last executing test programs: 1m52.585188053s ago: executing program 2 (id=6024): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0xd1, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x374}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x200, 0x4, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 1m48.489198412s ago: executing program 2 (id=6032): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d9"], 0xfdef) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x7, 0x1e0, 0x3014, 0x0, 0x0, 0x8, 0x1}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffd86, 0x0, 0x1, 0x0, 0x0, 0x480c0}, 0x24000081) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0xfffffffffffffe46) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m47.005056809s ago: executing program 2 (id=6042): openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 1m46.95042098s ago: executing program 2 (id=6043): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @sint={0x0, 0x2833e1ad}}]}) 1m46.738609725s ago: executing program 2 (id=6044): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) 1m43.431816985s ago: executing program 2 (id=6069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m28.233545175s ago: executing program 32 (id=6069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 14.976466206s ago: executing program 3 (id=6957): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffa, [0x92e, 0x746ffec1]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) read$FUSE(r0, 0x0, 0x0) 12.769699359s ago: executing program 3 (id=6975): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd167, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) flistxattr(0xffffffffffffffff, 0x0, 0x0) 12.362472329s ago: executing program 3 (id=6979): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}, 0x5) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 5.456523957s ago: executing program 0 (id=7006): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002940)={'wpan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)={0x190, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x2400c804) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4041004) openat$vimc1(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r16, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r15, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 4.459606622s ago: executing program 0 (id=7009): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mbind(&(0x7f000010d000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0xffffffffffffff3a, 0x80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9) 3.378156298s ago: executing program 0 (id=7013): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1de, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4186dd60bf000001a8000000000000000000000000fffffffffffffe8800000000000000000000000000012234c2d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c37da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe763f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f8"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.299151939s ago: executing program 4 (id=7014): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd167, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0x0) 3.071292145s ago: executing program 0 (id=7016): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002940)={'wpan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)={0x190, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x2400c804) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4041004) openat$vimc1(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r16, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r15, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 3.071074305s ago: executing program 4 (id=7017): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002940)={'wpan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)={0x190, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x2400c804) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r14, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r13, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 2.0592079s ago: executing program 4 (id=7021): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) readv(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) mkdirat$cgroup(r0, 0x0, 0x1ff) 2.012103301s ago: executing program 0 (id=7022): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close(r0) 1.709583848s ago: executing program 4 (id=7025): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}, 0x5) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.694330129s ago: executing program 3 (id=6980): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6(0xa, 0x3, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1.302067458s ago: executing program 1 (id=7027): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='0\n', 0x2) close(r3) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) 1.279805859s ago: executing program 4 (id=7028): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002940)={'wpan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)={0x190, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x2400c804) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r14, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r13, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 1.263342149s ago: executing program 3 (id=7029): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002940)={'wpan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)={0x190, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x2400c804) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4041004) openat$vimc1(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r16, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r15, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 1.000068045s ago: executing program 1 (id=7030): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd167, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0x0) 745.045702ms ago: executing program 1 (id=7031): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1de, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4186dd60bf000001a8000000000000000000000000fffffffffffffe8800000000000000000000000000012234c2d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c37da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe763f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f8"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 559.814266ms ago: executing program 1 (id=7032): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) readv(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) mkdirat$cgroup(r0, 0x0, 0x1ff) 304.162112ms ago: executing program 1 (id=7033): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mbind(&(0x7f000010d000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0xffffffffffffff3a, 0x80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9) 223.461074ms ago: executing program 3 (id=7034): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) 180.571935ms ago: executing program 4 (id=7035): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x68, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x54, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x2c4340) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) accept4$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c, 0x80400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'wg1\x00', 0x4}, 0x18) 127.899007ms ago: executing program 0 (id=7036): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}, 0x5) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=7037): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6(0xa, 0x3, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) kernel console output (not intermixed with test programs): 97260][T30244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3305.407688][T30244] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3305.456050][T30244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3305.473329][T30244] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 3305.512453][T30244] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3305.520864][T30244] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 3305.539236][T30244] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 3305.584056][T30244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3305.590110][T30244] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3305.618874][T30244] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3305.716010][T18197] usb 2-1: USB disconnect, device number 70 [ 3305.933297][T30306] netlink: 'syz.1.6189': attribute type 10 has an invalid length. [ 3305.956958][T30306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6189'. [ 3305.976577][T30306] dummy0: entered promiscuous mode [ 3305.988231][T30306] bridge0: port 3(dummy0) entered blocking state [ 3306.003547][T30306] bridge0: port 3(dummy0) entered disabled state [ 3306.019018][T30306] dummy0: entered allmulticast mode [ 3306.064795][T30306] bridge0: port 3(dummy0) entered blocking state [ 3306.071434][T30306] bridge0: port 3(dummy0) entered forwarding state [ 3306.123008][T30266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3306.140893][T30266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3306.173857][T30266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3306.193744][T29667] Bluetooth: hci3: command 0x0406 tx timeout [ 3306.362909][T30266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3306.446591][T29859] hsr_slave_0: left promiscuous mode [ 3306.469091][T29859] hsr_slave_1: left promiscuous mode [ 3306.500222][T29859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3306.514111][T29859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3306.539023][T29859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3306.552241][T29859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3306.605381][T29859] dummy0: left allmulticast mode [ 3306.605631][T22508] usb 4-1: USB disconnect, device number 72 [ 3306.610559][T29859] bridge0: port 3(dummy0) entered disabled state [ 3306.691096][T29859] bridge_slave_1: left allmulticast mode [ 3306.697088][T29859] bridge_slave_1: left promiscuous mode [ 3306.705539][T29859] bridge0: port 2(bridge_slave_1) entered disabled state [ 3306.716344][T29859] bridge_slave_0: left allmulticast mode [ 3306.722170][T29859] bridge_slave_0: left promiscuous mode [ 3306.727954][T29859] bridge0: port 1(bridge_slave_0) entered disabled state [ 3306.812293][T29859] veth1_macvtap: left promiscuous mode [ 3306.828318][T29859] veth0_macvtap: left promiscuous mode [ 3306.851096][T29859] veth1_vlan: left promiscuous mode [ 3306.861248][T29859] veth0_vlan: left promiscuous mode [ 3307.484611][T29667] Bluetooth: hci2: command 0x0406 tx timeout [ 3307.565394][T29667] Bluetooth: hci4: command 0x0c1a tx timeout [ 3307.633553][T29667] Bluetooth: hci0: command 0x041b tx timeout [ 3307.856990][T29859] team0 (unregistering): Port device team_slave_1 removed [ 3307.909266][T29859] team0 (unregistering): Port device team_slave_0 removed [ 3307.965887][T29859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3308.017432][T29859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3308.287903][T29667] Bluetooth: hci3: command 0x0406 tx timeout [ 3308.507426][T29859] bond0 (unregistering): Released all slaves [ 3308.812288][T30351] netlink: 'syz.1.6203': attribute type 10 has an invalid length. [ 3308.872618][T30351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6203'. [ 3309.117021][T30266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3309.210539][T30266] 8021q: adding VLAN 0 to HW filter on device team0 [ 3309.260625][T22494] bridge0: port 1(bridge_slave_0) entered blocking state [ 3309.267806][T22494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3309.344554][T22494] bridge0: port 2(bridge_slave_1) entered blocking state [ 3309.351726][T22494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3309.474791][T30373] binder: 30371:30373 unknown command 0 [ 3309.490532][T30373] binder: 30371:30373 ioctl c0306201 2000000004c0 returned -22 [ 3309.554629][T29667] Bluetooth: hci2: command 0x0406 tx timeout [ 3309.632125][T29667] Bluetooth: hci4: command 0x0c1a tx timeout [ 3309.712254][T29667] Bluetooth: hci0: command 0x041b tx timeout [ 3309.785388][T30386] netlink: 'syz.3.6213': attribute type 10 has an invalid length. [ 3309.793987][T30386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6213'. [ 3309.912346][ T5773] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 3309.928943][T30266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3310.104545][ T5773] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3310.129372][ T5773] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3310.154065][ T5773] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3310.179634][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3310.204377][T30381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3310.226058][ T5773] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 3310.603228][T22508] usb 2-1: USB disconnect, device number 71 [ 3310.668919][T30266] veth0_vlan: entered promiscuous mode [ 3310.685987][T30266] veth1_vlan: entered promiscuous mode [ 3310.704465][T30410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3310.824870][T30266] veth0_macvtap: entered promiscuous mode [ 3310.882833][T30266] veth1_macvtap: entered promiscuous mode [ 3310.939973][T30266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3310.972113][T30266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3310.992340][T30266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3311.009918][T30266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3311.031448][T30266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3311.053306][T30266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3311.068041][T30266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3311.090969][T30266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3311.115881][T30266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3311.159414][T30266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3311.180852][T30266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3311.252141][T30266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3311.280833][T30266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3311.323641][T30266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3311.379863][T30266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3311.411307][T30266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3311.451721][T30266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3311.474389][T30266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3311.521150][T30437] netlink: 'syz.1.6221': attribute type 10 has an invalid length. [ 3311.543181][T30437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6221'. [ 3311.582866][T30439] netlink: 'syz.0.6222': attribute type 10 has an invalid length. [ 3311.600971][T30439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6222'. [ 3311.623297][T30439] dummy0: entered promiscuous mode [ 3311.629394][T30439] bridge0: port 3(dummy0) entered blocking state [ 3311.652496][T30439] bridge0: port 3(dummy0) entered disabled state [ 3311.662640][T30439] dummy0: entered allmulticast mode [ 3311.679603][T30439] bridge0: port 3(dummy0) entered blocking state [ 3311.686138][T30439] bridge0: port 3(dummy0) entered forwarding state [ 3311.712174][T29667] Bluetooth: hci4: command 0x0c1a tx timeout [ 3311.798829][T29667] Bluetooth: hci0: command 0x041b tx timeout [ 3312.010829][T22493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3312.054257][T22493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3312.100952][T22494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3312.133068][T22494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3312.176771][T30454] binder: 30453:30454 unknown command 0 [ 3312.199316][T30454] binder: 30453:30454 ioctl c0306201 2000000004c0 returned -22 [ 3312.263560][T30459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3312.563873][T30470] netlink: 'syz.1.6231': attribute type 10 has an invalid length. [ 