last executing test programs: 20.823447757s ago: executing program 0 (id=1135): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x52ac2, 0x0) unshare$auto(0x40000080) r1 = socketcall$auto(0x6, 0x0) ioctl$auto_SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000200)="83379146499950925b8529b8c1c95b91768c49c1c6e0d60392dae5b2a80bc1aa0a0b2e02c6fd1b8cf8d57d7198c1c1f475ce6b2942c31fb2d2ece96550bcad64c7a329245ff07d0d5895b51adee988f97be716625090e9be0100000096d9ef638fadf01ec017907a0f2b277c") mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x101, 0x0) socket(0x2d, 0x4, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0xe) bind$auto(0xffffffffffffffff, 0x0, 0x65) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto(r2, &(0x7f0000000380)='\xadZ\x9f\xacI\xfd\x00\f\x8b2\x11\vkK\xef^\x845\xd9\xfe\xb8 \xce%A\x9b8\x14\xe0eTNWC`\x94\xee\x19\xbf\xb1\xa58\f\xf8G\x90\x89m\xf3U\xca\f\xc7*T\x10\xf1\x9e|s\xe0\xe29\x82B\xc9s\xe2\x00\xe6\xe4a\xb0\xe7\x1c\xaa\x940\xaf\xfacg\xf5cW{i\x9e\x8e\xc9\xd7\xe1\xec\xe0\x8f(\xc3\x99.H\x10\x80qFO7\x87\x9f\xf1\x9a\x05N-U\xcf_\xc4\xed\xbd+%\xfa?\x03l\x7f\x80\xc3\x80*\xb4\x91B\xdc,}\x8c\x05\xfb\xda\x1e\xfd^1\xc6\x9eU\x0ei\x05\xacOK\x91\\\x15s\x96\xcaswFY\x87\xf4q\xaa\x1a\xa6\xbf\x121:\x826\xd6\xdd\\\x17\xb7\x8c\xd2G\xb8\x1e\xad\xb0V\xb2S\xea\xed\xce\xd9\x03\xed\xdeg \xf72;\xd9\x93\xc2Y\\\x0e\xa4\x91\x1d\xb1j\xb1C\xac\xear\xf6\xe5*\xa2\xc0\x1b0\xd5~w\xa4\x94\xee(\xd1E\x8ah\xa2\x19\xcd\x0e\xa0o|\xd6\\\xcd\x92\xa8\xe70\'\xd8\xe7\x99^>R\x9c\x82g\x94\xd7\x9b\xd1\xbf1\xd1/*<\xf2\xfdP\x85\xc2\x8f\xfe\xb9:L\xbd\xed\xfeX\x17\x9c\x80}i\x19\x9d\xb1\x12\x1c\xaf-lX/o\x0e(w\xea\x15,M\xc7!H3Q~\x87\x17f;\x96\xc5\x9b\xab\x86\a\xb9\xe6\x93/\xa2\xe2\x80!\xe1@\x9a\xac5\xf2\xbd\x98\xa7Q^\x805\xbb\nO\xae\x06$Q\x85H\xe3\xb5~\xe81\x1a\x02\x91ck\x8d\xaa_w\x9a\xf1\x14m^1\xf3\xd2~\xf5.\xbd\xb1|P4\x19K\x9c\xbc\xbd\xc7X\x89*\r\xba\xbe|\xaeY\xf9\x15&d\xe8\xb3a\x17z\x98\xe3LiG\xda;\x14', 0xfffffffffffffffd) madvise$auto(0x0, 0x7ffffffffffffffc, 0xe) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000640)="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", 0xba0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 16.680363986s ago: executing program 0 (id=1144): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42841, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r0, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r0}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cec13\x00', 0x2, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xfffffffd, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0xc5f, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbadc, 0x0, 0x100000000, 0x1, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/conf/veth0_to_bond/drop_unicast_in_l2_multicast\x00', 0x101202, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0xc, 0xd, 0x2007d49, 0xa, 0x4, 0x0, 0x100000003, 0x3, 0x0, 0x2, 0x8000000ab8, 0xfffffffffffffff7, 0x5, 0x2, 0x5363]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) io_uring_setup$auto(0x1, 0x0) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x410, 0x0) 15.721035058s ago: executing program 0 (id=1147): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$auto(r1, 0x0, 0x68) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/pcmC0D0c\x00', 0x20000, 0x0) ioctl$auto_TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000001c0)="731fdadbb1c68d1dc61d5fb0f4e2b7ea557505ff797529467b8b1e21330ee4415c104bd806df056c9c963aee406c63906148ad51bad6963822bdbad3fce40d") madvise$auto(0x0, 0x5d6, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_MSG_INFO(0xc3, 0xc, 0x0) 12.440312397s ago: executing program 0 (id=1143): mmap$auto(0x0, 0x2000b, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba87e8000"}, 0x1c) madvise$auto(0xffffffffffff78f4, 0x3, 0x401) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.15/usb39/power/wakeup_active_count\x00', 0x10000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0xfffffffe, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xd, 0x0, 0xb0cd, 0x0, 0x1fc, 0xffffffbd}, 0x895}, 0x0, 0x200000) r2 = getpid() sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='z'], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4080) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/246, 0xf6) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) r4 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x40901, 0x0) write$auto(r4, &(0x7f0000000100)='/sys/kernel/debug\xd4\x00\x00\x00/vkms/Writeback-1/edid_override\x00&\x9c\xabdj\xaa\x87\xe6[J!y\x80r', 0x80) mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r7 = socket(0x2, 0x3, 0x100) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_thermal(0x0, r7) write$auto(r3, 0x0, 0x6) 12.107992481s ago: executing program 0 (id=1149): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') getcwd$auto(0x0, 0xffffffffffffffff) rename$auto(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) getdents64$auto(0xffffffffffffffff, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8) write$auto(0xffffffffffffffff, 0x0, 0x5) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x20280, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r2, &(0x7f0000001080)=""/4096, 0x1000) r3 = bpf$auto_BPF_TOKEN_CREATE(0x24, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x200, 0x4, 0x7, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff}, 0x10) r6 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), r5) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r4, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r6, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x808}, 0x20004000) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x38, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1c, 0x2, 0x0, 0x1, [@generic="fbfed698578235a84b8c5fe8e9b52d0069b034139d3cdc125616ee11fdda13db6657", @typed={0x5, 0x145, 0x0, 0x0, @str='-:,@-#}[\x00'}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x7ff) unshare$auto(0x6) msgctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000200)={{0x5, 0x0, 0x0, 0x1, 0x203, 0x5, 0x8}, 0x0, &(0x7f0000000140)=0x9, 0x2, 0xa, 0x3ff, 0x5, 0x1013, 0x5, 0x809, 0x7fff, @inferred, @raw}) 11.578038315s ago: executing program 0 (id=1150): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x80000, 0x0) ioctl$auto_MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000040)=0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, 0x0, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sysfs$auto(0x2, 0x3b, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 11.331703238s ago: executing program 1 (id=1152): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100002, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) 9.838331754s ago: executing program 3 (id=1153): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/v4l-touch15\x00', 0x9601, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x3, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r1, 0x400c4d19, r1) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000a80), 0x101, 0x0) writev$auto(r2, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x3b72, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250400000008000800", @ANYRES32=0x0, @ANYBLOB="e22bb8cd12d2a105a57eb27a03d1df9a80869479c3068e5cd57c8061682528206c0c250070fe784dd028ba0c76e5811ea9d9448cf8fd572cc89238f82f0de55697f1797902ab8169dd578ad48bdaa7e4c15af1d9aee0a08d7a43c2777a2fd25917711baab234527f"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) socket(0x2, 0x80002, 0x73) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x542f, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.509727787s ago: executing program 2 (id=1154): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) write$auto(r0, 0x0, 0x6) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x53ed, 0x3, 0x2, 0x40eb3, r1, 0x300000000003) ioctl$auto_AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000280)=0x74) clone$auto(0x8000000000000005, 0x7fff, 0x0, 0x0, 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xfffffffd, 0x7, 0x0, 0x1, 0x7) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mkdir$auto(0x0, 0x7f) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) 8.513277821s ago: executing program 1 (id=1155): socket(0x21, 0x80000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = epoll_create$auto(0x3e) poll$auto(&(0x7f0000000040)={r0, 0x1, 0xa}, 0x5, 0x108) epoll_ctl$auto(r1, 0x1, r0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x40, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r3, 0x40284504, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x401006, 0x4015, 0x0) 7.491512472s ago: executing program 2 (id=1156): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$auto(r1, 0x0, 0x68) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/pcmC0D0c\x00', 0x20000, 0x0) ioctl$auto_TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000001c0)="731fdadbb1c68d1dc61d5fb0f4e2b7ea557505ff797529467b8b1e21330ee4415c104bd806df056c9c963aee406c63906148ad51bad6963822bdbad3fce40d") madvise$auto(0x0, 0x5d6, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_MSG_INFO(0xc3, 0xc, 0x0) 7.491239241s ago: executing program 3 (id=1157): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80064, 0x9) mmap$auto(0xfffffffffffffffd, 0x5, 0x10000, 0x7fffffff, 0x401, 0x300000000000) mmap$auto(0x0, 0x20006, 0x2, 0x80ebf, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x80000001, 0x7, 0x0, 0x0, 0x1000004) madvise$auto(0x0, 0x200007, 0x19) keyctl$auto_KEYCTL_GET_KEYRING_ID(0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1) ppoll$auto(&(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x9}, 0x7, &(0x7f0000000200)={0x40, 0x1000}, &(0x7f0000000240)={0x8000}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x6, 0x7ff, r0, 0x7ffc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/node/node0/cpulist\x00', 0x28000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000740)) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x8000000000000000, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2f2c02, 0x0) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)=@bpf_attr_4={0x7, 0xffffffffffffffff, 0x1}, 0x5) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) 7.490117674s ago: executing program 1 (id=1158): socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0xffffffffffffffff, 0x100008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0x8000000000000011, 0x405, 0xfff) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x49402, 0x0) read$auto(r0, 0x0, 0x9a28) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket(0x2, 0x804, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000500)="173e8bb6c0") madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) inotify_init1$auto(0x1ff) poll$auto(0x0, 0x5, 0x3) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) 6.090134484s ago: executing program 1 (id=1159): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) ptrace$auto(0x4, 0xffffffffffffffff, 0x8000000000000000, 0xfff) bind$auto(0xffffffffffffffff, 0x0, 0x6b) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') setns(r1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x2, 0x40, 0x7, 0x5, 0x1, 0x9c94, 0xe3e, 0xbfb, 0x248f, 0x5, 0x100000001, 0x80000000, 0x0, 0x9, 0xe0b]}, &(0x7f0000000240)={[0x7, 0x0, 0x772e, 0x8000000000000001, 0x0, 0x9c1c, 0x6, 0xfffffffffffffffa, 0xffffffffffff7fff, 0x8, 0x100, 0x8000000000000000, 0x4, 0x7, 0x2]}, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.399665135s ago: executing program 3 (id=1160): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x1, 0x7e, &(0x7f0000000040)={0xfffffffffffffff8, 0x6, 0xffffffffffffffc0, 0x800000000000046}) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio22\x00', 0x1cb502, 0x0) ioctl$auto(r0, 0x5646, r0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x3}, 0x100000000006) r1 = socket(0xa, 0x3, 0x3b) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2000000080000001, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) sendmsg$auto_NFC_CMD_VENDOR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) shmctl$auto_SHM_STAT_ANY(0x2, 0xf, &(0x7f00000005c0)={{0x1, 0xee00, 0xee01, 0x8, 0x5d, 0x0, 0xd1}, 0xffff46e6, 0x8, 0x8, 0x8, @raw=0x8, @raw=0x400, 0x7a, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/d3cold_allowed\x00', 0xb02, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) sendfile$auto(r3, r3, 0x0, 0x8) socket(0x2, 0x80805, 0x0) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) 4.314262535s ago: executing program 2 (id=1161): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x446003, 0x0) r1 = fanotify_init$auto(0x8, 0x2000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x1) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000010c0), r1) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000001200)={&(0x7f0000001040), 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, r1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf9}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xe}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$auto_PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000000)={0x7, 0xffff1dc8}) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) setns(0xc9, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6a}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1d}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) close_range$auto(0x2, 0x8, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0) write$auto_split_huge_pages_fops_huge_memory(r4, &(0x7f00000000c0)='1', 0x1) select$auto(0x402010, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000400)=""/89, 0x59) 4.132504898s ago: executing program 3 (id=1162): fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f6", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x5, 0x200000000005, 0x7, 0x7, 0x0, 0x80000002, 0xc, 0x6, 0x800, 0xb80, 0xe34c, 0x4009, 0x4c3, 0xfffdfffffffff952, 0x7fff, 0x1000]}, 0x0, &(0x7f0000000080)={0xe969, 0x1000}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r0, 0x3, 0x34, &(0x7f0000000240)='IOAM6\x00', 0x3) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0xe01, 0x0) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x84) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000200), r0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="5478c3eefaaf000000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fbdbdf2501000000080002000100000006000100050000000600010080000000080002000101000008000200a6fbffff080002000700000008000200060000000800020003000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x20000000) 3.154760664s ago: executing program 3 (id=1163): openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r2, r2, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xf90, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfdef) write$auto(0xffffffffffffffff, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) 3.070550313s ago: executing program 1 (id=1165): pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x80042, 0x0) mmap$auto(0x0, 0x810004, 0xfffffffffffffffc, 0x8000000008011, 0x3, 0x81000000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'\x01\xd4\x14', 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xf, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) close_range$auto(0x0, r1, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0xb, 0xc, 0x1000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r2, 0x0, 0xc3) 621.574685ms ago: executing program 3 (id=1167): unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = waitid$auto(0x80000000, 0xffffffffffffffff, &(0x7f0000000180)={@siginfo_0_0={0x7f, 0x10001, 0x6e5, @_sigpoll={0x1900aa1e, r1}}}, 0x80000001, &(0x7f00000002c0)={{0x6, 0x8000}, {0xea8, 0x1}, 0x2, 0x7, 0xfffffffffffffffe, 0x200, 0x4, 0x8, 0x31, 0x800, 0x7fffffffffffffff, 0x5, 0xd8d, 0x6, 0x8, 0x3}) syz_open_procfs$namespace(r2, &(0x7f0000000380)='ns/cgroup\x00') write$auto_console_fops_tty_io(r1, &(0x7f0000000100)="c80d1b5d399b394b", 0x8) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x1b}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c004) unshare$auto(0x40000080) r4 = openat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xa, 0xc) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, &(0x7f00000000c0)={0x1000008, 0xf851, 0x2, @raw=[0xfffffffe, 0x800, 0x6, 0xffffffbf, 0xd, 0x8001, 0x7fffffff, 0x4, 0x1, 0x0, 0x6a, 0x6, 0x5, 0xfffffffe, 0x6, 0x8c]}) pselect6$auto(0xb7, &(0x7f0000000480)={[0xcb7, 0x0, 0x3, 0x8, 0x7, 0x3, 0x3, 0x2, 0x4, 0xffffffff80000001, 0x100000000, 0xffffffffffffffff, 0x3, 0x40, 0x2, 0x3]}, &(0x7f0000000500)={[0x10000, 0x634, 0x4, 0x0, 0x1e6, 0x200, 0x5, 0x4, 0x3b9, 0xff, 0x1, 0x9, 0xf, 0x40, 0x8, 0x9]}, &(0x7f0000000580)={[0x7ff, 0x4867, 0x1, 0xadee, 0x1, 0x10000, 0x8001, 0x4, 0x7, 0x200, 0x5, 0x1, 0x8, 0x3, 0x9c, 0xfffffffffffffff7]}, &(0x7f0000000600)={0xff, 