][T17518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.568169][T17607] futex_wake_op: syz.0.1232 tries to shift op by -1; fix this program [ 1024.602320][T17518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.632359][T17518] bridge_slave_0: entered allmulticast mode [ 1024.671794][T17518] bridge_slave_0: entered promiscuous mode [ 1024.682924][ T50] Bluetooth: hci2: command tx timeout [ 1024.808096][T17518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.847667][T17518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.884937][T17518] bridge_slave_1: entered allmulticast mode [ 1024.930623][T17518] bridge_slave_1: entered promiscuous mode [ 1025.065647][T17484] hsr_slave_0: entered promiscuous mode [ 1025.098774][T17484] hsr_slave_1: entered promiscuous mode [ 1025.126060][T17484] debugfs: 'hsr0' already exists in 'hsr' [ 1025.153533][T17484] Cannot create hsr debugfs directory [ 1025.364351][T17518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.421585][T17518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.498897][T16009] bridge_slave_1: left allmulticast mode [ 1025.514038][T16009] bridge_slave_1: left promiscuous mode [ 1025.532464][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.565273][T16009] bridge_slave_0: left allmulticast mode [ 1025.590032][T16009] bridge_slave_0: left promiscuous mode [ 1025.613722][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.229194][T16009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.284121][T16009] bond0 (unregistering): Released all slaves [ 1026.352163][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1026.718037][T17518] team0: Port device team_slave_0 added [ 1026.746426][T17518] team0: Port device team_slave_1 added [ 1027.032354][T17518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.049557][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.112913][T17518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.238158][T17518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.256862][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.326188][T17518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.572428][T16009] hsr_slave_0: left promiscuous mode [ 1027.593743][T16009] hsr_slave_1: left promiscuous mode [ 1027.614552][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.637620][T16009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.656319][T16009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.675434][T16009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.697264][T16009] veth1_macvtap: left promiscuous mode [ 1027.711992][T16009] veth0_macvtap: left promiscuous mode [ 1027.724344][T16009] veth1_vlan: left promiscuous mode [ 1027.737218][T16009] veth0_vlan: left promiscuous mode [ 1028.337352][T16009] team0 (unregistering): Port device team_slave_1 removed [ 1028.376728][T16009] team0 (unregistering): Port device team_slave_0 removed [ 1028.618407][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1028.801283][T17518] hsr_slave_0: entered promiscuous mode [ 1028.826265][T17518] hsr_slave_1: entered promiscuous mode [ 1029.844478][T17671] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1030.877235][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1031.367157][T17484] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1031.411873][T17484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1031.463076][T17484] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1031.514999][T17484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1031.571155][T17484] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1031.647679][T17484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1031.688057][T17484] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1031.751508][T17484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1032.117582][T17690] hub 1-0:1.0: USB hub found [ 1032.192104][T17690] hub 1-0:1.0: 1 port detected [ 1033.366586][T17484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.465313][T17484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.526916][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.534281][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.744741][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.751986][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.074231][T17518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1034.263620][T17518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1034.306968][T17518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1034.355404][T17518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1034.396826][T17518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1034.433270][T17518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1034.506498][T17518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1034.551275][T17518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1035.323936][T17518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.451106][T17518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.541161][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.549483][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.682003][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.689254][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.903588][T15727] Bluetooth: hci3: command 0x0406 tx timeout [ 1037.356135][T17484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.744215][T17484] veth0_vlan: entered promiscuous mode [ 1037.837646][T17484] veth1_vlan: entered promiscuous mode [ 1038.132556][T17484] veth0_macvtap: entered promiscuous mode [ 1038.177553][T17484] veth1_macvtap: entered promiscuous mode [ 1039.029221][T17484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.134171][T17518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.751582][T17484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.358854][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.476297][ T3365] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.702461][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.754644][T17518] veth0_vlan: entered promiscuous mode [ 1040.833963][ T3365] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.978810][T17518] veth1_vlan: entered promiscuous mode [ 1041.115029][T16009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.176253][T16009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.351508][T17518] veth0_macvtap: entered promiscuous mode [ 1041.390810][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.425987][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.523186][T17518] veth1_macvtap: entered promiscuous mode [ 1041.685279][T17518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.775844][T17518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.532487][ T3365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.683980][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.763474][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.069000][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.575287][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.629153][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.655997][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.710283][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.024853][T17990] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1052.161927][T17993] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1054.200841][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.213838][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.523961][T18021] hub 1-0:1.0: USB hub found [ 1054.577397][T18021] hub 1-0:1.0: 1 port detected [ 1056.005326][T18032] Unable to find swap-space signature [ 1056.066768][T18032] random: crng reseeded on system resumption [ 1056.324729][T18034] hub 1-0:1.0: USB hub found [ 1056.366071][T18034] hub 1-0:1.0: 1 port detected [ 1056.568261][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1268'. [ 1059.724055][T18066] ERROR: Out of memory at tomoyo_memory_ok. [ 1061.005983][T18081] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1063.024524][T18092] Bluetooth: hci1: command 0x2016 tx timeout [ 1064.487200][T18129] Unable to find swap-space signature [ 1064.521615][T18129] random: crng reseeded on system resumption [ 1064.654857][T18127] hub 1-0:1.0: USB hub found [ 1064.692227][T18127] hub 1-0:1.0: 1 port detected [ 1065.092588][T18081] Bluetooth: hci1: command 0x2016 tx timeout [ 1065.784322][T18137] usbcore.quirks: string doesn't fit in 127 chars. [ 1066.948703][T18155] ima: policy update failed [ 1066.996814][ T30] audit: type=1802 audit(4294969408.432:16): pid=18155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1283" res=0 errno=0 [ 1069.953020][T18190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1289'. [ 1070.322490][T18190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.332394][T18190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.360682][T18190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.399414][T18190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.202738][T18211] binder: 18210:18211 ioctl c00c620f 200000000c40 returned -22 [ 1074.517475][T18231] usbcore.quirks: string doesn't fit in 127 chars. [ 1075.323670][T18240] ubi0: attaching mtd0 [ 1075.506399][T18240] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 1075.619049][T18251] ERROR: Out of memory at tomoyo_memory_ok. [ 1075.668418][T18240] eraseblock attaching information dump: [ 1075.772596][T18240] ec 1 [ 1075.809583][T18240] pnum 0 [ 1075.848201][T18240] lnum 0 [ 1075.876969][T18240] scrub 0 [ 1075.901347][T18240] sqnum 1 [ 1075.922656][T18240] Volume identifier header dump: [ 1075.961412][T18240] magic 55424921 [ 1076.020275][T18240] version 1 [ 1076.039616][T18240] vol_type 1 [ 1076.063430][T18240] copy_flag 0 [ 1076.094518][T18240] compat 5 [ 1076.117858][T18240] vol_id 2147479551 [ 1076.149098][T18240] lnum 0 [ 1076.172407][T18240] data_size 0 [ 1076.191053][T18240] used_ebs 0 [ 1076.206734][T18240] data_pad 0 [ 1076.224039][T18240] sqnum 1 [ 1076.242632][T18240] hdr_crc 65b3bd2d [ 1076.261779][T18240] Volume identifier header hexdump: [ 1076.433414][T18240] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1081.621822][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1307'. [ 