3312.594824][T30470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6231'. [ 3312.964567][T30491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3313.023636][T30494] binder: 30493:30494 unknown command 0 [ 3313.029263][T30494] binder: 30493:30494 ioctl c0306201 2000000004c0 returned -22 [ 3313.530990][T30515] netlink: 'syz.0.6247': attribute type 10 has an invalid length. [ 3313.556115][T30515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6247'. [ 3313.655869][T30519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3313.880069][T29667] Bluetooth: hci0: command 0x041b tx timeout [ 3314.674927][T30559] netlink: 'syz.0.6261': attribute type 10 has an invalid length. [ 3314.699677][T30559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6261'. [ 3314.954029][T30571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3315.459375][T30592] netlink: 'syz.1.6274': attribute type 10 has an invalid length. [ 3315.482081][T30592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6274'. [ 3315.807198][T30602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3315.962264][T29667] Bluetooth: hci0: command 0x041b tx timeout [ 3316.450987][T30628] netlink: 'syz.4.6286': attribute type 10 has an invalid length. [ 3316.469001][T30628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6286'. [ 3316.478745][T30628] dummy0: entered promiscuous mode [ 3316.489536][T30628] bridge0: port 3(dummy0) entered blocking state [ 3316.497924][T30628] bridge0: port 3(dummy0) entered disabled state [ 3316.508070][T30628] dummy0: entered allmulticast mode [ 3316.542483][T30628] bridge0: port 3(dummy0) entered blocking state [ 3316.548979][T30628] bridge0: port 3(dummy0) entered forwarding state [ 3316.692459][T30637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3317.390931][T30667] netlink: 'syz.3.6300': attribute type 10 has an invalid length. [ 3317.410623][T30667] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6300'. [ 3317.520816][T30673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3318.032552][T29667] Bluetooth: hci0: command 0x041b tx timeout [ 3318.133424][T30700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3318.281294][T30703] netlink: 'syz.1.6312': attribute type 10 has an invalid length. [ 3318.305771][T30703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6312'. [ 3318.877905][T30727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3319.082313][T30732] binder: 30730:30732 ioctl 4018620d 0 returned -22 [ 3319.112317][T30732] binder: 30730:30732 unknown command 0 [ 3319.117919][T30732] binder: 30730:30732 ioctl c0306201 2000000004c0 returned -22 [ 3319.220518][T30738] netlink: 'syz.3.6325': attribute type 10 has an invalid length. [ 3319.265777][T30738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6325'. [ 3319.454681][T22501] Bluetooth: hci1: Frame reassembly failed (-84) [ 3319.837356][T30757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3320.050524][T30765] binder: 30764:30765 ioctl 4018620d 0 returned -22 [ 3320.101176][T30765] binder: 30764:30765 unknown command 0 [ 3320.122241][T30765] binder: 30764:30765 ioctl c0306201 2000000004c0 returned -22 [ 3320.294064][T30770] netlink: 'syz.1.6338': attribute type 10 has an invalid length. [ 3320.315866][T30770] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6338'. [ 3320.902283][T30788] binder: 30787:30788 ioctl 4018620d 0 returned -22 [ 3320.946672][T30788] binder: 30787:30788 unknown command 0 [ 3320.954638][T30788] binder: 30787:30788 ioctl c0306201 2000000004c0 returned -22 [ 3320.968704][T30790] netlink: 'syz.3.6348': attribute type 10 has an invalid length. [ 3320.978008][T30790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6348'. [ 3321.253942][T30796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3321.478412][T29667] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3321.486082][ T5777] Bluetooth: hci1: command 0x1003 tx timeout [ 3321.678673][T30814] netlink: 'syz.1.6357': attribute type 10 has an invalid length. [ 3321.689478][T30814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6357'. [ 3321.766150][T30820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3322.329528][T30838] netlink: 'syz.0.6370': attribute type 10 has an invalid length. [ 3322.365882][T30838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6370'. [ 3322.435863][T30842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3322.684056][T29859] Bluetooth: hci1: Frame reassembly failed (-84) [ 3323.159965][T30864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3323.261532][T30866] netlink: 'syz.1.6383': attribute type 10 has an invalid length. [ 3323.288393][T30866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6383'. [ 3323.886684][T30885] binder: 30884:30885 ioctl c0306201 0 returned -14 [ 3323.896025][T30885] binder: 30884:30885 unknown command 0 [ 3323.901645][T30885] binder: 30884:30885 ioctl c0306201 2000000004c0 returned -22 [ 3323.925816][T30887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3324.160158][T30892] netlink: 'syz.3.6395': attribute type 10 has an invalid length. [ 3324.182588][T30892] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6395'. [ 3324.733044][T30917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3324.752289][T29667] Bluetooth: hci1: command 0x1003 tx timeout [ 3324.762193][ T5777] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3324.841830][T30923] binder: 30919:30923 ioctl c0306201 0 returned -14 [ 3324.905124][T30923] binder: 30919:30923 unknown command 0 [ 3324.918339][T30923] binder: 30919:30923 ioctl c0306201 2000000004c0 returned -22 [ 3325.036465][T30933] netlink: 'syz.3.6407': attribute type 10 has an invalid length. [ 3325.076415][T30933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6407'. [ 3325.673868][T22501] Bluetooth: hci1: Frame reassembly failed (-84) [ 3325.808667][T30965] binder: 30964:30965 ioctl c0306201 0 returned -14 [ 3325.825886][T30965] binder: 30964:30965 unknown command 0 [ 3325.838288][T30965] binder: 30964:30965 ioctl c0306201 2000000004c0 returned -22 [ 3326.040552][T30971] netlink: 'syz.3.6420': attribute type 10 has an invalid length. [ 3326.056492][T30971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6420'. [ 3326.289722][T30979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3326.679602][T30991] binder: 30990:30991 unknown command 0 [ 3326.688768][T30991] binder: 30990:30991 ioctl c0306201 2000000004c0 returned -22 [ 3326.870503][T30995] netlink: 'syz.4.6431': attribute type 10 has an invalid length. [ 3326.882152][T30995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6431'. [ 3327.008822][T31000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3327.436323][T31015] binder: 31012:31015 unknown command 0 [ 3327.441934][T31015] binder: 31012:31015 ioctl c0306201 2000000004c0 returned -22 [ 3327.665668][T31020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3327.712396][T29667] Bluetooth: hci1: command 0x1003 tx timeout [ 3327.712801][ T5777] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3327.887344][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.894743][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.378180][T31052] binder: 31049:31052 unknown command 0 [ 3328.405419][T31052] binder: 31049:31052 ioctl c0306201 2000000004c0 returned -22 [ 3328.469174][T22496] Bluetooth: hci1: Frame reassembly failed (-84) [ 3328.969730][T31070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3329.206382][T31082] binder: 31081:31082 unknown command 0 [ 3329.216313][T31082] binder: 31081:31082 ioctl c0306201 2000000004c0 returned -22 [ 3329.664364][T31100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3330.135147][T31120] binder: 31118:31120 unknown command 0 [ 3330.150059][T31120] binder: 31118:31120 ioctl c0306201 2000000004c0 returned -22 [ 3330.361644][T31125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3330.512142][ T5777] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3330.915598][T31144] binder: 31143:31144 unknown command 0 [ 3330.931947][T31144] binder: 31143:31144 ioctl c0306201 2000000004c0 returned -22 [ 3331.207060][T22496] Bluetooth: hci1: Frame reassembly failed (-84) [ 3331.282890][T31156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3331.697658][T31177] binder: 31176:31177 unknown command 0 [ 3331.730370][T31177] binder: 31176:31177 ioctl c0306201 2000000004c0 returned -22 [ 3331.865403][T31186] FAULT_INJECTION: forcing a failure. [ 3331.865403][T31186] name failslab, interval 1, probability 0, space 0, times 0 [ 3331.897991][T31186] CPU: 0 PID: 31186 Comm: syz.4.6504 Not tainted syzkaller #0 [ 3331.905517][T31186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3331.915635][T31186] Call Trace: [ 3331.918938][T31186] [ 3331.921882][T31186] dump_stack_lvl+0x18c/0x250 [ 3331.926597][T31186] ? show_regs_print_info+0x20/0x20 [ 3331.931825][T31186] ? load_image+0x420/0x420 [ 3331.936359][T31186] ? __might_sleep+0xe0/0xe0 [ 3331.940977][T31186] ? __lock_acquire+0x7d80/0x7d80 [ 3331.946028][T31186] should_fail_ex+0x394/0x4c0 [ 3331.950736][T31186] should_failslab+0x9/0x20 [ 3331.955271][T31186] slab_pre_alloc_hook+0x59/0x300 [ 3331.960330][T31186] ? key_alloc+0x34a/0x1030 [ 3331.964856][T31186] ? key_alloc+0x34a/0x1030 [ 3331.969378][T31186] __kmem_cache_alloc_node+0x53/0x250 [ 3331.974777][T31186] ? slab_post_alloc_hook+0x86/0x4d0 [ 3331.980092][T31186] ? key_alloc+0x34a/0x1030 [ 3331.984631][T31186] __kmalloc_node_track_caller+0xa4/0x230 [ 3331.990413][T31186] kmemdup+0x2b/0x70 [ 3331.994336][T31186] key_alloc+0x34a/0x1030 [ 3331.998702][T31186] __key_create_or_update+0x83a/0xa60 [ 3332.004113][T31186] ? key_validate+0xf0/0xf0 [ 3332.008652][T31186] ? key_create_or_update+0x60/0x60 [ 3332.013872][T31186] ? bpf_lsm_key_permission+0x9/0x10 [ 3332.019188][T31186] ? lookup_user_key+0xb66/0x1140 [ 3332.024233][T31186] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3332.030233][T31186] key_create_or_update+0x42/0x60 [ 3332.035278][T31186] __se_sys_add_key+0x34f/0x410 [ 3332.040120][T31186] ? __x64_sys_add_key+0xc0/0xc0 [ 3332.045068][T31186] ? lockdep_hardirqs_on+0x98/0x150 [ 3332.050281][T31186] ? __x64_sys_add_key+0x20/0xc0 [ 3332.055229][T31186] do_syscall_64+0x55/0xb0 [ 3332.059669][T31186] ? clear_bhb_loop+0x40/0x90 [ 3332.064373][T31186] ? clear_bhb_loop+0x40/0x90 [ 3332.069069][T31186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3332.074985][T31186] RIP: 0033:0x7fbfbcd9e159 [ 3332.079412][T31186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3332.099040][T31186] RSP: 002b:00007fbfbaff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3332.107487][T31186] RAX: ffffffffffffffda RBX: 00007fbfbd025fa0 RCX: 00007fbfbcd9e159 [ 3332.115482][T31186] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3332.123469][T31186] RBP: 00007fbfbce35024 R08: fffffffffffffffc R09: 0000000000000000 [ 3332.131460][T31186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3332.139453][T31186] R13: 00007fbfbd026038 R14: 00007fbfbd025fa0 R15: 00007ffc9147ef28 [ 3332.147464][T31186] [ 3332.670151][T31216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3332.897796][T31224] binder: 31223:31224 unknown command 0 [ 3332.910103][T31224] binder: 31223:31224 ioctl c0306201 2000000004c0 returned -22 [ 3333.064609][T31229] netlink: 'syz.1.6513': attribute type 10 has an invalid length. [ 3333.082294][T31229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6513'. [ 3333.118100][T31235] fuse: Bad value for 'fd' [ 3333.238596][ T5777] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3333.427121][T31242] FAULT_INJECTION: forcing a failure. [ 3333.427121][T31242] name failslab, interval 1, probability 0, space 0, times 0 [ 3333.456531][T31242] CPU: 1 PID: 31242 Comm: syz.0.6517 Not tainted syzkaller #0 [ 3333.464055][T31242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3333.474144][T31242] Call Trace: [ 3333.477452][T31242] [ 3333.480405][T31242] dump_stack_lvl+0x18c/0x250 [ 3333.485122][T31242] ? show_regs_print_info+0x20/0x20 [ 3333.490360][T31242] ? load_image+0x420/0x420 [ 3333.494896][T31242] ? __might_sleep+0xe0/0xe0 [ 3333.499520][T31242] ? __lock_acquire+0x7d80/0x7d80 [ 3333.504588][T31242] should_fail_ex+0x394/0x4c0 [ 3333.509290][T31242] should_failslab+0x9/0x20 [ 3333.513810][T31242] slab_pre_alloc_hook+0x59/0x300 [ 3333.518839][T31242] ? key_alloc+0x34a/0x1030 [ 3333.523349][T31242] ? key_alloc+0x34a/0x1030 [ 3333.527858][T31242] __kmem_cache_alloc_node+0x53/0x250 [ 3333.533233][T31242] ? slab_post_alloc_hook+0x86/0x4d0 [ 3333.538525][T31242] ? key_alloc+0x34a/0x1030 [ 3333.543029][T31242] __kmalloc_node_track_caller+0xa4/0x230 [ 3333.548762][T31242] kmemdup+0x2b/0x70 [ 3333.552676][T31242] key_alloc+0x34a/0x1030 [ 3333.557043][T31242] __key_create_or_update+0x83a/0xa60 [ 3333.562442][T31242] ? key_validate+0xf0/0xf0 [ 3333.566964][T31242] ? key_create_or_update+0x60/0x60 [ 3333.572200][T31242] ? bpf_lsm_key_permission+0x9/0x10 [ 3333.577523][T31242] ? lookup_user_key+0xb66/0x1140 [ 3333.582571][T31242] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3333.588566][T31242] key_create_or_update+0x42/0x60 [ 3333.593598][T31242] __se_sys_add_key+0x34f/0x410 [ 3333.598455][T31242] ? __x64_sys_add_key+0xc0/0xc0 [ 3333.603405][T31242] ? lockdep_hardirqs_on+0x98/0x150 [ 3333.608615][T31242] ? __x64_sys_add_key+0x20/0xc0 [ 3333.613558][T31242] do_syscall_64+0x55/0xb0 [ 3333.617977][T31242] ? clear_bhb_loop+0x40/0x90 [ 3333.622651][T31242] ? clear_bhb_loop+0x40/0x90 [ 3333.627327][T31242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3333.633229][T31242] RIP: 0033:0x7fea1f19e159 [ 3333.637647][T31242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3333.657261][T31242] RSP: 002b:00007fea1ffda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3333.665682][T31242] RAX: ffffffffffffffda RBX: 00007fea1f425fa0 RCX: 00007fea1f19e159 [ 3333.673659][T31242] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3333.681627][T31242] RBP: 00007fea1f235024 R08: fffffffffffffffc R09: 0000000000000000 [ 3333.689598][T31242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3333.697566][T31242] R13: 00007fea1f426038 R14: 00007fea1f425fa0 R15: 00007ffe27a3d888 [ 3333.705552][T31242] [ 3333.757759][T31251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3333.981237][T31259] binder: 31258:31259 unknown command 0 [ 3333.987587][T31259] binder: 31258:31259 ioctl c0306201 2000000004c0 returned -22 [ 3334.287891][T31273] netlink: 'syz.1.6527': attribute type 10 has an invalid length. [ 3334.315110][T31273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6527'. [ 3334.358673][T31273] fuse: Bad value for 'fd' [ 3334.856137][T22493] Bluetooth: hci1: Frame reassembly failed (-84) [ 3335.295980][T31306] binder: 31304:31306 unknown command 0 [ 3335.301715][T31306] binder: 31304:31306 ioctl c0306201 2000000004c0 returned -22 [ 3335.731148][T31319] netlink: 'syz.3.6538': attribute type 10 has an invalid length. [ 3335.770544][T31319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6538'. [ 3335.790992][T31327] fuse: Bad value for 'fd' [ 3335.994316][T31333] FAULT_INJECTION: forcing a failure. [ 3335.994316][T31333] name failslab, interval 1, probability 0, space 0, times 0 [ 3336.039981][T31333] CPU: 1 PID: 31333 Comm: syz.4.6542 Not tainted syzkaller #0 [ 3336.047508][T31333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3336.057594][T31333] Call Trace: [ 3336.060902][T31333] [ 3336.063857][T31333] dump_stack_lvl+0x18c/0x250 [ 3336.068576][T31333] ? show_regs_print_info+0x20/0x20 [ 3336.073811][T31333] ? load_image+0x420/0x420 [ 3336.078348][T31333] ? __might_sleep+0xe0/0xe0 [ 3336.082982][T31333] ? __lock_acquire+0x7d80/0x7d80 [ 3336.088046][T31333] should_fail_ex+0x394/0x4c0 [ 3336.092775][T31333] should_failslab+0x9/0x20 [ 3336.097312][T31333] slab_pre_alloc_hook+0x59/0x300 [ 3336.102375][T31333] ? key_alloc+0x34a/0x1030 [ 3336.106905][T31333] ? key_alloc+0x34a/0x1030 [ 3336.111436][T31333] __kmem_cache_alloc_node+0x53/0x250 [ 3336.116846][T31333] ? slab_post_alloc_hook+0x86/0x4d0 [ 3336.122167][T31333] ? key_alloc+0x34a/0x1030 [ 3336.126694][T31333] __kmalloc_node_track_caller+0xa4/0x230 [ 3336.132429][T31333] kmemdup+0x2b/0x70 [ 3336.136330][T31333] key_alloc+0x34a/0x1030 [ 