last executing test programs: 2.950744884s ago: executing program 2 (id=2124): io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x13, 0x602, 0x300000000000) prctl$auto_PR_SET_MM_ARG_START(0x4, 0x8, 0xffffffffffffffff, 0xd, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0x10, 0x401, 0xeb) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x102, 0x80006) mlockall$auto(0x800000000000005) mlockall$auto(0x7) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(0x0) ioctl$auto_IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, 0x4) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, 0x0) mq_open$auto(0x0, 0x400056a, 0xd, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) madvise$auto(0x0, 0x10, 0xc) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000300)={0x2802f000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 1.876943261s ago: executing program 3 (id=2130): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), r0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe53d808c200dc554, 0x0) sigaltstack$auto(0x0, &(0x7f0000000100)={&(0x7f00000001c0)="69cc8d0de6b41511259c289f8eba5cd9efe7b46018e5bfce1b542499858929a69392627f4a0e8a831f37b94859c3446d15dcf9f2530c6b00cc4ff9dc529fffbbb846d87bc63e3010e4d8ad9cdd8ef54af2bc4350e7eb41015c7f0e3da01a62d2b970c909a31b99e1bccd521ae5537a5dce85e1a23c1b4d2712b4f339b823f18f59f4b613ccd7cbf3bc10b034597804fbb5d771442560fce385355c62046665a2ea6dab6cf3585772becd0379df9be57ab51b155c8303e246e1c9f0190e2ee659172011", 0x781, 0x7e}) (async) open(0x0, 0x149443, 0x1f00) (async) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) (async) r1 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/projid_map\x00', 0x1e3200, 0x0) pread64$auto(r1, 0x0, 0x9764, 0x80000fc) (async) mount$auto(0x0, 0x0, 0x0, 0x200, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4c02, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x5, 0x800, 0x503) (async) socket(0x2a, 0x2, 0x1) (async) connect$auto(r2, &(0x7f00000000c0)=@phonet={0x23, 0xe, 0x9, 0xc0}, 0x55) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mmap$auto(0x0, 0x8000, 0xb, 0xebf, r4, 0x7ffd) ioctl$auto(0x3, 0xae60, 0x10000000000402) 1.803096479s ago: executing program 2 (id=2131): r0 = socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000000)=0xff) read$auto_bm_status_operations_binfmt_misc(r0, &(0x7f0000000080)=""/145, 0x91) r1 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/comm\x00', 0x480, 0x0) mlockall$auto(0x7) close_range$auto(0x2, 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x3, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x27f, 0x101, 0x6, 0x2}, {0x1000009, 0xfffffffe, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) r4 = io_uring_setup$auto(0xa, 0x0) ioctl$auto_RNDZAPENTCNT2(r4, 0x5204, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r11) sendmsg$auto_NL80211_CMD_STOP_AP(r11, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r12, 0x129, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5a88314c8e109829}, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20001040}, 0x48081) io_uring_enter$auto(r2, 0x9, 0x820e, 0x2a, 0x0, 0x18) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r13 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r13, 0x6a, 0x1, 0x0, 0x0) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x18}, 0x0) 1.706130072s ago: executing program 0 (id=2132): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r0, 0xc008aec1, &(0x7f0000000100)={0xa}) socket(0x2, 0x80002, 0x73) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) socket(0x1e, 0x5, 0x184) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x100004005, 0x800002, 0x40eb2, 0x401, 0x300000000000) prctl$auto(0x1, 0x4, 0x4, 0x3, 0x4) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010) socket(0x2, 0x80802, 0x0) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10}, 0x3, 0x1) select$auto(0xa, &(0x7f0000000180)={[0x80000000, 0xbfd3, 0x44, 0x1, 0x3, 0x7fffffffffffffff, 0x8, 0x4, 0x1, 0x8, 0x5, 0x9, 0xfffffffffffffffc, 0x9000000000, 0x9, 0x33ca]}, &(0x7f0000000240)={[0x8, 0xf, 0x7, 0x3ff, 0x9fed, 0x100000001, 0x800000000, 0x5, 0x5, 0x1, 0x7, 0xb, 0x63, 0x1, 0x1, 0x6]}, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x10500, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000000)=""/156, 0x9c) msync$auto(0x1ffff000, 0x180000000000a00, 0x6) 1.535324811s ago: executing program 3 (id=2134): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0xc, 0x1) unlink$auto(&(0x7f0000000380)='./file0\x00') openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x6a) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x80a82, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, 0x0) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x400008, 0xdf, 0x9b74, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) read$auto_cachefiles_daemon_fops_internal(r3, &(0x7f0000000080)=""/232, 0xe8) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) r4 = socketpair$auto(0x1, 0x803, 0x8000000000000000, 0x0) write$auto_clear_warn_once_fops_(r4, &(0x7f0000000040)="68cdd53892e3", 0x6) quotactl_fd$auto(0xffffffffffffffff, 0x7, 0x0, 0x0) keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x0, 0x0, 0x0, 0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000001340)={0x5, 0x2, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4, 0x101, 0xd5b, 0x2, 0x80, 0x10000, 0x7, 0x16ff, 0x2, 0xe73}, 0x3f55) fstat$auto(r3, &(0x7f00000003c0)={0x1, 0x771, 0x8000000000000000, 0x7ff, 0x0, 0x0, 0x0, 0x42d7, 0x2, 0x3, 0x0, 0x5, 0x5, 0x5, 0x36ba, 0x1, 0x4}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16, @ANYBLOB="01012bbd7000fddbdf250d0000000c0006000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x0) clone3$auto(&(0x7f0000000200)={0x800000007, 0x3, 0x9000000000000040, 0x20, 0x2, 0xa, 0x8, 0x4, 0x2, 0xf, 0x4}, 0x7) 1.494936767s ago: executing program 2 (id=2135): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/netdevsim1/arp_filter\x00', 0x9c303, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ttyt1/dev\x00', 0xc0200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/212, 0xd4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x4}, 0xc) sendfile$auto(r0, r0, 0x0, 0x4) 1.386507184s ago: executing program 2 (id=2136): mmap$auto(0x7fffffbfe000, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = socket(0x1d, 0x3, 0x1) bind$auto(r1, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) writev$auto(0xffffffffffffffff, 0x0, 0x1) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) 1.299438893s ago: executing program 1 (id=2137): r0 = socket$nl_generic(0x10, 0x3, 0x10) stat$auto(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)={0x7, 0x8000, 0x6, 0x81, 0xee00, 0xee01, 0x0, 0x187, 0x2, 0x8, 0x83, 0x5fd0, 0x7f, 0x6, 0xfff, 0x3, 0x1}) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000380), r0) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x40400c1}, 0x40080) 1.158785171s ago: executing program 1 (id=2138): ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="13042dbd7000fbdbdf250b000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 1.118090851s ago: executing program 0 (id=2139): r0 = gettid() mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0xc, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) io_uring_enter$auto(0x3, 0xfffe, 0x5, 0x3, 0x0, 0x2) kill$auto(r0, 0x11) 1.018122091s ago: executing program 1 (id=2140): mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mbind$auto(0x2001, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0xfffffffffdfffff9, 0x4, 0x9, 0x9b7a, 0x2, 0xcd50) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r1, 0x0, 0x39b8) capset$auto(0x0, 0x0) capget$auto(0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1a9901, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x101000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000080)={0xfff, 0x9d, 0x0, 0xd, 0xc6, 0x8, 0x2, 0x5, 0x100000001, 0x4, 0x4d, 0x9, 0x2, @setup="7d76b53362f893f2", 0x9, 0xffffff81, 0xfffffffe, 0x6}, &(0x7f0000000280)="af6137feb4a816345b588822f37a151cf2b1671d8887b101d406f68c08a49cebe7649be3b0f38922bfde099a4b3069184210ac9d966abc4e690cf57500000000000000000000000000000000c7b38966301e51bf9e75fdd8249713b58523e280d91420774fa7edb9ed8e3ecb4bd56b8942d3b061f997ca8ac807f6e9661080740cfe582de7dc109b90af9d1ddbd2cf7875582dbf11e8495b3a96a61bf7e56baa980ed5f7f1091dc19050df6299326981f05d5df0a455c21fe8a0271b83ae2bc7f01a336d7afe1540d7737b1e7b5e3d5879e78c8b60fed546e63c9c8bc59dea23aa53657dc017abae1fb67bf9", 0xa5}) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, 0x0, 0x40001, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/29, 0x1d) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r5 = socket(0x39, 0x2, 0x6) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010001000000fddbdf251100fc00fe9fbc41e5c94f4819aa5b4ce0db3e4897a0ce025c0f027deeb43c59dfb7e4f0f0fc3bbb31dcb21b5d25c554a897"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) msync$auto(0x1ffff000, 0x180000000000091, 0x400000004) write$auto(0x3, 0x0, 0x100082) link$auto(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)='./file2\x00') openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/033/001\x00', 0x40001, 0x0) 966.755186ms ago: executing program 0 (id=2141): socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) statmount$auto(0x0, 0x0, 0x202, 0xd) access$auto(&(0x7f0000000040)='./cgroup\x00', 0x7) (async) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x3, 0x7, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x70624ce7, 0x1, 0xfffffffffffffffd, 0x8, 0x8, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x50) (async) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/gid_map\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) setpriority$auto(0x4000000001, 0x100000001, 0x6) (async) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/oss\x00', 0x480, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) clone$auto(0xfab, 0x6e1, 0x0, 0x0, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, 0x0) (async) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) socket(0x2, 0x2, 0x1) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd03, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 623.646866ms ago: executing program 2 (id=2142): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffe, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0xdd1, 0x8, 0x0) memfd_create$auto(0x0, 0x7) mmap$auto(0x0, 0x25, 0x6, 0x8012, 0x0, 0x800000000000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x9, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x8998d5f, 0x100, 0x200083, 0x101, 0x6, 0xa6}, {0x100, 0x1, 0x52, 0x5, 0x7fff, 0x3d, 0x3, 0x8, 0x100000000}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r0) r3 = socket(0x2, 0x6, 0x0) getsockopt$auto(r3, 0x10d, 0x2, 0x0, &(0x7f0000000040)=0x800b) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) r7 = socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="02008756", @ANYRES16=r8, @ANYBLOB="000825bd7000fedbdf25030000000500090001000000b100018008002b000700000018326b2ef7ec66d01e89d5d2273438b78ec3c4d66176ccb3bab0d53998e4e69054ce4f35936c38fe0d28758bf53624aa984c6a7d59426edea1a63ded13bff41466b1044f625dac6b02ea8fddd1c12d95f157396894deb032b53379dc006e39a6b4632131246fe71497233ccc7fe152d0341de37567fda1980d82a671e8160cdcd8f6de50c6acfbaa281b7a33ee5b0f9dfde3ff82dead8ecbc3c15cc9d2644e97391e9dafbd0000000500090004000000"], 0xd8}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x40000, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 623.354047ms ago: executing program 3 (id=2143): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000100), 0xf0001, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) fstatfs$auto(0x3, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/redrat3/uevent\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000003c0)=""/134, 0x86) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0x40f1) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x22180, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r2, 0xfffffffe, &(0x7f00000001c0)='/sys/kernel/debug/o2net/stats\x00p!:\xba\xb3\x1f\xd3\x99\xa2%\xab&Q\xa0GOH\xc9\xc7\x01\x9bd\xb6\xebqK\xba\xd4\xf8b\xda\xc7\v\xf3\xb5-8\xd8(<_\x0e\xdc8B\x91\xe4\xa6\xbcn\x13f\x0e+2\xc5bi\xa54\xd9\xd69]C\xc1\xe6\x986f8\xe7\xe7\bS\x17QwI\xbc\xdd\xf1\xc5\xff\xdc)\xf3\xb8\xa2\xe5\xcc\xe9|\xba\x86\x87%\xfe\xd0B&=(}\xe8]\xf6Q\x06\xe3\x01\xd3j0\xd1]\x8e', &(0x7f0000000640)="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", 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket(0x2, 0x6, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x88041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0001, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x88a02, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f0000001080)={{0x5, 0x0, 0x0, 0x8, 0x2, 0x1, 0x4}, 0x400, 0x4, 0x1000, 0x17fffffffffff7fc, @inferred, @inferred=0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0}) socket(0x15, 0x1, 0x0) socket(0x1e, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x14102, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4000000000000, 0x2020009, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) 620.750768ms ago: executing program 1 (id=2150): openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) mmap$auto(0x0, 0xe983, 0x4, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x2, 0x7) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a753, 0x0) r2 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000280), 0x50202, 0x0) close_range$auto(r0, r2, 0x80006) r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x0, 0x0) r4 = epoll_create$auto(0x9) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) r5 = socket(0x2, 0xa, 0xfffffffc) sendmsg$auto_IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRESOCT=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYRESDEC=r1], 0x3540}, 0x1, 0x0, 0x0, 0x240048d0}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) fsopen$auto(&(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x791) mmap$auto(0x0, 0x4, 0x8, 0x9b72, 0x2, 0x7ffc) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x1, 0xf, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) r6 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000300)={r6, &(0x7f0000000040)="5c521ef5d9235438cb1253c686ba3cbc81f636e61ea2d99b47177337ac4dea2e9def6974041321632061e3586e0f212d35661a9701d2bbf8df25aec682ce99fefa84569c0d535e24427a0a09a077b9b5e5dc50ed3a6183afe80af8f82f85ee49e89408715dbba1", 0x0, 0x0, 0x80, 0x0, 0x0}) 491.022813ms ago: executing program 3 (id=2144): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x100) getsockopt$auto(r0, 0x40000000029, 0x13, 0xfffffffffffffffe, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, 0xffffffffffffffff, 0x28000) setresuid$auto(0x0, 0x8, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x8) futimesat$auto(r1, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xc, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80002, 0x0) 490.943369ms ago: executing program 0 (id=2145): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x700) 447.318188ms ago: executing program 1 (id=2146): close_range$auto(0x0, 0xffffffffffffffff, 0x2) r0 = fanotify_init$auto(0x1f53, 0x2000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x5, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, 0x0, 0x55) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r1) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x7a, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0xffffffffffffffff, 0x105, 0xf2b, r4, 0x0) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000003c0), r0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x54}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x202}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x1004}, 0x4000004) 343.809288ms ago: executing program 1 (id=2147): mmap$auto(0xf0ffffffffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) 321.611577ms ago: executing program 3 (id=2148): ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="13042dbd7000fbdbdf250b0000000800", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x80) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 263.096694ms ago: executing program 0 (id=2149): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0xb, 0x4, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x6f2a, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) 164.296842ms ago: executing program 3 (id=2151): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0xc, 0x1) unlink$auto(&(0x7f0000000380)='./file0\x00') openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e20, @remote}, 0x6a) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x80a82, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, 0x0) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x400008, 0xdf, 0x9b74, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) read$auto_cachefiles_daemon_fops_internal(r3, &(0x7f0000000080)=""/232, 0xe8) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) r4 = socketpair$auto(0x1, 0x803, 0x8000000000000000, 0x0) write$auto_clear_warn_once_fops_(r4, &(0x7f0000000040)="68cdd53892e3", 0x6) quotactl_fd$auto(0xffffffffffffffff, 0x7, 0x0, 0x0) keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x0, 0x0, 0x0, 0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000001340)={0x5, 0x2, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4, 0x101, 0xd5b, 0x2, 0x80, 0x10000, 0x7, 0x16ff, 0x2, 0xe73}, 0x3f55) fstat$auto(r3, &(0x7f00000003c0)={0x1, 0x771, 0x8000000000000000, 0x7ff, 0x0, 0x0, 0x0, 0x42d7, 0x2, 0x3, 0x0, 0x5, 0x5, 0x5, 0x36ba, 0x1, 0x4}) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16, @ANYBLOB="01012bbd7000fddbdf250d0000000c0006000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x0) clone3$auto(&(0x7f0000000200)={0x800000007, 0x3, 0x9000000000000040, 0x20, 0x2, 0xa, 0x8, 0x4, 0x2, 0xf, 0x4}, 0x7) 142.444267ms ago: executing program 0 (id=2152): mmap$auto(0x0, 0x100004005, 0x800002, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x100004005, 0x800002, 0x40eb2, 0x401, 0x300000000000) prctl$auto(0x1, 0x4, 0x4, 0x3, 0x4) (async) prctl$auto(0x1, 0x4, 0x4, 0x3, 0x4) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010) socket(0x2, 0x80802, 0x0) r0 = socket(0x5, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) socket(0x2, 0x801, 0x100) (async) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10}, 0x3, 0x1) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10}, 0x3, 0x1) select$auto(0xa, &(0x7f0000000180)={[0x80000000, 0xbfd3, 0x44, 0x1, 0x3, 0x7fffffffffffffff, 0x8, 0x4, 0x1, 0x8, 0x5, 0x9, 0xfffffffffffffffc, 0x9000000000, 0x9, 0x33ca]}, &(0x7f0000000240)={[0x8, 0xf, 0x7, 0x3ff, 0x9fed, 0x100000001, 0x800000000, 0x5, 0x5, 0x1, 0x7, 0xb, 0x63, 0x1, 0x1, 0x6]}, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x40000202000d, 0x3, 0xebd, 0xfffffffffffffffa, 0xb) (async) mmap$auto(0x0, 0x40000202000d, 0x3, 0xebd, 0xfffffffffffffffa, 0xb) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x10500, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) pselect6$auto(0x7f, &(0x7f00000002c0)={[0x1, 0xd81e, 0x6, 0x1, 0x3, 0x200, 0x0, 0x3, 0x9, 0x8000000000000000, 0x9, 0x6ddc, 0x10, 0x5, 0x734, 0x7f]}, &(0x7f0000000340)={[0x2, 0x7ff, 0xfff, 0x8, 0x8000000000000001, 0xd, 0x0, 0x1, 0x14, 0x1, 0xfe00000000000, 0xd, 0x9, 0xaa, 0x9, 0x5]}, &(0x7f00000003c0)={[0x94, 0x7, 0x6, 0x3ff, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1c, 0x0, 0xe72, 0x9, 0xfff]}, &(0x7f00000000c0)={0x9, 0x6}, &(0x7f0000000440)="8b658eff219bc23e277374adbbf2c7385ee33bd14e6af0d2e6949b8394ab6eba1b2c220b3c121ef552e897acffa1b181abe2273de823e3a65df8b0bc5412e3253ac331d40d085556e2169a3db046a218ce3c1efe444a7fce39742e9db66a8d8cd99f2019beee5693302b0f2ef0868d54cf75cbbe3b70a391d98898147d33114b01a854b600fe49a3eb42e5d73628cab002d3a41796c423e9242f614cfd8e862e529d5406a2ee244b3d42") ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)=""/156, 0x9c) msync$auto(0x1ffff000, 0x180000000000000, 0x6) mmap$auto(0x0, 0x2020009, 0xfff, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0xfff, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x1, 0x106) 0s ago: executing program 2 (id=2153): r0 = socket(0x2d, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) close_range$auto(r0, r0, 0xe6c6e08) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000200)="97544df294042014", 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 90.180063][ T5833] cgroup: Unknown subsys name 'net' [ 90.300589][ T5833] cgroup: Unknown subsys name 'cpuset' [ 90.312008][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.285335][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.466676][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.480639][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.488705][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.515379][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.523220][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.611696][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.632482][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.645506][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.654679][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.662267][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.675586][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.683813][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.692033][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.700365][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.708834][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.716452][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.725387][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.733239][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.742019][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.750565][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.127628][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 95.352209][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.361000][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.370643][ T5843] bridge_slave_0: entered allmulticast mode [ 95.378241][ T5843] bridge_slave_0: entered promiscuous mode [ 95.398778][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 95.416031][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.423255][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.430571][ T5843] bridge_slave_1: entered allmulticast mode [ 95.437947][ T5843] bridge_slave_1: entered promiscuous mode [ 95.580444][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.593828][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.693922][ T5843] team0: Port device team_slave_0 added [ 95.718351][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 95.738552][ T5843] team0: Port device team_slave_1 added [ 95.763029][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 95.788126][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.795673][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.802940][ T5848] bridge_slave_0: entered allmulticast mode [ 95.810825][ T5848] bridge_slave_0: entered promiscuous mode [ 95.852275][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.859408][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.885766][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.897660][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.904809][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.912248][ T5848] bridge_slave_1: entered allmulticast mode [ 95.920155][ T5848] bridge_slave_1: entered promiscuous mode [ 95.972789][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.980250][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.006324][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.062862][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.104093][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.179529][ T5848] team0: Port device team_slave_0 added [ 96.186675][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.193827][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.201382][ T5849] bridge_slave_0: entered allmulticast mode [ 96.209366][ T5849] bridge_slave_0: entered promiscuous mode [ 96.253149][ T5848] team0: Port device team_slave_1 added [ 96.259757][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.268698][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.277218][ T5849] bridge_slave_1: entered allmulticast mode [ 96.284581][ T5849] bridge_slave_1: entered promiscuous mode [ 96.326808][ T5843] hsr_slave_0: entered promiscuous mode [ 96.333364][ T5843] hsr_slave_1: entered promiscuous mode [ 96.374508][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.401817][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.411586][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.419224][ T5850] bridge_slave_0: entered allmulticast mode [ 96.428198][ T5850] bridge_slave_0: entered promiscuous mode [ 96.453055][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.477339][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.484556][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.492363][ T5850] bridge_slave_1: entered allmulticast mode [ 96.500599][ T5850] bridge_slave_1: entered promiscuous mode [ 96.508704][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.515809][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.542030][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.585727][ T55] Bluetooth: hci0: command tx timeout [ 96.608723][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.616595][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.645426][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.680263][ T5849] team0: Port device team_slave_0 added [ 96.703702][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.723291][ T5849] team0: Port device team_slave_1 added [ 96.749551][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.826746][ T55] Bluetooth: hci2: command tx timeout [ 96.826815][ T5858] Bluetooth: hci3: command tx timeout [ 96.832400][ T55] Bluetooth: hci1: command tx timeout [ 96.847025][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.854093][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.880307][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.910730][ T5850] team0: Port device team_slave_0 added [ 96.919772][ T5850] team0: Port device team_slave_1 added [ 96.931891][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.938933][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.965130][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.981513][ T5848] hsr_slave_0: entered promiscuous mode [ 96.991034][ T5848] hsr_slave_1: entered promiscuous mode [ 96.997347][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.005075][ T5848] Cannot create hsr debugfs directory [ 97.077528][ T47] cfg80211: failed to load regulatory.db [ 97.093195][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.100863][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.127498][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.140808][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.147872][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.174171][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.316923][ T5849] hsr_slave_0: entered promiscuous mode [ 97.323604][ T5849] hsr_slave_1: entered promiscuous mode [ 97.330103][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.337820][ T5849] Cannot create hsr debugfs directory [ 97.412608][ T5850] hsr_slave_0: entered promiscuous mode [ 97.420412][ T5850] hsr_slave_1: entered promiscuous mode [ 97.427137][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.434721][ T5850] Cannot create hsr debugfs directory [ 97.656437][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.671402][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.718822][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.773263][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.872501][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.897314][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.927417][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.940805][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.027678][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.047591][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.060502][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.072876][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.207784][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.230859][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.241852][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.254456][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.276818][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.359444][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.390015][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.397422][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.424474][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.462998][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.470336][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.536277][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.562141][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.569495][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.632811][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.657843][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.665058][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.673498][ T55] Bluetooth: hci0: command tx timeout [ 98.754392][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.788866][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.796089][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.843729][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.850982][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.871722][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.906075][ T55] Bluetooth: hci3: command tx timeout [ 98.906579][ T5858] Bluetooth: hci2: command tx timeout [ 98.911513][ T55] Bluetooth: hci1: command tx timeout [ 98.961223][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.981991][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.018118][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.025355][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.048887][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.056145][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.190635][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.347487][ T5843] veth0_vlan: entered promiscuous mode [ 99.428552][ T5843] veth1_vlan: entered promiscuous mode [ 99.454333][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.571390][ T5843] veth0_macvtap: entered promiscuous mode [ 99.590460][ T5843] veth1_macvtap: entered promiscuous mode [ 99.628482][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.642139][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.667078][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.676667][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.685453][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.694187][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.709882][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.723976][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.731704][ T5848] veth0_vlan: entered promiscuous mode [ 99.753773][ T5848] veth1_vlan: entered promiscuous mode [ 99.869845][ T5848] veth0_macvtap: entered promiscuous mode [ 99.951983][ T5849] veth0_vlan: entered promiscuous mode [ 99.960052][ T5848] veth1_macvtap: entered