0xffffffffffffffc0}, &(0x7f0000000680)="68b9312eae7bdf573ab9fc2224981d7b0501df481c6f5d4bd27174120d18b19dd482872c3149a1bc5debc1c5692bf503ecf625ce86cce93ac169d0e44f057ec73a1cb765b55201dd405bb96744f864db3cb7555f9f524afce1f6e28e") mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_TIOCGEXCL(r1, 0x80045440, &(0x7f0000000200)=0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) fsopen$auto(&(0x7f0000000040)='/\x00', 0xfda5) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r5, 0x8, 0x1) fcntl$auto_F_GETOWN(r5, 0x9, 0x5) eventfd$auto(0x7f) lsm_list_modules$auto(0x0, 0x0, 0x0) 543.559569ms ago: executing program 1 (id=1168): syz_clone(0x10110200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth0_to_bridge/disable_policy\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) r2 = socket(0x11, 0x3, 0x300) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14b402, 0x0) mmap$auto(0x0, 0x810004, 0x4, 0x10010, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffffb}, 0x6, 0x3, 0x1, 0x2a) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a801, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000100)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_NS_GET_USERNS(r5, 0xb701, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x2641, 0x0) write$auto(r6, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x4000000000000) socket(0xa, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/clockevents/drivers_probe\x00', 0x288302, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 452.014328ms ago: executing program 2 (id=1169): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x5, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r4 = socket(0x11, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r5) sendmsg$auto_HWSIM_CMD_REGISTER(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000adc0)={0x38, r8, 0x1b, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x19}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) 0s ago: executing program 2 (id=1170): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r2, r2, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r5, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r7 = wait4$auto(r6, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r7, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r7}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r7, 0xc, 0x6) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) ioctl$auto(r0, 0x921064a2, 0x20000000020000a) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000000)={{0x3, 0xffffffff, 0x1, 0x4005, 0x6}, "654c18440000738236000000fdc4fc151014d9ac0200000000001000"}) readv$auto(r8, &(0x7f0000000180)={0x0, 0x4}, 0x4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) socket(0x2, 0x80002, 0x73) kernel console output (not intermixed with test programs): ] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.706123][ T1163] vlan1: left allmulticast mode [ 492.712185][ T1163] veth0_vlan: left allmulticast mode [ 492.717591][ T1163] vlan1: left promiscuous mode [ 492.723483][ T1163] bridge0: port 3(vlan1) entered disabled state [ 492.745733][ T1163] bridge_slave_1: left allmulticast mode [ 492.751770][ T1163] bridge_slave_1: left promiscuous mode [ 492.757613][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.768412][ T1163] bridge_slave_0: left allmulticast mode [ 492.774527][ T1163] bridge_slave_0: left promiscuous mode [ 492.780752][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.004321][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.018366][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.028728][ T1163] bond0 (unregistering): Released all slaves [ 493.070182][ T5625] Bluetooth: hci0: command tx timeout [ 493.133437][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.145623][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.155604][ T1163] bond0 (unregistering): Released all slaves [ 493.165627][T12164] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 493.178014][T12164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.192506][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 493.439004][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.485900][T12164] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.532772][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.540018][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.577662][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.584902][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.888370][ T1163] hsr_slave_0: left promiscuous mode [ 493.913490][ T1163] hsr_slave_1: left promiscuous mode [ 493.923031][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.950633][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.962966][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.981762][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.007957][ T1163] hsr_slave_0: left promiscuous mode [ 494.015795][ T1163] hsr_slave_1: left promiscuous mode [ 494.024524][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.034077][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.042547][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.051968][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.070175][ T1163] veth1_macvtap: left promiscuous mode [ 494.075813][ T1163] veth0_macvtap: left promiscuous mode [ 494.082861][ T1163] veth1_vlan: left promiscuous mode [ 494.088225][ T1163] veth0_vlan: left promiscuous mode [ 494.095572][ T1163] veth1_macvtap: left promiscuous mode [ 494.101469][ T1163] veth0_macvtap: left promiscuous mode [ 494.107259][ T1163] veth1_vlan: left promiscuous mode [ 494.112648][ T1163] veth0_vlan: left promiscuous mode [ 494.354452][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 494.377531][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 494.616518][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 494.633120][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 494.738870][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 495.155350][ T5625] Bluetooth: hci0: command tx timeout [ 495.251103][T12164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.356720][T12164] veth0_vlan: entered promiscuous mode [ 495.370707][T12164] veth1_vlan: entered promiscuous mode [ 495.411435][T12164] veth0_macvtap: entered promiscuous mode [ 495.424505][T12164] veth1_macvtap: entered promiscuous mode [ 495.449407][T12164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.475403][T12164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.511217][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.521509][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.550251][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.583373][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.625848][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 495.669237][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.687529][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.719381][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.727739][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.330686][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 497.119248][T12323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.715'. [ 497.178946][T12323] netlink: 29 bytes leftover after parsing attributes in process `syz.2.715'. [ 497.215083][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.227862][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.232287][ T5609] Bluetooth: hci0: command tx timeout [ 497.240671][T12333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.251873][T12333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.262713][T12333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.292710][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.308731][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.317478][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.326254][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.337100][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.299729][T12333] Bluetooth: hci1: command tx timeout [ 499.380627][T12333] Bluetooth: hci2: command tx timeout [ 499.569883][T12393] bridge0: port 3(vlan1) entered blocking state [ 499.576410][T12393] bridge0: port 3(vlan1) entered disabled state [ 499.583447][T12393] vlan1: entered allmulticast mode [ 499.588618][T12393] veth0_vlan: entered allmulticast mode [ 499.597900][T12393] vlan1: entered promiscuous mode [ 499.604294][T12393] bridge0: port 3(vlan1) entered blocking state [ 499.610759][T12393] bridge0: port 3(vlan1) entered forwarding state [ 501.380169][T12333] Bluetooth: hci1: command tx timeout [ 501.461390][T12333] Bluetooth: hci2: command tx timeout [ 501.461714][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.479777][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.706751][T12334] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.721337][T12334] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.739167][T12334] bridge_slave_0: entered allmulticast mode [ 501.764422][T12334] bridge_slave_0: entered promiscuous mode [ 501.862860][T12330] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.881727][T12330] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.901449][T12330] bridge_slave_0: entered allmulticast mode [ 501.910721][T12330] bridge_slave_0: entered promiscuous mode [ 501.919245][T12334] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.928859][T12334] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.944518][T12334] bridge_slave_1: entered allmulticast mode [ 501.963414][T12334] bridge_slave_1: entered promiscuous mode [ 502.216691][T12330] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.237399][T12330] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.245001][T12330] bridge_slave_1: entered allmulticast mode [ 502.253646][T12330] bridge_slave_1: entered promiscuous mode [ 502.440395][T12334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.530824][T12334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.636533][T12330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.710249][T12330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.753829][T12334] team0: Port device team_slave_0 added [ 502.774170][T12334] team0: Port device team_slave_1 added [ 502.878369][T12334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.895708][T12334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.942974][T12334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.995713][T12334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.010028][T12334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.065629][T12334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.088572][T12330] team0: Port device team_slave_0 added [ 503.119092][T12330] team0: Port device team_slave_1 added [ 503.269241][T12330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.283100][T12330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.319965][T12330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.348130][T12334] hsr_slave_0: entered promiscuous mode [ 503.366732][T12334] hsr_slave_1: entered promiscuous mode [ 503.381364][T12334] debugfs: 'hsr0' already exists in 'hsr' [ 503.387313][T12334] Cannot create hsr debugfs directory [ 503.398000][T12330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.405851][T12330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.433937][T12330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.459797][T12333] Bluetooth: hci1: command tx timeout [ 503.539979][T12333] Bluetooth: hci2: command tx timeout [ 503.602524][T12330] hsr_slave_0: entered promiscuous mode [ 503.610818][T12330] hsr_slave_1: entered promiscuous mode [ 503.622928][T12330] debugfs: 'hsr0' already exists in 'hsr' [ 503.635038][T12330] Cannot create hsr debugfs directory [ 505.232477][T12515] random: crng reseeded on system resumption [ 505.539687][T12333] Bluetooth: hci1: command tx timeout [ 505.619843][T12333] Bluetooth: hci2: command tx timeout [ 506.577777][T12330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 506.654598][T12330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.686092][T12330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 506.714178][T12330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.951810][T12330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 507.015666][T12330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.030865][T12330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 507.074457][T12330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.347077][T12334] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 507.366783][T12334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.423062][T12334] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 507.465729][T12334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.493269][T12334] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 507.540199][T12334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.564009][T12334] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 507.604938][T12334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.808144][T12330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.869134][T12330] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.913849][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.921068][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.957683][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.964903][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.027717][T12334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.116923][T12334] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.148315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.155590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.210172][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.217398][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.223400][T12330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.373354][T12330] veth0_vlan: entered promiscuous mode [ 509.411359][T12334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.435056][T12330] veth1_vlan: entered promiscuous mode [ 509.567098][T12330] veth0_macvtap: entered promiscuous mode [ 509.584724][T12334] veth0_vlan: entered promiscuous mode [ 509.603689][T12330] veth1_macvtap: entered promiscuous mode [ 509.632821][T12334] veth1_vlan: entered promiscuous mode [ 509.670077][T12330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.719622][T12330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.830421][T12334] veth0_macvtap: entered promiscuous mode [ 509.927335][T12334] veth1_macvtap: entered promiscuous mode [ 509.989873][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.042219][T12334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.060708][ T1163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.085171][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.103514][T12334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.111650][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.194742][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.210823][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.220937][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.280318][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.360856][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.382469][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.446212][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.467580][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.540119][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.565224][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.574604][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.597302][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.648060][ T29] audit: type=1800 audit(1843141291.350:30): pid=12627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.727" name="version" dev="configfs" ino=63706 res=0 errno=0 [ 514.234283][T12676] random: crng reseeded on system resumption [ 515.334421][T12632] Process accounting paused [ 515.890950][T12686] net_ratelimit: 342 callbacks suppressed [ 515.890968][T12686] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 517.504164][T12716] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 517.834425][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 520.442688][T12756] binder: 12752:12756 ioctl c0306201 2000000000c0 returned -14 [ 522.166833][T12774] bridge0: port 3(vlan1) entered blocking state [ 522.182415][T12774] bridge0: port 3(vlan1) entered disabled state [ 522.199446][T12774] vlan1: entered allmulticast mode [ 522.218091][T12774] veth0_vlan: entered allmulticast mode [ 522.226204][T12774] vlan1: entered promiscuous mode [ 522.232367][T12774] bridge0: port 3(vlan1) entered blocking state [ 522.239752][T12774] bridge0: port 