3336.140669][T31333] __key_create_or_update+0x83a/0xa60 [ 3336.146045][T31333] ? key_validate+0xf0/0xf0 [ 3336.150555][T31333] ? key_create_or_update+0x60/0x60 [ 3336.155778][T31333] ? bpf_lsm_key_permission+0x9/0x10 [ 3336.161066][T31333] ? lookup_user_key+0xb66/0x1140 [ 3336.166105][T31333] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3336.172101][T31333] key_create_or_update+0x42/0x60 [ 3336.177140][T31333] __se_sys_add_key+0x34f/0x410 [ 3336.182001][T31333] ? __x64_sys_add_key+0xc0/0xc0 [ 3336.186947][T31333] ? lockdep_hardirqs_on+0x98/0x150 [ 3336.192155][T31333] ? __x64_sys_add_key+0x20/0xc0 [ 3336.197106][T31333] do_syscall_64+0x55/0xb0 [ 3336.201526][T31333] ? clear_bhb_loop+0x40/0x90 [ 3336.206204][T31333] ? clear_bhb_loop+0x40/0x90 [ 3336.210887][T31333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3336.216779][T31333] RIP: 0033:0x7fbfbcd9e159 [ 3336.221189][T31333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3336.240799][T31333] RSP: 002b:00007fbfbaff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3336.249216][T31333] RAX: ffffffffffffffda RBX: 00007fbfbd025fa0 RCX: 00007fbfbcd9e159 [ 3336.257185][T31333] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3336.265156][T31333] RBP: 00007fbfbce35024 R08: fffffffffffffffc R09: 0000000000000000 [ 3336.273130][T31333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3336.281095][T31333] R13: 00007fbfbd026038 R14: 00007fbfbd025fa0 R15: 00007ffc9147ef28 [ 3336.289118][T31333] [ 3336.460563][T31346] binder: 31344:31346 unknown command 0 [ 3336.466779][T31346] binder: 31344:31346 ioctl c0306201 2000000004c0 returned -22 [ 3336.913864][ T5777] Bluetooth: hci1: command 0x1003 tx timeout [ 3336.921326][T29667] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3337.081616][T31373] netlink: 'syz.0.6552': attribute type 10 has an invalid length. [ 3337.089871][T31373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6552'. [ 3337.205700][T31379] FAULT_INJECTION: forcing a failure. [ 3337.205700][T31379] name failslab, interval 1, probability 0, space 0, times 0 [ 3337.297419][T31379] CPU: 1 PID: 31379 Comm: syz.1.6554 Not tainted syzkaller #0 [ 3337.304956][T31379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3337.315046][T31379] Call Trace: [ 3337.318353][T31379] [ 3337.321317][T31379] dump_stack_lvl+0x18c/0x250 [ 3337.326038][T31379] ? show_regs_print_info+0x20/0x20 [ 3337.331281][T31379] ? load_image+0x420/0x420 [ 3337.335827][T31379] ? __might_sleep+0xe0/0xe0 [ 3337.340465][T31379] ? __lock_acquire+0x7d80/0x7d80 [ 3337.345545][T31379] should_fail_ex+0x394/0x4c0 [ 3337.350271][T31379] should_failslab+0x9/0x20 [ 3337.354816][T31379] slab_pre_alloc_hook+0x59/0x300 [ 3337.359878][T31379] ? __rwlock_init+0x150/0x150 [ 3337.364673][T31379] ? key_user_lookup+0x1bc/0x450 [ 3337.369646][T31379] kmem_cache_alloc+0x5a/0x2c0 [ 3337.374451][T31379] ? key_alloc+0x306/0x1030 [ 3337.378993][T31379] key_alloc+0x306/0x1030 [ 3337.383369][T31379] __key_create_or_update+0x83a/0xa60 [ 3337.388870][T31379] ? key_validate+0xf0/0xf0 [ 3337.393417][T31379] ? key_create_or_update+0x60/0x60 [ 3337.398645][T31379] ? bpf_lsm_key_permission+0x9/0x10 [ 3337.403977][T31379] ? lookup_user_key+0xb66/0x1140 [ 3337.409060][T31379] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3337.415130][T31379] key_create_or_update+0x42/0x60 [ 3337.420200][T31379] __se_sys_add_key+0x34f/0x410 [ 3337.425104][T31379] ? __x64_sys_add_key+0xc0/0xc0 [ 3337.430089][T31379] ? lockdep_hardirqs_on+0x98/0x150 [ 3337.435329][T31379] ? __x64_sys_add_key+0x20/0xc0 [ 3337.440311][T31379] do_syscall_64+0x55/0xb0 [ 3337.444764][T31379] ? clear_bhb_loop+0x40/0x90 [ 3337.449474][T31379] ? clear_bhb_loop+0x40/0x90 [ 3337.454201][T31379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3337.460128][T31379] RIP: 0033:0x7f847719e159 [ 3337.464575][T31379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3337.484210][T31379] RSP: 002b:00007f847810b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3337.492659][T31379] RAX: ffffffffffffffda RBX: 00007f8477425fa0 RCX: 00007f847719e159 [ 3337.500658][T31379] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3337.508655][T31379] RBP: 00007f8477235024 R08: fffffffffffffffc R09: 0000000000000000 [ 3337.516155][T31386] binder: 31385:31386 unknown command 0 [ 3337.516633][T31379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3337.530181][T31379] R13: 00007f8477426038 R14: 00007f8477425fa0 R15: 00007fff60dbb418 [ 3337.533644][T31386] binder: 31385:31386 ioctl c0306201 2000000004c0 returned -22 [ 3337.538175][T31379] [ 3337.809071][T31397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3337.931724][T22504] Bluetooth: hci1: Frame reassembly failed (-84) [ 3337.994326][T31409] netlink: 'syz.0.6564': attribute type 10 has an invalid length. [ 3338.002322][T31409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6564'. [ 3338.256769][T31421] FAULT_INJECTION: forcing a failure. [ 3338.256769][T31421] name failslab, interval 1, probability 0, space 0, times 0 [ 3338.272497][T31421] CPU: 1 PID: 31421 Comm: syz.3.6567 Not tainted syzkaller #0 [ 3338.280007][T31421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3338.290072][T31421] Call Trace: [ 3338.293351][T31421] [ 3338.296286][T31421] dump_stack_lvl+0x18c/0x250 [ 3338.300972][T31421] ? show_regs_print_info+0x20/0x20 [ 3338.306173][T31421] ? load_image+0x420/0x420 [ 3338.310677][T31421] ? __might_sleep+0xe0/0xe0 [ 3338.315275][T31421] ? __lock_acquire+0x7d80/0x7d80 [ 3338.320332][T31421] should_fail_ex+0x394/0x4c0 [ 3338.325032][T31421] should_failslab+0x9/0x20 [ 3338.329545][T31421] slab_pre_alloc_hook+0x59/0x300 [ 3338.334579][T31421] ? key_alloc+0x34a/0x1030 [ 3338.339082][T31421] ? key_alloc+0x34a/0x1030 [ 3338.343586][T31421] __kmem_cache_alloc_node+0x53/0x250 [ 3338.348964][T31421] ? slab_post_alloc_hook+0x86/0x4d0 [ 3338.354263][T31421] ? key_alloc+0x34a/0x1030 [ 3338.358769][T31421] __kmalloc_node_track_caller+0xa4/0x230 [ 3338.364499][T31421] kmemdup+0x2b/0x70 [ 3338.368404][T31421] key_alloc+0x34a/0x1030 [ 3338.372748][T31421] __key_create_or_update+0x83a/0xa60 [ 3338.378129][T31421] ? key_validate+0xf0/0xf0 [ 3338.382653][T31421] ? key_create_or_update+0x60/0x60 [ 3338.387852][T31421] ? bpf_lsm_key_permission+0x9/0x10 [ 3338.393144][T31421] ? lookup_user_key+0xb66/0x1140 [ 3338.398181][T31421] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3338.404170][T31421] key_create_or_update+0x42/0x60 [ 3338.409201][T31421] __se_sys_add_key+0x34f/0x410 [ 3338.414090][T31421] ? __x64_sys_add_key+0xc0/0xc0 [ 3338.419040][T31421] ? lockdep_hardirqs_on+0x98/0x150 [ 3338.424242][T31421] ? __x64_sys_add_key+0x20/0xc0 [ 3338.429186][T31421] do_syscall_64+0x55/0xb0 [ 3338.433605][T31421] ? clear_bhb_loop+0x40/0x90 [ 3338.438284][T31421] ? clear_bhb_loop+0x40/0x90 [ 3338.442962][T31421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3338.448855][T31421] RIP: 0033:0x7fa1f039e159 [ 3338.453276][T31421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3338.472881][T31421] RSP: 002b:00007fa1f1256028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3338.481297][T31421] RAX: ffffffffffffffda RBX: 00007fa1f0625fa0 RCX: 00007fa1f039e159 [ 3338.489269][T31421] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3338.497239][T31421] RBP: 00007fa1f0435024 R08: fffffffffffffffc R09: 0000000000000000 [ 3338.505207][T31421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3338.513195][T31421] R13: 00007fa1f0626038 R14: 00007fa1f0625fa0 R15: 00007ffceaaf0728 [ 3338.521180][T31421] [ 3338.720544][T31428] binder: 31425:31428 unknown command 0 [ 3338.727379][T31428] binder: 31425:31428 ioctl c0306201 2000000004c0 returned -22 [ 3338.843199][T31433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3339.255587][T31446] netlink: 'syz.0.6576': attribute type 10 has an invalid length. [ 3339.264094][T31446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6576'. [ 3339.320862][T31447] FAULT_INJECTION: forcing a failure. [ 3339.320862][T31447] name failslab, interval 1, probability 0, space 0, times 0 [ 3339.335378][T31447] CPU: 1 PID: 31447 Comm: syz.3.6577 Not tainted syzkaller #0 [ 3339.342886][T31447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3339.352963][T31447] Call Trace: [ 3339.356254][T31447] [ 3339.359195][T31447] dump_stack_lvl+0x18c/0x250 [ 3339.363906][T31447] ? show_regs_print_info+0x20/0x20 [ 3339.369126][T31447] ? load_image+0x420/0x420 [ 3339.373654][T31447] ? __might_sleep+0xe0/0xe0 [ 3339.378277][T31447] ? __lock_acquire+0x7d80/0x7d80 [ 3339.383351][T31447] should_fail_ex+0x394/0x4c0 [ 3339.388066][T31447] should_failslab+0x9/0x20 [ 3339.392598][T31447] slab_pre_alloc_hook+0x59/0x300 [ 3339.397654][T31447] ? __rwlock_init+0x150/0x150 [ 3339.402442][T31447] ? key_user_lookup+0x1bc/0x450 [ 3339.407415][T31447] kmem_cache_alloc+0x5a/0x2c0 [ 3339.412209][T31447] ? key_alloc+0x306/0x1030 [ 3339.416747][T31447] key_alloc+0x306/0x1030 [ 3339.421118][T31447] __key_create_or_update+0x83a/0xa60 [ 3339.426517][T31447] ? key_validate+0xf0/0xf0 [ 3339.431060][T31447] ? key_create_or_update+0x60/0x60 [ 3339.436281][T31447] ? bpf_lsm_key_permission+0x9/0x10 [ 3339.441601][T31447] ? lookup_user_key+0xb66/0x1140 [ 3339.446665][T31447] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3339.452683][T31447] key_create_or_update+0x42/0x60 [ 3339.457742][T31447] __se_sys_add_key+0x34f/0x410 [ 3339.462626][T31447] ? __x64_sys_add_key+0xc0/0xc0 [ 3339.467602][T31447] ? lockdep_hardirqs_on+0x98/0x150 [ 3339.472824][T31447] ? __x64_sys_add_key+0x20/0xc0 [ 3339.477796][T31447] do_syscall_64+0x55/0xb0 [ 3339.482238][T31447] ? clear_bhb_loop+0x40/0x90 [ 3339.486940][T31447] ? clear_bhb_loop+0x40/0x90 [ 3339.491645][T31447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3339.497561][T31447] RIP: 0033:0x7fa1f039e159 [ 3339.501993][T31447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3339.521622][T31447] RSP: 002b:00007fa1f1256028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3339.530066][T31447] RAX: ffffffffffffffda RBX: 00007fa1f0625fa0 RCX: 00007fa1f039e159 [ 3339.538062][T31447] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3339.546056][T31447] RBP: 00007fa1f0435024 R08: fffffffffffffffc R09: 0000000000000000 [ 3339.554053][T31447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3339.562051][T31447] R13: 00007fa1f0626038 R14: 00007fa1f0625fa0 R15: 00007ffceaaf0728 [ 3339.570075][T31447] [ 3339.719029][T31456] binder: 31455:31456 unknown command 0 [ 3339.727746][T31456] binder: 31455:31456 ioctl c0306201 2000000004c0 returned -22 [ 3339.747629][T31460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3339.953067][ T5777] Bluetooth: hci1: command 0x1003 tx timeout [ 3339.960599][T29667] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3340.199343][T31479] netlink: 'syz.4.6588': attribute type 10 has an invalid length. [ 3340.230299][T31479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6588'. [ 3340.569162][T31494] FAULT_INJECTION: forcing a failure. [ 3340.569162][T31494] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.598784][T31494] CPU: 0 PID: 31494 Comm: syz.4.6592 Not tainted syzkaller #0 [ 3340.606310][T31494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3340.616397][T31494] Call Trace: [ 3340.619697][T31494] [ 3340.622646][T31494] dump_stack_lvl+0x18c/0x250 [ 3340.627361][T31494] ? show_regs_print_info+0x20/0x20 [ 3340.632593][T31494] ? load_image+0x420/0x420 [ 3340.637132][T31494] ? __might_sleep+0xe0/0xe0 [ 3340.641753][T31494] ? __lock_acquire+0x7d80/0x7d80 [ 3340.646813][T31494] should_fail_ex+0x394/0x4c0 [ 3340.651539][T31494] should_failslab+0x9/0x20 [ 3340.656083][T31494] slab_pre_alloc_hook+0x59/0x300 [ 3340.661151][T31494] ? key_alloc+0x34a/0x1030 [ 3340.665687][T31494] ? key_alloc+0x34a/0x1030 [ 3340.670215][T31494] __kmem_cache_alloc_node+0x53/0x250 [ 3340.675614][T31494] ? slab_post_alloc_hook+0x86/0x4d0 [ 3340.680932][T31494] ? key_alloc+0x34a/0x1030 [ 3340.685461][T31494] __kmalloc_node_track_caller+0xa4/0x230 [ 3340.691228][T31494] kmemdup+0x2b/0x70 [ 3340.695155][T31494] key_alloc+0x34a/0x1030 [ 3340.699530][T31494] __key_create_or_update+0x83a/0xa60 [ 3340.704940][T31494] ? key_validate+0xf0/0xf0 [ 3340.709481][T31494] ? key_create_or_update+0x60/0x60 [ 3340.714705][T31494] ? bpf_lsm_key_permission+0x9/0x10 [ 3340.720029][T31494] ? lookup_user_key+0xb66/0x1140 [ 3340.725098][T31494] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3340.731126][T31494] key_create_or_update+0x42/0x60 [ 3340.736189][T31494] __se_sys_add_key+0x34f/0x410 [ 3340.741088][T31494] ? __x64_sys_add_key+0xc0/0xc0 [ 3340.746068][T31494] ? lockdep_hardirqs_on+0x98/0x150 [ 3340.751297][T31494] ? __x64_sys_add_key+0x20/0xc0 [ 3340.756270][T31494] do_syscall_64+0x55/0xb0 [ 3340.760710][T31494] ? clear_bhb_loop+0x40/0x90 [ 3340.765408][T31494] ? clear_bhb_loop+0x40/0x90 [ 3340.770109][T31494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3340.776033][T31494] RIP: 0033:0x7fbfbcd9e159 [ 3340.780468][T31494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3340.800102][T31494] RSP: 002b:00007fbfbaff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3340.808552][T31494] RAX: ffffffffffffffda RBX: 00007fbfbd025fa0 RCX: 00007fbfbcd9e159 [ 3340.816556][T31494] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3340.824555][T31494] RBP: 00007fbfbce35024 R08: fffffffffffffffc R09: 0000000000000000 [ 3340.832560][T31494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3340.840561][T31494] R13: 00007fbfbd026038 R14: 00007fbfbd025fa0 R15: 00007ffc9147ef28 [ 3340.848579][T31494] [ 3340.890363][T31498] binder: 31495:31498 unknown command 0 [ 3340.907162][T31498] binder: 31495:31498 ioctl c0306201 2000000004c0 returned -22 [ 3341.024648][T31502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3341.299520][T31512] netlink: 'syz.3.6600': attribute type 10 has an invalid length. [ 3341.320433][T31512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6600'. [ 3341.634951][T31522] FAULT_INJECTION: forcing a failure. [ 3341.634951][T31522] name failslab, interval 1, probability 0, space 0, times 0 [ 3341.656475][T31522] CPU: 1 PID: 31522 Comm: syz.1.6604 Not tainted syzkaller #0 [ 3341.664011][T31522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3341.674094][T31522] Call Trace: [ 3341.677388][T31522] [ 3341.680332][T31522] dump_stack_lvl+0x18c/0x250 [ 3341.685048][T31522] ? show_regs_print_info+0x20/0x20 [ 3341.690287][T31522] ? load_image+0x420/0x420 [ 3341.694828][T31522] ? __might_sleep+0xe0/0xe0 [ 3341.699451][T31522] ? __lock_acquire+0x7d80/0x7d80 [ 3341.704513][T31522] should_fail_ex+0x394/0x4c0 [ 3341.709230][T31522] should_failslab+0x9/0x20 [ 3341.713758][T31522] slab_pre_alloc_hook+0x59/0x300 [ 3341.718793][T31522] ? __rwlock_init+0x150/0x150 [ 3341.723563][T31522] ? key_user_lookup+0x1bc/0x450 [ 3341.728503][T31522] kmem_cache_alloc+0x5a/0x2c0 [ 3341.733274][T31522] ? key_alloc+0x306/0x1030 [ 3341.737781][T31522] key_alloc+0x306/0x1030 [ 3341.742124][T31522] __key_create_or_update+0x83a/0xa60 [ 3341.747499][T31522] ? key_validate+0xf0/0xf0 [ 3341.752017][T31522] ? key_create_or_update+0x60/0x60 [ 3341.757221][T31522] ? bpf_lsm_key_permission+0x9/0x10 [ 3341.762523][T31522] ? lookup_user_key+0xb66/0x1140 [ 3341.767572][T31522] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3341.773568][T31522] key_create_or_update+0x42/0x60 [ 3341.778618][T31522] __se_sys_add_key+0x34f/0x410 [ 3341.783488][T31522] ? __x64_sys_add_key+0xc0/0xc0 [ 3341.788438][T31522] ? lockdep_hardirqs_on+0x98/0x150 [ 3341.793645][T31522] ? __x64_sys_add_key+0x20/0xc0 [ 3341.798600][T31522] do_syscall_64+0x55/0xb0 [ 3341.803025][T31522] ? clear_bhb_loop+0x40/0x90 [ 3341.807724][T31522] ? clear_bhb_loop+0x40/0x90 [ 3341.812419][T31522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3341.818317][T31522] RIP: 0033:0x7f847719e159 [ 3341.822736][T31522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3341.842342][T31522] RSP: 002b:00007f847810b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3341.850755][T31522] RAX: ffffffffffffffda RBX: 00007f8477425fa0 RCX: 00007f847719e159 [ 3341.858726][T31522] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3341.866703][T31522] RBP: 