promiscuous mode [ 99.974542][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.979529][ T5850] veth0_vlan: entered promiscuous mode [ 99.994172][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.024970][ T5849] veth1_vlan: entered promiscuous mode [ 100.053584][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.064953][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.077935][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.098500][ T5850] veth1_vlan: entered promiscuous mode [ 100.131446][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.144267][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.159033][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.173093][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.182117][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.193308][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.203482][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.220358][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.229612][ T5849] veth0_macvtap: entered promiscuous mode [ 100.235441][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.258217][ T5849] veth1_macvtap: entered promiscuous mode [ 100.290323][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.301780][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.312229][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.329507][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.342049][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.394181][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.408849][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.419931][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.432034][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.448721][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.480076][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.488014][ T5850] veth0_macvtap: entered promiscuous mode [ 100.514505][ T5850] veth1_macvtap: entered promiscuous mode [ 100.522737][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.532538][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.541621][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.550576][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.677710][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.703986][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.716126][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.726890][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.738692][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.746046][ T55] Bluetooth: hci0: command tx timeout [ 100.761476][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.773875][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.789165][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.804434][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.841734][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.843986][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.863295][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.880965][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.892602][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.903213][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.914586][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.928315][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.970162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.980001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.988874][ T55] Bluetooth: hci1: command tx timeout [ 100.995370][ T55] Bluetooth: hci2: command tx timeout [ 100.996667][ T5858] Bluetooth: hci3: command tx timeout [ 101.016331][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.026213][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.034969][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.048995][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.090414][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.114786][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.310890][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.332048][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.896251][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.904138][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.934561][ T5911] process 'syz.0.5' launched ':,' with NULL argv: empty string added [ 102.019950][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.059709][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.121586][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.148686][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.763229][ T5914] Invalid ELF header magic: != ELF [ 102.827734][ T5858] Bluetooth: hci0: command tx timeout [ 103.066134][ T5858] Bluetooth: hci3: command tx timeout [ 103.071875][ T55] Bluetooth: hci2: command tx timeout [ 103.077432][ T5158] Bluetooth: hci1: command tx timeout [ 103.502393][ T5935] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.516014][ T5935] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.539141][ T5935] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.602145][ T5935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.627090][ T5935] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.687421][ T5935] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.720302][ T5935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.744993][ T5935] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.760219][ T5935] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.778855][ T5935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.803395][ T5935] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.832179][ T5935] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.147306][ T5945] FAULT_INJECTION: forcing a failure. [ 104.147306][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 104.147365][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: syz.3.8 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 104.147403][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.147425][ T5945] Call Trace: [ 104.147436][ T5945] [ 104.147451][ T5945] dump_stack_lvl+0x16c/0x1f0 [ 104.147506][ T5945] should_fail_ex+0x512/0x640 [ 104.147542][ T5945] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 104.147599][ T5945] should_failslab+0xc2/0x120 [ 104.147628][ T5945] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 104.147682][ T5945] ? find_held_lock+0x2b/0x80 [ 104.147719][ T5945] ? kstrdup_const+0x63/0x80 [ 104.147754][ T5945] kstrdup+0x53/0x100 [ 104.147786][ T5945] kstrdup_const+0x63/0x80 [ 104.147816][ T5945] __kernfs_new_node+0x9b/0x8a0 [ 104.147871][ T5945] ? __pfx___kernfs_new_node+0x10/0x10 [ 104.147938][ T5945] ? find_held_lock+0x2b/0x80 [ 104.147979][ T5945] ? kernfs_root+0xee/0x2a0 [ 104.148037][ T5945] kernfs_new_node+0x13c/0x1e0 [ 104.148076][ T5945] kernfs_create_dir_ns+0x4c/0x1a0 [ 104.148116][ T5945] sysfs_create_dir_ns+0x13a/0x2b0 [ 104.148165][ T5945] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 104.148211][ T5945] ? find_held_lock+0x2b/0x80 [ 104.148259][ T5945] ? class_dir_child_ns_type+0xd/0x60 [ 104.148294][ T5945] kobject_add_internal+0x2c4/0x9b0 [ 104.148353][ T5945] kobject_add+0x16e/0x240 [ 104.148380][ T5945] ? __pfx_kobject_add+0x10/0x10 [ 104.148410][ T5945] ? get_device_parent+0x1c5/0x4e0 [ 104.148462][ T5945] ? kobject_put+0xab/0x5a0 [ 104.148521][ T5945] device_add+0x288/0x1a70 [ 104.148554][ T5945] ? rcu_is_watching+0x12/0xc0 [ 104.148594][ T5945] ? __pfx_device_add+0x10/0x10 [ 104.148643][ T5945] device_create_groups_vargs+0x1f8/0x270 [ 104.148683][ T5945] device_create+0xed/0x130 [ 104.148717][ T5945] ? __pfx_device_create+0x10/0x10 [ 104.148747][ T5945] ? do_raw_spin_lock+0x12c/0x2b0 [ 104.148785][ T5945] ? is_console_locked+0x9/0x20 [ 104.148831][ T5945] ? con_is_visible+0x65/0x150 [ 104.148873][ T5945] ? csi_J+0x54a/0xad0 [ 104.148938][ T5945] vcs_make_sysfs+0x32/0x80 [ 104.148983][ T5945] vc_allocate+0x501/0x880 [ 104.149035][ T5945] ? __pfx_vc_allocate+0x10/0x10 [ 104.149098][ T5945] con_install+0xa1/0x600 [ 104.149153][ T5945] ? __pfx_con_install+0x10/0x10 [ 104.149213][ T5945] ? __pfx_con_install+0x10/0x10 [ 104.149266][ T5945] tty_init_dev.part.0+0x99/0x500 [ 104.149304][ T5945] tty_open+0xa50/0xf90 [ 104.149345][ T5945] ? __pfx_tty_open+0x10/0x10 [ 104.149378][ T5945] ? chrdev_open+0x58c/0x6a0 [ 104.149435][ T5945] ? __pfx_tty_open+0x10/0x10 [ 104.149467][ T5945] chrdev_open+0x231/0x6a0 [ 104.149520][ T5945] ? __pfx_chrdev_open+0x10/0x10 [ 104.149575][ T5945] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 104.149630][ T5945] do_dentry_open+0x741/0x1c10 [ 104.149678][ T5945] ? __pfx_chrdev_open+0x10/0x10 [ 104.149738][ T5945] vfs_open+0x82/0x3f0 [ 104.149776][ T5945] path_openat+0x1e5e/0x2d40 [ 104.149843][ T5945] ? __pfx_path_openat+0x10/0x10 [ 104.149911][ T5945] do_filp_open+0x20b/0x470 [ 104.149960][ T5945] ? __pfx_do_filp_open+0x10/0x10 [ 104.150040][ T5945] ? alloc_fd+0x471/0x7d0 [ 104.150101][ T5945] do_sys_openat2+0x11b/0x1d0 [ 104.150134][ T5945] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.150167][ T5945] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 104.150218][ T5945] __x64_sys_openat+0x174/0x210 [ 104.150255][ T5945] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.150294][ T5945] ? rcu_is_watching+0x12/0xc0 [ 104.150347][ T5945] do_syscall_64+0xcd/0x260 [ 104.150398][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.150431][ T5945] RIP: 0033:0x7f7a06d8d169 [ 104.150457][ T5945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.150488][ T5945] RSP: 002b:00007f7a07bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.150517][ T5945] RAX: ffffffffffffffda RBX: 00007f7a06fa5fa0 RCX: 00007f7a06d8d169 [ 104.150537][ T5945] RDX: 0000000000000800 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 104.150556][ T5945] RBP: 00007f7a06e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.150574][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.150591][ T5945] R13: 0000000000000000 R14: 00007f7a06fa5fa0 R15: 00007ffc71384058 [ 104.150634][ T5945] [ 104.150648][ T5945] kobject: kobject_add_internal failed for vcs48 (error: -12 parent: vc) [ 104.263697][ T5946] tipc: Started in network mode [ 104.705465][ T5946] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 104.767786][ T5946] tipc: Node number set to 2387504917 [ 104.899948][ T5954] zswap: compressor not available [ 104.990403][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.329597][ T5966] MTRR 1 not used [ 105.625647][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.797316][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.803515][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.874362][ T5968] Invalid ELF header magic: != ELF [ 105.998153][ T5858] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 105.998197][ T5858] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 106.014014][ T5858] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 106.014085][ T5858] Bluetooth: hci0: adv larger than maximum supported [ 106.021633][ T5858] Bluetooth: hci0: adv larger than maximum supported [ 106.031496][ T5858] Bluetooth: hci0: Malformed LE Event: 0x0d [ 106.262292][ T5985] netlink: 330 bytes leftover after parsing attributes in process `syz.0.17'. [ 106.951642][ T5997] openvswitch: netlink: Key type 248 is out of range max 32 [ 107.015204][ T5993] capability: warning: `syz.1.20' uses 32-bit capabilities (legacy support in use) [ 107.065788][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.426487][ T6005] bond0: option all_slaves_active: invalid value (0x00060000) [ 107.713167][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.781123][ T6008] erspan0: entered allmulticast mode [ 107.796176][ T6004] bond0: option all_slaves_active: invalid value (0x00060000) [ 107.865479][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.866861][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.854697][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.933402][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27'. [ 108.997311][ T6031] bond0: (slave bond_slave_0): Releasing backup interface [ 109.077747][ T6031] Zero length message leads to an empty skb [ 109.148051][ T55] Bluetooth: hci0: command 0x0c1a tx timeout syzkaller syzkaller login: [ 109.785262][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.960292][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.960318][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.508747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.000797][ T6037] ima: policy update failed [ 111.026347][ T30] audit: type=1802 audit(4294967304.650:2): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.29" res=0 errno=0 [ 111.164139][ T6055] ubi0: attaching mtd0 [ 111.168547][ T6055] ubi0 error: ubi_attach_mtd_dev: bad VID header (4198269) or data offsets (4198333) [ 111.299330][ T6066] FAULT_INJECTION: forcing a failure. [ 111.299330][ T6066] name failslab, interval 1, probability 0, space 0, times 0 [ 111.363244][ T6066] CPU: 1 UID: 0 PID: 6066 Comm: syz.2.31 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 111.363299][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.363317][ T6066] Call Trace: [ 111.363328][ T6066] [ 111.363340][ T6066] dump_stack_lvl+0x16c/0x1f0 [ 111.363392][ T6066] should_fail_ex+0x512/0x640 [ 111.363429][ T6066] ? __kmalloc_noprof+0xbf/0x510 [ 111.363482][ T6066] ? fib_default_rule_add+0x4f/0x420 [ 111.363524][ T6066] should_failslab+0xc2/0x120 [ 111.363555][ T6066] __kmalloc_noprof+0xd2/0x510 [ 111.363614][ T6066] fib_default_rule_add+0x4f/0x420 [ 111.363660][ T6066] fib4_rules_init+0xa6/0x1c0 [ 111.363695][ T6066] fib_net_init+0x1dc/0x3f0 [ 111.363737][ T6066] ? __pfx___register_sysctl_table+0x10/0x10 [ 111.363774][ T6066] ? __pfx_fib_net_init+0x10/0x10 [ 111.363818][ T6066] ? lockdep_init_map_type+0x5c/0x280 [ 111.363850][ T6066] ? do_init_timer+0xc9/0x110 [ 111.363897][ T6066] ? devinet_init_net+0x5c2/0x910 [ 111.363949][ T6066] ? __pfx_fib_net_init+0x10/0x10 [ 111.363991][ T6066] ops_init+0x1df/0x5f0 [ 111.364040][ T6066] setup_net+0x21e/0x850 [ 111.364089][ T6066] ? __pfx_setup_net+0x10/0x10 [ 111.364132][ T6066] ? lockdep_init_map_type+0x5c/0x280 [ 111.364164][ T6066] ? __pfx_down_read_killable+0x10/0x10 [ 111.364199][ T6066] ? debug_mutex_init+0x37/0x70 [ 111.364244][ T6066] copy_net_ns+0x2a6/0x5f0 [ 111.364303][ T6066] create_new_namespaces+0x3ea/0xad0 [ 111.364360][ T6066] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 111.364411][ T6066] ksys_unshare+0x45b/0xa40 [ 111.364460][ T6066] ? __pfx_ksys_unshare+0x10/0x10 [ 111.364518][ T6066] ? xfd_validate_state+0x5d/0x180 [ 111.364553][ T6066] ? rcu_is_watching+0x12/0xc0 [ 111.364602][ T6066] __x64_sys_unshare+0x31/0x40 [ 111.364668][ T6066] do_syscall_64+0xcd/0x260 [ 111.364718][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.364751][ T6066] RIP: 0033:0x7f711558d169 [ 111.364777][ T6066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.364808][ T6066] RSP: 002b:00007f711632f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.364838][ T6066] RAX: ffffffffffffffda RBX: 00007f71157a6160 RCX: 00007f711558d169 [ 111.364858][ T6066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 111.364877][ T6066] RBP: 00007f711560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.364895][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.364913][ T6066] R13: 0000000000000000 R14: 00007f71157a6160 R15: 00007ffdefac87e8 [ 111.364955][ T6066] [ 111.689627][ T6071] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 111.897240][ T6061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.909058][ T6061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.938747][ T6061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.939090][ T6061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.176293][ T30] audit: type=1800 audit(4294967306.810:3): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.41" name="file0" dev="tmpfs" ino=77 res=0 errno=0 [ 113.711290][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.945598][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.950713][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.954727][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.062798][ T6106] FAULT_INJECTION: forcing a failure. [ 114.062798][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 114.088862][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.0.44 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 114.088905][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.088921][ T6106] Call Trace: [ 114.088930][ T6106] [ 114.088940][ T6106] dump_stack_lvl+0x16c/0x1f0 [ 114.088988][ T6106] should_fail_ex+0x512/0x640 [ 114.089020][ T6106] ? __kmalloc_node_noprof+0xc5/0x500 [ 114.089081][ T6106] should_failslab+0xc2/0x120 [ 114.089109][ T6106] __kmalloc_node_noprof+0xd8/0x500 [ 114.089152][ T6106] ? __rb_allocate_pages+0x4b7/0xe70 [ 114.089200][ T6106] __rb_allocate_pages+0x4b7/0xe70 [ 114.089254][ T6106] ring_buffer_resize+0x724/0x1560 [ 114.089304][ T6106] ? __pfx_update_last_data+0x10/0x10 [ 114.089344][ T6106] __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 114.089382][ T6106] tracing_update_buffers+0x102/0x130 [ 114.089427][ T6106] ftrace_event_write+0x14a/0x290 [ 114.089461][ T6106] ? __pfx_ftrace_event_write+0x10/0x10 [ 114.089513][ T6106] vfs_write+0x25c/0x1180 [ 114.089551][ T6106] ? __pfx_ftrace_event_write+0x10/0x10 [ 114.089591][ T6106] ? __pfx___mutex_lock+0x10/0x10 [ 114.089633][ T6106] ? __pfx_vfs_write+0x10/0x10 [ 114.089683][ T6106] ? __fget_files+0x20e/0x3c0 [ 114.089737][ T6106] ksys_write+0x12a/0x240 [ 114.089776][ T6106] ? __pfx_ksys_write+0x10/0x10 [ 114.089816][ T6106] ? rcu_is_watching+0x12/0xc0 [ 114.089864][ T6106] do_syscall_64+0xcd/0x260 [ 114.089909][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.089938][ T6106] RIP: 0033:0x7f41fdb8d169 [ 114.089962][ T6106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.090008][ T6106] RSP: 002b:00007f41fe94a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.090045][ T6106] RAX: ffffffffffffffda RBX: 00007f41fdda5fa0 RCX: 00007f41fdb8d169 [ 114.090065][ T6106] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 114.090082][ T6106] RBP: 00007f41fdc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.090100][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.090117][ T6106] R13: 0000000000000000 R14: 00007f41fdda5fa0 R15: 00007fff80a0aae8 [ 114.090159][ T6106] [ 114.314801][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.528146][ T6106] netlink: 186 bytes leftover after parsing attributes in process `syz.0.44'. [ 116.805714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c0!!! [ 116.855473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.906887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 117.636339][ T6162] FAULT_INJECTION: forcing a failure. [ 117.636339][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 117.727776][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.0.56 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 117.727820][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.727838][ T6162] Call Trace: [ 117.727848][ T6162] [ 117.727861][ T6162] dump_stack_lvl+0x16c/0x1f0 [ 117.727914][ T6162] should_fail_ex+0x512/0x640 [ 117.727950][ T6162] ? __kvmalloc_node_noprof+0x122/0x600 [ 117.728002][ T6162] should_failslab+0xc2/0x120 [ 117.728033][ T6162] __kvmalloc_node_noprof+0x135/0x600 [ 117.728083][ T6162] ? fib4_semantics_init+0x25/0x100 [ 117.728126][ T6162] ? fib4_semantics_init+0x25/0x100 [ 117.728158][ T6162] ? fib4_rules_init+0x151/0x1c0 [ 117.728188][ T6162] fib4_semantics_init+0x25/0x100 [ 117.728224][ T6162] fib_net_init+0x1fc/0x3f0 [ 117.728267][ T6162] ? __pfx___register_sysctl_table+0x10/0x10 [ 117.728305][ T6162] ? __pfx_fib_net_init+0x10/0x10 [ 117.728347][ T6162] ? lockdep_init_map_type+0x5c/0x280 [ 117.728381][ T6162] ? do_init_timer+0xc9/0x110 [ 117.728427][ T6162] ? devinet_init_net+0x5c2/0x910 [ 117.728480][ T6162] ? __pfx_fib_net_init+0x10/0x10 [ 117.728522][ T6162] ops_init+0x1df/0x5f0 [ 117.728572][ T6162] setup_net+0x21e/0x850 [ 117.728623][ T6162] ? __pfx_setup_net+0x10/0x10 [ 117.728665][ T6162] ? lockdep_init_map_type+0x5c/0x280 [ 117.728695][ T6162] ? __pfx_down_read_killable+0x10/0x10 [ 117.728729][ T6162] ? debug_mutex_init+0x37/0x70 [ 117.728783][ T6162] copy_net_ns+0x2a6/0x5f0 [ 117.728838][ T6162] create_new_namespaces+0x3ea/0xad0 [ 117.728895][ T6162] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 117.728946][ T6162] ksys_unshare+0x45b/0xa40 [ 117.728998][ T6162] ? __pfx_ksys_unshare+0x10/0x10 [ 117.729046][ T6162] ? xfd_validate_state+0x5d/0x180 [ 117.729084][ T6162] ? rcu_is_watching+0x12/0xc0 [ 117.729135][ T6162] __x64_sys_unshare+0x31/0x40 [ 117.729183][ T6162] do_syscall_64+0xcd/0x260 [ 117.729233][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.729261][ T6162] RIP: 0033:0x7f41fdb8d169 [ 117.729285][ T6162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.729314][ T6162] RSP: 002b:00007f41fb5f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 117.729343][ T6162] RAX: ffffffffffffffda RBX: 00007f41fdda6240 RCX: 00007f41fdb8d169 [ 117.729362][ T6162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 117.729379][ T6162] RBP: 00007f41fdc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 117.729396][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.729413][ T6162] R13: 0000000000000000 R14: 00007f41fdda6240 R15: 00007fff80a0aae8 [ 117.729451][ T6162] [ 117.762199][ T6166] [U] [ 118.001256][ T6166] [U] [ 118.003983][ T6166] [U] [ 118.006712][ T6166] [U] [ 118.080411][ T6166] [U] [ 118.083209][ T6166] [U] [ 118.085967][ T6166] [U] [ 118.088715][ T6166] [U] [ 118.128924][ T6160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.148602][ T6160] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.158415][ T6166] [U] [ 118.161220][ T6166] [U] [ 118.163984][ T6166] [U] [ 118.166740][ T6166] [U] [ 118.167170][ T6160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.175854][ T6166] [U] [ 118.178597][ T6166] [U] [ 118.181402][ T6166] [U] [ 118.184321][ T6166] [U] [ 118.195799][ T6166] [U] [ 118.198578][ T6166] [U] [ 118.201336][ T6166] [U] [ 118.204102][ T6166] [U] [ 118.208231][ T6160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.240059][ T6166] [U] [ 118.242866][ T6166] [U] [ 118.245641][ T6166] [U] [ 118.248481][ T6166] [U] [ 118.268067][ T6166] [U] [ 118.270871][ T6166] [U] [ 118.273634][ T6166] [U] [ 118.276393][ T6166] [U] [ 118.289680][ T6166] [U] [ 118.292473][ T6166] [U] [ 118.295238][ T6166] [U] [ 118.297998][ T6166] [U] [ 118.308559][ T6166] [U] [ 118.311347][ T6166] [U] [ 118.314107][ T6166] [U] [ 118.316894][ T6166] [U] [ 118.322490][ T6166] [U] [ 118.325275][ T6166] [U] [ 118.328023][ T6166] [U] [ 118.330783][ T6166] [U] [ 118.336171][ T6166] [U] [ 118.338960][ T6166] [U] [ 118.341794][ T6166] [U] [ 118.344550][ T6166] [U] [ 118.384559][ T6166] [U] [ 118.387368][ T6166] [U] [ 118.390126][ T6166] [U] [ 118.392881][ T6166] [U] [ 118.426445][ T6166] [U] [ 118.429243][ T6166] [U] [ 118.432000][ T6166] [U] [ 118.434763][ T6166] [U] [ 118.447639][ T6166] [U] [ 118.450434][ T6166] [U] [ 118.453201][ T6166] [U] [ 118.455966][ T6166] [U] [ 118.482082][ T6166] [U] [ 118.484933][ T6166] [U] [ 118.487703][ T6166] [U] [ 118.490655][ T6166] [U] [ 118.535443][ T6166] [U] [ 118.538246][ T6166] [U] [ 118.540999][ T6166] [U] [ 118.543760][ T6166] [U] [ 118.571616][ T6166] [U] [ 118.574432][ T6166] [U] [ 118.577172][ T6166] [U] [ 118.579935][ T6166] [U] [ 118.583747][ T6166] [U] [ 118.586517][ T6166] [U] [ 118.589276][ T6166] [U] [ 118.592030][ T6166] [U] [ 118.616758][ T6166] [U] [ 118.619558][ T6166] [U] [ 118.622318][ T6166] [U] [ 118.625072][ T6166] [U] [ 118.644724][ T6166] [U] [ 118.865528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.875839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.876371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.885993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.892739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.545481][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.195317][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.201398][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.270457][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.130765][ T6187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.156379][ T6187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.195739][ T6187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.202583][ T6187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.151988][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.225404][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.225624][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.231654][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.879955][ T6228] [ 125.702467][ T6237] ubi0: attaching mtd0 [ 125.724394][ T6237] ubi0: scanning is finished [ 125.743151][ T6237] ubi0: empty MTD device detected [ 126.006514][ T6237] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 126.028097][ T6237] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 126.062474][ T6237] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 126.069953][ T6237] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 126.079061][ T6237] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 126.089790][ T6237] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 126.098198][ T6237] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2356977970 [ 126.108770][ T6237] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 126.119908][ T6261] ubi0: background thread "ubi_bgt0d" started, PID 6261 [ 127.615725][ T6270] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.645963][ T6270] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.674012][ T6270] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.686770][ T6270] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.826299][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.593013][ T6318] FAULT_INJECTION: forcing a failure. [ 129.593013][ T6318] name failslab, interval 1, probability 0, space 0, times 0 [ 129.627108][ T6318] CPU: 0 UID: 0 PID: 6318 Comm: syz.3.88 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 129.627158][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.627176][ T6318] Call Trace: [ 129.627185][ T6318] [ 129.627197][ T6318] dump_stack_lvl+0x16c/0x1f0 [ 129.627253][ T6318] should_fail_ex+0x512/0x640 [ 129.627290][ T6318] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 129.627338][ T6318] should_failslab+0xc2/0x120 [ 129.627370][ T6318] __kmalloc_cache_noprof+0x6a/0x3e0 [ 129.627415][ T6318] ? fib_notifier_ops_register+0x123/0x270 [ 129.627459][ T6318] ? fib_net_init+0x1a4/0x3f0 [ 129.627511][ T6318] fib_net_init+0x1a4/0x3f0 [ 129.627552][ T6318] ? __pfx___register_sysctl_table+0x10/0x10 [ 129.627590][ T6318] ? __pfx_fib_net_init+0x10/0x10 [ 129.627633][ T6318] ? lockdep_init_map_type+0x5c/0x280 [ 129.627667][ T6318] ? do_init_timer+0xc9/0x110 [ 129.627715][ T6318] ? devinet_init_net+0x5c2/0x910 [ 129.627768][ T6318] ? __pfx_fib_net_init+0x10/0x10 [ 129.627811][ T6318] ops_init+0x1df/0x5f0 [ 129.627861][ T6318] setup_net+0x21e/0x850 [ 129.627911][ T6318] ? __pfx_setup_net+0x10/0x10 [ 129.627953][ T6318] ? lockdep_init_map_type+0x5c/0x280 [ 129.627985][ T6318] ? __pfx_down_read_killable+0x10/0x10 [ 129.628020][ T6318] ? debug_mutex_init+0x37/0x70 [ 129.628065][ T6318] copy_net_ns+0x2a6/0x5f0 [ 129.628128][ T6318] create_new_namespaces+0x3ea/0xad0 [ 129.628185][ T6318] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 129.628237][ T6318] ksys_unshare+0x45b/0xa40 [ 129.628286][ T6318] ? __pfx_ksys_unshare+0x10/0x10 [ 129.628334][ T6318] ? xfd_validate_state+0x5d/0x180 [ 129.628372][ T6318] ? rcu_is_watching+0x12/0xc0 [ 129.628422][ T6318] __x64_sys_unshare+0x31/0x40 [ 129.628472][ T6318] do_syscall_64+0xcd/0x260 [ 129.628523][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.628554][ T6318] RIP: 0033:0x7f7a06d8d169 [ 129.628585][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.628617][ T6318] RSP: 002b:00007f7a07b93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 129.628647][ T6318] RAX: ffffffffffffffda RBX: 00007f7a06fa6240 RCX: 00007f7a06d8d169 [ 129.628667][ T6318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 129.628685][ T6318] RBP: 00007f7a06e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.628703][ T6318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.628721][ T6318] R13: 0000000000000000 R14: 00007f7a06fa6240 R15: 00007ffc71384058 [ 129.628762][ T6318] [ 129.896004][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.896022][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.896069][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.996123][ T6309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.003280][ T6309] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.009539][ T6309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.046720][ T6309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.674126][ T6332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.681283][ T6332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.689153][ T6332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.706027][ T6332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.233350][ T6356] [U] [ 132.236180][ T6356] [U] [ 132.238936][ T6356] [U] [ 132.241700][ T6356] [U] [ 132.254850][ T6356] [U] [ 132.257640][ T6356] [U] [ 132.260384][ T6356] [U] [ 132.263109][ T6356] [U] [ 132.271984][ T6356] [U] [ 132.274787][ T6356] [U] [ 132.277553][ T6356] [U] [ 132.280311][ T6356] [U] [ 132.309858][ T6356] [U] [ 132.312659][ T6356] [U] [ 132.315412][ T6356] [U] [ 132.318157][ T6356] [U] [ 132.336012][ T6356] [U] [ 132.338783][ T6356] [U] [ 132.341532][ T6356] [U] [ 132.344242][ T6356] [U] [ 132.348903][ T6356] [U] [ 132.351658][ T6356] [U] [ 132.354374][ T6356] [U] [ 132.357101][ T6356] [U] [ 132.372599][ T6356] [U] [ 132.375379][ T6356] [U] [ 132.378106][ T6356] [U] [ 132.380833][ T6356] [U] [ 132.414697][ T6356] [U] [ 132.417476][ T6356] [U] [ 132.420216][ T6356] [U] [ 132.422937][ T6356] [U] [ 132.447716][ T6356] [U] [ 132.450481][ T6356] [U] [ 132.453225][ T6356] [U] [ 132.455945][ T6356] [U] [ 132.468800][ T6356] [U] [ 132.471659][ T6356] [U] [ 132.474381][ T6356] [U] [ 132.477119][ T6356] [U] [ 132.501426][ T6356] [U] [ 132.504229][ T6356] [U] [ 132.506995][ T6356] [U] [ 132.509762][ T6356] [U] [ 132.515926][ T6356] [U] [ 132.518713][ T6356] [U] [ 132.521469][ T6356] [U] [ 132.524223][ T6356] [U] [ 132.547196][ T6356] [U] [ 132.549988][ T6356] [U] [ 132.552752][ T6356] [U] [ 132.555512][ T6356] [U] [ 132.607879][ T6356] [U] [ 132.610668][ T6356] [U] [ 132.613400][ T6356] [U] [ 132.616117][ T6356] [U] [ 132.657449][ T6356] [U] [ 132.660240][ T6356] [U] [ 132.662999][ T6356] [U] [ 132.665765][ T6356] [U] [ 132.675836][ T6356] [U] [ 132.678621][ T6356] [U] [ 132.681379][ T6356] [U] [ 132.684131][ T6356] [U] [ 132.689029][ T6356] [U] [ 132.691815][ T6356] [U] [ 132.694569][ T6356] [U] [ 132.697337][ T6356] [U] [ 132.701209][ T6356] [U] [ 132.703983][ T6356] [U] [ 132.706782][ T6356] [U] [ 132.709542][ T6356] [U] [ 132.713598][ T6356] [U] [ 132.716382][ T6356] [U] [ 132.719138][ T6356] [U] [ 132.721896][ T6356] [U] [ 132.725978][ T6356] [U] [ 132.728752][ T6356] [U] [ 132.731511][ T6356] [U] [ 132.734262][ T6356] [U] [ 132.822086][ T6356] [U] [ 132.824884][ T6356] [U] [ 132.827620][ T6356] [U] [ 132.830333][ T6356] [U] [ 132.865645][ T6356] [U] [ 132.868449][ T6356] [U] [ 132.871207][ T6356] [U] [ 132.873949][ T6356] [U] [ 133.055080][ T6356] [U] [ 133.057876][ T6356] [U] [ 133.060652][ T6356] [U] [ 133.063406][ T6356] [U] [ 133.115187][ T6356] [U] [ 133.241245][ T6358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.265417][ T6358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.279478][ T6358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.288864][ T6358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.505342][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.306730][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.312846][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.321449][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.506573][ T6382] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.513740][ T6382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.525613][ T6382] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.531985][ T6382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.745583][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.936910][ T30] audit: type=1400 audit(4294967330.570:4): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6420 comm="syz.3.104" [ 137.547311][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.553416][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.559646][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.032302][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.044925][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.134957][ T6443] FAULT_INJECTION: forcing a failure. [ 138.134957][ T6443] name failslab, interval 1, probability 0, space 0, times 0 [ 138.165225][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.2.117 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 138.165268][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.165286][ T6443] Call Trace: [ 138.165296][ T6443] [ 138.165307][ T6443] dump_stack_lvl+0x16c/0x1f0 [ 138.165359][ T6443] should_fail_ex+0x512/0x640 [ 138.165396][ T6443] ? __kmalloc_noprof+0xbf/0x510 [ 138.165450][ T6443] ? lsm_blob_alloc+0x68/0x90 [ 138.165496][ T6443] should_failslab+0xc2/0x120 [ 138.165528][ T6443] __kmalloc_noprof+0xd2/0x510 [ 138.165586][ T6443] lsm_blob_alloc+0x68/0x90 [ 138.165637][ T6443] security_sk_alloc+0x30/0x270 [ 138.165671][ T6443] sk_prot_alloc+0x1c7/0x2a0 [ 138.165725][ T6443] sk_alloc+0x36/0xc20 [ 138.165764][ T6443] __netlink_create+0x5e/0x2c0 [ 138.165806][ T6443] __netlink_kernel_create+0xed/0x750 [ 138.165856][ T6443] ? __pfx___netlink_kernel_create+0x10/0x10 [ 138.165915][ T6443] fib_net_init+0x26d/0x3f0 [ 138.165957][ T6443] ? __pfx___register_sysctl_table+0x10/0x10 [ 138.165994][ T6443] ? __pfx_fib_net_init+0x10/0x10 [ 138.166036][ T6443] ? lockdep_init_map_type+0x5c/0x280 [ 138.166067][ T6443] ? __pfx_nl_fib_input+0x10/0x10 [ 138.166118][ T6443] ? devinet_init_net+0x5c2/0x910 [ 138.166170][ T6443] ? __pfx_fib_net_init+0x10/0x10 [ 138.166221][ T6443] ops_init+0x1df/0x5f0 [ 138.166271][ T6443] setup_net+0x21e/0x850 [ 138.166322][ T6443] ? __pfx_setup_net+0x10/0x10 [ 138.166364][ T6443] ? lockdep_init_map_type+0x5c/0x280 [ 138.166395][ T6443] ? __pfx_down_read_killable+0x10/0x10 [ 138.166430][ T6443] ? debug_mutex_init+0x37/0x70 [ 138.166475][ T6443] copy_net_ns+0x2a6/0x5f0 [ 138.166529][ T6443] create_new_namespaces+0x3ea/0xad0 [ 138.166585][ T6443] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 138.166635][ T6443] ksys_unshare+0x45b/0xa40 [ 138.166685][ T6443] ? __pfx_ksys_unshare+0x10/0x10 [ 138.166731][ T6443] ? xfd_validate_state+0x5d/0x180 [ 138.166769][ T6443] ? rcu_is_watching+0x12/0xc0 [ 138.166818][ T6443] __x64_sys_unshare+0x31/0x40 [ 138.166867][ T6443] do_syscall_64+0xcd/0x260 [ 138.166917][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.166950][ T6443] RIP: 0033:0x7f711558d169 [ 138.166975][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.167004][ T6443] RSP: 002b:00007f711630e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 138.167033][ T6443] RAX: ffffffffffffffda RBX: 00007f71157a6240 RCX: 00007f711558d169 [ 138.167053][ T6443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 138.167070][ T6443] RBP: 00007f711560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 138.167088][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.167105][ T6443] R13: 0000000000000000 R14: 00007f71157a6240 R15: 00007ffdefac87e8 [ 138.167145][ T6443] [ 138.658888][ T6440] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.666822][ T6440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.673026][ T6440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.679267][ T6440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.505269][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.745817][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.751914][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.758054][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.480269][ T6475] FAULT_INJECTION: forcing a failure. [ 141.480269][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 141.517502][ T6480] netlink: 186 bytes leftover after parsing attributes in process `syz.3.124'. [ 141.536761][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.3.124 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 141.536809][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.536828][ T6475] Call Trace: [ 141.536839][ T6475] [ 141.536852][ T6475] dump_stack_lvl+0x16c/0x1f0 [ 141.536905][ T6475] should_fail_ex+0x512/0x640 [ 141.536942][ T6475] ? __kmalloc_noprof+0xbf/0x510 [ 141.537001][ T6475] ? tracepoint_add_func+0x2a6/0xea0 [ 141.537034][ T6475] should_failslab+0xc2/0x120 [ 141.537065][ T6475] __kmalloc_noprof+0xd2/0x510 [ 141.537120][ T6475] ? __pfx_trace_event_raw_event_nfsd_stateid_class+0x10/0x10 [ 141.537173][ T6475] tracepoint_add_func+0x2a6/0xea0 [ 141.537206][ T6475] ? __pfx_trace_event_raw_event_nfsd_stateid_class+0x10/0x10 [ 141.537267][ T6475] ? __pfx_trace_event_raw_event_nfsd_stateid_class+0x10/0x10 [ 141.537319][ T6475] tracepoint_probe_register+0xbf/0x100 [ 141.537355][ T6475] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 141.537392][ T6475] ? __pfx_trace_event_raw_event_nfsd_stateid_class+0x10/0x10 [ 141.537443][ T6475] ? __pfx_probe_sched_switch+0x10/0x10 [ 141.537479][ T6475] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.537515][ T6475] trace_event_reg+0x209/0x340 [ 141.537564][ T6475] __ftrace_event_enable_disable+0x29e/0x8b0 [ 141.537609][ T6475] __ftrace_set_clr_event_nolock+0x390/0xb70 [ 141.537660][ T6475] ftrace_set_clr_event+0x16e/0x330 [ 141.537702][ T6475] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 141.537757][ T6475] ftrace_event_write+0x243/0x290 [ 141.537797][ T6475] ? __pfx_ftrace_event_write+0x10/0x10 [ 141.537855][ T6475] vfs_write+0x25c/0x1180 [ 141.537897][ T6475] ? __pfx_ftrace_event_write+0x10/0x10 [ 141.537943][ T6475] ? __pfx___mutex_lock+0x10/0x10 [ 141.537995][ T6475] ? __pfx_vfs_write+0x10/0x10 [ 141.538054][ T6475] ? __fget_files+0x20e/0x3c0 [ 141.538114][ T6475] ksys_write+0x12a/0x240 [ 141.538159][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 141.538201][ T6475] ? rcu_is_watching+0x12/0xc0 [ 141.538255][ T6475] do_syscall_64+0xcd/0x260 [ 141.538306][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.538338][ T6475] RIP: 0033:0x7f7a06d8d169 [ 141.538365][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.538395][ T6475] RSP: 002b:00007f7a07bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.538424][ T6475] RAX: ffffffffffffffda RBX: 00007f7a06fa5fa0 RCX: 00007f7a06d8d169 [ 141.538444][ T6475] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 141.538462][ T6475] RBP: 00007f7a06e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.538481][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.538499][ T6475] R13: 0000000000000000 R14: 00007f7a06fa5fa0 R15: 00007ffc71384058 [ 141.538542][ T6475] [ 141.538558][ T6475] event trace: Could not enable event nfsd_deleg_write [ 142.273539][ T30] audit: type=1400 audit(4294967335.900:5): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6486 comm="syz.2.119" [ 144.637947][ T6537] netlink: 186 bytes leftover after parsing attributes in process `syz.1.131'. [ 144.661139][ T6538] FAULT_INJECTION: forcing a failure. [ 144.661139][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 144.675856][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.3.132 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 144.675895][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.675911][ T6538] Call Trace: [ 144.675920][ T6538] [ 144.675930][ T6538] dump_stack_lvl+0x16c/0x1f0 [ 144.675974][ T6538] should_fail_ex+0x512/0x640 [ 144.676011][ T6538] ? __kmalloc_noprof+0xbf/0x510 [ 144.676061][ T6538] ? lsm_blob_alloc+0x68/0x90 [ 144.676108][ T6538] should_failslab+0xc2/0x120 [ 144.676138][ T6538] __kmalloc_noprof+0xd2/0x510 [ 144.676194][ T6538] lsm_blob_alloc+0x68/0x90 [ 144.676241][ T6538] security_sk_alloc+0x30/0x270 [ 144.676275][ T6538] sk_prot_alloc+0x1c7/0x2a0 [ 144.676325][ T6538] sk_alloc+0x36/0xc20 [ 144.676362][ T6538] __netlink_create+0x5e/0x2c0 [ 144.676401][ T6538] __netlink_kernel_create+0xed/0x750 [ 144.676447][ T6538] ? __pfx___netlink_kernel_create+0x10/0x10 [ 144.676504][ T6538] fib_net_init+0x26d/0x3f0 [ 144.676543][ T6538] ? __pfx___register_sysctl_table+0x10/0x10 [ 144.676578][ T6538] ? __pfx_fib_net_init+0x10/0x10 [ 144.676618][ T6538] ? lockdep_init_map_type+0x5c/0x280 [ 144.676647][ T6538] ? __pfx_nl_fib_input+0x10/0x10 [ 144.676694][ T6538] ? devinet_init_net+0x5c2/0x910 [ 144.676754][ T6538] ? __pfx_fib_net_init+0x10/0x10 [ 144.676796][ T6538] ops_init+0x1df/0x5f0 [ 144.676845][ T6538] setup_net+0x21e/0x850 [ 144.676892][ T6538] ? __pfx_setup_net+0x10/0x10 [ 144.676942][ T6538] ? lockdep_init_map_type+0x5c/0x280 [ 144.676971][ T6538] ? __pfx_down_read_killable+0x10/0x10 [ 144.677004][ T6538] ? debug_mutex_init+0x37/0x70 [ 144.677046][ T6538] copy_net_ns+0x2a6/0x5f0 [ 144.677096][ T6538] create_new_namespaces+0x3ea/0xad0 [ 144.677150][ T6538] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 144.677197][ T6538] ksys_unshare+0x45b/0xa40 [ 144.677245][ T6538] ? __pfx_ksys_unshare+0x10/0x10 [ 144.677290][ T6538] ? xfd_validate_state+0x5d/0x180 [ 144.677326][ T6538] ? rcu_is_watching+0x12/0xc0 [ 144.677373][ T6538] __x64_sys_unshare+0x31/0x40 [ 144.677418][ T6538] do_syscall_64+0xcd/0x260 [ 144.677466][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.677495][ T6538] RIP: 0033:0x7f7a06d8d169 [ 144.677520][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.677548][ T6538] RSP: 002b:00007f7a07bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 144.677575][ T6538] RAX: ffffffffffffffda RBX: 00007f7a06fa6160 RCX: 00007f7a06d8d169 [ 144.677594][ T6538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 144.677612][ T6538] RBP: 00007f7a06e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.677630][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.677647][ T6538] R13: 0000000000000000 R14: 00007f7a06fa6160 R15: 00007ffc71384058 [ 144.677686][ T6538] [ 145.350536][ T6535] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.369451][ T6535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.377055][ T6535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.383321][ T6535] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.745238][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.385375][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.385419][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.391568][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.312778][ T6585] netlink: 186 bytes leftover after parsing attributes in process `syz.2.144'. [ 150.603274][ T6611] FAULT_INJECTION: forcing a failure. [ 150.603274][ T6611] name failslab, interval 1, probability 0, space 0, times 0 [ 150.658282][ T6613] FAULT_INJECTION: forcing a failure. [ 150.658282][ T6613] name failslab, interval 1, probability 0, space 0, times 0 [ 150.669111][ T6611] CPU: 1 UID: 0 PID: 6611 Comm: syz.3.158 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 150.669160][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.669178][ T6611] Call Trace: [ 150.669189][ T6611] [ 150.669201][ T6611] dump_stack_lvl+0x16c/0x1f0 [ 150.669253][ T6611] should_fail_ex+0x512/0x640 [ 150.669299][ T6611] ? fs_reclaim_acquire+0xae/0x150 [ 150.669345][ T6611] should_failslab+0xc2/0x120 [ 150.669377][ T6611] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 150.669430][ T6611] ? security_inode_alloc+0x3b/0x2b0 [ 150.669472][ T6611] security_inode_alloc+0x3b/0x2b0 [ 150.669510][ T6611] inode_init_always_gfp+0xce4/0x1030 [ 150.669569][ T6611] alloc_inode+0x86/0x240 [ 150.669607][ T6611] sock_alloc+0x40/0x280 [ 150.669657][ T6611] sock_create_lite+0x82/0x120 [ 150.669709][ T6611] __netlink_kernel_create+0xbd/0x750 [ 150.669755][ T6611] ? __kvmalloc_node_noprof+0x296/0x600 [ 150.669805][ T6611] ? __pfx___netlink_kernel_create+0x10/0x10 [ 150.669877][ T6611] fib_net_init+0x26d/0x3f0 [ 150.669917][ T6611] ? __pfx___register_sysctl_table+0x10/0x10 [ 150.669953][ T6611] ? __pfx_fib_net_init+0x10/0x10 [ 150.669994][ T6611] ? lockdep_init_map_type+0x5c/0x280 [ 150.670025][ T6611] ? __pfx_nl_fib_input+0x10/0x10 [ 150.670074][ T6611] ? devinet_init_net+0x5c2/0x910 [ 150.670124][ T6611] ? __pfx_fib_net_init+0x10/0x10 [ 150.670165][ T6611] ops_init+0x1df/0x5f0 [ 150.670211][ T6611] setup_net+0x21e/0x850 [ 150.670257][ T6611] ? __pfx_setup_net+0x10/0x10 [ 150.670304][ T6611] ? lockdep_init_map_type+0x5c/0x280 [ 150.670333][ T6611] ? __pfx_down_read_killable+0x10/0x10 [ 150.670367][ T6611] ? debug_mutex_init+0x37/0x70 [ 150.670412][ T6611] copy_net_ns+0x2a6/0x5f0 [ 150.670463][ T6611] create_new_namespaces+0x3ea/0xad0 [ 150.670516][ T6611] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 150.670564][ T6611] ksys_unshare+0x45b/0xa40 [ 150.670611][ T6611] ? __pfx_ksys_unshare+0x10/0x10 [ 150.670656][ T6611] ? xfd_validate_state+0x5d/0x180 [ 150.670692][ T6611] ? rcu_is_watching+0x12/0xc0 [ 150.670740][ T6611] __x64_sys_unshare+0x31/0x40 [ 150.670787][ T6611] do_syscall_64+0xcd/0x260 [ 150.670835][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.670866][ T6611] RIP: 0033:0x7f7a06d8d169 [ 150.670890][ T6611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.670917][ T6611] RSP: 002b:00007f7a07bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 150.670942][ T6611] RAX: ffffffffffffffda RBX: 00007f7a06fa6160 RCX: 00007f7a06d8d169 [ 150.670959][ T6611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 150.670974][ T6611] RBP: 00007f7a06e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 150.670989][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.671004][ T6611] R13: 0000000000000000 R14: 00007f7a06fa6160 R15: 00007ffc71384058 [ 150.671039][ T6611] [ 151.069120][ T6613] CPU: 1 UID: 0 PID: 6613 Comm: syz.0.147 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 151.069162][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.069180][ T6613] Call Trace: [ 151.069190][ T6613] [ 151.069201][ T6613] dump_stack_lvl+0x16c/0x1f0 [ 151.069251][ T6613] should_fail_ex+0x512/0x640 [ 151.069300][ T6613] ? fs_reclaim_acquire+0xae/0x150 [ 151.069343][ T6613] should_failslab+0xc2/0x120 [ 151.069372][ T6613] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 151.069423][ T6613] ? security_inode_alloc+0x3b/0x2b0 [ 151.069463][ T6613] security_inode_alloc+0x3b/0x2b0 [ 151.069499][ T6613] inode_init_always_gfp+0xce4/0x1030 [ 151.069554][ T6613] alloc_inode+0x86/0x240 [ 151.069590][ T6613] sock_alloc+0x40/0x280 [ 151.069638][ T6613] sock_create_lite+0x82/0x120 [ 151.069689][ T6613] __netlink_kernel_create+0xbd/0x750 [ 151.069734][ T6613] ? __kvmalloc_node_noprof+0x296/0x600 [ 151.069781][ T6613] ? __pfx___netlink_kernel_create+0x10/0x10 [ 151.069840][ T6613] fib_net_init+0x26d/0x3f0 [ 151.069884][ T6613] ? __pfx___register_sysctl_table+0x10/0x10 [ 151.069922][ T6613] ? __pfx_fib_net_init+0x10/0x10 [ 151.069964][ T6613] ? lockdep_init_map_type+0x5c/0x280 [ 151.069996][ T6613] ? __pfx_nl_fib_input+0x10/0x10 [ 151.070046][ T6613] ? devinet_init_net+0x5c2/0x910 [ 151.070097][ T6613] ? __pfx_fib_net_init+0x10/0x10 [ 151.070138][ T6613] ops_init+0x1df/0x5f0 [ 151.070188][ T6613] setup_net+0x21e/0x850 [ 151.070237][ T6613] ? __pfx_setup_net+0x10/0x10 [ 151.070285][ T6613] ? lockdep_init_map_type+0x5c/0x280 [ 151.070316][ T6613] ? __pfx_down_read_killable+0x10/0x10 [ 151.070350][ T6613] ? debug_mutex_init+0x37/0x70 [ 151.070395][ T6613] copy_net_ns+0x2a6/0x5f0 [ 151.070447][ T6613] create_new_namespaces+0x3ea/0xad0 [ 151.070503][ T6613] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 151.070553][ T6613] ksys_unshare+0x45b/0xa40 [ 151.070604][ T6613] ? __pfx_ksys_unshare+0x10/0x10 [ 151.070650][ T6613] ? xfd_validate_state+0x5d/0x180 [ 151.070688][ T6613] ? rcu_is_watching+0x12/0xc0 [ 151.070738][ T6613] __x64_sys_unshare+0x31/0x40 [ 151.070786][ T6613] do_syscall_64+0xcd/0x260 [ 151.070836][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.070867][ T6613] RIP: 0033:0x7f41fdb8d169 [ 151.070892][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.070920][ T6613] RSP: 002b:00007f41fb5f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 151.070948][ T6613] RAX: ffffffffffffffda RBX: 00007f41fdda6240 RCX: 00007f41fdb8d169 [ 151.070967][ T6613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 151.070983][ T6613] RBP: 00007f41fdc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.071000][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.071016][ T6613] R13: 0000000000000000 R14: 00007f41fdda6240 R15: 00007fff80a0aae8 [ 151.071055][ T6613] [ 151.335395][ T6608] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.475450][ T6608] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.482399][ T6608] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.545608][ T6608] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.233973][ T6622] FAULT_INJECTION: forcing a failure. [ 152.233973][ T6622] name fail_futex, interval 1, probability 0, space 0, times 1 [ 152.254086][ T6622] CPU: 0 UID: 0 PID: 6622 Comm: syz.3.150 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 152.254133][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.254153][ T6622] Call Trace: [ 152.254163][ T6622] [ 152.254175][ T6622] dump_stack_lvl+0x16c/0x1f0 [ 152.254236][ T6622] should_fail_ex+0x512/0x640 [ 152.254280][ T6622] get_futex_key+0x49e/0x1000 [ 152.254332][ T6622] ? __pfx_get_futex_key+0x10/0x10 [ 152.254391][ T6622] futex_wake+0xe7/0x4e0 [ 152.254425][ T6622] ? __pfx_futex_wake+0x10/0x10 [ 152.254459][ T6622] ? kmem_cache_free+0x2d4/0x4d0 [ 152.254505][ T6622] ? fd_install+0x225/0x750 [ 152.254547][ T6622] ? putname+0x154/0x1a0 [ 152.254585][ T6622] do_futex+0x1e3/0x350 [ 152.254632][ T6622] ? __pfx_do_futex+0x10/0x10 [ 152.254690][ T6622] __x64_sys_futex+0x1e0/0x4c0 [ 152.254739][ T6622] ? __x64_sys_openat+0x174/0x210 [ 152.254774][ T6622] ? __pfx___x64_sys_futex+0x10/0x10 [ 152.254824][ T6622] ? rcu_is_watching+0x12/0xc0 [ 152.254875][ T6622] do_syscall_64+0xcd/0x260 [ 152.254925][ T6622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.254957][ T6622] RIP: 0033:0x7f7a06d8d169 [ 152.254982][ T6622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.255011][ T6622] RSP: 002b:00007f7a07bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.255040][ T6622] RAX: ffffffffffffffda RBX: 00007f7a06fa5fa8 RCX: 00007f7a06d8d169 [ 152.255060][ T6622] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a06fa5fac [ 152.255084][ T6622] RBP: 00007f7a06fa5fa0 R08: 00007f7a07bf7000 R09: 0000000000000000 [ 152.255102][ T6622] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f7a06fa5fac [ 152.255121][ T6622] R13: 0000000000000000 R14: 00007ffc71383f70 R15: 00007ffc71384058 [ 152.255159][ T6622] [ 152.439495][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.585394][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.401534][ T6646] FAULT_INJECTION: forcing a failure. [ 153.401534][ T6646] name failslab, interval 1, probability 0, space 0, times 0 [ 153.475334][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.3.159 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 153.475378][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.475396][ T6646] Call Trace: [ 153.475404][ T6646] [ 153.475412][ T6646] dump_stack_lvl+0x16c/0x1f0 [ 153.475450][ T6646] should_fail_ex+0x512/0x640 [ 153.475477][ T6646] ? fs_reclaim_acquire+0xae/0x150 [ 153.475508][ T6646] should_failslab+0xc2/0x120 [ 153.475530][ T6646] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 153.475568][ T6646] ? security_inode_alloc+0x3b/0x2b0 [ 153.475597][ T6646] security_inode_alloc+0x3b/0x2b0 [ 153.475624][ T6646] inode_init_always_gfp+0xce4/0x1030 [ 153.475665][ T6646] alloc_inode+0x86/0x240 [ 153.475691][ T6646] sock_alloc+0x40/0x280 [ 153.475727][ T6646] sock_create_lite+0x82/0x120 [ 153.475764][ T6646] __netlink_kernel_create+0xbd/0x750 [ 153.475797][ T6646] ? __kvmalloc_node_noprof+0x296/0x600 [ 153.475833][ T6646] ? __pfx___netlink_kernel_create+0x10/0x10 [ 153.475877][ T6646] fib_net_init+0x26d/0x3f0 [ 153.475908][ T6646] ? __pfx___register_sysctl_table+0x10/0x10 [ 153.475936][ T6646] ? __pfx_fib_net_init+0x10/0x10 [ 153.475967][ T6646] ? lockdep_init_map_type+0x5c/0x280 [ 153.475990][ T6646] ? __pfx_nl_fib_input+0x10/0x10 [ 153.476027][ T6646] ? devinet_init_net+0x5c2/0x910 [ 153.476065][ T6646] ? __pfx_fib_net_init+0x10/0x10 [ 153.476102][ T6646] ops_init+0x1df/0x5f0 [ 153.476139][ T6646] setup_net+0x21e/0x850 [ 153.476175][ T6646] ? __pfx_setup_net+0x10/0x10 [ 153.476206][ T6646] ? lockdep_init_map_type+0x5c/0x280 [ 153.476228][ T6646] ? __pfx_down_read_killable+0x10/0x10 [ 153.476254][ T6646] ? debug_mutex_init+0x37/0x70 [ 153.476286][ T6646] copy_net_ns+0x2a6/0x5f0 [ 153.476325][ T6646] create_new_namespaces+0x3ea/0xad0 [ 153.476368][ T6646] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 153.476405][ T6646] ksys_unshare+0x45b/0xa40 [ 153.476442][ T6646] ? __pfx_ksys_unshare+0x10/0x10 [ 153.476482][ T6646] ? xfd_validate_state+0x5d/0x180 [ 153.476518][ T6646] ? rcu_is_watching+0x12/0xc0 [ 153.476569][ T6646] __x64_sys_unshare+0x31/0x40 [ 153.476618][ T6646] do_syscall_64+0xcd/0x260 [ 153.476661][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.476685][ T6646] RIP: 0033:0x7f7a06d8d169 [ 153.476702][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.476725][ T6646] RSP: 002b:00007f7a07bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 153.476746][ T6646] RAX: ffffffffffffffda RBX: 00007f7a06fa6160 RCX: 00007f7a06d8d169 [ 153.476762][ T6646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 153.476776][ T6646] RBP: 00007f7a06e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.476790][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.476803][ T6646] R13: 0000000000000000 R14: 00007f7a06fa6160 R15: 00007ffc71384058 [ 153.476832][ T6646] [ 153.773683][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.786725][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.792873][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.799074][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.967055][ T6653] FAULT_INJECTION: forcing a failure. [ 153.967055][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 154.028133][ T6653] CPU: 1 UID: 0 PID: 6653 Comm: syz.0.161 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 154.028179][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.028199][ T6653] Call Trace: [ 154.028214][ T6653] [ 154.028226][ T6653] dump_stack_lvl+0x16c/0x1f0 [ 154.028280][ T6653] should_fail_ex+0x512/0x640 [ 154.028332][ T6653] ? fs_reclaim_acquire+0xae/0x150 [ 154.028376][ T6653] should_failslab+0xc2/0x120 [ 154.028411][ T6653] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 154.028463][ T6653] ? security_inode_alloc+0x3b/0x2b0 [ 154.028507][ T6653] security_inode_alloc+0x3b/0x2b0 [ 154.028545][ T6653] inode_init_always_gfp+0xce4/0x1030 [ 154.028603][ T6653] alloc_inode+0x86/0x240 [ 154.028640][ T6653] sock_alloc+0x40/0x280 [ 154.028692][ T6653] sock_create_lite+0x82/0x120 [ 154.028744][ T6653] __netlink_kernel_create+0xbd/0x750 [ 154.028793][ T6653] ? __kvmalloc_node_noprof+0x296/0x600 [ 154.028846][ T6653] ? __pfx___netlink_kernel_create+0x10/0x10 [ 154.028907][ T6653] fib_net_init+0x26d/0x3f0 [ 154.028954][ T6653] ? __pfx___register_sysctl_table+0x10/0x10 [ 154.028996][ T6653] ? __pfx_fib_net_init+0x10/0x10 [ 154.029039][ T6653] ? lockdep_init_map_type+0x5c/0x280 [ 154.029073][ T6653] ? __pfx_nl_fib_input+0x10/0x10 [ 154.029126][ T6653] ? devinet_init_net+0x5c2/0x910 [ 154.029181][ T6653] ? __pfx_fib_net_init+0x10/0x10 [ 154.029224][ T6653] ops_init+0x1df/0x5f0 [ 154.029276][ T6653] setup_net+0x21e/0x850 [ 154.029335][ T6653] ? __pfx_setup_net+0x10/0x10 [ 154.029379][ T6653] ? lockdep_init_map_type+0x5c/0x280 [ 154.029415][ T6653] ? __pfx_down_read_killable+0x10/0x10 [ 154.029463][ T6653] ? debug_mutex_init+0x37/0x70 [ 154.029511][ T6653] copy_net_ns+0x2a6/0x5f0 [ 154.029564][ T6653] create_new_namespaces+0x3ea/0xad0 [ 154.029623][ T6653] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 154.029674][ T6653] ksys_unshare+0x45b/0xa40 [ 154.029725][ T6653] ? __pfx_ksys_unshare+0x10/0x10 [ 154.029776][ T6653] ? xfd_validate_state+0x5d/0x180 [ 154.029814][ T6653] ? rcu_is_watching+0x12/0xc0 [ 154.029867][ T6653] __x64_sys_unshare+0x31/0x40 [ 154.029914][ T6653] do_syscall_64+0xcd/0x260 [ 154.029967][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.029997][ T6653] RIP: 0033:0x7f41fdb8d169 [ 154.030022][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.030056][ T6653] RSP: 002b:00007f41fb5f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 154.030086][ T6653] RAX: ffffffffffffffda RBX: 00007f41fdda6240 RCX: 00007f41fdb8d169 [ 154.030125][ T6653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 154.030144][ T6653] RBP: 00007f41fdc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.030168][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.030185][ T6653] R13: 0000000000000000 R14: 00007f41fdda6240 R15: 00007fff80a0aae8 [ 154.030226][ T6653] [ 154.277878][ T6644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.424835][ T6644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.442812][ T6644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.466635][ T6644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.225601][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.561797][ T6662] ubi: mtd0 is already attached to ubi0 [ 156.505401][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.525221][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.525229][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.640185][ T6671] ima: policy update failed [ 157.647831][ T30] audit: type=1802 audit(4294967351.270:6): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.174" res=0 errno=0 [ 157.998888][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.169'. [ 158.112130][ T6703] bond0: (slave bond_slave_0): Releasing backup interface [ 158.287185][ T6708] FAULT_INJECTION: forcing a failure. [ 158.287185][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 158.327044][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.0.172 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 158.327089][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.327107][ T6708] Call Trace: [ 158.327117][ T6708] [ 158.327129][ T6708] dump_stack_lvl+0x16c/0x1f0 [ 158.327180][ T6708] should_fail_ex+0x512/0x640 [ 158.327215][ T6708] ? __kmalloc_noprof+0xbf/0x510 [ 158.327265][ T6708] ? lsm_blob_alloc+0x68/0x90 [ 158.327310][ T6708] should_failslab+0xc2/0x120 [ 158.327339][ T6708] __kmalloc_noprof+0xd2/0x510 [ 158.327403][ T6708] lsm_blob_alloc+0x68/0x90 [ 158.327452][ T6708] security_sk_alloc+0x30/0x270 [ 158.327488][ T6708] sk_prot_alloc+0x1c7/0x2a0 [ 158.327540][ T6708] sk_alloc+0x36/0xc20 [ 158.327578][ T6708] __netlink_create+0x5e/0x2c0 [ 158.327619][ T6708] __netlink_kernel_create+0xed/0x750 [ 158.327668][ T6708] ? __pfx___netlink_kernel_create+0x10/0x10 [ 158.327735][ T6708] fib_net_init+0x26d/0x3f0 [ 158.327778][ T6708] ? __pfx___register_sysctl_table+0x10/0x10 [ 158.327813][ T6708] ? __pfx_fib_net_init+0x10/0x10 [ 158.327855][ T6708] ? lockdep_init_map_type+0x5c/0x280 [ 158.327904][ T6708] ? __pfx_nl_fib_input+0x10/0x10 [ 158.327949][ T6708] ? devinet_init_net+0x5c2/0x910 [ 158.328007][ T6708] ? __pfx_fib_net_init+0x10/0x10 [ 158.328046][ T6708] ops_init+0x1df/0x5f0 [ 158.328088][ T6708] setup_net+0x21e/0x850 [ 158.328129][ T6708] ? __pfx_setup_net+0x10/0x10 [ 158.328164][ T6708] ? lockdep_init_map_type+0x5c/0x280 [ 158.328191][ T6708] ? __pfx_down_read_killable+0x10/0x10 [ 158.328220][ T6708] ? debug_mutex_init+0x37/0x70 [ 158.328258][ T6708] copy_net_ns+0x2a6/0x5f0 [ 158.328321][ T6708] create_new_namespaces+0x3ea/0xad0 [ 158.328371][ T6708] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 158.328427][ T6708] ksys_unshare+0x45b/0xa40 [ 158.328469][ T6708] ? __pfx_ksys_unshare+0x10/0x10 [ 158.328510][ T6708] ? xfd_validate_state+0x5d/0x180 [ 158.328542][ T6708] ? rcu_is_watching+0x12/0xc0 [ 158.328583][ T6708] __x64_sys_unshare+0x31/0x40 [ 158.328624][ T6708] do_syscall_64+0xcd/0x260 [ 158.328668][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.328695][ T6708] RIP: 0033:0x7f41fdb8d169 [ 158.328722][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.328767][ T6708] RSP: 002b:00007f41fe908038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 158.328801][ T6708] RAX: ffffffffffffffda RBX: 00007f41fdda6160 RCX: 00007f41fdb8d169 [ 158.328820][ T6708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 158.328837][ T6708] RBP: 00007f41fdc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.328853][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.328870][ T6708] R13: 0000000000000000 R14: 00007f41fdda6160 R15: 00007fff80a0aae8 [ 158.328907][ T6708] [ 158.909348][ T6707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.917864][ T6707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.924088][ T6707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.931044][ T6707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.919718][ T6733] ip_vti0: entered allmulticast mode [ 160.358387][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout syzkaller syzkaller login: [ 160.985384][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.991574][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.998383][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.894811][ T6745] ima: policy update failed [ 161.900717][ T30] audit: type=1802 audit(4294967355.530:7): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.180" res=0 errno=0 [ 162.157517][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 162.261669][ T6774] openvswitch: netlink: Key type 248 is out of range max 32 [ 162.329820][ T6772] bond0: (slave bond_slave_0): Releasing backup interface [ 163.520266][ T5158] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 163.520304][ T5158] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 163.536205][ T5158] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 163.539459][ T5158] Bluetooth: hci1: adv larger than maximum supported [ 163.547880][ T5158] Bluetooth: hci1: adv larger than maximum supported [ 163.554641][ T5158] Bluetooth: hci1: Malformed LE Event: 0x0d [ 163.635044][ T6797] netlink: 330 bytes leftover after parsing attributes in process `syz.3.197'. [ 164.194369][ T6813] openvswitch: netlink: Key type 248 is out of range max 32 [ 164.935472][ T6813] bond0: option all_slaves_active: invalid