3(vlan1) entered forwarding state [ 522.565363][T12782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.750'. [ 523.935565][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.755'. [ 524.963053][T12818] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 525.272252][T12827] binder: 12821:12827 ioctl c0306201 2000000000c0 returned -14 [ 525.808384][T12842] vhci_hcd vhci_hcd.2: invalid port number 253 [ 525.842495][T12842] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 527.934838][ T1018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.271990][ T1018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.353463][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 528.369166][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 528.393576][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 528.407337][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 528.419238][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 528.558604][ T1018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.702486][ T1018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.470965][ T1018] bridge_slave_1: left allmulticast mode [ 529.485956][ T1018] bridge_slave_1: left promiscuous mode [ 529.495480][ T1018] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.515462][ T1018] bridge_slave_0: left allmulticast mode [ 529.529755][ T1018] bridge_slave_0: left promiscuous mode [ 529.536611][ T1018] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.877031][ T1018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.893426][ T1018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.905019][ T1018] bond0 (unregistering): Released all slaves [ 530.501385][T12901] Bluetooth: hci2: command tx timeout [ 531.326103][ T1018] hsr_slave_0: left promiscuous mode [ 531.347301][ T1018] hsr_slave_1: left promiscuous mode [ 531.371736][ T1018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.398679][ T1018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.424439][ T1018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.443829][ T1018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.488337][ T1018] veth1_macvtap: left promiscuous mode [ 531.499864][ T1018] veth0_macvtap: left promiscuous mode [ 531.505709][ T1018] veth1_vlan: left promiscuous mode [ 531.511119][ T1018] veth0_vlan: left promiscuous mode [ 531.939120][ T1018] team0 (unregistering): Port device team_slave_1 removed [ 531.971613][ T1018] team0 (unregistering): Port device team_slave_0 removed [ 532.330595][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 532.592105][T12901] Bluetooth: hci2: command tx timeout [ 533.603037][T12942] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 533.705276][T12864] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.731853][T12864] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.739154][T12864] bridge_slave_0: entered allmulticast mode [ 533.750821][T12864] bridge_slave_0: entered promiscuous mode [ 533.778659][T12864] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.802985][T12864] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.818842][T12864] bridge_slave_1: entered allmulticast mode [ 533.827591][T12864] bridge_slave_1: entered promiscuous mode [ 533.882302][T12864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.896917][T12864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.937477][T12864] team0: Port device team_slave_0 added [ 533.950709][T12864] team0: Port device team_slave_1 added [ 533.992543][T12864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.019719][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.072506][T12864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.104339][T12864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.119141][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.150729][T12864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.167786][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 534.241555][T12864] hsr_slave_0: entered promiscuous mode [ 534.248462][T12864] hsr_slave_1: entered promiscuous mode [ 534.255467][T12864] debugfs: 'hsr0' already exists in 'hsr' [ 534.264217][T12864] Cannot create hsr debugfs directory [ 534.671665][T12901] Bluetooth: hci2: command tx timeout [ 535.107878][T12864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 535.120904][T12864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.129112][T12864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 535.139958][T12864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.148103][T12864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 535.158987][T12864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.167135][T12864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 535.177551][T12864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.270307][T12864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.315189][T12864] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.334182][T12889] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.341410][T12889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.361523][T12889] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.368743][T12889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.963156][T12864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.051660][T12864] veth0_vlan: entered promiscuous mode [ 536.066868][T12864] veth1_vlan: entered promiscuous mode [ 536.116239][T12864] veth0_macvtap: entered promiscuous mode [ 536.131245][T12864] veth1_macvtap: entered promiscuous mode [ 536.158406][T12864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.178913][T12864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.263476][T12889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.311438][T12903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.377216][T12889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.396513][T12889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.413078][T12903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.446110][T12889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.454966][T12904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.466354][T12889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.733830][T13035] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 536.750466][T12901] Bluetooth: hci2: command tx timeout [ 537.265980][T13058] binder: 13052:13058 ioctl c0306201 2000000000c0 returned -14 [ 537.891757][T13063] nbd: nbd4129 already in use [ 539.034402][T13085] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 539.056743][T13085] netlink: 1 bytes leftover after parsing attributes in process `syz.2.777'. [ 539.693838][T13098] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 542.273216][T12894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.806810][T13143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.822715][T13143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.834522][T13143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.842702][T13143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.850728][T13143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 542.953905][T12894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.248445][T12894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.516839][T12894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.899990][T13143] Bluetooth: hci2: command tx timeout [ 545.091142][T12894] bridge_slave_1: left allmulticast mode [ 545.096918][T12894] bridge_slave_1: left promiscuous mode [ 545.108767][T12894] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.127267][T12894] bridge_slave_0: left allmulticast mode [ 545.133142][T12894] bridge_slave_0: left promiscuous mode [ 545.138976][T12894] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.406183][T12894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.421575][T12894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.435532][T12894] bond0 (unregistering): Released all slaves [ 545.658654][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 545.891151][T13145] Process accounting resumed [ 546.041901][T12894] hsr_slave_0: left promiscuous mode [ 546.054837][T12894] hsr_slave_1: left promiscuous mode [ 546.063017][T12894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.073144][T12894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.083109][T12894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.094734][T12894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.118277][T12894] veth1_macvtap: left promiscuous mode [ 546.124644][T12894] veth0_macvtap: left promiscuous mode [ 546.130957][T12894] veth1_vlan: left promiscuous mode [ 546.136395][T12894] veth0_vlan: left promiscuous mode [ 546.502466][T12894] team0 (unregistering): Port device team_slave_1 removed [ 546.536209][T12894] team0 (unregistering): Port device team_slave_0 removed [ 546.686538][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 546.804168][T13141] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.811603][T13141] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.818974][T13141] bridge_slave_0: entered allmulticast mode [ 546.827919][T13141] bridge_slave_0: entered promiscuous mode [ 546.837163][T13141] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.847672][T13141] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.858386][T13141] bridge_slave_1: entered allmulticast mode [ 546.867981][T13141] bridge_slave_1: entered promiscuous mode [ 546.956702][T13141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.982413][T13143] Bluetooth: hci2: command tx timeout [ 547.015277][T13141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.076562][T13141] team0: Port device team_slave_0 added [ 547.088277][T13141] team0: Port device team_slave_1 added [ 547.138935][T13141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.147552][T13141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.179324][T13141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.192836][T13141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.201288][T13141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.229942][T13141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.294585][T13141] hsr_slave_0: entered promiscuous mode [ 547.301700][T13141] hsr_slave_1: entered promiscuous mode [ 547.308325][T13141] debugfs: 'hsr0' already exists in 'hsr' [ 547.315961][T13141] Cannot create hsr debugfs directory [ 547.536656][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 547.947742][T13141] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 547.959082][T13141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.968824][T13141] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 547.981556][T13141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.993680][T13141] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 548.008869][T13141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.019122][T13141] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 548.031533][T13141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.134657][T13141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.157504][T13141] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.177171][T12896] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.184425][T12896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.206847][T12896] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.214116][T12896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.838344][T13141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.916655][T13141] veth0_vlan: entered promiscuous mode [ 548.936561][T13141] veth1_vlan: entered promiscuous mode [ 548.986108][T13141] veth0_macvtap: entered promiscuous mode [ 548.998672][T13141] veth1_macvtap: entered promiscuous mode [ 549.027122][T13141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.049253][T13141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.060867][T13143] Bluetooth: hci2: command tx timeout [ 549.130487][T12903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.181080][T12903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.241449][T12896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.279730][T12903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.294866][T12896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.327525][T12896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.365821][T12894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.384570][T12894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.578754][T13290] binder: 13285:13290 ioctl c0306201 2000000000c0 returned -14 [ 551.101722][T13318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'. [ 551.140429][T13143] Bluetooth: hci2: command tx timeout [ 555.604410][T13364] sg_write: data in/out 8156/3992 bytes for SCSI command 0x0-- guessing data in; [ 555.604410][T13364] program syz.2.800 not setting count and/or reply_len properly [ 558.413430][T13408] FAULT_INJECTION: forcing a failure. [ 558.413430][T13408] name failslab, interval 1, probability 0, space 0, times 0 [ 558.448632][T13408] CPU: 0 UID: 0 PID: 13408 Comm: syz.3.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.448678][T13408] Tainted: [L]=SOFTLOCKUP [ 558.448689][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 558.448711][T13408] Call Trace: [ 558.448721][T13408] [ 558.448732][T13408] dump_stack_lvl+0x100/0x190 [ 558.448802][T13408] should_fail_ex.cold+0x5/0xa [ 558.448834][T13408] should_failslab+0xc2/0x120 [ 558.448877][T13408] kmem_cache_alloc_noprof+0x91/0x6a0 [ 558.448910][T13408] ? __pfx_map_id_range_down+0x10/0x10 [ 558.448978][T13408] ? security_inode_alloc+0x3b/0x2c0 [ 558.449138][T13408] security_inode_alloc+0x3b/0x2c0 [ 558.449175][T13408] inode_init_always_gfp+0xc77/0xfb0 [ 558.449214][T13408] alloc_inode+0x8e/0x250 [ 558.449253][T13408] sock_alloc+0x44/0x280 [ 558.449364][T13408] ? security_socket_create+0x7f/0x250 [ 558.449400][T13408] sock_create_lite+0x82/0x120 [ 558.449478][T13408] __netlink_kernel_create+0xbd/0x750 [ 558.449578][T13408] ? __pfx___netlink_kernel_create+0x10/0x10 [ 558.449613][T13408] ? __pfx_genl_pernet_init+0x10/0x10 [ 558.449646][T13408] genl_pernet_init+0xbd/0x160 [ 558.449677][T13408] ? __pfx_genl_pernet_init+0x10/0x10 [ 558.449706][T13408] ? lockdep_init_map_type+0x5c/0x250 [ 558.449735][T13408] ? __pfx_genl_rcv+0x10/0x10 [ 558.449762][T13408] ? __pfx_genl_bind+0x10/0x10 [ 558.449788][T13408] ? __pfx_genl_unbind+0x10/0x10 [ 558.449813][T13408] ? __pfx_genl_release+0x10/0x10 [ 558.449844][T13408] ? mutex_init_lockdep+0xf1/0x120 [ 558.449876][T13408] ops_init+0x1e2/0x5f0 [ 558.450008][T13408] setup_net+0x118/0x3a0 [ 558.450051][T13408] ? __pfx_setup_net+0x10/0x10 [ 558.450088][T13408] ? mutex_init_lockdep+0xf1/0x120 [ 558.450121][T13408] copy_net_ns+0x46f/0x7c0 [ 558.450168][T13408] create_new_namespaces+0x3ea/0xac0 [ 558.450224][T13408] unshare_nsproxy_namespaces+0xf2/0x220 [ 558.450261][T13408] ksys_unshare+0x438/0xab0 [ 558.450300][T13408] ? find_held_lock+0x2b/0x80 [ 558.450334][T13408] ? exc_page_fault+0x6f/0xd0 [ 558.450372][T13408] ? __pfx_ksys_unshare+0x10/0x10 [ 558.450420][T13408] __x64_sys_unshare+0x31/0x40 [ 558.450453][T13408] do_syscall_64+0x115/0x840 [ 558.450498][T13408] ? clear_bhb_loop+0x70/0xc0 [ 558.450541][T13408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.450569][T13408] RIP: 0033:0x7f866eb9e0d9 [ 558.450593][T13408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.450621][T13408] RSP: 002b:00007f866cdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 558.450654][T13408] RAX: ffffffffffffffda RBX: 00007f866ee26090 RCX: 00007f866eb9e0d9 [ 558.450684][T13408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 558.450703][T13408] RBP: 00007f866ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 558.450720][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.450738][T13408] R13: 00007f866ee26128 R14: 00007f866ee26090 R15: 00007ffd52989848 [ 558.450777][T13408] [ 559.064690][T12934] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.397289][T12934] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.621240][T12901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 559.649742][T12901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.662406][T12901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.673122][T12901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 559.681190][T12901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 559.837964][T12934] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.260201][T12934] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.910599][T12934] bridge_slave_1: left allmulticast mode [ 560.926905][T12934] bridge_slave_1: left promiscuous mode [ 560.951555][T12934] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.052863][T12934] bridge_slave_0: left allmulticast mode [ 561.071601][T12934] bridge_slave_0: left promiscuous mode [ 561.097633][T12934] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.779814][T12901] Bluetooth: hci0: command tx timeout [ 561.864163][T12934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.894100][T12934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.923809][T12934] bond0 (unregistering): Released all slaves [ 562.200921][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 562.794232][T12934] hsr_slave_0: left promiscuous mode [ 562.815499][T12934] hsr_slave_1: left promiscuous mode [ 562.838744][T12934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.864503][T12934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.904078][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.914513][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.957771][T12934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.987160][T12934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.065545][T12934] veth1_macvtap: left promiscuous mode [ 563.087454][T12934] veth0_macvtap: left promiscuous mode [ 563.107213][T12934] veth1_vlan: left promiscuous mode [ 563.131604][T12934] veth0_vlan: left promiscuous mode [ 563.493274][T13488] FAULT_INJECTION: forcing a failure. [ 563.493274][T13488] name failslab, interval 1, probability 0, space 0, times 0 [ 563.552429][T13488] CPU: 1 UID: 0 PID: 13488 Comm: syz.3.