00007f8477235024 R08: fffffffffffffffc R09: 0000000000000000 [ 3341.874680][T31522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3341.882653][T31522] R13: 00007f8477426038 R14: 00007f8477425fa0 R15: 00007fff60dbb418 [ 3341.890635][T31522] [ 3341.944812][T31526] binder: 31525:31526 unknown command 0 [ 3341.950548][T31526] binder: 31525:31526 ioctl c0306201 2000000004c0 returned -22 [ 3341.978212][T31528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3342.278603][T31540] netlink: 'syz.4.6613': attribute type 10 has an invalid length. [ 3342.297416][T31540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6613'. [ 3342.507816][T31553] FAULT_INJECTION: forcing a failure. [ 3342.507816][T31553] name failslab, interval 1, probability 0, space 0, times 0 [ 3342.548031][T31553] CPU: 1 PID: 31553 Comm: syz.1.6616 Not tainted syzkaller #0 [ 3342.555556][T31553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3342.565638][T31553] Call Trace: [ 3342.568947][T31553] [ 3342.571904][T31553] dump_stack_lvl+0x18c/0x250 [ 3342.576629][T31553] ? show_regs_print_info+0x20/0x20 [ 3342.581863][T31553] ? load_image+0x420/0x420 [ 3342.586406][T31553] ? __might_sleep+0xe0/0xe0 [ 3342.591030][T31553] ? __lock_acquire+0x7d80/0x7d80 [ 3342.596085][T31553] should_fail_ex+0x394/0x4c0 [ 3342.600781][T31553] should_failslab+0x9/0x20 [ 3342.605290][T31553] slab_pre_alloc_hook+0x59/0x300 [ 3342.610322][T31553] ? __rwlock_init+0x150/0x150 [ 3342.615090][T31553] ? key_user_lookup+0x1bc/0x450 [ 3342.620030][T31553] kmem_cache_alloc+0x5a/0x2c0 [ 3342.624798][T31553] ? key_alloc+0x306/0x1030 [ 3342.629310][T31553] key_alloc+0x306/0x1030 [ 3342.633651][T31553] __key_create_or_update+0x83a/0xa60 [ 3342.639033][T31553] ? key_validate+0xf0/0xf0 [ 3342.643546][T31553] ? key_create_or_update+0x60/0x60 [ 3342.648744][T31553] ? bpf_lsm_key_permission+0x9/0x10 [ 3342.654063][T31553] ? lookup_user_key+0xb66/0x1140 [ 3342.659104][T31553] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3342.665097][T31553] key_create_or_update+0x42/0x60 [ 3342.670128][T31553] __se_sys_add_key+0x34f/0x410 [ 3342.674987][T31553] ? __x64_sys_add_key+0xc0/0xc0 [ 3342.679939][T31553] ? lockdep_hardirqs_on+0x98/0x150 [ 3342.685147][T31553] ? __x64_sys_add_key+0x20/0xc0 [ 3342.690096][T31553] do_syscall_64+0x55/0xb0 [ 3342.694513][T31553] ? clear_bhb_loop+0x40/0x90 [ 3342.699194][T31553] ? clear_bhb_loop+0x40/0x90 [ 3342.703875][T31553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3342.709775][T31553] RIP: 0033:0x7f847719e159 [ 3342.714192][T31553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3342.733800][T31553] RSP: 002b:00007f847810b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3342.742216][T31553] RAX: ffffffffffffffda RBX: 00007f8477425fa0 RCX: 00007f847719e159 [ 3342.750185][T31553] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3342.758159][T31553] RBP: 00007f8477235024 R08: fffffffffffffffc R09: 0000000000000000 [ 3342.766126][T31553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3342.774094][T31553] R13: 00007f8477426038 R14: 00007f8477425fa0 R15: 00007fff60dbb418 [ 3342.782084][T31553] [ 3342.816023][T31555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3342.946228][T31557] binder: 31556:31557 unknown command 0 [ 3342.955959][T31557] binder: 31556:31557 ioctl c0306201 2000000004c0 returned -22 [ 3343.345899][T31573] FAULT_INJECTION: forcing a failure. [ 3343.345899][T31573] name failslab, interval 1, probability 0, space 0, times 0 [ 3343.346203][T31571] netlink: 'syz.3.6625': attribute type 10 has an invalid length. [ 3343.358741][T31573] CPU: 1 PID: 31573 Comm: syz.4.6626 Not tainted syzkaller #0 [ 3343.358768][T31573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3343.384097][T31573] Call Trace: [ 3343.387378][T31573] [ 3343.390306][T31573] dump_stack_lvl+0x18c/0x250 [ 3343.395014][T31573] ? show_regs_print_info+0x20/0x20 [ 3343.400222][T31573] ? load_image+0x420/0x420 [ 3343.404735][T31573] ? __might_sleep+0xe0/0xe0 [ 3343.409327][T31573] ? __lock_acquire+0x7d80/0x7d80 [ 3343.414358][T31573] should_fail_ex+0x394/0x4c0 [ 3343.419041][T31573] should_failslab+0x9/0x20 [ 3343.423547][T31573] slab_pre_alloc_hook+0x59/0x300 [ 3343.428581][T31573] ? __rwlock_init+0x150/0x150 [ 3343.433348][T31573] ? key_user_lookup+0x1bc/0x450 [ 3343.438286][T31573] kmem_cache_alloc+0x5a/0x2c0 [ 3343.443078][T31573] ? key_alloc+0x306/0x1030 [ 3343.447587][T31573] key_alloc+0x306/0x1030 [ 3343.451930][T31573] __key_create_or_update+0x83a/0xa60 [ 3343.457310][T31573] ? key_validate+0xf0/0xf0 [ 3343.461826][T31573] ? key_create_or_update+0x60/0x60 [ 3343.467025][T31573] ? bpf_lsm_key_permission+0x9/0x10 [ 3343.472316][T31573] ? lookup_user_key+0xb66/0x1140 [ 3343.477350][T31573] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3343.483338][T31573] key_create_or_update+0x42/0x60 [ 3343.488368][T31573] __se_sys_add_key+0x34f/0x410 [ 3343.493227][T31573] ? __x64_sys_add_key+0xc0/0xc0 [ 3343.498179][T31573] ? lockdep_hardirqs_on+0x98/0x150 [ 3343.503394][T31573] ? __x64_sys_add_key+0x20/0xc0 [ 3343.508339][T31573] do_syscall_64+0x55/0xb0 [ 3343.512754][T31573] ? clear_bhb_loop+0x40/0x90 [ 3343.517429][T31573] ? clear_bhb_loop+0x40/0x90 [ 3343.522106][T31573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3343.528000][T31573] RIP: 0033:0x7fbfbcd9e159 [ 3343.532413][T31573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3343.552020][T31573] RSP: 002b:00007fbfbaff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3343.560433][T31573] RAX: ffffffffffffffda RBX: 00007fbfbd025fa0 RCX: 00007fbfbcd9e159 [ 3343.568401][T31573] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3343.576371][T31573] RBP: 00007fbfbce35024 R08: fffffffffffffffc R09: 0000000000000000 [ 3343.584342][T31573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3343.592307][T31573] R13: 00007fbfbd026038 R14: 00007fbfbd025fa0 R15: 00007ffc9147ef28 [ 3343.600284][T31573] [ 3343.605902][ T5777] Bluetooth: hci1: command 0x1003 tx timeout [ 3343.614655][T31571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6625'. [ 3343.623841][T29667] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3343.704549][T31576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3343.773121][T31578] binder: 31577:31578 unknown command 0 [ 3343.783099][T31578] binder: 31577:31578 ioctl c0306201 2000000004c0 returned -22 [ 3344.305863][T31601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3344.400609][T31603] FAULT_INJECTION: forcing a failure. [ 3344.400609][T31603] name failslab, interval 1, probability 0, space 0, times 0 [ 3344.422308][T31603] CPU: 1 PID: 31603 Comm: syz.4.6638 Not tainted syzkaller #0 [ 3344.429831][T31603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3344.439918][T31603] Call Trace: [ 3344.443218][T31603] [ 3344.446174][T31603] dump_stack_lvl+0x18c/0x250 [ 3344.450891][T31603] ? show_regs_print_info+0x20/0x20 [ 3344.456117][T31603] ? load_image+0x420/0x420 [ 3344.460650][T31603] ? __might_sleep+0xe0/0xe0 [ 3344.465282][T31603] ? __lock_acquire+0x7d80/0x7d80 [ 3344.470353][T31603] should_fail_ex+0x394/0x4c0 [ 3344.475064][T31603] should_failslab+0x9/0x20 [ 3344.479594][T31603] slab_pre_alloc_hook+0x59/0x300 [ 3344.484645][T31603] ? key_alloc+0x34a/0x1030 [ 3344.489153][T31603] ? key_alloc+0x34a/0x1030 [ 3344.493658][T31603] __kmem_cache_alloc_node+0x53/0x250 [ 3344.499032][T31603] ? slab_post_alloc_hook+0x86/0x4d0 [ 3344.504325][T31603] ? key_alloc+0x34a/0x1030 [ 3344.508830][T31603] __kmalloc_node_track_caller+0xa4/0x230 [ 3344.514562][T31603] kmemdup+0x2b/0x70 [ 3344.518461][T31603] key_alloc+0x34a/0x1030 [ 3344.522801][T31603] __key_create_or_update+0x83a/0xa60 [ 3344.528179][T31603] ? key_validate+0xf0/0xf0 [ 3344.532719][T31603] ? key_create_or_update+0x60/0x60 [ 3344.537936][T31603] ? bpf_lsm_key_permission+0x9/0x10 [ 3344.543231][T31603] ? lookup_user_key+0xb66/0x1140 [ 3344.548266][T31603] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3344.554255][T31603] key_create_or_update+0x42/0x60 [ 3344.559311][T31603] __se_sys_add_key+0x34f/0x410 [ 3344.564187][T31603] ? __x64_sys_add_key+0xc0/0xc0 [ 3344.569144][T31603] ? lockdep_hardirqs_on+0x98/0x150 [ 3344.574358][T31603] ? __x64_sys_add_key+0x20/0xc0 [ 3344.579317][T31603] do_syscall_64+0x55/0xb0 [ 3344.583745][T31603] ? clear_bhb_loop+0x40/0x90 [ 3344.588435][T31603] ? clear_bhb_loop+0x40/0x90 [ 3344.593120][T31603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3344.599038][T31603] RIP: 0033:0x7fbfbcd9e159 [ 3344.603477][T31603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3344.623105][T31603] RSP: 002b:00007fbfbaff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3344.631529][T31603] RAX: ffffffffffffffda RBX: 00007fbfbd025fa0 RCX: 00007fbfbcd9e159 [ 3344.639502][T31603] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3344.647474][T31603] RBP: 00007fbfbce35024 R08: fffffffffffffffc R09: 0000000000000000 [ 3344.655444][T31603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3344.663413][T31603] R13: 00007fbfbd026038 R14: 00007fbfbd025fa0 R15: 00007ffc9147ef28 [ 3344.671395][T31603] [ 3344.809153][T31608] binder: 31607:31608 ioctl c0306201 0 returned -14 [ 3344.822773][T31609] netlink: 'syz.0.6641': attribute type 10 has an invalid length. [ 3344.833730][T31609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6641'. [ 3345.254920][T31623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3345.310835][T31625] FAULT_INJECTION: forcing a failure. [ 3345.310835][T31625] name failslab, interval 1, probability 0, space 0, times 0 [ 3345.383262][T31625] CPU: 0 PID: 31625 Comm: syz.0.6648 Not tainted syzkaller #0 [ 3345.390789][T31625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3345.400877][T31625] Call Trace: [ 3345.404182][T31625] [ 3345.407142][T31625] dump_stack_lvl+0x18c/0x250 [ 3345.411879][T31625] ? show_regs_print_info+0x20/0x20 [ 3345.417123][T31625] ? load_image+0x420/0x420 [ 3345.421663][T31625] ? __might_sleep+0xe0/0xe0 [ 3345.426290][T31625] ? __lock_acquire+0x7d80/0x7d80 [ 3345.431354][T31625] should_fail_ex+0x394/0x4c0 [ 3345.436071][T31625] should_failslab+0x9/0x20 [ 3345.440615][T31625] slab_pre_alloc_hook+0x59/0x300 [ 3345.445678][T31625] ? __rwlock_init+0x150/0x150 [ 3345.450478][T31625] ? key_user_lookup+0x1bc/0x450 [ 3345.455453][T31625] kmem_cache_alloc+0x5a/0x2c0 [ 3345.460255][T31625] ? key_alloc+0x306/0x1030 [ 3345.464802][T31625] key_alloc+0x306/0x1030 [ 3345.469185][T31625] __key_create_or_update+0x83a/0xa60 [ 3345.474599][T31625] ? key_validate+0xf0/0xf0 [ 3345.479151][T31625] ? key_create_or_update+0x60/0x60 [ 3345.484381][T31625] ? bpf_lsm_key_permission+0x9/0x10 [ 3345.489708][T31625] ? lookup_user_key+0xb66/0x1140 [ 3345.494805][T31625] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 3345.500843][T31625] key_create_or_update+0x42/0x60 [ 3345.505915][T31625] __se_sys_add_key+0x34f/0x410 [ 3345.510812][T31625] ? __x64_sys_add_key+0xc0/0xc0 [ 3345.515794][T31625] ? lockdep_hardirqs_on+0x98/0x150 [ 3345.521023][T31625] ? __x64_sys_add_key+0x20/0xc0 [ 3345.525998][T31625] do_syscall_64+0x55/0xb0 [ 3345.530449][T31625] ? clear_bhb_loop+0x40/0x90 [ 3345.535156][T31625] ? clear_bhb_loop+0x40/0x90 [ 3345.539869][T31625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3345.545795][T31625] RIP: 0033:0x7fea1f19e159 [ 3345.550238][T31625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3345.569879][T31625] RSP: 002b:00007fea1ffda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 3345.578331][T31625] RAX: ffffffffffffffda RBX: 00007fea1f425fa0 RCX: 00007fea1f19e159 [ 3345.586333][T31625] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 3345.594339][T31625] RBP: 00007fea1f235024 R08: fffffffffffffffc R09: 0000000000000000 [ 3345.602339][T31625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3345.610339][T31625] R13: 00007fea1f426038 R14: 00007fea1f425fa0 R15: 00007ffe27a3d888 [ 3345.618366][T31625] [ 3345.778709][T31640] netlink: 'syz.0.6653': attribute type 10 has an invalid length. [ 3345.779913][T31639] binder: 31637:31639 ioctl c0306201 0 returned -14 [ 3345.786913][T31640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6653'. [ 3346.272679][ T5777] Bluetooth: hci1: command 0x1003 tx timeout [ 3346.272718][T29667] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3346.305003][T31652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3346.534177][T31664] netlink: 'syz.3.6663': attribute type 10 has an invalid length. [ 3346.545483][T31663] binder: 31659:31663 ioctl c0306201 0 returned -14 [ 3346.546999][T31664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6663'. [ 3347.247130][T31693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3347.607668][T31701] netlink: 'syz.4.6676': attribute type 10 has an invalid length. [ 3347.642124][T31701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6676'. [ 3348.124597][T31721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3348.498990][T31735] FAULT_INJECTION: forcing a failure. [ 3348.498990][T31735] name failslab, interval 1, probability 0, space 0, times 0 [ 3348.550676][T31735] CPU: 0 PID: 31735 Comm: syz.1.6689 Not tainted syzkaller #0 [ 3348.558183][T31735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3348.568240][T31735] Call Trace: [ 3348.571526][T31735] [ 3348.574457][T31735] dump_stack_lvl+0x18c/0x250 [ 3348.579150][T31735] ? show_regs_print_info+0x20/0x20 [ 3348.584360][T31735] ? load_image+0x420/0x420 [ 3348.588869][T31735] ? __might_sleep+0xe0/0xe0 [ 3348.593465][T31735] ? __lock_acquire+0x7d80/0x7d80 [ 3348.598500][T31735] ? node_tag_clear+0x1ec/0x310 [ 3348.603364][T31735] should_fail_ex+0x394/0x4c0 [ 3348.608062][T31735] should_failslab+0x9/0x20 [ 3348.612573][T31735] slab_pre_alloc_hook+0x59/0x300 [ 3348.617606][T31735] ? __kernfs_new_node+0xaa/0x7f0 [ 3348.622637][T31735] ? __kernfs_new_node+0xaa/0x7f0 [ 3348.627669][T31735] __kmem_cache_alloc_node+0x53/0x250 [ 3348.633050][T31735] ? __kernfs_new_node+0xaa/0x7f0 [ 3348.638077][T31735] __kmalloc_node_track_caller+0xa4/0x230 [ 3348.643802][T31735] ? format_decode+0x9b6/0x1400 [ 3348.648654][T31735] kstrdup+0x3b/0x80 [ 3348.652556][T31735] __kernfs_new_node+0xaa/0x7f0 [ 3348.657421][T31735] ? kernfs_new_node+0x260/0x260 [ 3348.662368][T31735] ? snprintf+0xe9/0x140 [ 3348.666617][T31735] ? vscnprintf+0x80/0x80 [ 3348.670946][T31735] kernfs_new_node+0x14c/0x260 [ 3348.675717][T31735] __kernfs_create_file+0x4b/0x2e0 [ 3348.680826][T31735] cgroup_addrm_files+0x810/0xd60 [ 3348.685864][T31735] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 3348.692062][T31735] ? mark_lock+0x94/0x320 [ 3348.696406][T31735] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3348.702396][T31735] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3348.707771][T31735] ? lockdep_hardirqs_on+0x98/0x150 [ 3348.712979][T31735] css_populate_dir+0x121/0x380 [ 3348.717839][T31735] cgroup_apply_control_enable+0x641/0xb00 [ 3348.723663][T31735] cgroup_mkdir+0xc83/0xe70 [ 3348.728177][T31735] ? css_task_iter_end+0x2c0/0x2c0 [ 3348.733301][T31735] ? kernfs_iop_permission+0x2c4/0x3b0 [ 3348.738764][T31735] ? css_task_iter_end+0x2c0/0x2c0 [ 3348.743885][T31735] kernfs_iop_mkdir+0x241/0x3e0 [ 3348.748744][T31735] vfs_mkdir+0x2a5/0x470 [ 3348.752994][T31735] do_mkdirat+0x1dc/0x450 [ 3348.757323][T31735] ? vfs_mkdir+0x470/0x470 [ 3348.761742][T31735] __x64_sys_mkdirat+0x89/0xa0 [ 3348.766505][T31735] do_syscall_64+0x55/0xb0 [ 3348.770923][T31735] ? clear_bhb_loop+0x40/0x90 [ 3348.775631][T31735] ? clear_bhb_loop+0x40/0x90 [ 3348.780315][T31735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3348.786211][T31735] RIP: 0033:0x7f847719e159 [ 3348.790626][T31735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3348.810236][T31735] RSP: 002b:00007f847810b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3348.818654][T31735] RAX: ffffffffffffffda RBX: 00007f8477425fa0 RCX: 00007f847719e159 [ 3348.826628][T31735] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 3348.834604][T31735] RBP: 00007f8477235024 R08: 0000000000000000 R09: 0000000000000000 [ 3348.842575][T31735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3348.850542][T31735] R13: 00007f8477426038 R14: 00007f8477425fa0 R15: 00007fff60dbb418 [ 