value (0x00060000) [ 165.047852][ T6825] ip_vti0: entered allmulticast mode [ 165.654774][ T5158] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 165.654821][ T5158] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 165.671439][ T5158] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 165.671493][ T5158] Bluetooth: hci2: adv larger than maximum supported [ 165.678862][ T5158] Bluetooth: hci2: adv larger than maximum supported [ 165.685629][ T5158] Bluetooth: hci2: Malformed LE Event: 0x0d [ 165.781356][ T6845] netlink: 330 bytes leftover after parsing attributes in process `syz.1.211'. [ 168.683519][ T6868] Invalid ELF header magic: != ELF [ 169.997028][ T5158] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 169.997067][ T5158] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 170.012701][ T5158] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 170.012755][ T5158] Bluetooth: hci3: adv larger than maximum supported [ 170.020447][ T5158] Bluetooth: hci3: adv larger than maximum supported [ 170.029693][ T5158] Bluetooth: hci3: Malformed LE Event: 0x0d [ 170.127596][ T6901] netlink: 330 bytes leftover after parsing attributes in process `syz.2.223'. [ 170.291574][ T6900] zswap: compressor not available [ 170.454295][ T6910] MTRR 1 not used [ 172.381727][ T6941] Invalid ELF header magic: != ELF [ 172.569950][ T6947] tipc: Started in network mode [ 172.600455][ T6947] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 172.631430][ T6947] tipc: Node number set to 2387504917 [ 175.193580][ T6986] tipc: Started in network mode [ 175.200220][ T6986] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 175.207959][ T6986] tipc: Node number set to 2387504917 [ 175.772858][ T6996] Invalid ELF header magic: != ELF [ 177.077673][ T7027] tipc: Started in network mode [ 177.083141][ T7027] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 177.097626][ T7027] tipc: Node number set to 2387504917 [ 177.667257][ T7033] Invalid ELF header magic: != ELF [ 179.672644][ T7107] Invalid ELF header magic: != ELF [ 180.247115][ T7119] netlink: 'syz.2.297': attribute type 2 has an invalid length. [ 182.050024][ T7167] Invalid ELF header magic: != ELF [ 182.538265][ T7176] Invalid ELF header magic: != ELF [ 183.456250][ T7209] mmap: syz.3.322 (7209) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.275744][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.334'. [ 185.486859][ T7251] team0: Port device team_slave_0 removed [ 185.630843][ T7255] Invalid ELF header magic: != ELF [ 186.442700][ T5158] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 189.898038][ T7345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.942124][ T7345] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 190.504754][ T7358] unsupported nla_type 32969 [ 190.907635][ T7345] syz.1.361 (7345) used greatest stack depth: 21384 bytes left [ 192.032946][ T7388] erspan0: entered allmulticast mode [ 192.434441][ T7401] netlink: 338 bytes leftover after parsing attributes in process `syz.3.380'. [ 192.476291][ T7401] netlink: 338 bytes leftover after parsing attributes in process `syz.3.380'. [ 192.615155][ T7401] netlink: 290 bytes leftover after parsing attributes in process `syz.3.380'. [ 192.624219][ T7401] veth0_macvtap: left promiscuous mode [ 193.987890][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.391'. [ 194.357474][ T7446] bond0: (slave bond_slave_0): Releasing backup interface [ 196.386715][ T7486] netlink: 'syz.1.406': attribute type 29 has an invalid length. [ 196.405411][ T7486] netlink: 'syz.1.406': attribute type 29 has an invalid length. [ 196.771672][ T7501] hugetlbfs: syz.1.413 (7501): Using mlock ulimits for SHM_HUGETLB is obsolete [ 196.853996][ T7499] erspan0: entered allmulticast mode [ 197.821381][ T7535] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.471620][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.478520][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.020260][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'. [ 200.533106][ T7585] kexec: Could not allocate control_code_buffer [ 202.584372][ T30] audit: type=1326 audit(4294967323.201:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7671 comm="syz.1.461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd8a78d169 code=0x0 [ 203.303316][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.464'. [ 203.323878][ T7688] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 205.304091][ T7731] syz.3.476 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 211.833999][ T7881] netlink: 338 bytes leftover after parsing attributes in process `syz.3.517'. [ 211.872075][ T7881] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 212.304931][ T7860] kexec: Could not allocate control_code_buffer [ 212.599354][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 218.125697][ T7973] erspan0: entered allmulticast mode [ 221.781041][ T30] audit: type=1326 audit(4294967342.394:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.0.557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41fdb8d169 code=0x0 [ 222.807412][ T8060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 225.642868][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 226.840769][ T8124] netlink: 338 bytes leftover after parsing attributes in process `syz.1.580'. [ 226.962551][ T8124] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 228.009834][ T5158] Bluetooth: hci3: ISO packet too small [ 228.017094][ T5158] Bluetooth: hci3: ISO packet too small [ 229.151719][ T8191] netlink: 338 bytes leftover after parsing attributes in process `syz.2.600'. [ 229.176211][ T8191] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 230.316627][ T5158] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 233.026627][ T8279] openvswitch: netlink: Key type 248 is out of range max 32 [ 234.331084][ T8298] openvswitch: netlink: Key type 248 is out of range max 32 [ 237.274026][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 240.997137][ T8418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 241.192657][ T8424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'. [ 241.627695][ T8418] team0: Port device team_slave_0 removed [ 242.097447][ T8433] bridge0: port 3(gretap0) entered blocking state [ 242.104202][ T8433] bridge0: port 3(gretap0) entered disabled state [ 242.138454][ T8433] gretap0: entered allmulticast mode [ 242.185716][ T8433] gretap0: entered promiscuous mode [ 242.216883][ T8433] bridge0: port 3(gretap0) entered blocking state [ 242.224438][ T8433] bridge0: port 3(gretap0) entered forwarding state [ 244.389091][ T8475] netlink: 342 bytes leftover after parsing attributes in process `syz.2.682'. [ 244.417071][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'. [ 249.789411][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 250.169326][ T8485] kexec: Could not allocate control_code_buffer [ 260.910371][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.916919][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.381245][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 263.714508][ T8751] netlink: 36 bytes leftover after parsing attributes in process `syz.0.752'. [ 263.769582][ T8747] netlink: 50 bytes leftover after parsing attributes in process `syz.0.752'. [ 265.184631][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.759'. [ 265.522864][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 266.143727][ T8783] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 266.176782][ T8783] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 266.314729][ T8797] netlink: 'syz.2.769': attribute type 2 has an invalid length. [ 266.337940][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 266.730687][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 268.134988][ T8840] Invalid ELF header magic: != ELF [ 270.748932][ T8878] kexec: Could not allocate control_code_buffer [ 276.894542][ T9048] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 276.955393][ T9048] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 278.557004][ T9050] kexec: Could not allocate control_code_buffer [ 281.564063][ T9117] kexec: Could not allocate control_code_buffer [ 281.897317][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.874'. [ 285.300721][ T9185] kexec: Could not allocate control_code_buffer [ 290.545806][ T9301] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 292.744760][ T9327] netlink: 'syz.2.923': attribute type 2 has an invalid length. [ 293.172399][ T9339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.930'. [ 293.367144][ T9346] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 293.451601][ T9339] team0: Port device team_slave_0 removed [ 295.537383][ T9384] bridge0: port 3(netdevsim2) entered blocking state [ 295.578660][ T9384] bridge0: port 3(netdevsim2) entered disabled state [ 295.613885][ T9384] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 295.699391][ T9384] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 295.719244][ T9384] bridge0: port 3(netdevsim2) entered blocking state [ 295.726164][ T9384] bridge0: port 3(netdevsim2) entered forwarding state [ 297.989327][ T9465] can: request_module (can-proto-0) failed. [ 299.963627][ T9527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'. [ 300.608386][ T9531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.984'. [ 300.876808][ T9531] bond0: (slave bond_slave_1): Releasing backup interface [ 301.317057][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.994'. [ 303.646279][ T9621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 303.742472][ T9621] team0: Port device team_slave_0 removed [ 303.753036][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 303.880468][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'. [ 305.453260][ T9633] kexec: Could not allocate control_code_buffer [ 307.935941][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1027'. [ 310.931834][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'. [ 311.377487][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1061'. [ 311.443619][ T9802] hsr_slave_0: left promiscuous mode [ 311.454664][ T9802] hsr_slave_1: left promiscuous mode [ 315.274178][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 317.726687][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1090'. [ 318.467418][ T9923] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[9923] [ 319.279304][ T9958] openvswitch: netlink: Key type 248 is out of range max 32 [ 319.485606][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 320.064824][ T5158] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 320.859204][T10018] HfR: entered promiscuous mode [ 321.231005][ T5158] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 321.253859][T10031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1129'. [ 322.350855][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.357379][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.847906][ T5158] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 323.631806][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1145'. [ 323.973090][T10100] Invalid ELF header magic: != ELF [ 323.996088][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 324.351552][ T5158] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 324.362904][T10114] bridge0: port 4(gretap0) entered blocking state [ 324.412944][T10114] bridge0: port 4(gretap0) entered disabled state [ 324.486317][T10114] gretap0: entered allmulticast mode [ 324.529253][T10114] gretap0: entered promiscuous mode [ 324.565638][T10114] bridge0: port 4(gretap0) entered blocking state [ 324.572236][T10114] bridge0: port 4(gretap0) entered forwarding state [ 325.241193][T10124] bridge0: port 3(gretap0) entered blocking state [ 325.255604][T10124] bridge0: port 3(gretap0) entered disabled state [ 325.262329][T10124] gretap0: entered allmulticast mode [ 325.279704][T10124] gretap0: entered promiscuous mode [ 325.285838][T10124] bridge0: port 3(gretap0) entered blocking state [ 325.292442][T10124] bridge0: port 3(gretap0) entered forwarding state [ 325.610169][T10138] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1153'. [ 326.178340][T10158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1155'. [ 327.251139][T10196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1171'. [ 329.036742][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1183'. [ 330.545161][T10273] netlink: 222 bytes leftover after parsing attributes in process `syz.0.1190'. [ 331.756685][T10294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'. [ 333.114847][T10328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1206'. [ 336.956057][T10395] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 337.004051][T10395] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 337.015623][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 337.093207][T10399] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1222'. [ 339.749094][ T2992] tipc: Subscription rejected, illegal request [ 341.225696][T10469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1244'. [ 341.402354][T10477] netlink: 222 bytes leftover after parsing attributes in process `syz.3.1246'. [ 344.409889][T10526] Invalid ELF header magic: != ELF [ 344.734851][ T5158] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 346.111441][T10543] netlink: 222 bytes leftover after parsing attributes in process `syz.2.1262'. [ 346.364828][ T5158] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 352.518270][ T5158] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 355.888117][T10635] kexec: Could not allocate control_code_buffer [ 356.044272][ T5158] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 357.386155][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1298'. [ 357.658138][T10674] could not allocate digest TFM handle [ 358.209271][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 358.913665][ T5158] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 359.204597][T10708] ======================================================= [ 359.204597][T10708] WARNING: The mand mount option has been deprecated and [ 359.204597][T10708] and is ignored by this kernel. Remove the mand [ 359.204597][T10708] option from the mount to silence this warning. [ 359.204597][T10708] ======================================================= [ 359.319941][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1310'. [ 359.914801][T10719] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 359.935428][T10719] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 361.086680][ T5158] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 361.342648][T10761] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 361.436538][T10761] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 361.954888][T10726] Process accounting resumed [ 362.223171][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'. [ 362.331538][T10782] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 362.371772][T10782] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 362.628500][T10787] can: request_module (can-proto-5) failed. [ 365.166279][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'. [ 365.656168][ T5158] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 366.325623][T10890] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1356'. [ 366.378233][T10894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1358'. [ 366.861239][T10904] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1362'. [ 367.111724][ T5158] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 367.525075][T10927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'. [ 367.532826][T10930] netlink: 'syz.2.1369': attribute type 2 has an invalid length. [ 367.841260][T10942] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 