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.552480][T13488] Tainted: [L]=SOFTLOCKUP [ 563.552491][T13488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.552509][T13488] Call Trace: [ 563.552519][T13488] [ 563.552530][T13488] dump_stack_lvl+0x100/0x190 [ 563.552572][T13488] should_fail_ex.cold+0x5/0xa [ 563.552606][T13488] should_failslab+0xc2/0x120 [ 563.552660][T13488] __kmalloc_cache_noprof+0x91/0x6c0 [ 563.552687][T13488] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 563.552731][T13488] ? snd_card_file_add+0x52/0x320 [ 563.552883][T13488] ? __pfx_snd_ctl_open+0x10/0x10 [ 563.552954][T13488] snd_card_file_add+0x52/0x320 [ 563.552985][T13488] ? __pfx_snd_ctl_open+0x10/0x10 [ 563.553025][T13488] ? __pfx_snd_ctl_open+0x10/0x10 [ 563.553063][T13488] snd_ctl_open+0x9d/0x5c0 [ 563.553103][T13488] ? __pfx_snd_ctl_open+0x10/0x10 [ 563.553140][T13488] snd_open+0x201/0x450 [ 563.553166][T13488] ? __pfx_snd_open+0x10/0x10 [ 563.553191][T13488] chrdev_open+0x234/0x6a0 [ 563.553220][T13488] ? __pfx_apparmor_file_open+0x10/0x10 [ 563.553304][T13488] ? __pfx_chrdev_open+0x10/0x10 [ 563.553336][T13488] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 563.553424][T13488] do_dentry_open+0x6ab/0x14d0 [ 563.553456][T13488] ? __pfx_chrdev_open+0x10/0x10 [ 563.553494][T13488] vfs_open+0x82/0x3f0 [ 563.553536][T13488] path_openat+0x2873/0x4280 [ 563.553584][T13488] ? __pfx_path_openat+0x10/0x10 [ 563.553637][T13488] do_file_open+0x20e/0x430 [ 563.553672][T13488] ? __pfx_do_file_open+0x10/0x10 [ 563.553731][T13488] ? alloc_fd+0x471/0x7a0 [ 563.553764][T13488] ? do_getname+0x191/0x390 [ 563.553802][T13488] do_sys_openat2+0x10f/0x1e0 [ 563.553841][T13488] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.553885][T13488] ? do_raw_spin_lock+0x128/0x260 [ 563.553928][T13488] __x64_sys_openat+0x12d/0x210 [ 563.553968][T13488] ? __pfx___x64_sys_openat+0x10/0x10 [ 563.554018][T13488] do_syscall_64+0x115/0x840 [ 563.554064][T13488] ? clear_bhb_loop+0x70/0xc0 [ 563.554100][T13488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.554128][T13488] RIP: 0033:0x7f866eb9e0d9 [ 563.554153][T13488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.554183][T13488] RSP: 002b:00007f866c991028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 563.554214][T13488] RAX: ffffffffffffffda RBX: 00007f866ee26270 RCX: 00007f866eb9e0d9 [ 563.554233][T13488] RDX: 0000000000000080 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 563.554251][T13488] RBP: 00007f866ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 563.554268][T13488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.554285][T13488] R13: 00007f866ee26308 R14: 00007f866ee26270 R15: 00007ffd52989848 [ 563.554323][T13488] [ 563.877428][T12901] Bluetooth: hci0: command tx timeout [ 564.296474][T12934] team0 (unregistering): Port device team_slave_1 removed [ 564.335687][T12934] team0 (unregistering): Port device team_slave_0 removed [ 564.601028][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 564.931554][T13504] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 565.940017][T12901] Bluetooth: hci0: command tx timeout [ 566.067649][T13423] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.079215][T13423] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.093154][T13423] bridge_slave_0: entered allmulticast mode [ 566.129533][T13423] bridge_slave_0: entered promiscuous mode [ 566.157008][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.183767][T13423] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.210464][T13423] bridge_slave_1: entered allmulticast mode [ 566.233508][T13423] bridge_slave_1: entered promiscuous mode [ 566.255261][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 566.485235][T13423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.534127][T13423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.673540][T13423] team0: Port device team_slave_0 added [ 566.807204][T13423] team0: Port device team_slave_1 added [ 566.852617][T13553] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿd, dev 3000000000 [ 567.029646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 567.685379][T13423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.698339][T13569] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:988d:a8ef:b61c:7dcb, load rds_tcp or rds_rdma? [ 567.712242][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.739561][T13423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.898288][T13423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.916322][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.984186][T13423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.022590][T12901] Bluetooth: hci0: command tx timeout [ 568.056016][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 568.212137][T13423] hsr_slave_0: entered promiscuous mode [ 568.219073][T13423] hsr_slave_1: entered promiscuous mode [ 568.226602][T13423] debugfs: 'hsr0' already exists in 'hsr' [ 568.234630][T13423] Cannot create hsr debugfs directory [ 570.814383][T13423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 570.875295][T13423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.916946][T13423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 570.959400][T13423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.006630][T13423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 571.040901][T13423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.166888][T13423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 571.237530][T13423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.648553][T13423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.781850][T13423] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.827049][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.834291][T12903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.877758][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.884962][T12903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.054209][T13668] FAULT_INJECTION: forcing a failure. [ 573.054209][T13668] name failslab, interval 1, probability 0, space 0, times 0 [ 573.120998][T13668] CPU: 0 UID: 0 PID: 13668 Comm: syz.1.832 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.121049][T13668] Tainted: [L]=SOFTLOCKUP [ 573.121060][T13668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.121079][T13668] Call Trace: [ 573.121089][T13668] [ 573.121100][T13668] dump_stack_lvl+0x100/0x190 [ 573.121141][T13668] should_fail_ex.cold+0x5/0xa [ 573.121176][T13668] should_failslab+0xc2/0x120 [ 573.121218][T13668] __kmalloc_noprof+0xfc/0x820 [ 573.121252][T13668] ? __register_sysctl_table+0xbc8/0x1650 [ 573.121287][T13668] ? __register_sysctl_table+0xbc8/0x1650 [ 573.121319][T13668] ? __register_sysctl_table+0xbe4/0x1650 [ 573.121361][T13668] __register_sysctl_table+0xbe4/0x1650 [ 573.121402][T13668] ? __pfx___register_sysctl_table+0x10/0x10 [ 573.121433][T13668] ? is_module_address+0x69/0xf0 [ 573.121499][T13668] ? register_net_sysctl_sz+0x222/0x430 [ 573.121688][T13668] __devinet_sysctl_register+0x1b9/0x360 [ 573.121784][T13668] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 573.121829][T13668] ? __asan_memcpy+0x3c/0x60 [ 573.121872][T13668] devinet_init_net+0x303/0x8d0 [ 573.121918][T13668] ? __pfx_devinet_init_net+0x10/0x10 [ 573.121958][T13668] ops_init+0x1e2/0x5f0 [ 573.122003][T13668] setup_net+0x118/0x3a0 [ 573.122042][T13668] ? __pfx_setup_net+0x10/0x10 [ 573.122081][T13668] ? mutex_init_lockdep+0xf1/0x120 [ 573.122118][T13668] copy_net_ns+0x46f/0x7c0 [ 573.122166][T13668] create_new_namespaces+0x3ea/0xac0 [ 573.122203][T13668] unshare_nsproxy_namespaces+0xf2/0x220 [ 573.122238][T13668] ksys_unshare+0x438/0xab0 [ 573.122278][T13668] ? __pfx_ksys_unshare+0x10/0x10 [ 573.122330][T13668] __x64_sys_unshare+0x31/0x40 [ 573.122365][T13668] do_syscall_64+0x115/0x840 [ 573.122404][T13668] ? clear_bhb_loop+0x70/0xc0 [ 573.122442][T13668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.122466][T13668] RIP: 0033:0x7eff0299e0d9 [ 573.122489][T13668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.122512][T13668] RSP: 002b:00007eff0384f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 573.122540][T13668] RAX: ffffffffffffffda RBX: 00007eff02c25fa0 RCX: 00007eff0299e0d9 [ 573.122558][T13668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 573.122575][T13668] RBP: 00007eff02a35024 R08: 0000000000000000 R09: 0000000000000000 [ 573.122592][T13668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.122609][T13668] R13: 00007eff02c26038 R14: 00007eff02c25fa0 R15: 00007ffe2fe4fc78 [ 573.122647][T13668] [ 573.127743][T13668] sysctl could not get directory: /net/ipv4/conf -12 [ 574.266428][T13423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.839466][T13423] veth0_vlan: entered promiscuous mode [ 575.334439][T13423] veth1_vlan: entered promiscuous mode [ 576.185238][T13719] Process accounting paused [ 576.229459][T13423] veth0_macvtap: entered promiscuous mode [ 576.517817][T13423] veth1_macvtap: entered promiscuous mode [ 576.938009][T13423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.984592][T13423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.060844][T12889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.123886][T12903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.147386][T12903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.173203][T12894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.417620][T12934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.447646][T12934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.562312][T12903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.600084][T12903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.022798][ T29] audit: type=1800 audit(1843141365.730:31): pid=13854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.849" name="dbroot" dev="configfs" ino=74394 res=0 errno=0 [ 587.285524][T13878] hub 1-0:1.0: USB hub found [ 587.318905][T13878] hub 1-0:1.0: 1 port detected [ 587.588908][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c6a0400: rx timeout, send abort [ 587.601066][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c6a0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 588.184686][T13890] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 589.680892][ T29] audit: type=1800 audit(1843141370.390:32): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.861" name="dbroot" dev="configfs" ino=74750 res=0 errno=0 [ 601.556335][T12896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.760190][T12896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.991269][T12896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.118970][T12896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.238416][T13143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 602.259447][T13143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 602.285807][T13143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 602.304210][T13143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 602.312770][T13143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 602.657891][T14080] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿd, dev 3000000000 [ 604.024420][T12896] bridge_slave_1: left allmulticast mode [ 604.043329][T12896] bridge_slave_1: left promiscuous mode [ 604.062536][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.096213][T12896] bridge_slave_0: left allmulticast mode [ 604.119490][T12896] bridge_slave_0: left promiscuous mode [ 604.151048][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.419898][T13143] Bluetooth: hci0: command tx timeout [ 604.657829][T12896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.693039][T12896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.711423][T12896] bond0 (unregistering): Released all slaves [ 605.066446][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 605.434534][T12896] hsr_slave_0: left promiscuous mode [ 605.483426][T12896] hsr_slave_1: left promiscuous mode [ 605.506729][T12896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.541452][T12896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.578091][T12896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.599745][T12896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.650759][T12896] veth1_macvtap: left promiscuous mode [ 605.664519][T12896] veth0_macvtap: left promiscuous mode [ 605.678536][T12896] veth1_vlan: left promiscuous mode [ 605.689193][T12896] veth0_vlan: left promiscuous mode [ 606.322110][T12896] team0 (unregistering): Port device team_slave_1 removed [ 606.366706][T12896] team0 (unregistering): Port device team_slave_0 removed [ 606.501813][T13143] Bluetooth: hci0: command tx timeout [ 606.585069][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 607.620596][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 607.660665][T14073] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.671770][T14073] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.679181][T14073] bridge_slave_0: entered allmulticast mode [ 607.688190][T14073] bridge_slave_0: entered promiscuous mode [ 607.710083][T14073] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.717489][T14073] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.725247][T14073] bridge_slave_1: entered allmulticast mode [ 607.733478][T14073] bridge_slave_1: entered promiscuous mode [ 607.772411][T14073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.829965][T14073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.901954][T14073] team0: Port device team_slave_0 added [ 607.911454][T14073] team0: Port device team_slave_1 added [ 608.003072][T14073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.010319][T14073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.037022][T14073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.050609][T14073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.057708][T14073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.084651][T14073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.234865][T14073] hsr_slave_0: entered promiscuous mode [ 608.244092][T14073] hsr_slave_1: entered promiscuous mode [ 608.252130][T14073] debugfs: 'hsr0' already exists in 'hsr' [ 608.257984][T14073] Cannot create hsr debugfs directory [ 608.581953][T13143] Bluetooth: hci0: command tx timeout [ 608.991887][T14073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 609.004357][T14073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 609.015686][T14073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 609.028389][T14073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 609.037691][T14073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 609.052513][T14073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 609.061573][T14073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 609.073404][T14073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 609.177801][T14073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.207568][T14073] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.226916][T12889] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.234178][T12889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.281037][T12889] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.288259][T12889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.865859][T14073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.946520][T14073] veth0_vlan: entered