3348.858529][T31735] [ 3348.902820][T31738] netlink: 'syz.4.6690': attribute type 10 has an invalid length. [ 3348.911464][T31738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6690'. [ 3348.941696][T31735] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 3348.997762][T29667] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3349.461189][T31759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3349.681864][T22496] Bluetooth: hci1: Frame reassembly failed (-84) [ 3349.873458][T31773] netlink: 'syz.1.6702': attribute type 10 has an invalid length. [ 3349.902126][T31773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6702'. [ 3350.274528][T31780] FAULT_INJECTION: forcing a failure. [ 3350.274528][T31780] name failslab, interval 1, probability 0, space 0, times 0 [ 3350.301568][T31780] CPU: 1 PID: 31780 Comm: syz.3.6704 Not tainted syzkaller #0 [ 3350.309098][T31780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3350.319211][T31780] Call Trace: [ 3350.322516][T31780] [ 3350.325465][T31780] dump_stack_lvl+0x18c/0x250 [ 3350.330186][T31780] ? show_regs_print_info+0x20/0x20 [ 3350.335421][T31780] ? load_image+0x420/0x420 [ 3350.339978][T31780] ? __might_sleep+0xe0/0xe0 [ 3350.344605][T31780] ? __lock_acquire+0x7d80/0x7d80 [ 3350.349665][T31780] ? node_tag_clear+0x1ec/0x310 [ 3350.354558][T31780] should_fail_ex+0x394/0x4c0 [ 3350.359282][T31780] should_failslab+0x9/0x20 [ 3350.363821][T31780] slab_pre_alloc_hook+0x59/0x300 [ 3350.368892][T31780] ? __kernfs_new_node+0xaa/0x7f0 [ 3350.373963][T31780] ? __kernfs_new_node+0xaa/0x7f0 [ 3350.379058][T31780] __kmem_cache_alloc_node+0x53/0x250 [ 3350.384484][T31780] ? __kernfs_new_node+0xaa/0x7f0 [ 3350.389551][T31780] __kmalloc_node_track_caller+0xa4/0x230 [ 3350.395314][T31780] ? format_decode+0x9b6/0x1400 [ 3350.400203][T31780] kstrdup+0x3b/0x80 [ 3350.404136][T31780] __kernfs_new_node+0xaa/0x7f0 [ 3350.409031][T31780] ? kernfs_new_node+0x260/0x260 [ 3350.414018][T31780] ? snprintf+0xe9/0x140 [ 3350.418302][T31780] ? vscnprintf+0x80/0x80 [ 3350.422664][T31780] kernfs_new_node+0x14c/0x260 [ 3350.427475][T31780] __kernfs_create_file+0x4b/0x2e0 [ 3350.432622][T31780] cgroup_addrm_files+0x810/0xd60 [ 3350.437696][T31780] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 3350.443906][T31780] ? mark_lock+0x94/0x320 [ 3350.448283][T31780] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3350.454313][T31780] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3350.459739][T31780] ? lockdep_hardirqs_on+0x98/0x150 [ 3350.464991][T31780] css_populate_dir+0x121/0x380 [ 3350.469887][T31780] cgroup_apply_control_enable+0x641/0xb00 [ 3350.475735][T31780] cgroup_mkdir+0xc83/0xe70 [ 3350.480262][T31780] ? css_task_iter_end+0x2c0/0x2c0 [ 3350.485418][T31780] ? kernfs_iop_permission+0x2c4/0x3b0 [ 3350.490917][T31780] ? css_task_iter_end+0x2c0/0x2c0 [ 3350.496067][T31780] kernfs_iop_mkdir+0x241/0x3e0 [ 3350.500966][T31780] vfs_mkdir+0x2a5/0x470 [ 3350.505244][T31780] do_mkdirat+0x1dc/0x450 [ 3350.509608][T31780] ? vfs_mkdir+0x470/0x470 [ 3350.514062][T31780] __x64_sys_mkdirat+0x89/0xa0 [ 3350.518854][T31780] do_syscall_64+0x55/0xb0 [ 3350.523303][T31780] ? clear_bhb_loop+0x40/0x90 [ 3350.528016][T31780] ? clear_bhb_loop+0x40/0x90 [ 3350.532737][T31780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3350.538669][T31780] RIP: 0033:0x7fa1f039e159 [ 3350.543120][T31780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3350.562758][T31780] RSP: 002b:00007fa1f1256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3350.571209][T31780] RAX: ffffffffffffffda RBX: 00007fa1f0625fa0 RCX: 00007fa1f039e159 [ 3350.579213][T31780] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 3350.587222][T31780] RBP: 00007fa1f0435024 R08: 0000000000000000 R09: 0000000000000000 [ 3350.595221][T31780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3350.603218][T31780] R13: 00007fa1f0626038 R14: 00007fa1f0625fa0 R15: 00007ffceaaf0728 [ 3350.611236][T31780] [ 3350.630804][T31780] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 3350.822435][T31792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3350.922232][T31798] netlink: 'syz.1.6711': attribute type 10 has an invalid length. [ 3350.930190][T31798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6711'. [ 3351.712124][ T5777] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3351.712175][T29667] Bluetooth: hci1: command 0x1003 tx timeout [ 3351.862229][T31827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3351.957327][T31833] netlink: 'syz.3.6723': attribute type 10 has an invalid length. [ 3351.966572][T31833] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6723'. [ 3352.455093][T22501] Bluetooth: hci1: Frame reassembly failed (-84) [ 3352.503795][T31851] FAULT_INJECTION: forcing a failure. [ 3352.503795][T31851] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.542064][T31851] CPU: 0 PID: 31851 Comm: syz.3.6730 Not tainted syzkaller #0 [ 3352.549568][T31851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3352.559647][T31851] Call Trace: [ 3352.562952][T31851] [ 3352.565906][T31851] dump_stack_lvl+0x18c/0x250 [ 3352.570628][T31851] ? show_regs_print_info+0x20/0x20 [ 3352.575865][T31851] ? load_image+0x420/0x420 [ 3352.580404][T31851] ? __might_sleep+0xe0/0xe0 [ 3352.585028][T31851] ? __lock_acquire+0x7d80/0x7d80 [ 3352.590087][T31851] ? node_tag_clear+0x1ec/0x310 [ 3352.594973][T31851] should_fail_ex+0x394/0x4c0 [ 3352.599693][T31851] should_failslab+0x9/0x20 [ 3352.604248][T31851] slab_pre_alloc_hook+0x59/0x300 [ 3352.609313][T31851] ? __kernfs_new_node+0xaa/0x7f0 [ 3352.614373][T31851] ? __kernfs_new_node+0xaa/0x7f0 [ 3352.619438][T31851] __kmem_cache_alloc_node+0x53/0x250 [ 3352.624866][T31851] ? __kernfs_new_node+0xaa/0x7f0 [ 3352.629922][T31851] __kmalloc_node_track_caller+0xa4/0x230 [ 3352.635680][T31851] ? format_decode+0x9b6/0x1400 [ 3352.640560][T31851] kstrdup+0x3b/0x80 [ 3352.644493][T31851] __kernfs_new_node+0xaa/0x7f0 [ 3352.649387][T31851] ? kernfs_new_node+0x260/0x260 [ 3352.654364][T31851] ? snprintf+0xe9/0x140 [ 3352.658641][T31851] ? vscnprintf+0x80/0x80 [ 3352.662997][T31851] kernfs_new_node+0x14c/0x260 [ 3352.667800][T31851] __kernfs_create_file+0x4b/0x2e0 [ 3352.672936][T31851] cgroup_addrm_files+0x810/0xd60 [ 3352.678010][T31851] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 3352.684210][T31851] ? mark_lock+0x94/0x320 [ 3352.688593][T31851] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3352.694619][T31851] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3352.700026][T31851] ? lockdep_hardirqs_on+0x98/0x150 [ 3352.705268][T31851] css_populate_dir+0x121/0x380 [ 3352.710158][T31851] cgroup_apply_control_enable+0x641/0xb00 [ 3352.716012][T31851] cgroup_mkdir+0xc83/0xe70 [ 3352.720552][T31851] ? css_task_iter_end+0x2c0/0x2c0 [ 3352.725709][T31851] ? kernfs_iop_permission+0x2c4/0x3b0 [ 3352.731200][T31851] ? css_task_iter_end+0x2c0/0x2c0 [ 3352.736345][T31851] kernfs_iop_mkdir+0x241/0x3e0 [ 3352.741238][T31851] vfs_mkdir+0x2a5/0x470 [ 3352.745515][T31851] do_mkdirat+0x1dc/0x450 [ 3352.749875][T31851] ? vfs_mkdir+0x470/0x470 [ 3352.754324][T31851] __x64_sys_mkdirat+0x89/0xa0 [ 3352.759110][T31851] do_syscall_64+0x55/0xb0 [ 3352.763550][T31851] ? clear_bhb_loop+0x40/0x90 [ 3352.768248][T31851] ? clear_bhb_loop+0x40/0x90 [ 3352.772954][T31851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3352.778870][T31851] RIP: 0033:0x7fa1f039e159 [ 3352.783305][T31851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3352.802944][T31851] RSP: 002b:00007fa1f1256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 3352.811388][T31851] RAX: ffffffffffffffda RBX: 00007fa1f0625fa0 RCX: 00007fa1f039e159 [ 3352.819389][T31851] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 3352.827387][T31851] RBP: 00007fa1f0435024 R08: 0000000000000000 R09: 0000000000000000 [ 3352.835379][T31851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3352.843381][T31851] R13: 00007fa1f0626038 R14: 00007fa1f0625fa0 R15: 00007ffceaaf0728 [ 3352.851394][T31851] [ 3352.862505][T31851] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 3353.047882][T31865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3353.197162][T31869] netlink: 'syz.3.6736': attribute type 10 has an invalid length. [ 3353.206335][T31869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6736'. [ 3354.169249][T31898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3354.370588][T31902] netlink: 'syz.3.6745': attribute type 10 has an invalid length. [ 3354.394547][T31902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6745'. [ 3354.512185][T30808] Bluetooth: hci1: command 0x1003 tx timeout [ 3354.521254][ T5777] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3355.065574][T31926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3355.517760][T22493] Bluetooth: hci1: Frame reassembly failed (-84) [ 3355.523190][T31943] netlink: 'syz.4.6757': attribute type 10 has an invalid length. [ 3355.532386][T31943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6757'. [ 3356.356243][T31961] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3356.398208][T31963] netlink: 'syz.1.6766': attribute type 10 has an invalid length. [ 3356.408903][T31963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6766'. [ 3357.151921][T31990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3357.552124][T30808] Bluetooth: hci1: command 0x1003 tx timeout [ 3357.560348][ T5777] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3357.585548][T31998] netlink: 'syz.4.6777': attribute type 10 has an invalid length. [ 3357.669624][T31998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6777'. [ 3358.232621][T32015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3358.399182][T22493] Bluetooth: hci1: Frame reassembly failed (-84) [ 3358.459396][T32022] netlink: 'syz.0.6788': attribute type 10 has an invalid length. [ 3358.468428][T32022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6788'. [ 3359.159256][T32050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3359.417966][T32054] netlink: 'syz.4.6798': attribute type 10 has an invalid length. [ 3359.436521][T32054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6798'. [ 3360.268872][T32070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3360.432270][T30808] Bluetooth: hci1: command 0x1003 tx timeout [ 3360.441351][ T5777] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3360.961616][T32097] netlink: 'syz.0.6815': attribute type 10 has an invalid length. [ 3360.982073][T32097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6815'. [ 3361.353138][T32101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3361.530841][T22496] Bluetooth: hci1: Frame reassembly failed (-84) [ 3362.040019][T32126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3363.111750][T32143] netlink: 'syz.3.6833': attribute type 10 has an invalid length. [ 3363.129294][T32143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6833'. [ 3363.294107][T32148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3363.554236][ T5777] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3364.310072][T32176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3364.510720][T32184] FAULT_INJECTION: forcing a failure. [ 3364.510720][T32184] name fail_futex, interval 1, probability 0, space 0, times 1 [ 3364.554205][T32184] CPU: 1 PID: 32184 Comm: syz.1.6850 Not tainted syzkaller #0 [ 3364.561705][T32184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3364.571779][T32184] Call Trace: [ 3364.575079][T32184] [ 3364.578030][T32184] dump_stack_lvl+0x18c/0x250 [ 3364.582741][T32184] ? show_regs_print_info+0x20/0x20 [ 3364.587968][T32184] ? load_image+0x420/0x420 [ 3364.592494][T32184] ? __lock_acquire+0x1336/0x7d80 [ 3364.597551][T32184] should_fail_ex+0x394/0x4c0 [ 3364.602260][T32184] get_futex_key+0x136/0x1030 [ 3364.606979][T32184] ? futex_setup_timer+0xc0/0xc0 [ 3364.611947][T32184] futex_wake+0x127/0x4f0 [ 3364.616309][T32184] ? futex_wake_mark+0x150/0x150 [ 3364.621283][T32184] do_futex+0x35d/0x3e0 [ 3364.625472][T32184] ? __might_fault+0xaa/0x120 [ 3364.630174][T32184] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3364.636088][T32184] ? __might_fault+0xc6/0x120 [ 3364.640787][T32184] mm_release+0x184/0x3a0 [ 3364.645138][T32184] ? exit_mm_release+0x30/0x30 [ 3364.649918][T32184] ? lockdep_hardirqs_on+0x98/0x150 [ 3364.655152][T32184] exit_mm+0xa4/0x340 [ 3364.659159][T32184] ? sysctl_delayacct+0x220/0x220 [ 3364.664204][T32184] ? do_exit+0x2530/0x2530 [ 3364.668659][T32184] do_exit+0x909/0x2530 [ 3364.672856][T32184] ? put_task_struct+0xc0/0xc0 [ 3364.677653][T32184] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3364.683657][T32184] ? get_signal+0x100e/0x1390 [ 3364.688356][T32184] ? lock_chain_count+0x20/0x20 [ 3364.693234][T32184] ? _raw_spin_lock_irq+0xbb/0xf0 [ 3364.698283][T32184] do_group_exit+0x22d/0x2f0 [ 3364.702911][T32184] ? lockdep_hardirqs_on+0x98/0x150 [ 3364.708142][T32184] get_signal+0x12a6/0x1390 [ 3364.712686][T32184] arch_do_signal_or_restart+0xc2/0x7b0 [ 3364.718300][T32184] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3364.724218][T32184] ? strncpy_from_user+0x21e/0x2f0 [ 3364.729351][T32184] ? get_sigframe_size+0x20/0x20 [ 3364.734340][T32184] ? exit_to_user_mode_loop+0x3b/0x110 [ 3364.739832][T32184] exit_to_user_mode_loop+0x70/0x110 [ 3364.745150][T32184] exit_to_user_mode_prepare+0xee/0x180 [ 3364.750725][T32184] syscall_exit_to_user_mode+0x1a/0x50 [ 3364.756216][T32184] do_syscall_64+0x61/0xb0 [ 3364.760656][T32184] ? clear_bhb_loop+0x40/0x90 [ 3364.765355][T32184] ? clear_bhb_loop+0x40/0x90 [ 3364.770059][T32184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3364.775982][T32184] RIP: 0033:0x7f847719e159 [ 3364.780421][T32184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3364.800050][T32184] RSP: 002b:00007f847810b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3364.808489][T32184] RAX: fffffffffffffe00 RBX: 00007f8477425fa8 RCX: 00007f847719e159 [ 3364.816485][T32184] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8477425fa8 [ 3364.824482][T32184] RBP: 00007f8477425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3364.832475][T32184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3364.840466][T32184] R13: 00007f8477426038 R14: 00007fff60dbb330 R15: 00007fff60dbb418 [ 3364.848471][T32184] [ 3364.856958][T32187] netlink: 'syz.0.6851': attribute type 10 has an invalid length. [ 3364.875416][T32187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6851'. [ 3365.333515][T32204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3366.043673][T32224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3366.251202][T32232] netlink: 'syz.1.6870': attribute type 10 has an invalid length. [ 3366.259737][T32232] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6870'. [ 3366.839295][T32243] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6873'. [ 3367.029209][T32248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3367.249425][T32260] FAULT_INJECTION: forcing a failure. [ 3367.249425][T32260] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3367.263960][T32260] CPU: 0 PID: 32260 Comm: syz.1.6879 Not tainted syzkaller #0 [ 3367.271463][T32260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3367.281552][T32260] Call Trace: [ 3367.284844][T32260] [ 3367.287792][T32260] dump_stack_lvl+0x18c/0x250 [ 3367.292508][T32260] ? show_regs_print_info+0x20/0x20 [ 3367.297732][T32260] ? load_image+0x420/0x420 [ 3367.302261][T32260] ? __lock_acquire+0x1336/0x7d80 [ 3367.307327][T32260] should_fail_ex+0x394/0x4c0 [ 3367.312034][T32260] get_futex_key+0x136/0x1030 [ 3367.316728][T32260] ? futex_setup_timer+0xc0/0xc0 [ 3367.321684][T32260] futex_wake+0x127/0x4f0 [ 3367.326037][T32260] ? futex_wake_mark+0x150/0x150 [ 3367.330985][T32260] do_futex+0x35d/0x3e0 [ 3367.335139][T32260] ? __might_fault+0xaa/0x120 [ 3367.339816][T32260] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3367.345709][T32260] ? __might_fault+0xc6/0x120 [ 3367.350381][T32260] mm_release+0x184/0x3a0 [ 3367.354708][T32260] ? exit_mm_release+0x30/0x30 [ 3367.359466][T32260] ? lockdep_hardirqs_on+0x98/0x150 [ 3367.364682][T32260] exit_mm+0xa4/0x340 [ 