1086.816647][T18092] Bluetooth: hci0: command 0x0406 tx timeout [ 1088.533576][T18377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1320'. [ 1088.776851][T18377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.818512][T18377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.836595][T18376] [U] 0 [ 1088.848579][T18375] [U] ‘QUIÚ [ 1088.856546][T18377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.882736][T18377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.351600][T18426] binder: 18414:18426 ioctl c00c620f 200000000c40 returned -22 [ 1094.490396][T18448] [U] 0 [ 1094.507924][T18447] [U] ‘QUIÚ [ 1096.200970][T18478] ERROR: Out of memory at tomoyo_memory_ok. [ 1098.933423][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 1101.162159][T18092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1101.181633][T18092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1101.200824][T18092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1101.230062][T18092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1101.238274][T18092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1102.001196][T18083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.525777][T18541] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1102.537980][T18083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.676922][T18543] bond0: invalid ARP target specified [ 1102.902654][T18083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.163060][T18083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.276624][T18092] Bluetooth: hci2: command tx timeout [ 1105.347928][T18092] Bluetooth: hci2: command tx timeout [ 1105.724736][T18528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.753109][T18528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.791546][T18528] bridge_slave_0: entered allmulticast mode [ 1105.833652][T18528] bridge_slave_0: entered promiscuous mode [ 1106.040152][T18528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.068074][T18528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.084738][T18528] bridge_slave_1: entered allmulticast mode [ 1106.115313][T18528] bridge_slave_1: entered promiscuous mode [ 1106.496314][T18528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.667311][T18528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.925818][T18528] team0: Port device team_slave_0 added [ 1106.968509][T18528] team0: Port device team_slave_1 added [ 1107.061114][T18528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.086111][T18528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.196405][T18528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.232138][T18528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.251675][T18528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.308992][T18528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.411527][T18092] Bluetooth: hci2: command tx timeout [ 1107.464762][T18528] hsr_slave_0: entered promiscuous mode [ 1107.479200][T18528] hsr_slave_1: entered promiscuous mode [ 1107.494954][T18528] debugfs: 'hsr0' already exists in 'hsr' [ 1107.508657][T18528] Cannot create hsr debugfs directory [ 1109.480053][T18092] Bluetooth: hci2: command tx timeout [ 1115.291387][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.299195][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.772213][T18081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1118.794725][T18081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1118.804248][T18081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1118.819556][T18081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1118.827499][T18081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1119.470491][T18611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.477915][T18611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.485786][T18611] bridge_slave_0: entered allmulticast mode [ 1119.493630][T18611] bridge_slave_0: entered promiscuous mode [ 1119.502097][T18611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.509614][T18611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.519564][T18611] bridge_slave_1: entered allmulticast mode [ 1119.528341][T18611] bridge_slave_1: entered promiscuous mode [ 1119.568154][T18611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.580901][T18611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.615301][T18611] team0: Port device team_slave_0 added [ 1119.626354][T18611] team0: Port device team_slave_1 added [ 1119.658902][T18611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.666463][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.692971][T18611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.705765][T18611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.713166][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.743294][T18611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.794267][T18611] hsr_slave_0: entered promiscuous mode [ 1119.801266][T18611] hsr_slave_1: entered promiscuous mode [ 1119.807610][T18611] debugfs: 'hsr0' already exists