promiscuous mode [ 609.964360][T14073] veth1_vlan: entered promiscuous mode [ 610.013743][T14073] veth0_macvtap: entered promiscuous mode [ 610.033127][T14073] veth1_macvtap: entered promiscuous mode [ 610.059961][T14073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.079124][T14073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.109787][T12904] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.142925][T12904] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.214741][T12889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.253412][T12889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.302991][T12896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.319229][T12896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.362107][T12889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.371754][T12889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.663073][T13143] Bluetooth: hci0: command tx timeout [ 613.405719][T14275] Process accounting resumed [ 614.240448][T14314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.898'. [ 620.824016][T14422] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 621.423410][T14444] netlink: 72 bytes leftover after parsing attributes in process `syz.1.914'. [ 622.309368][T13143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 622.341825][T13143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 622.353137][T13143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 622.362605][T13143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 622.370419][T13143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 623.260621][T12934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.467605][T12934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.587522][T12934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.654159][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 623.785139][T12934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.787479][T14470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.156044][T14480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.923'. [ 624.352313][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.358831][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.419841][T13143] Bluetooth: hci1: command tx timeout [ 624.621993][T12934] vlan1: left allmulticast mode [ 624.630174][T12934] veth0_vlan: left allmulticast mode [ 624.637152][T12934] vlan1: left promiscuous mode [ 624.645590][T12934] bridge0: port 3(vlan1) entered disabled state [ 624.679018][T12934] bridge_slave_1: left allmulticast mode [ 624.698486][T12934] bridge_slave_1: left promiscuous mode [ 624.713973][T12934] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.746961][T12934] bridge_slave_0: left allmulticast mode [ 624.760663][T12934] bridge_slave_0: left promiscuous mode [ 624.776496][T12934] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.226910][T12934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.241355][T12934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.253623][T12934] bond0 (unregistering): Released all slaves [ 626.032076][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.049244][T14448] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.064714][T14448] bridge_slave_0: entered allmulticast mode [ 626.077037][T14448] bridge_slave_0: entered promiscuous mode [ 626.128413][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.156974][T14448] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.172999][T14448] bridge_slave_1: entered allmulticast mode [ 626.191281][T14448] bridge_slave_1: entered promiscuous mode [ 626.224266][T12934] hsr_slave_0: left promiscuous mode [ 626.247527][T12934] hsr_slave_1: left promiscuous mode [ 626.266293][T12934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.292216][T12934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.315985][T12934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.336898][T12934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.375470][T12934] veth1_macvtap: left promiscuous mode [ 626.389268][T12934] veth0_macvtap: left promiscuous mode [ 626.404025][T12934] veth1_vlan: left promiscuous mode [ 626.417764][T12934] veth0_vlan: left promiscuous mode [ 626.500590][T13143] Bluetooth: hci1: command tx timeout [ 626.887968][T12934] team0 (unregistering): Port device team_slave_1 removed [ 626.920050][T12934] team0 (unregistering): Port device team_slave_0 removed [ 627.066106][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 627.097390][T14448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.112634][T14448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.307984][T14448] team0: Port device team_slave_0 added [ 627.349378][T14448] team0: Port device team_slave_1 added [ 627.436507][T14448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.469113][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.522688][T14448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.716709][T14448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.737963][T14448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.794419][T14448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.566414][T14448] hsr_slave_0: entered promiscuous mode [ 628.581174][T13143] Bluetooth: hci1: command tx timeout [ 628.590852][T14448] hsr_slave_1: entered promiscuous mode [ 628.597427][T14448] debugfs: 'hsr0' already exists in 'hsr' [ 628.605842][T14448] Cannot create hsr debugfs directory [ 628.633416][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 629.930763][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 630.195278][T14582] hub 1-0:1.0: USB hub found [ 630.216467][T14582] hub 1-0:1.0: 1 port detected [ 630.660566][T13143] Bluetooth: hci1: command tx timeout [ 631.286824][T14448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 631.339406][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.363275][T14448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 631.403355][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.487469][T14448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 631.523784][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.560446][T14448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 631.593921][T14448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.972332][T12896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.104690][T12901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.119161][T12901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.135980][T12901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.147627][T12901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.161615][T12901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 632.313745][T12896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.663756][T12896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.884776][T12896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.006884][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.080604][T14448] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.135157][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.142488][T14247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.197360][T13189] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.204607][T13189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.603451][T12896] bridge_slave_1: left allmulticast mode [ 633.619178][T12896] bridge_slave_1: left promiscuous mode [ 633.630007][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.653917][T12896] bridge_slave_0: left allmulticast mode [ 633.675920][T12896] bridge_slave_0: left promiscuous mode [ 633.694934][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.158703][T12896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.190350][T12896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.213308][T12896] bond0 (unregistering): Released all slaves [ 634.262456][T13143] Bluetooth: hci0: command tx timeout [ 634.787533][T12896] hsr_slave_0: left promiscuous mode [ 634.812612][T12896] hsr_slave_1: left promiscuous mode [ 634.830307][T12896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.850795][T12896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.858793][T12896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.872447][T12896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.885212][T12896] veth1_macvtap: left promiscuous mode [ 634.892500][T12896] veth0_macvtap: left promiscuous mode [ 634.898139][T12896] veth1_vlan: left promiscuous mode [ 634.905063][T12896] veth0_vlan: left promiscuous mode [ 635.103021][T12896] team0 (unregistering): Port device team_slave_1 removed [ 635.121881][T12896] team0 (unregistering): Port device team_slave_0 removed [ 635.848199][T14629] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.886863][T14629] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.916621][T14629] bridge_slave_0: entered allmulticast mode [ 635.942327][T14629] bridge_slave_0: entered promiscuous mode [ 635.960500][T14629] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.978849][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.990567][T14629] bridge_slave_1: entered allmulticast mode [ 636.007985][T14629] bridge_slave_1: entered promiscuous mode [ 636.020955][T14711] FAULT_INJECTION: forcing a failure. [ 636.020955][T14711] name failslab, interval 1, probability 0, space 0, times 0 [ 636.049057][T14711] CPU: 1 UID: 0 PID: 14711 Comm: syz.3.936 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.049106][T14711] Tainted: [L]=SOFTLOCKUP [ 636.049118][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.049135][T14711] Call Trace: [ 636.049144][T14711] [ 636.049155][T14711] dump_stack_lvl+0x100/0x190 [ 636.049197][T14711] should_fail_ex.cold+0x5/0xa [ 636.049231][T14711] should_failslab+0xc2/0x120 [ 636.049272][T14711] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 636.049311][T14711] ? kasan_save_track+0x14/0x30 [ 636.049347][T14711] ? sysctl_core_net_init+0x42/0x290 [ 636.049385][T14711] kmemdup_noprof+0x29/0x60 [ 636.049420][T14711] sysctl_core_net_init+0x42/0x290 [ 636.049455][T14711] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 636.049492][T14711] ops_init+0x1e2/0x5f0 [ 636.049539][T14711] setup_net+0x118/0x3a0 [ 636.049579][T14711] ? __pfx_setup_net+0x10/0x10 [ 636.049616][T14711] ? mutex_init_lockdep+0xf1/0x120 [ 636.049649][T14711] copy_net_ns+0x46f/0x7c0 [ 636.049691][T14711] create_new_namespaces+0x3ea/0xac0 [ 636.049733][T14711] unshare_nsproxy_namespaces+0xf2/0x220 [ 636.049770][T14711] ksys_unshare+0x438/0xab0 [ 636.049810][T14711] ? __pfx_ksys_unshare+0x10/0x10 [ 636.049862][T14711] __x64_sys_unshare+0x31/0x40 [ 636.049909][T14711] do_syscall_64+0x115/0x840 [ 636.049951][T14711] ? clear_bhb_loop+0x70/0xc0 [ 636.049988][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.050017][T14711] RIP: 0033:0x7f866eb9e0d9 [ 636.050043][T14711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.050073][T14711] RSP: 002b:00007f866cdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 636.050102][T14711] RAX: ffffffffffffffda RBX: 00007f866ee25fa0 RCX: 00007f866eb9e0d9 [ 636.050122][T14711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 636.050140][T14711] RBP: 00007f866ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 636.050158][T14711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.050175][T14711] R13: 00007f866ee26038 R14: 00007f866ee25fa0 R15: 00007ffd52989848 [ 636.050215][T14711] [ 636.370809][T13143] Bluetooth: hci0: command tx timeout [ 636.455528][T14629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.468224][T14629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.508772][T14629] team0: Port device team_slave_0 added [ 636.516350][T14629] team0: Port device team_slave_1 added [ 636.552904][T14629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.567460][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.593775][T14629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.606822][T14629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.622523][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.691368][T14629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.767806][T14448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.815505][T14629] hsr_slave_0: entered promiscuous mode [ 636.823076][T14629] hsr_slave_1: entered promiscuous mode [ 636.834874][T14629] debugfs: 'hsr0' already exists in 'hsr' [ 636.841714][T14629] Cannot create hsr debugfs directory [ 637.015314][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 637.264583][T14448] veth0_vlan: entered promiscuous mode [ 637.339527][T14448] veth1_vlan: entered promiscuous mode [ 637.382157][T14448] veth0_macvtap: entered promiscuous mode [ 637.409035][T14448] veth1_macvtap: entered promiscuous mode [ 637.615424][T14448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.654582][T14448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.837204][T12934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.874411][T12934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.969851][T12934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.994848][T12934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.063396][T14247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.077844][T14247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.177919][T12903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.204623][T14629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 638.212188][T12903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.225488][T14629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.242229][T14629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 638.266933][T14629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.290833][T14629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 638.320047][T14629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.345778][T14629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 638.361850][T14629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.424462][T13143] Bluetooth: hci0: command tx timeout [ 638.491455][T14629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.534046][T14629] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.567003][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.574257][T12903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.613171][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.620436][T12903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.366385][ T29] audit: type=1800 audit(1843141420.070:33): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.939" name="dbroot" dev="configfs" ino=81579 res=0 errno=0 [ 640.500946][T13143] Bluetooth: hci0: command tx timeout [ 642.134725][T14629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.337519][T14629] veth0_vlan: entered promiscuous mode [ 642.391543][T14629] veth1_vlan: entered promiscuous mode [ 642.734137][T14629] veth0_macvtap: entered promiscuous mode [ 642.792282][T14629] veth1_macvtap: entered promiscuous mode [ 642.881564][T14629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.917475][T14629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.950233][T12903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.054967][T12894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.102876][T12894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.130208][T13189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.218647][T13189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.242713][T13189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.337628][T12903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.355478][T14860] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 643.379258][T12903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.963143][T14872] block loop4: the capability attribute has been deprecated. [ 644.587557][T14849] Process accounting paused [ 646.772385][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 646.827980][T14905] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 646.850238][T14905] netlink: 13 bytes leftover after parsing attributes in process `syz.3.954'. [ 647.852382][T14927] random: crng reseeded on system resumption [ 648.104895][T14927] hub 1-0:1.0: USB hub found [ 648.143557][T14927] hub 1-0:1.0: 1 port detected [ 650.374969][T13143] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 651.159344][ T29] audit: type=1800 audit(1843141431.860:34): pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.961" name="dbroot" dev="configfs" ino=84181 res=0 errno=0 [ 651.839367][T14973] netlink: 330 bytes leftover after parsing attributes in process `syz.2.964'. [ 652.096094][T14973] mac80211_hwsim hwsim73 ›: renamed from wlan0 (while UP) [ 655.159985][T15016] netlink: 72 bytes leftover after parsing attributes in process `syz.2.969'. [ 655.373076][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 656.745388][T15022] futex_wake_op: syz.1.971 tries to shift op by -2048; fix this program [ 656.805188][T15024] 0x000000000000-0x000000020000 : "" [ 656.890155][T15024] ftl_cs: FTL header not found. [ 659.002220][T15064] FAULT_INJECTION: forcing a failure. [ 659.002220][T15064] name failslab, interval 1, probability 0, space 0, times 0 [ 659.015841][T15064] CPU: 0 UID: 0 PID: 15064 Comm: syz.0.