3367.368672][T32260] ? sysctl_delayacct+0x220/0x220 [ 3367.373692][T32260] ? do_exit+0x2530/0x2530 [ 3367.378115][T32260] do_exit+0x909/0x2530 [ 3367.382280][T32260] ? put_task_struct+0xc0/0xc0 [ 3367.387047][T32260] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3367.393022][T32260] ? get_signal+0x100e/0x1390 [ 3367.397695][T32260] ? lock_chain_count+0x20/0x20 [ 3367.402541][T32260] ? _raw_spin_lock_irq+0xbb/0xf0 [ 3367.407563][T32260] do_group_exit+0x22d/0x2f0 [ 3367.412150][T32260] ? lockdep_hardirqs_on+0x98/0x150 [ 3367.417350][T32260] get_signal+0x12a6/0x1390 [ 3367.421862][T32260] arch_do_signal_or_restart+0xc2/0x7b0 [ 3367.427412][T32260] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3367.433304][T32260] ? get_sigframe_size+0x20/0x20 [ 3367.438264][T32260] ? exit_to_user_mode_loop+0x3b/0x110 [ 3367.443722][T32260] exit_to_user_mode_loop+0x70/0x110 [ 3367.449007][T32260] exit_to_user_mode_prepare+0xee/0x180 [ 3367.454553][T32260] syscall_exit_to_user_mode+0x1a/0x50 [ 3367.460020][T32260] do_syscall_64+0x61/0xb0 [ 3367.464446][T32260] ? clear_bhb_loop+0x40/0x90 [ 3367.469146][T32260] ? clear_bhb_loop+0x40/0x90 [ 3367.473819][T32260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3367.479708][T32260] RIP: 0033:0x7f847719e159 [ 3367.484117][T32260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3367.503719][T32260] RSP: 002b:00007f847810b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3367.512127][T32260] RAX: fffffffffffffe00 RBX: 00007f8477425fa8 RCX: 00007f847719e159 [ 3367.520094][T32260] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8477425fa8 [ 3367.528061][T32260] RBP: 00007f8477425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3367.536027][T32260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3367.543994][T32260] R13: 00007f8477426038 R14: 00007fff60dbb330 R15: 00007fff60dbb418 [ 3367.551972][T32260] [ 3367.628440][T32263] FAULT_INJECTION: forcing a failure. [ 3367.628440][T32263] name failslab, interval 1, probability 0, space 0, times 0 [ 3367.641400][T32263] CPU: 0 PID: 32263 Comm: syz.3.6880 Not tainted syzkaller #0 [ 3367.648920][T32263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3367.658976][T32263] Call Trace: [ 3367.662253][T32263] [ 3367.665192][T32263] dump_stack_lvl+0x18c/0x250 [ 3367.669910][T32263] ? show_regs_print_info+0x20/0x20 [ 3367.675142][T32263] ? load_image+0x420/0x420 [ 3367.679687][T32263] ? __lock_acquire+0x7d80/0x7d80 [ 3367.684759][T32263] should_fail_ex+0x394/0x4c0 [ 3367.689490][T32263] should_failslab+0x9/0x20 [ 3367.694032][T32263] slab_pre_alloc_hook+0x59/0x300 [ 3367.699106][T32263] kmem_cache_alloc_lru+0x4d/0x2b0 [ 3367.704258][T32263] ? sock_alloc_inode+0x28/0xc0 [ 3367.709154][T32263] sock_alloc_inode+0x28/0xc0 [ 3367.713870][T32263] ? sockfs_init_fs_context+0xb0/0xb0 [ 3367.719275][T32263] new_inode_pseudo+0x63/0x1d0 [ 3367.724062][T32263] __sock_create+0x12d/0x940 [ 3367.728664][T32263] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3367.734691][T32263] __sys_socket+0xd7/0x1b0 [ 3367.739142][T32263] __x64_sys_socket+0x7a/0x90 [ 3367.743853][T32263] do_syscall_64+0x55/0xb0 [ 3367.748299][T32263] ? clear_bhb_loop+0x40/0x90 [ 3367.753007][T32263] ? clear_bhb_loop+0x40/0x90 [ 3367.757720][T32263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3367.763644][T32263] RIP: 0033:0x7fa1f039e159 [ 3367.768087][T32263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3367.787725][T32263] RSP: 002b:00007fa1f1256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3367.796175][T32263] RAX: ffffffffffffffda RBX: 00007fa1f0625fa0 RCX: 00007fa1f039e159 [ 3367.804183][T32263] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3367.812184][T32263] RBP: 00007fa1f0435024 R08: 0000000000000000 R09: 0000000000000000 [ 3367.820180][T32263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3367.828182][T32263] R13: 00007fa1f0626038 R14: 00007fa1f0625fa0 R15: 00007ffceaaf0728 [ 3367.836207][T32263] [ 3367.861487][T32263] socket: no more sockets [ 3368.007768][T32276] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6884'. [ 3368.045859][T32278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3368.106797][T32280] netlink: 'syz.0.6887': attribute type 10 has an invalid length. [ 3368.115741][T32280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6887'. [ 3368.215000][T32283] FAULT_INJECTION: forcing a failure. [ 3368.215000][T32283] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3368.238127][T32283] CPU: 0 PID: 32283 Comm: syz.4.6889 Not tainted syzkaller #0 [ 3368.245647][T32283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3368.255715][T32283] Call Trace: [ 3368.259006][T32283] [ 3368.261949][T32283] dump_stack_lvl+0x18c/0x250 [ 3368.266649][T32283] ? show_regs_print_info+0x20/0x20 [ 3368.271865][T32283] ? load_image+0x420/0x420 [ 3368.276386][T32283] ? __lock_acquire+0x1336/0x7d80 [ 3368.281437][T32283] should_fail_ex+0x394/0x4c0 [ 3368.286145][T32283] get_futex_key+0x136/0x1030 [ 3368.290847][T32283] ? futex_setup_timer+0xc0/0xc0 [ 3368.295807][T32283] futex_wake+0x127/0x4f0 [ 3368.300155][T32283] ? futex_wake_mark+0x150/0x150 [ 3368.305121][T32283] do_futex+0x35d/0x3e0 [ 3368.309287][T32283] ? __might_fault+0xaa/0x120 [ 3368.313982][T32283] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3368.319893][T32283] ? __might_fault+0xc6/0x120 [ 3368.324584][T32283] mm_release+0x184/0x3a0 [ 3368.328928][T32283] ? exit_mm_release+0x30/0x30 [ 3368.333704][T32283] ? lockdep_hardirqs_on+0x98/0x150 [ 3368.338931][T32283] exit_mm+0xa4/0x340 [ 3368.342933][T32283] ? sysctl_delayacct+0x220/0x220 [ 3368.347971][T32283] ? do_exit+0x2530/0x2530 [ 3368.352415][T32283] do_exit+0x909/0x2530 [ 3368.356600][T32283] ? put_task_struct+0xc0/0xc0 [ 3368.361381][T32283] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3368.367374][T32283] ? get_signal+0x100e/0x1390 [ 3368.372065][T32283] ? lock_chain_count+0x20/0x20 [ 3368.376929][T32283] ? _raw_spin_lock_irq+0xbb/0xf0 [ 3368.381975][T32283] do_group_exit+0x22d/0x2f0 [ 3368.386588][T32283] ? lockdep_hardirqs_on+0x98/0x150 [ 3368.391809][T32283] get_signal+0x12a6/0x1390 [ 3368.396348][T32283] arch_do_signal_or_restart+0xc2/0x7b0 [ 3368.401914][T32283] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3368.407824][T32283] ? get_sigframe_size+0x20/0x20 [ 3368.412799][T32283] ? exit_to_user_mode_loop+0x3b/0x110 [ 3368.418285][T32283] exit_to_user_mode_loop+0x70/0x110 [ 3368.423595][T32283] exit_to_user_mode_prepare+0xee/0x180 [ 3368.429158][T32283] syscall_exit_to_user_mode+0x1a/0x50 [ 3368.434640][T32283] do_syscall_64+0x61/0xb0 [ 3368.439075][T32283] ? clear_bhb_loop+0x40/0x90 [ 3368.443767][T32283] ? clear_bhb_loop+0x40/0x90 [ 3368.448470][T32283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3368.454381][T32283] RIP: 0033:0x7fbfbcd9e159 [ 3368.458811][T32283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3368.478441][T32283] RSP: 002b:00007fbfbaff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3368.486889][T32283] RAX: fffffffffffffe00 RBX: 00007fbfbd025fa8 RCX: 00007fbfbcd9e159 [ 3368.494882][T32283] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbfbd025fa8 [ 3368.502866][T32283] RBP: 00007fbfbd025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3368.510853][T32283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3368.518833][T32283] R13: 00007fbfbd026038 R14: 00007ffc9147ee40 R15: 00007ffc9147ef28 [ 3368.526832][T32283] [ 3369.156026][T32306] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6896'. [ 3369.265011][T32309] FAULT_INJECTION: forcing a failure. [ 3369.265011][T32309] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.278001][T32309] CPU: 0 PID: 32309 Comm: syz.3.6897 Not tainted syzkaller #0 [ 3369.285499][T32309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3369.295569][T32309] Call Trace: [ 3369.298889][T32309] [ 3369.301835][T32309] dump_stack_lvl+0x18c/0x250 [ 3369.306547][T32309] ? show_regs_print_info+0x20/0x20 [ 3369.311775][T32309] ? load_image+0x420/0x420 [ 3369.316306][T32309] ? __might_sleep+0xe0/0xe0 [ 3369.320942][T32309] ? __lock_acquire+0x7d80/0x7d80 [ 3369.325999][T32309] should_fail_ex+0x394/0x4c0 [ 3369.330705][T32309] should_failslab+0x9/0x20 [ 3369.335238][T32309] slab_pre_alloc_hook+0x59/0x300 [ 3369.340304][T32309] kmem_cache_alloc+0x5a/0x2c0 [ 3369.345098][T32309] ? security_inode_alloc+0x34/0x110 [ 3369.350414][T32309] security_inode_alloc+0x34/0x110 [ 3369.355553][T32309] inode_init_always+0x914/0xc90 [ 3369.360514][T32309] new_inode_pseudo+0x95/0x1d0 [ 3369.365302][T32309] __sock_create+0x12d/0x940 [ 3369.369910][T32309] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3369.375929][T32309] __sys_socket+0xd7/0x1b0 [ 3369.380364][T32309] __x64_sys_socket+0x7a/0x90 [ 3369.385066][T32309] do_syscall_64+0x55/0xb0 [ 3369.389505][T32309] ? clear_bhb_loop+0x40/0x90 [ 3369.394201][T32309] ? clear_bhb_loop+0x40/0x90 [ 3369.398904][T32309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3369.404823][T32309] RIP: 0033:0x7fa1f039e159 [ 3369.409261][T32309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3369.428893][T32309] RSP: 002b:00007fa1f1256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3369.437339][T32309] RAX: ffffffffffffffda RBX: 00007fa1f0625fa0 RCX: 00007fa1f039e159 [ 3369.445337][T32309] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3369.453326][T32309] RBP: 00007fa1f0435024 R08: 0000000000000000 R09: 0000000000000000 [ 3369.461315][T32309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3369.469303][T32309] R13: 00007fa1f0626038 R14: 00007fa1f0625fa0 R15: 00007ffceaaf0728 [ 3369.477305][T32309] [ 3369.492339][T32309] socket: no more sockets [ 3369.682336][T32314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3369.843796][T32322] netlink: 'syz.4.6903': attribute type 10 has an invalid length. [ 3369.851631][T32322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6903'. [ 3370.026636][T32328] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6905'. [ 3370.107232][T32333] FAULT_INJECTION: forcing a failure. [ 3370.107232][T32333] name failslab, interval 1, probability 0, space 0, times 0 [ 3370.132924][T32333] CPU: 0 PID: 32333 Comm: syz.4.6907 Not tainted syzkaller #0 [ 3370.140449][T32333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3370.150533][T32333] Call Trace: [ 3370.153829][T32333] [ 3370.156779][T32333] dump_stack_lvl+0x18c/0x250 [ 3370.161486][T32333] ? show_regs_print_info+0x20/0x20 [ 3370.166715][T32333] ? load_image+0x420/0x420 [ 3370.171253][T32333] ? __might_sleep+0xe0/0xe0 [ 3370.175875][T32333] ? __lock_acquire+0x7d80/0x7d80 [ 3370.180933][T32333] should_fail_ex+0x394/0x4c0 [ 3370.185639][T32333] should_failslab+0x9/0x20 [ 3370.190152][T32333] slab_pre_alloc_hook+0x59/0x300 [ 3370.195185][T32333] kmem_cache_alloc+0x5a/0x2c0 [ 3370.199949][T32333] ? security_inode_alloc+0x34/0x110 [ 3370.205237][T32333] security_inode_alloc+0x34/0x110 [ 3370.210350][T32333] inode_init_always+0x914/0xc90 [ 3370.215287][T32333] new_inode_pseudo+0x95/0x1d0 [ 3370.220055][T32333] __sock_create+0x12d/0x940 [ 3370.224651][T32333] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3370.230650][T32333] __sys_socket+0xd7/0x1b0 [ 3370.235072][T32333] __x64_sys_socket+0x7a/0x90 [ 3370.239752][T32333] do_syscall_64+0x55/0xb0 [ 3370.244164][T32333] ? clear_bhb_loop+0x40/0x90 [ 3370.248842][T32333] ? clear_bhb_loop+0x40/0x90 [ 3370.253517][T32333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3370.259404][T32333] RIP: 0033:0x7fbfbcd9e159 [ 3370.263813][T32333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3370.283425][T32333] RSP: 002b:00007fbfbaff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3370.291837][T32333] RAX: ffffffffffffffda RBX: 00007fbfbd025fa0 RCX: 00007fbfbcd9e159 [ 3370.299810][T32333] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3370.307781][T32333] RBP: 00007fbfbce35024 R08: 0000000000000000 R09: 0000000000000000 [ 3370.315748][T32333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3370.323713][T32333] R13: 00007fbfbd026038 R14: 00007fbfbd025fa0 R15: 00007ffc9147ef28 [ 3370.331693][T32333] [ 3370.342527][T32333] socket: no more sockets [ 3370.447318][T32342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3370.911929][T32353] netlink: 'syz.4.6915': attribute type 10 has an invalid length. [ 3370.931340][T32353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6915'. [ 3371.027324][T32356] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6916'. [ 3371.274411][T32363] FAULT_INJECTION: forcing a failure. [ 3371.274411][T32363] name failslab, interval 1, probability 0, space 0, times 0 [ 3371.290281][T32365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3371.316834][T32363] CPU: 1 PID: 32363 Comm: syz.4.6918 Not tainted syzkaller #0 [ 3371.324344][T32363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3371.334436][T32363] Call Trace: [ 3371.337741][T32363] [ 3371.340694][T32363] dump_stack_lvl+0x18c/0x250 [ 3371.345412][T32363] ? show_regs_print_info+0x20/0x20 [ 3371.350652][T32363] ? load_image+0x420/0x420 [ 3371.355188][T32363] ? __lock_acquire+0x7d80/0x7d80 [ 3371.360253][T32363] should_fail_ex+0x394/0x4c0 [ 3371.364970][T32363] should_failslab+0x9/0x20 [ 3371.369508][T32363] slab_pre_alloc_hook+0x59/0x300 [ 3371.374575][T32363] kmem_cache_alloc_lru+0x4d/0x2b0 [ 3371.379722][T32363] ? sock_alloc_inode+0x28/0xc0 [ 3371.384611][T32363] sock_alloc_inode+0x28/0xc0 [ 3371.389318][T32363] ? sockfs_init_fs_context+0xb0/0xb0 [ 3371.394718][T32363] new_inode_pseudo+0x63/0x1d0 [ 3371.399512][T32363] __sock_create+0x12d/0x940 [ 3371.404121][T32363] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3371.410133][T32363] __sys_socket+0xd7/0x1b0 [ 3371.414558][T32363] __x64_sys_socket+0x7a/0x90 [ 3371.419264][T32363] do_syscall_64+0x55/0xb0 [ 3371.423708][T32363] ? clear_bhb_loop+0x40/0x90 [ 3371.428411][T32363] ? clear_bhb_loop+0x40/0x90 [ 3371.433110][T32363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3371.439012][T32363] RIP: 0033:0x7fbfbcd9e159 [ 3371.443449][T32363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3371.463081][T32363] RSP: 002b:00007fbfbaff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3371.471490][T32363] RAX: ffffffffffffffda RBX: 00007fbfbd025fa0 RCX: 00007fbfbcd9e159 [ 3371.479461][T32363] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3371.487424][T32363] RBP: 00007fbfbce35024 R08: 0000000000000000 R09: 0000000000000000 [ 3371.495386][T32363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3371.503361][T32363] R13: 00007fbfbd026038 R14: 00007fbfbd025fa0 R15: 00007ffc9147ef28 [ 3371.511359][T32363] [ 3371.520834][T32363] socket: no more sockets [ 3371.783989][T32380] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6925'. [ 3371.836972][T32383] netlink: 'syz.4.6926': attribute type 10 has an invalid length. [ 3371.849319][T32383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6926'. [ 3372.098666][T32391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3372.437984][T32397] FAULT_INJECTION: forcing a failure. [ 3372.437984][T32397] name failslab, interval 1, probability 0, space 0, times 0 [ 3372.452174][T32397] CPU: 1 PID: 32397 Comm: syz.3.6932 Not tainted syzkaller #0 [ 3372.459654][T32397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3372.469712][T32397] Call Trace: [ 3372.472204][ T5773] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 3372.472988][T32397] [ 3372.483393][T32397] dump_stack_lvl+0x18c/0x250 [ 3372.488109][T32397] ? show_regs_print_info+0x20/0x20 [ 3372.493333][T32397] ? load_image+0x420/0x420 [ 3372.497851][T32397] ? __lock_acquire+0x7d80/0x7d80 [ 3372.502915][T32397] should_fail_ex+0x394/0x4c0 [ 3372.507628][T32397] should_failslab+0x9/0x20 [ 3372.512165][T32397] slab_pre_alloc_hook+0x59/0x300 [ 3372.517228][T32397] kmem_cache_alloc_lru+0x4d/0x2b0 [ 3372.522369][T32397] ? sock_alloc_inode+0x28/0xc0 [ 3372.527254][T32397] sock_alloc_inode+0x28/0xc0 [ 3372.531957][T32397] ? sockfs_init_fs_context+0xb0/0xb0 [ 3372.537345][T32397] new_inode_pseudo+0x63/0x1d0 [ 3372.542115][T32397] __sock_create+0x12d/0x940 [ 3372.546704][T32397] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3372.552689][T32397] __sys_socket+0xd7/0x1b0 [ 3372.557111][T32397] __x64_sys_socket+0x7a/0x90 [ 3372.561786][T32397] do_syscall_64+0x55/0xb0 [ 3372.566199][T32397] ? clear_bhb_loop+0x40/0x90 [ 3372.570875][T32397] ? clear_bhb_loop+0x40/0x90 [ 3372.575556][T32397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3372.581449][T32397] RIP: 0033:0x7fa1f039e159 [ 3372.585866][T32397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3372.605471][T32397] RSP: 002b:00007fa1f1256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3372.613883][T32397] RAX: ffffffffffffffda RBX: 00007fa1f0625fa0 RCX: 00007fa1f039e159 [ 3372.621853][T32397] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3372.629825][T32397] RBP: 00007fa1f0435024 R08: 0000000000000000 R09: 0000000000000000 [ 3372.637794][T32397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3372.645768][T32397] R13: 00007fa1f0626038 R14: 00007fa1f0625fa0 R15: 00007ffceaaf0728 [ 3372.653748][T32397] [ 3372.677752][T32397] socket: no more sockets [ 3372.764338][ T5773] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3372.776090][ T5773] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3372.796751][ T5773] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3372.823552][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3372.845877][T32393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3372.879409][ T5773] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 3373.099497][T32411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3373.126699][T32413] netlink: 'syz.1.6937': attribute type 10 has an invalid length. [ 3373.145198][T32413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6937'. [ 3373.169933][ T5773] usb 5-1: USB disconnect, device number 2 [ 3373.617238][T32425] FAULT_INJECTION: forcing a failure. [ 3373.617238][T32425] name failslab, interval 1, probability 0, space 0, times 0 [ 3373.630822][T32425] CPU: 0 PID: 32425 Comm: syz.0.6942 Not tainted syzkaller #0 [ 3373.638315][T32425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3373.648362][T32425] Call Trace: [ 3373.651636][T32425] [ 3373.654559][T32425] dump_stack_lvl+0x18c/0x250 [ 3373.659232][T32425] ? show_regs_print_info+0x20/0x20 [ 3373.664428][T32425] ? load_image+0x420/0x420 [ 3373.668945][T32425] ? __lock_acquire+0x7d80/0x7d80 [ 3373.673995][T32425] should_fail_ex+0x394/0x4c0 [ 3373.678672][T32425] should_failslab+0x9/0x20 [ 3373.683183][T32425] slab_pre_alloc_hook+0x59/0x300 [ 3373.688233][T32425] kmem_cache_alloc_lru+0x4d/0x2b0 [ 3373.693337][T32425] ? sock_alloc_inode+0x28/0xc0 [ 3373.698185][T32425] sock_alloc_inode+0x28/0xc0 [ 3373.702856][T32425] ? sockfs_init_fs_context+0xb0/0xb0 [ 3373.708225][T32425] new_inode_pseudo+0x63/0x1d0 [ 3373.712985][T32425] __sock_create+0x12d/0x940 [ 3373.717566][T32425] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3373.723555][T32425] __sys_socket+0xd7/0x1b0 [ 3373.727978][T32425] __x64_sys_socket+0x7a/0x90 [ 3373.732676][T32425] do_syscall_64+0x55/0xb0 [ 3373.737117][T32425] ? clear_bhb_loop+0x40/0x90 [ 3373.741809][T32425] ? clear_bhb_loop+0x40/0x90 [ 3373.746482][T32425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3373.752374][T32425] RIP: 0033:0x7fea1f19e159 [ 3373.756779][T32425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3373.776375][T32425] RSP: 002b:00007fea1ffda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3373.784797][T32425] RAX: ffffffffffffffda RBX: 00007fea1f425fa0 RCX: 00007fea1f19e159 [ 3373.792783][T32425] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3373.800745][T32425] RBP: 00007fea1f235024 R08: 0000000000000000 R09: 0000000000000000 [ 3373.808716][T32425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3373.816697][T32425] R13: 00007fea1f426038 R14: 00007fea1f425fa0 R15: 00007ffe27a3d888 [ 3373.824678][T32425] [ 3373.837686][T32425] socket: no more sockets [ 3374.337149][T32438] netlink: 'syz.3.6948': attribute type 10 has an invalid length. [ 3374.358809][T32438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6948'. [ 3374.503532][T32442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3374.676768][T32452] FAULT_INJECTION: forcing a failure. [ 3374.676768][T32452] name failslab, interval 1, probability 0, space 0, times 0 [ 3374.689938][T32452] CPU: 1 PID: 32452 Comm: syz.3.6952 Not tainted syzkaller #0 [ 3374.697435][T32452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3374.707512][T32452] Call Trace: [ 3374.710810][T32452] [ 3374.713766][T32452] dump_stack_lvl+0x18c/0x250 [ 3374.718472][T32452] ? show_regs_print_info+0x20/0x20 [ 3374.723672][T32452] ? load_image+0x420/0x420 [ 3374.728175][T32452] ? __might_sleep+0xe0/0xe0 [ 3374.732773][T32452] ? __lock_acquire+0x7d80/0x7d80 [ 3374.737806][T32452] should_fail_ex+0x394/0x4c0 [ 3374.742492][T32452] should_failslab+0x9/0x20 [ 3374.746994][T32452] slab_pre_alloc_hook+0x59/0x300 [ 3374.752031][T32452] kmem_cache_alloc+0x5a/0x2c0 [ 3374.756802][T32452] ? security_inode_alloc+0x34/0x110 [ 3374.762097][T32452] security_inode_alloc+0x34/0x110 [ 3374.767213][T32452] inode_init_always+0x914/0xc90 [ 3374.772149][T32452] new_inode_pseudo+0x95/0x1d0 [ 3374.776912][T32452] __sock_create+0x12d/0x940 [ 3374.781505][T32452] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3374.787490][T32452] __sys_socket+0xd7/0x1b0 [ 3374.791909][T32452] __x64_sys_socket+0x7a/0x90 [ 3374.796583][T32452] do_syscall_64+0x55/0xb0 [ 3374.800998][T32452] ? clear_bhb_loop+0x40/0x90 [ 3374.805672][T32452] ? clear_bhb_loop+0x40/0x90 [ 3374.810346][T32452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3374.816239][T32452] RIP: 0033:0x7fa1f039e159 [ 3374.820653][T32452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3374.840260][T32452] RSP: 002b:00007fa1f1256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3374.848682][T32452] RAX: ffffffffffffffda RBX: 00007fa1f0625fa0 RCX: 00007fa1f039e159 [ 3374.856655][T32452] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3374.864627][T32452] RBP: 00007fa1f0435024 R08: 0000000000000000 R09: 0000000000000000 [ 3374.872595][T32452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3374.880561][T32452] R13: 00007fa1f0626038 R14: 00007fa1f0625fa0 R15: 00007ffceaaf0728 [ 3374.888542][T32452] [ 3374.907433][T32452] socket: no more sockets [ 3375.052074][T22508] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 3375.253862][T22508] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3375.265302][T22508] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3375.275759][T22508] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3375.285571][T22508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3375.297457][T32451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3375.309143][T22508] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 3375.603407][T32472] netlink: 'syz.0.6960': attribute type 10 has an invalid length. [ 3375.611466][T32472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6960'. [ 3375.629199][ T5833] usb 2-1: USB disconnect, device number 72 [ 3375.842870][T32478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3376.686582][T32493] netlink: 'syz.4.6969': attribute type 10 has an invalid length. [ 3376.708154][T32493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6969'. [ 3376.846513][T32497] FAULT_INJECTION: forcing a failure. [ 3376.846513][T32497] name failslab, interval 1, probability 0, space 0, times 0 [ 3376.859893][T32497] CPU: 1 PID: 32497 Comm: syz.0.6970 Not tainted syzkaller #0 [ 3376.867390][T32497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3376.877448][T32497] Call Trace: [ 3376.880731][T32497] [ 3376.883693][T32497] dump_stack_lvl+0x18c/0x250 [ 3376.888371][T32497] ? show_regs_print_info+0x20/0x20 [ 3376.893575][T32497] ? load_image+0x420/0x420 [ 3376.898115][T32497] ? __lock_acquire+0x7d80/0x7d80 [ 3376.903174][T32497] should_fail_ex+0x394/0x4c0 [ 3376.907879][T32497] should_failslab+0x9/0x20 [ 3376.912392][T32497] slab_pre_alloc_hook+0x59/0x300 [ 3376.917455][T32497] kmem_cache_alloc_lru+0x4d/0x2b0 [ 3376.922578][T32497] ? sock_alloc_inode+0x28/0xc0 [ 3376.927454][T32497] sock_alloc_inode+0x28/0xc0 [ 3376.932133][T32497] ? sockfs_init_fs_context+0xb0/0xb0 [ 3376.937523][T32497] new_inode_pseudo+0x63/0x1d0 [ 3376.942298][T32497] __sock_create+0x12d/0x940 [ 3376.946906][T32497] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3376.952898][T32497] __sys_socket+0xd7/0x1b0 [ 3376.957341][T32497] __x64_sys_socket+0x7a/0x90 [ 3376.962025][T32497] do_syscall_64+0x55/0xb0 [ 3376.966448][T32497] ? clear_bhb_loop+0x40/0x90 [ 3376.971124][T32497] ? clear_bhb_loop+0x40/0x90 [ 3376.975802][T32497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3376.981699][T32497] RIP: 0033:0x7fea1f19e159 [ 3376.986116][T32497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3377.005747][T32497] RSP: 002b:00007fea1ffda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3377.014168][T32497] RAX: ffffffffffffffda RBX: 00007fea1f425fa0 RCX: 00007fea1f19e159 [ 3377.022141][T32497] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3377.030108][T32497] RBP: 00007fea1f235024 R08: 0000000000000000 R09: 0000000000000000 [ 3377.038076][T32497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3377.046042][T32497] R13: 00007fea1f426038 R14: 00007fea1f425fa0 R15: 00007ffe27a3d888 [ 3377.054027][T32497] [ 3377.072823][T32497] socket: no more sockets [ 3377.171553][T32501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3377.232462][T30808] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3377.602900][ T5882] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 3377.746012][T32520] netlink: 'syz.3.6979': attribute type 10 has an invalid length. [ 3377.755447][T32520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6979'. [ 3377.805922][ T5882] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3377.824788][ T5882] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3377.841491][ T5882] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3377.860978][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3377.878250][T32507] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3377.892710][ T5882] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 3378.275652][ T5833] usb 1-1: USB disconnect, device number 76 [ 3378.594854][T32527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3378.777151][T22501] Bluetooth: hci1: Frame reassembly failed (-84) [ 3378.808568][T29667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3378.821275][T29667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3378.831876][T29667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3378.841391][T29667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3378.849394][T29667] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3378.858143][T29667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3378.979587][T22504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3379.106808][T22504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3379.231014][T22504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3379.273381][T32545] netlink: 'syz.0.6988': attribute type 10 has an invalid length. [ 3379.281243][T32545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6988'. [ 3379.327776][T22504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3379.448895][T32532] chnl_net:caif_netlink_parms(): no params data found [ 3379.733570][T32532] bridge0: port 1(bridge_slave_0) entered blocking state [ 3379.740743][T32532] bridge0: port 1(bridge_slave_0) entered disabled state [ 3379.797628][T32532] bridge_slave_0: entered allmulticast mode [ 3379.814777][T32532] bridge_slave_0: entered promiscuous mode [ 3379.860736][T32532] bridge0: port 2(bridge_slave_1) entered blocking state [ 3379.874338][T32532] bridge0: port 2(bridge_slave_1) entered disabled state [ 3379.881670][T32532] bridge_slave_1: entered allmulticast mode [ 3379.895896][T32532] bridge_slave_1: entered promiscuous mode [ 3380.135374][T32532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3380.210312][T32532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3380.328659][T32532] team0: Port device team_slave_0 added [ 3380.409527][T32532] team0: Port device team_slave_1 added [ 3380.456046][T32532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3380.480310][T32532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3380.578989][T32532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3380.697092][T32532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3380.729029][T32532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3380.761776][T32532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3380.793075][T32572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3380.833700][T29667] Bluetooth: hci1: command 0x1003 tx timeout [ 3380.841868][T30808] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3380.912276][T30808] Bluetooth: hci3: command tx timeout [ 3381.241126][T32532] hsr_slave_0: entered promiscuous mode [ 3381.251258][T32532] hsr_slave_1: entered promiscuous mode [ 3381.258605][T32532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3381.267311][T32532] Cannot create hsr debugfs directory [ 3381.285413][T32590] netlink: 'syz.1.6996': attribute type 10 has an invalid length. [ 3381.293334][T32590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6996'. [ 3381.302307][ T5773] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 3381.474194][T22504] IPVS: stopping master sync thread 29855 ... [ 3381.484870][ T5773] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3381.514399][ T5773] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3381.525038][ T5773] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3381.534597][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3381.548529][T32586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3381.595468][ T5773] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 3381.950777][T22504] hsr_slave_0: left promiscuous mode [ 3381.968141][T22504] hsr_slave_1: left promiscuous mode [ 3381.981882][T22504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3382.011749][T22504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3382.081111][ T5882] usb 5-1: USB disconnect, device number 3 [ 3382.104098][T22504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3382.111573][T22504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3382.178533][T22504] dummy0: left allmulticast mode [ 3382.213020][T22504] bridge0: port 3(dummy0) entered disabled state [ 3382.225616][T22504] bridge_slave_1: left allmulticast mode [ 3382.237063][T22504] bridge_slave_1: left promiscuous mode [ 3382.253259][T22504] bridge0: port 2(bridge_slave_1) entered disabled state [ 3382.275370][T22504] bridge_slave_0: left allmulticast mode [ 3382.302346][T22504] bridge_slave_0: left promiscuous mode [ 3382.313867][T22504] bridge0: port 1(bridge_slave_0) entered disabled state [ 3382.388387][T22504] veth1_macvtap: left promiscuous mode [ 3382.397454][T22504] veth0_macvtap: left promiscuous mode [ 3382.415555][T22504] veth1_vlan: left promiscuous mode [ 3382.441206][T22504] veth0_vlan: left promiscuous mode [ 3382.992109][T29667] Bluetooth: hci3: command tx timeout [ 3383.708033][T22504] team0 (unregistering): Port device team_slave_1 removed [ 3383.771233][T22504] team0 (unregistering): Port device team_slave_0 removed [ 3383.828102][T22504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3383.890230][T22504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3384.347580][T22504] bond0 (unregistering): Released all slaves [ 3384.477533][T32621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3384.641963][T32632] netlink: 'syz.1.7005': attribute type 10 has an invalid length. [ 3384.656756][T32632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7005'. [ 3384.832542][T29667] Bluetooth: hci1: command 0x1003 tx timeout [ 3384.840780][T30808] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3385.079049][T30808] Bluetooth: hci3: command tx timeout [ 3385.289948][T22504] IPVS: stop unused estimator thread 0... [ 3385.432154][ T5882] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 3385.520384][T32532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3385.565899][T32532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3385.592775][T32532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3385.614157][T32532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3385.656936][ T5882] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3385.691769][ T5882] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3385.726875][ T5882] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3385.756761][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3385.782666][T32648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3385.818678][ T5882] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 3385.881539][T32532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3385.934406][T32532] 8021q: adding VLAN 0 to HW filter on device team0 [ 3386.001189][T22501] bridge0: port 1(bridge_slave_0) entered blocking state [ 3386.008395][T22501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3386.077983][T22493] bridge0: port 2(bridge_slave_1) entered blocking state [ 3386.085200][T22493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3386.164898][T18197] usb 2-1: USB disconnect, device number 73 [ 3386.656081][T32684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3386.796031][T32532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3386.891445][T32693] netlink: 'syz.1.7015': attribute type 10 has an invalid length. [ 3386.909688][T32693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7015'. [ 3386.995386][T32532] veth0_vlan: entered promiscuous mode [ 3387.045495][T32532] veth1_vlan: entered promiscuous mode [ 3387.134608][T32532] veth0_macvtap: entered promiscuous mode [ 3387.152811][T30808] Bluetooth: hci3: command tx timeout [ 3387.157560][T32532] veth1_macvtap: entered promiscuous mode [ 3387.239987][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3387.280894][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3387.329599][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3387.385532][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3387.411878][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3387.431075][T32717] nfsd: exp_rootfh path not found ./export_dir [ 3387.466268][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3387.501521][T32532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3387.531589][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3387.572058][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3387.581921][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3387.613353][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3387.636000][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3387.672084][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3387.698329][T32532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3387.736685][T32532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3387.766629][T32532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3387.788665][T32532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3387.807832][T32532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3388.114540][T29859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3388.148331][T29859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3388.238874][T22500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3388.249462][T32741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3388.282130][T22500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3388.365793][T32746] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 3388.459710][T32752] FAULT_INJECTION: forcing a failure. [ 3388.459710][T32752] name failslab, interval 1, probability 0, space 0, times 0 [ 3388.485034][ T5882] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 3388.492132][T32752] CPU: 0 PID: 32752 Comm: syz.3.6980 Not tainted syzkaller #0 [ 3388.495399][T32749] netlink: 'syz.4.7025': attribute type 10 has an invalid length. [ 3388.500057][T32752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3388.517959][T32752] Call Trace: [ 3388.521266][T32752] [ 3388.524217][T32752] dump_stack_lvl+0x18c/0x250 [ 3388.528392][T32749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7025'. [ 3388.528904][T32752] ? show_regs_print_info+0x20/0x20 [ 3388.528934][T32752] ? load_image+0x420/0x420 [ 3388.547575][T32752] ? __lock_acquire+0x7d80/0x7d80 [ 3388.552636][T32752] should_fail_ex+0x394/0x4c0 [ 3388.557354][T32752] should_failslab+0x9/0x20 [ 3388.561883][T32752] slab_pre_alloc_hook+0x59/0x300 [ 3388.566936][T32752] kmem_cache_alloc_lru+0x4d/0x2b0 [ 3388.572068][T32752] ? sock_alloc_inode+0x28/0xc0 [ 3388.576940][T32752] sock_alloc_inode+0x28/0xc0 [ 3388.581633][T32752] ? sockfs_init_fs_context+0xb0/0xb0 [ 3388.587023][T32752] new_inode_pseudo+0x63/0x1d0 [ 3388.591808][T32752] __sock_create+0x12d/0x940 [ 3388.596423][T32752] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3388.602449][T32752] __sys_socket+0xd7/0x1b0 [ 3388.606894][T32752] __x64_sys_socket+0x7a/0x90 [ 3388.611592][T32752] do_syscall_64+0x55/0xb0 [ 3388.616034][T32752] ? clear_bhb_loop+0x40/0x90 [ 3388.620728][T32752] ? clear_bhb_loop+0x40/0x90 [ 3388.625432][T32752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3388.631346][T32752] RIP: 0033:0x7f69ad19e159 [ 3388.635779][T32752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3388.655412][T32752] RSP: 002b:00007f69ae139028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3388.663865][T32752] RAX: ffffffffffffffda RBX: 00007f69ad425fa0 RCX: 00007f69ad19e159 [ 3388.671865][T32752] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3388.679865][T32752] RBP: 00007f69ad235024 R08: 0000000000000000 R09: 0000000000000000 [ 3388.687863][T32752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3388.695859][T32752] R13: 00007f69ad426038 R14: 00007f69ad425fa0 R15: 00007ffd9ae32828 [ 3388.703873][T32752] [ 3388.731141][T32759] nfsd: exp_rootfh path not found ./export_dir [ 3388.742078][T32752] socket: no more sockets [ 3388.743828][ T5882] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3388.824551][ T5882] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3388.872240][ T5882] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3388.892156][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3388.929864][T32740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3388.952856][ T5882] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 3389.310312][T18197] usb 1-1: USB disconnect, device number 77 [ 3389.326742][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.333917][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.624771][ T321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3390.031667][ T333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7034'. [ 3390.060300][ T334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7035'. [ 3390.104652][ T331] ------------[ cut here ]------------ [ 3390.110776][ T331] SVC: permsocks remain for nfsd [ 3390.123701][ T331] WARNING: CPU: 0 PID: 331 at net/sunrpc/svc.c:583 svc_destroy+0x2ed/0x390 [ 3390.132040][ T334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7035'. [ 3390.132526][ T331] Modules linked in: [ 3390.145434][ T331] CPU: 0 PID: 331 Comm: syz.3.7034 Not tainted syzkaller #0 [ 3390.152891][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3390.163072][ T331] RIP: 0010:svc_destroy+0x2ed/0x390 [ 3390.168312][ T331] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 92 14 33 f8 49 8b 37 48 c7 c7 a0 51 d9 8b e8 73 63 a4 f7 <0f> 0b e9 78 fd ff ff e8 a7 96 da f7 c6 05 63 33 ca 04 01 4c 89 e0 [ 3390.172495][ T342] FAULT_INJECTION: forcing a failure. [ 3390.172495][ T342] name failslab, interval 1, probability 0, space 0, times 0 [ 3390.188074][ T331] RSP: 0018:ffffc9000390fae0 EFLAGS: 00010246 [ 3390.188106][ T331] RAX: 10af0d8533b01700 RBX: ffff88802c70f850 RCX: 0000000000080000 [ 3390.188125][ T331] RDX: ffffc9000e811000 RSI: 00000000000303af RDI: 00000000000303b0 [ 3390.188140][ T331] RBP: ffffc9000390fcb8 R08: ffffc9000390f6e7 R09: 1ffff92000721edc [ 3390.188157][ T331] R10: dffffc0000000000 R11: fffff52000721edd R12: ffff88802c70f800 [ 3390.188171][ T331] R13: dffffc0000000000 R14: ffff88802c70f850 R15: ffffffff8d3e1900 [ 3390.188186][ T331] FS: 00007f69ae1396c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3390.188205][ T331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3390.188220][ T331] CR2: 00007fbfbafd4ff8 CR3: 0000000069a7d000 CR4: 00000000003506f0 [ 3390.188242][ T331] Call Trace: [ 3390.188250][ T331] [ 3390.188267][ T331] write_ports+0xb99/0xfa0 [ 3390.283127][ T331] ? write_versions+0xe00/0xe00 [ 3390.286028][ T336] netlink: 'syz.0.7036': attribute type 10 has an invalid length. [ 3390.288000][ T331] ? __lock_acquire+0x7d80/0x7d80 [ 3390.288036][ T331] ? __virt_addr_valid+0x10c/0x380 [ 3390.303648][ T342] CPU: 1 PID: 342 Comm: syz.1.7037 Not tainted syzkaller #0 [ 3390.306956][ T331] ? __virt_addr_valid+0x10c/0x380 [ 3390.314009][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3390.314024][ T342] Call Trace: [ 3390.314034][ T342] [ 3390.314043][ T342] dump_stack_lvl+0x18c/0x250 [ 3390.314072][ T342] ? show_regs_print_info+0x20/0x20 [ 3390.319160][ T331] ? __might_fault+0xaa/0x120 [ 3390.329195][ T342] ? load_image+0x420/0x420 [ 3390.329218][ T342] ? __lock_acquire+0x7d80/0x7d80 [ 3390.329245][ T342] should_fail_ex+0x394/0x4c0 [ 3390.329275][ T342] should_failslab+0x9/0x20 [ 3390.332619][ T331] ? __might_fault+0xc6/0x120 [ 3390.335442][ T342] slab_pre_alloc_hook+0x59/0x300 [ 3390.340094][ T331] ? __might_fault+0xaa/0x120 [ 3390.345291][ T342] kmem_cache_alloc_lru+0x4d/0x2b0 [ 3390.345319][ T342] ? sock_alloc_inode+0x28/0xc0 [ 3390.345347][ T342] sock_alloc_inode+0x28/0xc0 [ 3390.345370][ T342] ? sockfs_init_fs_context+0xb0/0xb0 [ 3390.350032][ T331] ? simple_transaction_get+0x11d/0x140 [ 3390.354502][ T342] new_inode_pseudo+0x63/0x1d0 [ 3390.354528][ T342] __sock_create+0x12d/0x940 [ 3390.354546][ T342] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3390.354578][ T342] __sys_socket+0xd7/0x1b0 [ 3390.359574][ T331] nfsctl_transaction_write+0x10c/0x150 [ 3390.364233][ T342] __x64_sys_socket+0x7a/0x90 [ 3390.364255][ T342] do_syscall_64+0x55/0xb0 [ 3390.364278][ T342] ? clear_bhb_loop+0x40/0x90 [ 3390.364301][ T342] ? clear_bhb_loop+0x40/0x90 [ 3390.364323][ T342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3390.368799][ T331] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 3390.373449][ T342] RIP: 0033:0x7f847719e159 [ 3390.373469][ T342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3390.373487][ T342] RSP: 002b:00007f847810b028 EFLAGS: 00000246 [ 3390.378481][ T331] vfs_write+0x299/0x9a0 [ 3390.383133][ T342] ORIG_RAX: 0000000000000029 [ 3390.383143][ T342] RAX: ffffffffffffffda RBX: 00007f8477425fa0 RCX: 00007f847719e159 [ 3390.383158][ T342] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 3390.383170][ T342] RBP: 00007f8477235024 R08: 0000000000000000 R09: 0000000000000000 [ 3390.383184][ T342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3390.388280][ T331] ? file_end_write+0x250/0x250 [ 3390.393097][ T342] R13: 00007f8477426038 R14: 00007f8477425fa0 R15: 00007fff60dbb418 [ 3390.393127][ T342] [ 3390.498065][ T336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7036'. [ 3390.500899][ T331] ? __fget_files+0x28/0x460 [ 3390.500940][ T331] ? __fget_files+0x3fc/0x460 [ 3390.500971][ T331] ? __fdget_pos+0x2a3/0x330 [ 3390.500996][ T331] ? ksys_write+0x74/0x260 [ 3390.501028][ T331] ksys_write+0x151/0x260 [ 3390.501059][ T331] ? __ia32_sys_read+0x90/0x90 [ 3390.556517][ T342] socket: no more sockets [ 3390.563206][ T331] ? lockdep_hardirqs_on+0x98/0x150 [ 3390.563246][ T331] do_syscall_64+0x55/0xb0 [ 3390.605855][ T331] ? clear_bhb_loop+0x40/0x90 [ 3390.610575][ T331] ? clear_bhb_loop+0x40/0x90 [ 3390.615504][ T331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3390.621437][ T331] RIP: 0033:0x7f69ad19e159 [ 3390.625963][ T331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3390.645709][ T331] RSP: 002b:00007f69ae139028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3390.654233][ T331] RAX: ffffffffffffffda RBX: 00007f69ad425fa0 RCX: 00007f69ad19e159 [ 3390.662297][ T331] RDX: 0000000000000005 RSI: 00002000000002c0 RDI: 0000000000000004 [ 3390.670312][ T331] RBP: 00007f69ad235024 R08: 0000000000000000 R09: 0000000000000000 [ 3390.678380][ T331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3390.686482][ T331] R13: 00007f69ad426038 R14: 00007f69ad425fa0 R15: 00007ffd9ae32828 [ 3390.694583][ T331] [ 3390.697632][ T331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3390.704928][ T331] CPU: 0 PID: 331 Comm: syz.3.7034 Not tainted syzkaller #0 [ 3390.712228][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3390.722307][ T331] Call Trace: [ 3390.725611][ T331] [ 3390.728560][ T331] dump_stack_lvl+0x18c/0x250 [ 3390.733269][ T331] ? show_regs_print_info+0x20/0x20 [ 3390.738499][ T331] ? load_image+0x420/0x420 [ 3390.743042][ T331] panic+0x2ca/0x720 [ 3390.746980][ T331] ? bpf_jit_dump+0xd0/0xd0 [ 3390.751535][ T331] __warn+0x2e0/0x470 [ 3390.754215][ T350] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 4, id = 0 [ 3390.764632][ T331] ? svc_destroy+0x2ed/0x390 [ 3390.769230][ T331] ? svc_destroy+0x2ed/0x390 [ 3390.773816][ T331] report_bug+0x2be/0x4f0 [ 3390.778228][ T331] ? svc_destroy+0x2ed/0x390 [ 3390.782815][ T331] ? svc_destroy+0x2ed/0x390 [ 3390.787398][ T331] ? svc_destroy+0x2ef/0x390 [ 3390.791983][ T331] handle_bug+0xcf/0x120 [ 3390.796224][ T331] exc_invalid_op+0x1a/0x50 [ 3390.800726][ T331] asm_exc_invalid_op+0x1a/0x20 [ 3390.805577][ T331] RIP: 0010:svc_destroy+0x2ed/0x390 [ 3390.810771][ T331] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 92 14 33 f8 49 8b 37 48 c7 c7 a0 51 d9 8b e8 73 63 a4 f7 <0f> 0b e9 78 fd ff ff e8 a7 96 da f7 c6 05 63 33 ca 04 01 4c 89 e0 [ 3390.830378][ T331] RSP: 0018:ffffc9000390fae0 EFLAGS: 00010246 [ 3390.836445][ T331] RAX: 10af0d8533b01700 RBX: ffff88802c70f850 RCX: 0000000000080000 [ 3390.844409][ T331] RDX: ffffc9000e811000 RSI: 00000000000303af RDI: 00000000000303b0 [ 3390.852375][ T331] RBP: ffffc9000390fcb8 R08: ffffc9000390f6e7 R09: 1ffff92000721edc [ 3390.860341][ T331] R10: dffffc0000000000 R11: fffff52000721edd R12: ffff88802c70f800 [ 3390.868307][ T331] R13: dffffc0000000000 R14: ffff88802c70f850 R15: ffffffff8d3e1900 [ 3390.876291][ T331] write_ports+0xb99/0xfa0 [ 3390.880711][ T331] ? write_versions+0xe00/0xe00 [ 3390.885565][ T331] ? __lock_acquire+0x7d80/0x7d80 [ 3390.890584][ T331] ? __virt_addr_valid+0x10c/0x380 [ 3390.895690][ T331] ? __virt_addr_valid+0x10c/0x380 [ 3390.900807][ T331] ? __might_fault+0xaa/0x120 [ 3390.905477][ T331] ? __might_fault+0xc6/0x120 [ 3390.910148][ T331] ? __might_fault+0xaa/0x120 [ 3390.914824][ T331] ? simple_transaction_get+0x11d/0x140 [ 3390.920364][ T331] nfsctl_transaction_write+0x10c/0x150 [ 3390.925928][ T331] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 3390.931584][ T331] vfs_write+0x299/0x9a0 [ 3390.935848][ T331] ? file_end_write+0x250/0x250 [ 3390.940704][ T331] ? __fget_files+0x28/0x460 [ 3390.945292][ T331] ? __fget_files+0x3fc/0x460 [ 3390.949979][ T331] ? __fdget_pos+0x2a3/0x330 [ 3390.954569][ T331] ? ksys_write+0x74/0x260 [ 3390.958986][ T331] ksys_write+0x151/0x260 [ 3390.963316][ T331] ? __ia32_sys_read+0x90/0x90 [ 3390.968078][ T331] ? lockdep_hardirqs_on+0x98/0x150 [ 3390.973277][ T331] do_syscall_64+0x55/0xb0 [ 3390.977687][ T331] ? clear_bhb_loop+0x40/0x90 [ 3390.982366][ T331] ? clear_bhb_loop+0x40/0x90 [ 3390.987037][ T331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3390.992924][ T331] RIP: 0033:0x7f69ad19e159 [ 3390.997336][ T331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3391.016944][ T331] RSP: 002b:00007f69ae139028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3391.025359][ T331] RAX: ffffffffffffffda RBX: 00007f69ad425fa0 RCX: 00007f69ad19e159 [ 3391.033330][ T331] RDX: 0000000000000005 RSI: 00002000000002c0 RDI: 0000000000000004 [ 3391.041298][ T331] RBP: 00007f69ad235024 R08: 0000000000000000 R09: 0000000000000000 [ 3391.049264][ T331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3391.057236][ T331] R13: 00007f69ad426038 R14: 00007f69ad425fa0 R15: 00007ffd9ae32828 [ 3391.065245][ T331] [ 3391.068503][ T331] Kernel Offset: disabled [ 3391.072906][ T331] Rebooting in 86400 seconds..