in 'hsr' [ 1119.813955][T18611] Cannot create hsr debugfs directory [ 1120.854904][T18092] Bluetooth: hci4: command tx timeout [ 1122.923239][T18092] Bluetooth: hci4: command tx timeout [ 1124.991310][T18092] Bluetooth: hci4: command tx timeout [ 1127.059451][T18092] Bluetooth: hci4: command tx timeout [ 1137.718814][T18092] Bluetooth: hci1: command 0x2016 tx timeout [ 1161.288596][T18092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1161.306302][T18092] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1161.321474][T18092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1161.332068][T18092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1161.342930][T18092] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1161.985114][T18634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.992712][T18634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.000711][T18634] bridge_slave_0: entered allmulticast mode [ 1162.011207][T18634] bridge_slave_0: entered promiscuous mode [ 1162.020646][T18634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.028120][T18634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.037183][T18634] bridge_slave_1: entered allmulticast mode [ 1162.045424][T18634] bridge_slave_1: entered promiscuous mode [ 1162.084883][T18634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.098229][T18634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.135036][T18634] team0: Port device team_slave_0 added [ 1162.145453][T18634] team0: Port device team_slave_1 added [ 1162.175556][T18634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.182720][T18634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.213714][T18634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.228108][T18634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.235888][T18634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.265187][T18634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.322478][T18634] hsr_slave_0: entered promiscuous mode [ 1162.331717][T18634] hsr_slave_1: entered promiscuous mode [ 1162.339776][T18634] debugfs: 'hsr0' already exists in 'hsr' [ 1162.345748][T18634] Cannot create hsr debugfs directory [ 1163.412531][T18092] Bluetooth: hci5: command tx timeout [ 1165.480601][T18092] Bluetooth: hci5: command tx timeout [ 1167.548855][T18092] Bluetooth: hci5: command tx timeout [ 1169.616961][T18092] Bluetooth: hci5: command tx timeout [ 1176.382221][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.389815][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.331962][T18081] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1179.347048][T18081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1179.359347][T18081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1179.372593][T18081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1179.380517][T18081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1180.075120][T18660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.082635][T18660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.091977][T18660] bridge_slave_0: entered allmulticast mode [ 1180.100349][T18660] bridge_slave_0: entered promiscuous mode [ 1180.109785][T18660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.118424][T18660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.125921][T18660] bridge_slave_1: entered allmulticast mode [ 1180.137430][T18660] bridge_slave_1: entered promiscuous mode [ 1180.177896][T18660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.190670][T18660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.232268][T18660] team0: Port device team_slave_0 added [ 1180.241696][T18660] team0: Port device team_slave_1 added [ 1180.275282][T18660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.282891][T18660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.311948][T18660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.325172][T18660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.335330][T18660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.363781][T18660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.420629][T18660] hsr_slave_0: entered promiscuous mode [ 1180.427738][T18660] hsr_slave_1: entered promiscuous mode [ 1180.442037][T18660] debugfs: 'hsr0' already exists in 'hsr' [ 1180.448343][T18660] Cannot create hsr debugfs directory [ 1181.390011][T18092] Bluetooth: hci6: command tx timeout [ 1183.458212][T18092] Bluetooth: hci6: command tx timeout [ 1185.526824][T18092] Bluetooth: hci6: command tx timeout [ 1187.594696][T18092] Bluetooth: hci6: command tx timeout [ 1221.415788][T18081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1221.439191][T18081] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1221.449265][T18081] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1221.460044][T18081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1221.474438][T18081] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1222.143195][T18681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.150597][T18681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.158399][T18681] bridge_slave_0: entered allmulticast mode [ 1222.166414][T18681] bridge_slave_0: entered promiscuous mode [ 1222.177393][T18681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.187450][T18681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.194797][T18681] bridge_slave_1: entered allmulticast mode [ 1222.213417][T18681] bridge_slave_1: entered promiscuous mode [ 1222.252140][T18681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1222.264810][T18681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.314510][T18681] team0: Port device team_slave_0 added [ 1222.324462][T18681] team0: Port device team_slave_1 added [ 1222.355236][T18681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.363321][T18681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.396026][T18681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.409932][T18681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.418321][T18681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.445635][T18681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.500222][T18681] hsr_slave_0: entered promiscuous mode [ 1222.507174][T18681] hsr_slave_1: entered promiscuous mode [ 1222.514236][T18681] debugfs: 'hsr0' already exists in 'hsr' [ 1222.521393][T18681] Cannot create hsr debugfs directory [ 1223.549630][T18081] Bluetooth: hci7: command tx timeout [ 1224.265432][T18081] Bluetooth: hci2: command 0x0406 tx timeout [ 1225.617971][T18092] Bluetooth: hci7: command tx timeout [ 1227.686373][T18092] Bluetooth: hci7: command tx timeout [ 1229.754409][T18092] Bluetooth: hci7: command tx timeout [ 1237.474424][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.482986][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.432181][T18081] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1239.446398][T18081] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1239.463536][T18081] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1239.471740][T18081] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1239.479698][T18081] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1240.176707][T18708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.184010][T18708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.191870][T18708] bridge_slave_0: entered allmulticast mode [ 1240.199965][T18708] bridge_slave_0: entered promiscuous mode [ 1240.212590][T18708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.221002][T18708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.230957][T18708] bridge_slave_1: entered allmulticast mode [ 1240.238963][T18708] bridge_slave_1: entered promiscuous mode [ 1240.278541][T18708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.292187][T18708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.332112][T18708] team0: Port device team_slave_0 added [ 1240.345659][T18708] team0: Port device team_slave_1 added [ 1240.377764][T18708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.385252][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.419544][T18708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.434468][T18708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.441534][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.469816][T18708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.525142][T18708] hsr_slave_0: entered promiscuous mode [ 1240.531859][T18708] hsr_slave_1: entered promiscuous mode [ 1240.539046][T18708] debugfs: 'hsr0' already exists in 'hsr' [ 1240.546340][T18708] Cannot create hsr debugfs directory [ 1241.527416][T18081] Bluetooth: hci8: command tx timeout [ 1243.595364][T18081] Bluetooth: hci8: command tx timeout [ 1244.629445][T18081] Bluetooth: hci4: command 0x0406 tx timeout [ 1245.663545][T18092] Bluetooth: hci8: command tx timeout [ 1247.731726][T18092] Bluetooth: hci8: command tx timeout [ 1259.745011][ T31] INFO: task kworker/u10:1:18083 blocked for more than 143 seconds. [ 1259.758460][ T31] Tainted: G U L syzkaller #0 [ 1259.766792][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1259.776219][ T31] task:kworker/u10:1 state:D stack:25432 pid:18083 tgid:18083 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1259.790882][ T31] Workqueue: netns cleanup_net [ 1259.796431][ T31] Call Trace: [ 1259.800517][ T31] [ 1259.807636][ T31] __schedule+0x125c/0x6730 [ 1259.825892][ T31] ? __pfx___schedule+0x10/0x10 [ 1259.830869][ T31] ? find_held_lock+0x2b/0x80 [ 1259.842759][ T31] ? schedule+0x225/0x2c0 [ 1259.852331][ T31] schedule+0xdd/0x2c0 [ 1259.863629][ T31] schedule_timeout+0x1b2/0x280 [ 1259.882233][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1259.887760][ T31] ? mark_held_locks+0x40/0x70 [ 1259.895924][ T31] __wait_for_common+0x2e7/0x4c0 [ 1259.912169][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1259.919124][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1259.933718][ T31] remove_one+0x312/0x420 [ 1259.942159][ T31] ? up_write+0x2e5/0x5c0 [ 1259.951769][ T31] __simple_recursive_removal+0x148/0x5c0 [ 1259.971746][ T31] ? __pfx_remove_one+0x10/0x10 [ 1259.978133][ T31] debugfs_remove+0x5d/0x80 [ 1259.991471][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 