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.015868][T15064] Tainted: [L]=SOFTLOCKUP [ 659.015873][T15064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 659.015882][T15064] Call Trace: [ 659.015887][T15064] [ 659.015893][T15064] dump_stack_lvl+0x100/0x190 [ 659.015918][T15064] should_fail_ex.cold+0x5/0xa [ 659.015938][T15064] should_failslab+0xc2/0x120 [ 659.015961][T15064] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 659.015982][T15064] ? __d_alloc+0x35/0xa50 [ 659.016005][T15064] __d_alloc+0x35/0xa50 [ 659.016023][T15064] d_alloc+0x4a/0x1e0 [ 659.016041][T15064] lookup_one_qstr_excl+0x171/0x250 [ 659.016060][T15064] ? mnt_want_write+0x161/0x410 [ 659.016083][T15064] filename_create+0x1cf/0x400 [ 659.016105][T15064] ? __pfx_filename_create+0x10/0x10 [ 659.016134][T15064] filename_mknodat+0x190/0x7f0 [ 659.016153][T15064] ? __pfx_filename_mknodat+0x10/0x10 [ 659.016169][T15064] ? strncpy_from_user+0x19d/0x2d0 [ 659.016305][T15064] ? do_getname+0x191/0x390 [ 659.016326][T15064] __x64_sys_mknod+0x8f/0xc0 [ 659.016344][T15064] do_syscall_64+0x115/0x840 [ 659.016365][T15064] ? clear_bhb_loop+0x70/0xc0 [ 659.016385][T15064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.016401][T15064] RIP: 0033:0x7fb1f139e0d9 [ 659.016415][T15064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.016429][T15064] RSP: 002b:00007fb1f21cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 659.016444][T15064] RAX: ffffffffffffffda RBX: 00007fb1f1625fa0 RCX: 00007fb1f139e0d9 [ 659.016455][T15064] RDX: 00000000000007ff RSI: 00000000000067c1 RDI: 00002000000000c0 [ 659.016465][T15064] RBP: 00007fb1f1435024 R08: 0000000000000000 R09: 0000000000000000 [ 659.016478][T15064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.016487][T15064] R13: 00007fb1f1626038 R14: 00007fb1f1625fa0 R15: 00007ffd91b10398 [ 659.016508][T15064] [ 659.939599][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.980'. [ 659.991145][T15080] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 660.043854][T15080] netlink: 13 bytes leftover after parsing attributes in process `syz.0.980'. [ 661.070530][T15105] netlink: 72 bytes leftover after parsing attributes in process `syz.3.983'. [ 662.466528][T15111] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:988d:a8ef:b61c:7dcb, load rds_tcp or rds_rdma? [ 664.491855][T15167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'. [ 667.397899][T12901] Bluetooth: hci2: command 0x0406 tx timeout [ 667.462636][T15196] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:988d:a8ef:b61c:7dcb, load rds_tcp or rds_rdma? [ 667.487311][T15212] netlink: 72 bytes leftover after parsing attributes in process `syz.0.997'. [ 668.154401][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 668.337478][T15219] virt_wifi0: entered allmulticast mode [ 669.613667][T12903] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.941956][T12903] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.137580][T12903] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.282618][T12901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 670.300347][T12901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 670.309260][T12901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 670.319247][T12901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 670.336676][T12901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 670.600757][T12903] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.721455][T15272] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 671.924467][T12903] vlan1: left allmulticast mode [ 671.934225][T12903] veth0_vlan: left allmulticast mode [ 671.945722][T12903] vlan1: left promiscuous mode [ 671.961420][T12903] bridge0: port 3(vlan1) entered disabled state [ 672.003043][T12903] bridge_slave_1: left allmulticast mode [ 672.012555][T12903] bridge_slave_1: left promiscuous mode [ 672.020570][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.059571][T12903] bridge_slave_0: left allmulticast mode [ 672.127097][T12903] bridge_slave_0: left promiscuous mode [ 672.154516][T15289] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:988d:a8ef:b61c:7dcb, load rds_tcp or rds_rdma? [ 672.197625][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.495702][T13143] Bluetooth: hci3: command tx timeout [ 672.691635][T12903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.737087][T12903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.753004][T12903] bond0 (unregistering): Released all slaves [ 672.877418][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 673.388032][T15245] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.397525][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.404862][T15245] bridge_slave_0: entered allmulticast mode [ 673.457336][T15245] bridge_slave_0: entered promiscuous mode [ 673.476408][T15245] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.491756][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.508001][T15245] bridge_slave_1: entered allmulticast mode [ 673.534947][T15245] bridge_slave_1: entered promiscuous mode [ 674.011403][T15245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.049590][T15245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.322920][T12903] hsr_slave_0: left promiscuous mode [ 674.338602][T12903] hsr_slave_1: left promiscuous mode [ 674.349023][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.361664][T12903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.379751][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.399281][T12903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.440890][T12903] veth1_macvtap: left promiscuous mode [ 674.456309][T12903] veth0_macvtap: left promiscuous mode [ 674.470808][T12903] veth1_vlan: left promiscuous mode [ 674.487578][T12903] veth0_vlan: left promiscuous mode [ 674.575686][T13143] Bluetooth: hci3: command tx timeout [ 674.985478][T12903] team0 (unregistering): Port device team_slave_1 removed [ 675.021700][T12903] team0 (unregistering): Port device team_slave_0 removed [ 675.330339][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 675.354813][T15245] team0: Port device team_slave_0 added [ 675.591380][T15245] team0: Port device team_slave_1 added [ 675.764598][T15245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.772078][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.805471][T15245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.865111][T15245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.874042][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.907131][T15245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.031374][T15245] hsr_slave_0: entered promiscuous mode [ 676.049785][T15245] hsr_slave_1: entered promiscuous mode [ 676.655838][T13143] Bluetooth: hci3: command tx timeout [ 676.802075][T15351] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1016'. [ 676.843786][T15366] futex_wake_op: syz.3.1018 tries to shift op by -2048; fix this program [ 676.888936][T15366] 0x000000000000-0x000000020000 : "" [ 676.988896][T15366] ftl_cs: FTL header not found. [ 677.493859][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 678.738709][T13143] Bluetooth: hci3: command tx timeout [ 679.052305][T15408] binder: 15391:15408 ioctl c018620c 200000000040 returned -1 [ 680.245414][T15245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 680.290422][T15245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 680.314695][T15245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 680.353208][T15245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 680.376839][T15245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 680.404543][T15245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 680.426208][T15245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 680.457945][T15245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 681.298377][T15465] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 681.318331][T15465] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1025'. [ 681.612962][T15245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.782856][T15245] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.912383][T12896] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.919582][T12896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.012314][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.020923][T12903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.370334][T15245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.168305][T15245] veth0_vlan: entered promiscuous mode [ 684.693638][T15245] veth1_vlan: entered promiscuous mode [ 685.140719][T15245] veth0_macvtap: entered promiscuous mode [ 685.162225][T15245] veth1_macvtap: entered promiscuous mode [ 685.185389][T15245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.214159][T15245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.286329][T12889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.332175][T12889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.418942][T12889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.447482][T12889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.552202][T12896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.574047][T12896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.630552][T12896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.651778][T12896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.779039][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.787079][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.814871][T13143] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 688.354049][T15595] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 691.038489][T15634] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:988d:a8ef:b61c:7dcb, load rds_tcp or rds_rdma? [ 691.989059][T15652] futex_wake_op: syz.0.1054 tries to shift op by -2048; fix this program [ 692.018643][T15652] 0x000000000000-0x000000020000 : "" [ 692.145945][T15652] ftl_cs: FTL header not found. [ 697.512686][T15695] kexec: Could not allocate control_code_buffer [ 697.884188][T15710] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 703.751360][T12889] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.167598][T12889] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.473570][T12901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 704.489404][T12901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 704.498732][T12901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 704.509230][T12901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 704.517741][T12901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.618973][T12889] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.753335][T13143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 704.770856][T13143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 704.785375][T13143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 704.799674][T13143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 704.809447][T13143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 704.970147][T12889] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.643211][T12889] bridge_slave_1: left allmulticast mode [ 705.650502][T12889] bridge_slave_1: left promiscuous mode [ 705.656414][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.669814][T12889] bridge_slave_0: left allmulticast mode [ 705.678279][T12889] bridge_slave_0: left promiscuous mode [ 705.684147][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.136713][T12889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.173526][T12889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.191766][T12889] bond0 (unregistering): Released all slaves [ 706.578294][T13143] Bluetooth: hci0: command tx timeout [ 706.873435][T12889] hsr_slave_0: left promiscuous mode [ 706.897362][T13143] Bluetooth: hci2: command tx timeout [ 706.909678][T12889] hsr_slave_1: left promiscuous mode [ 706.917598][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.925038][T12889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.936747][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.944204][T12889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.970235][T12889] veth1_macvtap: left promiscuous mode [ 706.978682][T12889] veth0_macvtap: left promiscuous mode [ 706.985364][T12889] veth1_vlan: left promiscuous mode [ 706.992819][T12889] veth0_vlan: left promiscuous mode [ 707.237768][T12901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 707.258901][T12901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 707.267201][T12901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 707.278506][T12901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 707.294151][T12901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 707.561489][T12889] team0 (unregistering): Port device team_slave_1 removed [ 707.583983][T12889] team0 (unregistering): Port device team_slave_0 removed [ 707.798989][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 707.817300][T15838] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1079'. [ 708.656365][T12901] Bluetooth: hci0: command tx timeout [ 708.862210][T12889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.975958][T12901] Bluetooth: hci2: command tx timeout [ 709.276465][T12889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.317215][T15802] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.345700][T15802] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.357971][T15802] bridge_slave_0: entered allmulticast mode [ 709.375976][T12901] Bluetooth: hci3: command tx timeout [ 709.385314][T15802] bridge_slave_0: entered promiscuous mode [ 709.495688][T15802] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.509738][T15802] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.517147][T15802] bridge_slave_1: entered allmulticast mode [ 709.524242][T15802] bridge_slave_1: entered promiscuous mode [ 709.532833][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 709.585200][T12889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.643855][T15802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.653405][T15807] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.660760][T15807] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.670168][T15807] bridge_slave_0: entered allmulticast mode [ 709.677534][T15807] bridge_slave_0: entered promiscuous mode [ 709.701282][T15802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.711052][T15807] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.719940][T15807] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.727381][T15807] bridge_slave_1: entered allmulticast mode [ 709.734437][T15807] bridge_slave_1: entered promiscuous mode [ 709.777302][T12889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.833561][T15802] team0: Port device team_slave_0 added [ 709.842834][T15802] team0: Port device team_slave_1 added [ 709.852504][T15807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.898856][T15807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.930776][T15802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.937838][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.963821][T15802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.976595][T15802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.983670][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.009668][T15802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.135121][T15807] team0: Port device team_slave_0 added [ 710.187375][T15807] team0: Port device team_slave_1 added [ 710.340604][T15802] hsr_slave_0: entered promiscuous mode [ 710.354454][T15802] hsr_slave_1: entered promiscuous mode [ 710.377901][T15802] debugfs: 'hsr0' already exists in 'hsr' [ 710.390286][T15802] Cannot create hsr debugfs directory [ 710.398777][T15807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.415672][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.444398][T15807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.505820][T15807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.512910][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.539508][T15807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.652708][T12889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.704688][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 710.736820][T12901] Bluetooth: hci0: command tx timeout [ 710.841504][T12889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.885215][T15807] hsr_slave_0: entered promiscuous mode [ 710.891600][T15807] hsr_slave_1: entered promiscuous mode [ 710.898468][T15807] debugfs: 'hsr0' already exists in 'hsr' [ 710.904262][T15807] Cannot create hsr debugfs directory [ 710.953542][T12889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.985411][T15843] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.994210][T15843] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.006724][T15843] bridge_slave_0: entered allmulticast mode [ 711.013900][T15843] bridge_slave_0: entered promiscuous mode [ 711.039241][T15843] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.046977][T15843] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.054167][T15843] bridge_slave_1: entered allmulticast mode [ 711.055669][T12901] Bluetooth: hci2: command tx timeout [ 711.062918][T15843] bridge_slave_1: entered promiscuous mode [ 711.122398][T12889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.252853][T15843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.268136][T15843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.429548][T15843] team0: Port device team_slave_0 added [ 711.455825][T12901] Bluetooth: hci3: command tx timeout [ 711.458951][T15843] team0: Port device team_slave_1 added [ 711.553578][T15843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.562279][T15843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.591672][T15843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.659461][T15843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.667834][T15843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.704224][T15843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.880674][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 711.919815][T15843] hsr_slave_0: entered promiscuous mode [ 711.931755][T15843] hsr_slave_1: entered promiscuous mode [ 711.939904][T15843] debugfs: 'hsr0' already exists in 'hsr' [ 711.945760][T15843] Cannot create hsr debugfs directory [ 711.958080][T12889] bridge_slave_1: left allmulticast mode [ 711.965465][T12889] bridge_slave_1: left promiscuous mode [ 711.971430][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.981843][T12889] bridge_slave_0: left allmulticast mode [ 711.988018][T12889] bridge_slave_0: left promiscuous mode [ 711.993897][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.010115][T12889] bridge_slave_1: left allmulticast mode [ 712.018519][T12889] bridge_slave_1: left promiscuous mode [ 712.025327][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.034541][T12889] bridge_slave_0: left allmulticast mode [ 712.047214][T12889] bridge_slave_0: left promiscuous mode [ 712.052940][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.231543][T12889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.242459][T12889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.252639][T12889] bond0 (unregistering): Released all slaves [ 712.369064][T12889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.380644][T12889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.396495][T12889] bond0 (unregistering): Released all slaves [ 712.816217][T12901] Bluetooth: hci0: command tx timeout [ 712.970760][T15802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 712.992174][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 713.004308][T15802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 713.015718][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 713.029879][T15802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 713.042099][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 713.114019][T15802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 713.127383][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 713.138844][T12901] Bluetooth: hci2: command tx timeout [ 713.332483][T12889] hsr_slave_0: left promiscuous mode [ 713.355191][T12889] hsr_slave_1: left promiscuous mode [ 713.364779][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.381549][T12889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.391051][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.398637][T12889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.409390][T12889] hsr_slave_0: left promiscuous mode [ 713.415270][T12889] hsr_slave_1: left promiscuous mode [ 713.423305][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.430856][T12889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.438746][T12889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.446227][T12889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.463748][T12889] veth1_macvtap: left promiscuous mode [ 713.469416][T12889] veth0_macvtap: left promiscuous mode [ 713.474975][T12889] veth1_vlan: left promiscuous mode [ 713.480533][T12889] veth0_vlan: left promiscuous mode [ 713.488604][T12889] veth1_macvtap: left promiscuous mode [ 713.494101][T12889] veth0_macvtap: left promiscuous mode [ 713.500809][T12889] veth1_vlan: left promiscuous mode [ 713.506408][T12889] veth0_vlan: left promiscuous mode [ 713.535696][T12901] Bluetooth: hci3: command tx timeout [ 713.780568][T12889] team0 (unregistering): Port device team_slave_1 removed [ 713.803091][T12889] team0 (unregistering): Port device team_slave_0 removed [ 714.073193][T12889] team0 (unregistering): Port device team_slave_1 removed [ 714.093230][T12889] team0 (unregistering): Port device team_slave_0 removed [ 714.215398][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 714.272698][T15802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.391958][T15802] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.409431][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.416726][T14247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.485407][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.492604][T12904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.449161][T15807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 715.461984][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.472033][T15807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 715.484111][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.494264][T15807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 715.509021][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.518669][T15807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 715.530275][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.618400][T12901] Bluetooth: hci3: command tx timeout [ 715.636555][T15802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.762787][T15843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 715.792259][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.805062][T15843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 715.815898][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.833909][T15843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 715.851271][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.873750][T15843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 715.884991][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.912296][T15802] veth0_vlan: entered promiscuous mode [ 715.950489][T15802] veth1_vlan: entered promiscuous mode [ 716.011437][T15807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.100150][T15802] veth0_macvtap: entered promiscuous mode [ 716.113679][T15807] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.143710][T15802] veth1_macvtap: entered promiscuous mode [ 716.169127][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.176413][T14247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.215361][T14247] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.224586][T14247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.292868][T15802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.313532][T15802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.336433][T15843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.402713][T15843] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.423688][T12903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.482934][T12889] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.490193][T12889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.555694][T14247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.597332][T12889] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.604640][T12889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.686999][T12903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.774428][T12903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.810088][T12903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.907324][T12896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.939173][T12896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.024871][T12889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.662192][T15807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.773494][T15807] veth0_vlan: entered promiscuous mode [ 717.825085][T15807] veth1_vlan: entered promiscuous mode [ 717.895939][T15807] veth0_macvtap: entered promiscuous mode [ 717.918751][T15807] veth1_macvtap: entered promiscuous mode [ 717.946352][T15807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.958997][T15807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.984618][T15843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.018996][T12903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.067850][T12896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.201810][T15843] veth0_vlan: entered promiscuous mode [ 718.217137][T12903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.280806][T16010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.293170][T15843] veth1_vlan: entered promiscuous mode [ 718.334518][T16010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.378188][T16010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.442386][T12934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.467644][T12934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.469589][T15843] veth0_macvtap: entered promiscuous mode [ 718.490877][T15843] veth1_macvtap: entered promiscuous mode [ 718.536920][T15843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.560869][T15843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.641687][T12934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.672165][T12934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.717241][T12889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.839863][T12896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.858592][T12896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.949212][T16010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.980489][T16010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.011494][T16010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.004699][T16185] futex_wake_op: syz.3.1083 tries to shift op by -2048; fix this program [ 726.020348][T16185] futex_wake_op: syz.3.1083 tries to shift op by -2048; fix this program [ 726.440789][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 729.261073][T16240] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 735.877221][T16312] i2c i2c-0: new_device: Can't parse I2C address [ 736.069501][T16322] ubi0: attaching mtd0 [ 736.085094][T16322] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 736.115894][T16322] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 736.132274][T16322] eraseblock attaching information dump: [ 736.140629][T16322] ec -1 [ 736.148200][T16322] pnum 0 [ 736.173438][T16322] lnum 0 [ 736.183178][T16322] scrub 1 [ 736.188714][T16322] sqnum 1 [ 736.194246][T16322] Volume identifier header dump: [ 736.202767][T16322] magic 55424921 [ 736.209772][T16322] version 1 [ 736.230604][T16322] vol_type 1 [ 736.237387][T16322] copy_flag 0 [ 736.250901][T16322] compat 5 [ 736.256122][T16322] vol_id 2147479551 [ 736.268732][T16322] lnum 0 [ 736.273992][T16322] data_size 0 [ 736.277956][T16322] used_ebs 0 [ 736.281510][T16322] data_pad 0 [ 736.304432][T16322] sqnum 1 [ 736.312810][T16322] hdr_crc 65b3bd2d [ 736.325415][T16322] Volume identifier header hexdump: [ 736.504883][T16322] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 737.515167][T16346] hub 1-0:1.0: USB hub found [ 737.538904][T16346] hub 1-0:1.0: 1 port detected [ 742.063959][T12903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.404002][T12903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.868152][T13143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.887528][T13143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.902886][T13143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.916250][T13143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.928930][T13143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.127445][T12903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.384899][T12903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.240715][T12903] bridge_slave_1: left allmulticast mode [ 744.273261][T12903] bridge_slave_1: left promiscuous mode [ 744.303655][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.352489][T12903] bridge_slave_0: left allmulticast mode [ 744.377460][T12903] bridge_slave_0: left promiscuous mode [ 744.402116][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.798188][T12903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.810099][T12903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.837741][T12903] bond0 (unregistering): Released all slaves [ 744.944086][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 745.055955][T12901] Bluetooth: hci0: command tx timeout [ 745.426204][T12903] hsr_slave_0: left promiscuous mode [ 745.432536][T12903] hsr_slave_1: left promiscuous mode [ 745.439462][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.449830][T12903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.458865][T12903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.466388][T12903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.479915][T12903] veth1_macvtap: left promiscuous mode [ 745.485575][T12903] veth0_macvtap: left promiscuous mode [ 745.491203][T12903] veth1_vlan: left promiscuous mode [ 745.497067][T12903] veth0_vlan: left promiscuous mode [ 745.853458][T12903] team0 (unregistering): Port device team_slave_1 removed [ 745.884675][T12903] team0 (unregistering): Port device team_slave_0 removed [ 746.065765][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 746.538336][T16466] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1119'. [ 747.136003][T12901] Bluetooth: hci0: command tx timeout [ 747.217629][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.226626][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.312902][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 748.795818][T16398] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.804425][T16398] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.813721][T16398] bridge_slave_0: entered allmulticast mode [ 748.822432][T16398] bridge_slave_0: entered promiscuous mode [ 748.901312][T16398] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.918595][T16398] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.935682][T16398] bridge_slave_1: entered allmulticast mode [ 748.943854][T16398] bridge_slave_1: entered promiscuous mode [ 749.109726][T16398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.171289][T16398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.215779][T13143] Bluetooth: hci0: command tx timeout [ 749.272201][T16398] team0: Port device team_slave_0 added [ 749.290422][T16398] team0: Port device team_slave_1 added [ 749.299332][T13143] Bluetooth: hci1: command 0x0406 tx timeout [ 749.391418][T16398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.417785][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.495351][T16398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.538626][T16398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.566556][T16398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.611330][T16513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.621445][T16398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.758086][T16398] hsr_slave_0: entered promiscuous mode [ 749.777221][T16398] hsr_slave_1: entered promiscuous mode [ 750.072601][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 751.305733][T12901] Bluetooth: hci0: command tx timeout [ 754.293235][T16398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 754.316482][T16398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 754.334833][T16398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 754.349651][T16398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 754.363466][T16398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 754.376100][T16398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 