1260.000137][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 1260.036449][ T31] nsim_dev_reload_down+0x66/0xd0 [ 1260.092916][ T31] devlink_reload+0x1ae/0x7a0 [ 1260.130854][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 1260.169350][ T31] devlink_pernet_pre_exit+0x247/0x370 [ 1260.192888][ T31] ? iput.part.0+0x1a0/0x1050 [ 1260.213184][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1260.243729][ T31] ? iput+0x3a/0x40 [ 1260.253068][ T31] ? sock_release+0x14d/0x1c0 [ 1260.271406][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1260.292601][ T31] ops_undo_list+0x187/0xab0 [ 1260.315122][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1260.329658][ T31] ? cleanup_net+0x332/0x920 [ 1260.341233][ T31] ? cleanup_net+0x332/0x920 [ 1260.354264][ T31] ? idr_destroy+0x62/0x2e0 [ 1260.387518][ T31] cleanup_net+0x499/0x920 [ 1260.405846][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1260.421527][ T31] ? rcu_is_watching+0x12/0xc0 [ 1260.438685][ T31] process_one_work+0xa23/0x1940 [ 1260.453123][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1260.480256][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1260.493148][ T31] worker_thread+0x5ef/0xe50 [ 1260.506971][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1260.522948][ T31] ? kthread+0x13a/0x450 [ 1260.537201][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1260.564710][ T31] kthread+0x370/0x450 [ 1260.589955][ T31] ? __pfx_kthread+0x10/0x10 [ 1260.602532][ T31] ret_from_fork+0x72b/0xd50 [ 1260.616761][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1260.634351][ T31] ? __switch_to+0x800/0x10f0 [ 1260.649238][ T31] ? __switch_to_asm+0x39/0x70 [ 1260.666353][ T31] ? __pfx_kthread+0x10/0x10 [ 1260.684684][ T31] ret_from_fork_asm+0x1a/0x30 [ 1260.703597][ T31] [ 1260.715943][ T31] INFO: task syz-executor:18528 blocked for more than 144 seconds. [ 1260.765079][ T31] Tainted: G U L syzkaller #0 [ 1260.789033][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1260.819210][ T31] task:syz-executor state:D stack:24104 pid:18528 tgid:18528 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1260.836925][T17481] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum [ 1260.851019][T16790] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum [ 1260.863812][ T31] Call Trace: [ 1260.868469][T17481] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz-executor: Error -74 reading block bitmap for 2 [ 1260.886920][ T31] [ 1260.889994][T16790] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz-executor: Error -74 reading block bitmap for 2 [ 1260.903095][ T31] __schedule+0x125c/0x6730 [ 1260.907963][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1260.917917][ T31] ? __pfx___schedule+0x10/0x10 [ 1260.934243][ T31] ? find_held_lock+0x2b/0x80 [ 1260.940221][ T31] ? schedule+0x225/0x2c0 [ 1260.944630][ T31] schedule+0xdd/0x2c0 [ 1260.949265][ T31] schedule_preempt_disabled+0x13/0x30 [ 1260.954801][ T31] __mutex_lock+0xccc/0x1bd0 [ 1260.959905][ T31] ? device_del+0xa0/0x9b0 [ 1260.964405][ T31] ? xas_create+0x1f4/0x14e0 [ 1260.969510][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1260.977876][ T31] ? mark_held_locks+0x40/0x70 [ 1260.982816][ T31] ? device_del+0xa0/0x9b0 [ 1260.987739][ T31] device_del+0xa0/0x9b0 [ 1260.992074][ T31] ? __pfx_ida_free+0x10/0x10 [ 1260.997669][ T31] ? __pfx_device_del+0x10/0x10 [ 1261.002606][ T31] device_unregister+0x1d/0xe0 [ 1261.007978][ T31] del_device_store+0x346/0x480 [ 1261.012909][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1261.020624][ T31] ? find_held_lock+0x2b/0x80 [ 1261.028094][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1261.033118][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1261.038441][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1261.043876][ T31] bus_attr_store+0x74/0xb0 [ 1261.048883][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1261.054347][ T31] sysfs_kf_write+0xf2/0x150 [ 1261.059341][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1261.064716][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1261.070668][ T31] vfs_write+0x6ac/0x1050 [ 1261.077741][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1261.083833][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1261.089979][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1261.100724][ T31] ksys_write+0x12a/0x250 [ 1261.105996][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1261.111113][ T31] do_syscall_64+0x115/0x840 [ 1261.116370][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1261.121155][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.127578][ T31] RIP: 0033:0x7fc04315e90e [ 1261.132048][ T31] RSP: 002b:00007ffe997f8f08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1261.142257][ T31] RAX: ffffffffffffffda RBX: 0000555571474500 RCX: 00007fc04315e90e [ 1261.150780][ T31] RDX: 0000000000000001 RSI: 00007ffe997f8f90 RDI: 0000000000000005 [ 1261.159082][ T31] RBP: 00007fc0432358a7 R08: 0000000000000000 R09: 0000000000000000 [ 1261.168881][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.180623][ T31] R13: 00007ffe997f8f90 R14: 00007fc043f54620 R15: 0000000000000003 [ 1261.189386][ T31] [ 1261.226235][ T31] INFO: task syz.0.1350:18560 blocked for more than 144 seconds. [ 1261.251349][ T31] Tainted: G U L syzkaller #0 [ 1261.267963][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1261.280835][ T31] task:syz.0.1350 state:D stack:28776 pid:18560 tgid:18556 ppid:16196 task_flags:0x400040 flags:0x00080002 [ 1261.293585][ T31] Call Trace: [ 1261.297414][ T31] [ 1261.300400][ T31] __schedule+0x125c/0x6730 [ 1261.306156][ T31] ? irqentry_exit+0x24d/0xa00 [ 1261.311250][ T31] ? __pfx___schedule+0x10/0x10 [ 1261.316898][ T31] ? find_held_lock+0x2b/0x80 [ 1261.321699][ T31] ? schedule+0x225/0x2c0 [ 1261.326621][ T31] schedule+0xdd/0x2c0 [ 1261.330757][ T31] schedule_preempt_disabled+0x13/0x30 [ 1261.337968][ T31] __mutex_lock+0xccc/0x1bd0 [ 1261.342637][ T31] ? devlink_health_report+0x656/0xb00 [ 1261.348694][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1261.355633][ T31] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 1261.362557][ T31] ? devlink_health_report+0x656/0xb00 [ 1261.368788][ T31] devlink_health_report+0x656/0xb00 [ 1261.374569][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 1261.383021][ T31] ? _copy_from_user+0x59/0xd0 [ 1261.388518][ T31] nsim_dev_health_break_write+0x166/0x210 [ 1261.395378][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1261.401788][ T31] full_proxy_write+0x135/0x1a0 [ 1261.407142][ T31] vfs_write+0x2aa/0x1050 [ 1261.411596][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1261.419198][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1261.424429][ T31] ? __fget_files+0x215/0x3d0 [ 1261.429257][ T31] ? __fget_files+0x21f/0x3d0 [ 1261.434455][ T31] ksys_write+0x12a/0x250 [ 1261.438859][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1261.444658][ T31] do_syscall_64+0x115/0x840 [ 1261.449485][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1261.454632][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.460588][ T31] RIP: 0033:0x7f381cf9e0d9 [ 1261.467344][ T31] RSP: 002b:00007f381b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1261.476068][ T31] RAX: ffffffffffffffda RBX: 00007f381d226090 RCX: 00007f381cf9e0d9 [ 1261.486732][ T31] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1261.495655][ T31] RBP: 00007f381d035024 R08: 0000000000000000 R09: 0000000000000000 [ 1261.504234][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.512362][ T31] R13: 00007f381d226128 R14: 00007f381d226090 R15: 00007ffd43056e48 [ 1261.520951][ T31] [ 1261.550604][ T31] [ 1261.550604][ T31] Showing all locks held in the system: [ 1261.582491][ T31] 1 lock held by khungtaskd/31: [ 1261.595456][ T31] #0: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1261.605979][ T31] 2 locks held by getty/5368: [ 1261.610791][ T31] #0: ffff88803650f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1261.621666][ T31] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1261.633230][ T31] 1 lock held by syz-executor/16801: [ 1261.638584][ T31] #0: ffffffff90a9b7c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1261.648253][ T31] 2 locks held by syz-executor/17484: [ 1261.655044][ T31] #0: ffffffff90a9b7c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1261.664458][ T31] #1: ffffffff8ebf3aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1261.675326][ T31] 6 locks held by kworker/u10:1/18083: [ 1261.680826][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1261.695577][ T31] #1: ffffc9000457fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1261.706133][ T31] #2: ffffffff90a82bc8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1261.716204][ T31] #3: ffff8880596b0128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 1261.726827][ T31] #4: ffff8880596b5258 (&devlink->lock_key#37){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 1261.738742][ T31] #5: ffff88806a7f7160 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1261.751666][ T31] 3 locks held by kworker/u10:4/18128: [ 1261.757380][ T31] #0: ffff88801bc4c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1261.769047][ T31] #1: ffffc90003b8fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1261.780142][ T31] #2: ffffffff90a9b7c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1261.792640][ T31] 5 locks held by syz-executor/18528: [ 1261.798109][ T31] #0: ffff888036ba4450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1261.809043][ T31] #1: ffff88805b9b3880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1261.820504][ T31] #2: ffff88802985c4b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1261.832034][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1261.842696][ T31] #4: ffff8880596b0128 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 1261.852636][ T31] 3 locks held by syz.0.1350/18560: [ 1261.857967][ T31] #0: ffff88807f945970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1261.868039][ T31] #1: ffff888020688450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1261.877820][ T31] #2: ffff8880596b5258 (&devlink->lock_key#37){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 [ 1261.892686][ T31] 4 locks held by syz-executor/18611: [ 1261.898126][ T31] #0: ffff888036ba4450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1261.908240][ T31] #1: ffff8880329d3880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1261.919860][ T31] #2: ffff88802985c4b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1261.930270][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1261.941306][ T31] 4 locks held by syz-executor/18634: [ 1261.946750][ T31] #0: ffff888036ba4450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1261.956418][ T31] #1: ffff88807a0e5080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1261.967369][ T31] #2: ffff88802985c4b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1261.978516][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1261.989184][ T31] 4 locks held by syz-executor/18660: [ 1261.997255][ T31] #0: ffff888036ba4450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.006634][ T31] #1: ffff88807f3e5880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.017376][ T31] #2: ffff88802985c4b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.030438][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.041743][ T31] 4 locks held by syz-executor/18681: [ 1262.047179][ T31] #0: ffff888036ba4450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.058714][ T31] #1: ffff88805b061480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.069050][ T31] #2: ffff88802985c4b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.080502][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.091330][ T31] 4 locks held by syz-executor/18708: [ 1262.099164][ T31] #0: ffff888036ba4450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.108741][ T31] #1: ffff888078731080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.119862][ T31] #2: ffff88802985c4b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.139547][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.177571][ T31] [ 1262.193017][ T31] ============================================= [ 1262.193017][ T31] [ 1262.206481][ T31] NMI backtrace for cpu 0 [ 1262.206503][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1262.206542][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1262.206551][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1262.206565][ T31] Call Trace: [ 1262.206572][ T31] [ 1262.206580][ T31] dump_stack_lvl+0x100/0x190 [ 1262.206613][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1262.206642][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1262.206672][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1262.206704][ T31] sys_info+0x141/0x190 [ 1262.206725][ T31] watchdog+0xcb1/0x1030 [ 1262.206766][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1262.206796][ T31] ? __pfx_watchdog+0x10/0x10 [ 1262.206829][ T31] ? __kthread_parkme+0x18c/0x230 [ 1262.206859][ T31] ? kthread+0x13a/0x450 [ 1262.206889][ T31] ? __pfx_watchdog+0x10/0x10 [ 1262.206921][ T31] kthread+0x370/0x450 [ 1262.206951][ T31] ? __pfx_kthread+0x10/0x10 [ 1262.206984][ T31] ret_from_fork+0x72b/0xd50 [ 1262.207014][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1262.207044][ T31] ? __switch_to+0x800/0x10f0 [ 1262.207080][ T31] ? __switch_to_asm+0x39/0x70 [ 1262.207112][ T31] ? __pfx_kthread+0x10/0x10 [ 1262.207144][ T31] ret_from_fork_asm+0x1a/0x30 [ 1262.207196][ T31] [ 1262.362402][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1262.369351][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1262.380093][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1262.385374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1262.395667][ T31] Call Trace: [ 1262.398990][ T31] [ 1262.401961][ T31] dump_stack_lvl+0x100/0x190 [ 1262.406721][ T31] vpanic+0x552/0x970 [ 1262.410887][ T31] ? __pfx_vpanic+0x10/0x10 [ 1262.415526][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1262.422259][ T31] panic+0xd1/0xe0 [ 1262.426029][ T31] ? __pfx_panic+0x10/0x10 [ 1262.430486][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1262.436726][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1262.443014][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1262.449217][ T31] ? watchdog.cold+0x1ec/0x234 [ 1262.454233][ T31] ? watchdog+0xcc1/0x1030 [ 1262.458873][ T31] watchdog.cold+0x1fd/0x234 [ 1262.463507][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1262.469352][ T31] ? __pfx_watchdog+0x10/0x10 [ 1262.474077][ T31] ? __kthread_parkme+0x18c/0x230 [ 1262.479142][ T31] ? kthread+0x13a/0x450 [ 1262.483468][ T31] ? __pfx_watchdog+0x10/0x10 [ 1262.488285][ T31] kthread+0x370/0x450 [ 1262.492417][ T31] ? __pfx_kthread+0x10/0x10 [ 1262.497066][ T31] ret_from_fork+0x72b/0xd50 [ 1262.501780][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1262.507046][ T31] ? __switch_to+0x800/0x10f0 [ 1262.511995][ T31] ? __switch_to_asm+0x39/0x70 [ 1262.517337][ T31] ? __pfx_kthread+0x10/0x10 [ 1262.522386][ T31] ret_from_fork_asm+0x1a/0x30 [ 1262.527243][ T31] [ 1262.530494][ T31] Kernel Offset: disabled [ 1262.535580][ T31] Rebooting in 86400 seconds..