754.392227][T16398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 754.404669][T16398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.017390][T16398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.066719][T16398] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.092084][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.099337][T14247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.151577][T14247] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.158826][T14247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.506822][T16398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.691168][T16398] veth0_vlan: entered promiscuous mode [ 758.710309][T16398] veth1_vlan: entered promiscuous mode [ 758.786855][T16398] veth0_macvtap: entered promiscuous mode [ 758.812770][T16398] veth1_macvtap: entered promiscuous mode [ 758.869272][T16398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.893454][T16398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.001503][T14247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.037663][T12903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.073835][T12903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.089354][T12903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.154476][T14247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.183138][T14247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.242169][T14247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.251507][T14247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.402011][T16701] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 759.425764][T16701] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1145'. [ 759.509536][T16703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'. [ 759.553755][T16703] bond0: (slave bond_slave_0): Releasing backup interface [ 763.289445][T16752] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 763.656404][T16755] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 764.258253][T16770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'. [ 764.395122][T16770] bond0: (slave bond_slave_0): Releasing backup interface [ 768.056205][T16010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.238237][T16010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.353448][T16010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.424131][T16010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.796963][T13143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.823111][T13143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.836086][T13143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.845732][T13143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.857576][T13143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 769.734119][T16010] bridge_slave_1: left allmulticast mode [ 769.753327][T16010] bridge_slave_1: left promiscuous mode [ 769.770626][T16010] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.810456][T16010] bridge_slave_0: left allmulticast mode [ 769.824495][T16010] bridge_slave_0: left promiscuous mode [ 769.833235][T16010] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.326357][T16010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.356405][T16010] bond0 (unregistering): Released all slaves [ 770.977156][T13143] Bluetooth: hci1: command tx timeout [ 771.363644][T16010] hsr_slave_0: left promiscuous mode [ 771.407152][T16010] hsr_slave_1: left promiscuous mode [ 771.423883][T16010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.443667][T16010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.463756][T16010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.478519][T16010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.539676][T16010] veth1_macvtap: left promiscuous mode [ 771.554463][T16010] veth0_macvtap: left promiscuous mode [ 771.573952][T16010] veth1_vlan: left promiscuous mode [ 771.588485][T16010] veth0_vlan: left promiscuous mode [ 771.661153][T16881] vivid-011: ================= START STATUS ================= [ 771.688757][T16881] vivid-011: Radio HW Seek Mode: Bounded [ 771.705764][T16881] vivid-011: Radio Programmable HW Seek: false [ 771.712234][T16881] vivid-011: RDS Rx I/O Mode: Block I/O [ 771.721663][T16881] vivid-011: Generate RBDS Instead of RDS: false [ 771.733056][T16881] vivid-011: RDS Reception: true [ 771.745742][T16881] vivid-011: RDS Program Type: 0 inactive [ 771.755877][T16881] vivid-011: RDS PS Name: inactive [ 771.761231][T16881] vivid-011: RDS Radio Text: inactive [ 771.767497][T16881] vivid-011: RDS Traffic Announcement: false inactive [ 771.774874][T16881] vivid-011: RDS Traffic Program: false inactive [ 771.782528][T16881] vivid-011: RDS Music: false inactive [ 771.789749][T16881] vivid-011: ================== END STATUS ================== [ 772.051731][T16010] team0 (unregistering): Port device team_slave_1 removed [ 772.078142][T16010] team0 (unregistering): Port device team_slave_0 removed [ 772.393525][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 773.056770][T13143] Bluetooth: hci1: command tx timeout [ 774.233522][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 775.048283][T16839] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.060830][T16839] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.068850][T16839] bridge_slave_0: entered allmulticast mode [ 775.082918][T16839] bridge_slave_0: entered promiscuous mode [ 775.114340][T16839] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.145941][T13143] Bluetooth: hci1: command tx timeout [ 775.151847][T16839] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.185875][T16839] bridge_slave_1: entered allmulticast mode [ 775.231799][T16839] bridge_slave_1: entered promiscuous mode [ 775.302820][T16839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.352280][T16935] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 775.369359][T16839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.552602][T16839] team0: Port device team_slave_0 added [ 775.585680][T16839] team0: Port device team_slave_1 added [ 775.741538][T16839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.767670][T16839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.804430][T16957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.845126][T16839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.089441][T16839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.103651][T16839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.136569][T16839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.196906][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 776.217763][T16970] FAULT_INJECTION: forcing a failure. [ 776.217763][T16970] name failslab, interval 1, probability 0, space 0, times 0 [ 776.276856][T16970] CPU: 0 UID: 0 PID: 16970 Comm: syz.2.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.276905][T16970] Tainted: [L]=SOFTLOCKUP [ 776.276916][T16970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.276933][T16970] Call Trace: [ 776.276941][T16970] [ 776.276952][T16970] dump_stack_lvl+0x100/0x190 [ 776.276995][T16970] should_fail_ex.cold+0x5/0xa [ 776.277029][T16970] should_failslab+0xc2/0x120 [ 776.277072][T16970] __kmalloc_noprof+0xfc/0x820 [ 776.277109][T16970] ? tracepoint_add_func+0x3a8/0x1150 [ 776.277159][T16970] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 776.277242][T16970] tracepoint_add_func+0x3a8/0x1150 [ 776.277293][T16970] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 776.277341][T16970] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 776.277381][T16970] tracepoint_probe_register+0xc4/0x110 [ 776.277427][T16970] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 776.277471][T16970] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 776.277512][T16970] ? relay_open+0x793/0xa00 [ 776.277553][T16970] blk_register_tracepoints+0x75/0x440 [ 776.277584][T16970] blk_trace_setup_finalize+0x320/0x3a0 [ 776.277618][T16970] blk_trace_setup+0x254/0x440 [ 776.277654][T16970] ? __pfx_blk_trace_setup+0x10/0x10 [ 776.277686][T16970] ? local_clock_noinstr+0xf6/0x100 [ 776.277738][T16970] ? __pfx_vsnprintf+0x10/0x10 [ 776.277872][T16970] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 776.277915][T16970] ? do_vfs_ioctl+0x226/0x13e0 [ 776.277960][T16970] blk_trace_ioctl+0x245/0x320 [ 776.277999][T16970] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 776.278042][T16970] ? find_held_lock+0x2b/0x80 [ 776.278078][T16970] ? __fget_files+0x215/0x3d0 [ 776.278103][T16970] ? hook_file_ioctl_common+0x140/0x440 [ 776.278192][T16970] blkdev_ioctl+0x17c/0x6f0 [ 776.278261][T16970] ? __pfx_blkdev_ioctl+0x10/0x10 [ 776.278303][T16970] ? __pfx_blkdev_ioctl+0x10/0x10 [ 776.278333][T16970] __x64_sys_ioctl+0x18e/0x210 [ 776.278379][T16970] do_syscall_64+0x115/0x840 [ 776.278418][T16970] ? clear_bhb_loop+0x70/0xc0 [ 776.278454][T16970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.278481][T16970] RIP: 0033:0x7fadb2f9e0d9 [ 776.278505][T16970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.278533][T16970] RSP: 002b:00007fadb3e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.278560][T16970] RAX: ffffffffffffffda RBX: 00007fadb3226090 RCX: 00007fadb2f9e0d9 [ 776.278579][T16970] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 776.278597][T16970] RBP: 00007fadb3035024 R08: 0000000000000000 R09: 0000000000000000 [ 776.278614][T16970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.278629][T16970] R13: 00007fadb3226128 R14: 00007fadb3226090 R15: 00007fffa7a5d418 [ 776.278662][T16970] [ 776.605381][T16970] ------------[ cut here ]------------ [ 776.611621][T16970] ret [ 776.611636][T16970] WARNING: kernel/trace/blktrace.c:1336 at blk_register_tracepoints+0x358/0x440, CPU#1: syz.2.1170/16970 [ 776.627202][T16970] Modules linked in: [ 776.631579][T16970] CPU: 1 UID: 0 PID: 16970 Comm: syz.2.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.642656][T16970] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 776.647087][T16970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.657441][T16970] RIP: 0010:blk_register_tracepoints+0x358/0x440 [ 776.663912][T16970] Code: f7 ff 5b e9 4a 01 a9 09 e8 e5 8e f7 ff 90 0f 0b 90 e9 ea fc ff ff e8 d7 8e f7 ff 90 0f 0b 90 e9 09 fd ff ff e8 c9 8e f7 ff 90 <0f> 0b 90 e9 28 fd ff ff e8 bb 8e f7 ff 90 0f 0b 90 e9 47 fd ff ff [ 776.683718][T16970] RSP: 0018:ffffc90003e17af8 EFLAGS: 00010287 [ 776.689906][T16970] RAX: 0000000000068fbd RBX: 00000000fffffff4 RCX: ffffc90014936000 [ 776.697969][T16970] RDX: 0000000000080000 RSI: ffffffff82122237 RDI: ffff888031de3e00 [ 776.706638][T16970] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 776.714861][T16970] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 776.722966][T16970] R13: ffff8880277da540 R14: ffffc90003e17d98 R15: 0000000000000001 [ 776.731027][T16970] FS: 00007fadb3e9f6c0(0000) GS:ffff888123ef4000(0000) knlGS:0000000000000000 [ 776.740312][T16970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.747634][T16970] CR2: 00007fadb2feb7c0 CR3: 0000000034484000 CR4: 00000000003526f0 [ 776.755716][T16970] Call Trace: [ 776.759136][T16970] [ 776.762174][T16970] blk_trace_setup_finalize+0x320/0x3a0 [ 776.767924][T16970] blk_trace_setup+0x254/0x440 [ 776.772871][T16970] ? __pfx_blk_trace_setup+0x10/0x10 [ 776.778400][T16970] ? local_clock_noinstr+0xf6/0x100 [ 776.783762][T16970] ? __pfx_vsnprintf+0x10/0x10 [ 776.788781][T16970] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 776.794734][T16970] ? do_vfs_ioctl+0x226/0x13e0 [ 776.799657][T16970] blk_trace_ioctl+0x245/0x320 [ 776.804511][T16970] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 776.809863][T16970] ? find_held_lock+0x2b/0x80 [ 776.814546][T16970] ? __fget_files+0x215/0x3d0 [ 776.819415][T16970] ? hook_file_ioctl_common+0x140/0x440 [ 776.825024][T16970] blkdev_ioctl+0x17c/0x6f0 [ 776.829651][T16970] ? __pfx_blkdev_ioctl+0x10/0x10 [ 776.834755][T16970] ? __pfx_blkdev_ioctl+0x10/0x10 [ 776.839883][T16970] __x64_sys_ioctl+0x18e/0x210 [ 776.844686][T16970] do_syscall_64+0x115/0x840 [ 776.849335][T16970] ? clear_bhb_loop+0x70/0xc0 [ 776.854018][T16970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.859996][T16970] RIP: 0033:0x7fadb2f9e0d9 [ 776.864425][T16970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.884098][T16970] RSP: 002b:00007fadb3e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.892588][T16970] RAX: ffffffffffffffda RBX: 00007fadb3226090 RCX: 00007fadb2f9e0d9 [ 776.900676][T16970] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 776.908761][T16970] RBP: 00007fadb3035024 R08: 0000000000000000 R09: 0000000000000000 [ 776.916941][T16970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.924982][T16970] R13: 00007fadb3226128 R14: 00007fadb3226090 R15: 00007fffa7a5d418 [ 776.933034][T16970] [ 776.936568][T16970] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 776.943848][T16970] CPU: 1 UID: 0 PID: 16970 Comm: syz.2.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.954795][T16970] Tainted: [L]=SOFTLOCKUP [ 776.959116][T16970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.969160][T16970] Call Trace: [ 776.972430][T16970] [ 776.975350][T16970] dump_stack_lvl+0x100/0x190 [ 776.980029][T16970] vpanic+0x552/0x970 [ 776.984041][T16970] ? __pfx_vpanic+0x10/0x10 [ 776.988544][T16970] panic+0xd1/0xe0 [ 776.992266][T16970] ? __pfx_panic+0x10/0x10 [ 776.996697][T16970] check_panic_on_warn.cold+0x19/0x34 [ 777.002120][T16970] ? blk_register_tracepoints+0x358/0x440 [ 777.007868][T16970] __warn.cold+0x191/0x318 [ 777.012306][T16970] __report_bug+0x30f/0x440 [ 777.016972][T16970] ? blk_register_tracepoints+0x358/0x440 [ 777.022717][T16970] ? __pfx___report_bug+0x10/0x10 [ 777.027762][T16970] ? tracepoint_probe_register+0xd2/0x110 [ 777.033510][T16970] ? __kasan_kmalloc+0x8a/0xb0 [ 777.038543][T16970] ? __mutex_unlock_slowpath+0x35d/0x930 [ 777.044239][T16970] ? blk_register_tracepoints+0x358/0x440 [ 777.049991][T16970] report_bug+0xb2/0x220 [ 777.054330][T16970] ? blk_register_tracepoints+0x358/0x440 [ 777.060113][T16970] handle_bug+0x16a/0x2a0 [ 777.064489][T16970] exc_invalid_op+0x17/0x50 [ 777.069023][T16970] asm_exc_invalid_op+0x1a/0x20 [ 777.073888][T16970] RIP: 0010:blk_register_tracepoints+0x358/0x440 [ 777.080258][T16970] Code: f7 ff 5b e9 4a 01 a9 09 e8 e5 8e f7 ff 90 0f 0b 90 e9 ea fc ff ff e8 d7 8e f7 ff 90 0f 0b 90 e9 09 fd ff ff e8 c9 8e f7 ff 90 <0f> 0b 90 e9 28 fd ff ff e8 bb 8e f7 ff 90 0f 0b 90 e9 47 fd ff ff [ 777.099909][T16970] RSP: 0018:ffffc90003e17af8 EFLAGS: 00010287 [ 777.106017][T16970] RAX: 0000000000068fbd RBX: 00000000fffffff4 RCX: ffffc90014936000 [ 777.114034][T16970] RDX: 0000000000080000 RSI: ffffffff82122237 RDI: ffff888031de3e00 [ 777.122030][T16970] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 777.130031][T16970] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 777.138108][T16970] R13: ffff8880277da540 R14: ffffc90003e17d98 R15: 0000000000000001 [ 777.146100][T16970] ? blk_register_tracepoints+0x357/0x440 [ 777.151862][T16970] ? blk_register_tracepoints+0x357/0x440 [ 777.157612][T16970] blk_trace_setup_finalize+0x320/0x3a0 [ 777.163193][T16970] blk_trace_setup+0x254/0x440 [ 777.168074][T16970] ? __pfx_blk_trace_setup+0x10/0x10 [ 777.173379][T16970] ? local_clock_noinstr+0xf6/0x100 [ 777.178612][T16970] ? __pfx_vsnprintf+0x10/0x10 [ 777.183419][T16970] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 777.189363][T16970] ? do_vfs_ioctl+0x226/0x13e0 [ 777.194157][T16970] blk_trace_ioctl+0x245/0x320 [ 777.199033][T16970] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 777.204356][T16970] ? find_held_lock+0x2b/0x80 [ 777.209080][T16970] ? __fget_files+0x215/0x3d0 [ 777.213794][T16970] ? hook_file_ioctl_common+0x140/0x440 [ 777.219370][T16970] blkdev_ioctl+0x17c/0x6f0 [ 777.223891][T16970] ? __pfx_blkdev_ioctl+0x10/0x10 [ 777.228958][T16970] ? __pfx_blkdev_ioctl+0x10/0x10 [ 777.234021][T16970] __x64_sys_ioctl+0x18e/0x210 [ 777.238821][T16970] do_syscall_64+0x115/0x840 [ 777.243442][T16970] ? clear_bhb_loop+0x70/0xc0 [ 777.248142][T16970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.254060][T16970] RIP: 0033:0x7fadb2f9e0d9 [ 777.258496][T16970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.278124][T16970] RSP: 002b:00007fadb3e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.286567][T16970] RAX: ffffffffffffffda RBX: 00007fadb3226090 RCX: 00007fadb2f9e0d9 [ 777.294551][T16970] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 777.302541][T16970] RBP: 00007fadb3035024 R08: 0000000000000000 R09: 0000000000000000 [ 777.310542][T16970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.318527][T16970] R13: 00007fadb3226128 R14: 00007fadb3226090 R15: 00007fffa7a5d418 [ 777.326526][T16970] [ 777.329823][T16970] Kernel Offset: disabled [ 777.334314][T16970] Rebooting in 86400 seconds..