367.869139][T10942] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 367.991822][T10948] raw_sendmsg: syz.3.1372 forgot to set AF_INET. Fix it! [ 368.894493][T10958] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1375'. [ 369.232754][ T5158] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 369.362276][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1379'. [ 369.538618][T10977] netlink: 'syz.0.1380': attribute type 2 has an invalid length. [ 369.772830][T10985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1385'. [ 369.973709][T10982] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 370.013981][T10982] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 370.805199][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'. [ 372.127438][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 372.665736][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1404'. [ 373.401459][T11065] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1410'. [ 373.776763][ T5158] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 374.009517][T11081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1421'. [ 374.590779][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1416'. [ 375.204643][T11112] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1422'. [ 375.232571][ T5158] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 375.242019][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1424'. [ 375.510579][T11121] block nbd0: not configured, cannot reconfigure [ 375.565290][T11121] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1434'. [ 376.161023][ T5158] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 376.564757][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1437'. [ 376.871756][T11163] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1440'. [ 376.952326][T11163] netlink: 298 bytes leftover after parsing attributes in process `syz.3.1440'. [ 377.919683][T11180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1445'. [ 378.264578][ T5158] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 379.031104][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 380.678422][ T30] audit: type=1800 audit(4294967544.665:10): pid=11221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1457" name="file0" dev="tmpfs" ino=1845 res=0 errno=0 [ 381.432437][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 382.325344][ T5158] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 383.812057][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.818729][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.609189][ T5158] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 384.688432][T11277] kexec: Could not allocate control_code_buffer [ 384.963357][T11322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1484'. [ 385.019140][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1485'. [ 386.300713][ T5158] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 387.111845][T11385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1495'. [ 387.869268][T11411] nbd: must specify a size in bytes for the device [ 388.377914][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 388.627451][T11429] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1506'. [ 388.677011][T11429] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1506'. [ 389.098684][T11444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1508'. [ 389.818756][T11455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1511'. [ 389.887169][T11458] openvswitch: netlink: Message has 4 unknown bytes. [ 391.651509][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1520'. [ 394.381313][T11545] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1537'. [ 394.413432][T11545] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1537'. [ 394.495656][T11548] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1537'. [ 394.684414][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1539'. [ 394.933347][T11556] svc: failed to register nfsdv3 RPC service (errno 111). [ 394.960363][T11556] svc: failed to register nfsaclv3 RPC service (errno 111). [ 395.194132][T11570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1545'. [ 396.195168][T11604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1553'. [ 396.404933][T11601] can: request_module (can-proto-5) failed. [ 396.820507][T11618] svc: failed to register nfsdv3 RPC service (errno 111). [ 396.854489][T11618] svc: failed to register nfsaclv3 RPC service (errno 111). [ 396.884573][T11624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1557'. [ 399.307397][ T5158] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 400.011500][T11702] Invalid ELF header magic: != ELF [ 400.021830][T11711] HfR: entered promiscuous mode [ 400.110085][T11702] Invalid ELF header magic: != ELF [ 400.111829][T11661] kexec: Could not allocate control_code_buffer [ 400.137070][T11702] Invalid ELF header magic: != ELF [ 400.166716][T11702] Invalid ELF header magic: != ELF [ 400.182137][T11702] Invalid ELF header magic: != ELF [ 400.196893][T11702] Invalid ELF header magic: != ELF [ 400.211148][T11702] Invalid ELF header magic: != ELF [ 400.225521][T11702] Invalid ELF header magic: != ELF [ 400.240010][T11702] Invalid ELF header magic: != ELF [ 400.255324][T11702] Invalid ELF header magic: != ELF [ 400.269837][T11702] Invalid ELF header magic: != ELF [ 400.285487][T11702] Invalid ELF header magic: != ELF [ 400.300254][T11702] Invalid ELF header magic: != ELF [ 400.314733][T11702] Invalid ELF header magic: != ELF [ 400.329334][T11702] Invalid ELF header magic: != ELF [ 400.350800][T11702] Invalid ELF header magic: != ELF [ 400.377792][T11702] Invalid ELF header magic: != ELF [ 400.425792][T11702] Invalid ELF header magic: != ELF [ 400.598669][T11728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1587'. [ 400.609276][T11723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1585'. [ 400.632959][T11728] caif0: entered promiscuous mode [ 400.808963][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1596'. [ 402.029469][T11760] openvswitch: HfR: Dropping previously announced user features [ 403.822896][T11791] Device name cannot be null; rc = [-22] [ 405.180250][T11819] HfR: entered promiscuous mode [ 405.976938][T11843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1615'. [ 406.358256][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 406.750093][T11870] HfR: entered promiscuous mode [ 406.914437][T11881] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 406.932552][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1627'. [ 406.967480][T11881] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 408.554072][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1639'. [ 408.663592][T11923] netlink: 'syz.2.1641': attribute type 9 has an invalid length. [ 408.692042][T11923] netlink: 'syz.2.1641': attribute type 9 has an invalid length. [ 408.702963][ T5158] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 408.716726][T11923] netlink: 'syz.2.1641': attribute type 2 has an invalid length. [ 408.957806][T11923] netlink: 'syz.2.1641': attribute type 2 has an invalid length. [ 408.967546][T11923] netlink: 'syz.2.1641': attribute type 2 has an invalid length. [ 409.993967][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1649'. [ 410.023794][T11951] nbd: must specify a size in bytes for the device [ 410.265475][T11960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1651'. [ 410.499268][ T5158] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 412.079417][T12003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1662'. [ 413.005258][ T5158] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 415.488602][ T5158] Bluetooth: hci0: Malformed Event: 0x13 [ 415.648686][T12049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1675'. [ 418.697693][ T5158] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 419.608008][T12084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 422.840521][ T5158] Bluetooth: hci2: Malformed Event: 0x13 [ 425.121590][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1711'. [ 426.535261][T12195] kexec: Could not allocate control_code_buffer [ 426.672302][T12219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'. [ 428.040789][ T5158] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 428.928858][T12270] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.938772][T12270] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 430.106658][ T5158] Bluetooth: hci3: Malformed Event: 0x13 [ 430.120778][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 436.373508][T12447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 437.316089][T12462] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 437.709849][T12472] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1800'. [ 438.597430][ T5158] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 439.986999][ T5884] Process accounting resumed [ 440.161028][T12503] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1810'. [ 440.260180][T12515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1814'. [ 444.970639][T12603] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1845'. [ 445.232518][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.240572][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.168674][T12645] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1859'. [ 447.440482][T12652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1861'. [ 447.977239][T12667] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.990601][T12667] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 450.610070][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 451.254307][T12745] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 451.914294][T12739] kexec: Could not allocate control_code_buffer [ 454.288143][T12793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1903'. [ 456.009362][T12812] kexec: Could not allocate control_code_buffer [ 460.000837][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 460.029536][T12913] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1941'. [ 461.321734][ T5158] Bluetooth: hci1: unexpected event 0x1d length: 1 < 5 [ 462.582303][T12970] netlink: zone id is out of range [ 462.604492][T12970] netlink: zone id is out of range [ 462.685160][T12970] netlink: zone id is out of range [ 462.687192][T12972] netlink: 'syz.3.1952': attribute type 34 has an invalid length. [ 462.690312][T12970] netlink: zone id is out of range [ 462.690335][T12970] netlink: zone id is out of range [ 462.690348][T12970] netlink: zone id is out of range [ 462.779016][T12970] netlink: zone id is out of range [ 462.784203][T12970] netlink: zone id is out of range [ 462.809912][T12970] netlink: zone id is out of range [ 462.871806][T12970] netlink: zone id is out of range [ 464.630730][ T5158] Bluetooth: hci3: unexpected event 0x1d length: 1 < 5 [ 468.259868][T13058] net_ratelimit: 57 callbacks suppressed [ 468.259892][T13058] openvswitch: netlink: Key type 248 is out of range max 32 [ 468.912029][ T5158] Bluetooth: hci0: unexpected event 0x1d length: 1 < 5 [ 469.908414][T13091] netlink: 'syz.3.1981': attribute type 11 has an invalid length. [ 469.925055][T13091] netlink: 'syz.3.1981': attribute type 11 has an invalid length. [ 469.943939][T13091] netlink: 'syz.3.1981': attribute type 11 has an invalid length. [ 470.886057][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d659c00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 474.856388][T13163] netlink: zone id is out of range [ 474.861855][T13163] netlink: zone id is out of range [ 474.876932][T13163] netlink: zone id is out of range [ 474.895317][T13163] netlink: zone id is out of range [ 474.906554][T13163] netlink: zone id is out of range [ 474.923920][T13163] netlink: zone id is out of range [ 474.933831][T13163] netlink: zone id is out of range [ 474.940570][T13163] netlink: zone id is out of range [ 474.947241][T13163] netlink: zone id is out of range [ 474.953843][T13163] netlink: zone id is out of range [ 477.141151][ T30] audit: type=1800 audit(4294967343.862:11): pid=13197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2009" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 478.044899][T13216] ptrace attach of "./syz-executor exec"[5848] was attempted by "\x077U\x0cV \x0aD-̚X%.t\x0c׸e_n(87B5\x0bd\x096/,~mJ`>pi]dL$Gp$\x22\x22z)8g۟iXPKwrOS{,c[p0\x0afp%,ed@K^6^tR~axUnb\x0cld<\x1bQ\x1b\x0banjy|t8ËF1uYS:vJWÖNAJ]x\x0ctjAPV\x0cVSo L\x0bp_G%QR'I|KYRu{*cڃD}?lj2)>C!Lp$^5cO#.Ѧ)}G.\x0cMs1r9ft\x0c<Z\x0c늏`}uu\x09VՇD\x09t.Q\x0d+:AگqBB3!\x0bg?jpE)\x0as_>j2N`{\x1bj:k\x0a{ѱ!01=?FTp\x0aŊjaS`̠/u~/gω2l@7\x1b&\x0dYc:Gtǘ x4C۟_π6\x09Vpb4?ԱÁHAҋ~g g 0!J%gלCCMrv{̣8\x0aCp럑R$x2G\x0a]H7Y`ڡVOEKpe\x5cH+ث{IAnقYuXB; g\x09oϬ\x0d [ 480.780734][T13283] ptrace attach of "./syz-executor exec"[5843] was attempted by "9*XF%{C7\x5c*׹F})\x09,*\x0d܄*AnJ\x09ІeNYPRՕZ԰pMHknqS4|Ŝs`>۽(\x0dl^$۰tBZ6YxI(JT\x09B5TMb0fp^Pk.2ĮZj\x0dϷ݁qD\x07JK\x0a2^<]0n$ZLL|6GpQ,ߪ9w=\x09\x0cmMn%O\x0bNPi.@[\x09׭ط# Yk]&dM=>pEq`3c~(\x0b'+NŢ6@ar9[-0bibem:ViΡ*}\x0d\x0bｗO46Qd1&1mW-ZR>\x07T.Va:{חy \x5cN<Ŕ-\x1bg/\x07@ ; )U[dz5f_^S<.빞NČu¨uˢȺsޟSgǵLl2Y$Oq7ce[(\x0bs[[CSCuTtqp;lE_PT]J/o%^eckU\x22t0}\x0d鹟A>7(\x22T^JljwIwo2'.8\x0cfρ\x09..w_ӹ|jh{\x5c@^\x07ΣXvE؎2C-Td&R\x09Nr%؁@7]d)Z\x07\x07RFzҏh&,<-}$#DD|#g,1#Tּ\x07?y}\x0c]CLWuzS|}\x0d3̽[iqFwǦG-Obdf\x1b [ 485.266398][T13354] ptrace attach of "./syz-executor exec"[5850] was attempted by "/81\x5ct\x1bvjrت|ro- ^I;W*\x5c1d#96#Q1f,i(>A؂p/m;4\x0a>1=|+Oh.\x09N{t4.тWm`hROrNa;ʫG_Nv꣢`&U4}P!)ω5O佼lӶqJ&C>ڟcopZJiy9A#Ļd\x1bgH@9DG,T\x0d5˸S(Tגk?,]3[lgg˰js#ɤB\x0d <]vTUvݝT)[ãuM#\x0b+\x22Y^PUZ2W\x5c'*\x5c9\x0d)=xz:3]  ]/X;,ܰ9E(!\x07@hj5yamGw\x0cVgZ'>_$ۈ5ȅ&+,R7a#]|sZ(8b<7n.~$#*Q'9g(Fw!.Gi$wSHa8s>=0Ċ?,:^VB>KNQzRT(KVҧٽ3Az; @FL\x0diq\x0a@7RS=!\x09cw 0+!f;\x0dp7ȸ9TXFuq- β(6a\x5c~[:Ff)/~\x1b//q +hƈltqJ8\x5c#pIz WeȾuВ<*֓{*kk\x09jsM}ϯՂ*jW:|F_\x07P#HmSdi4szm, [ 490.940430][T13485] netlink: 'syz.1.2092': attribute type 2 has an invalid length. [ 493.197205][T13509] kexec: Could not allocate control_code_buffer [ 493.279349][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'. [ 494.787614][T13588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2123'. [ 495.833364][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 496.393064][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2137'. [ 497.329651][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 497.737103][ T5907] [ 497.739493][ T5907] ====================================================== [ 497.746536][ T5907] WARNING: possible circular locking dependency detected [ 497.753599][ T5907] 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 Not tainted [ 497.760396][ T5907] ------------------------------------------------------ [ 497.767444][ T5907] kworker/0:4/5907 is trying to acquire lock: [ 497.773554][ T5907] ffffffff9012d9a8 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 497.782601][ T5907] [ 497.782601][ T5907] but task is already holding lock: [ 497.789992][ T5907] ffff88814d6db058 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 497.799378][ T5907] [ 497.799378][ T5907] which lock already depends on the new lock. [ 497.799378][ T5907] [ 497.809806][ T5907] [ 497.809806][ T5907] the existing dependency chain (in reverse order) is: [ 497.818825][ T5907] [ 497.818825][ T5907] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 497.826487][ T5907] lock_sock_nested+0x41/0xf0 [ 497.831703][ T5907] sockopt_lock_sock+0x54/0x70 [ 497.837023][ T5907] do_ip_getsockopt+0x13e4/0x2220 [ 497.842618][ T5907] ip_getsockopt+0x9b/0x1e0 [ 497.847671][ T5907] raw_getsockopt+0x4d/0x1f0 [ 497.852793][ T5907] do_sock_getsockopt+0x3fc/0x800 [ 497.858366][ T5907] __sys_getsockopt+0x12f/0x260 [ 497.863759][ T5907] __x64_sys_getsockopt+0xbd/0x160 [ 497.869419][ T5907] do_syscall_64+0xcd/0x260 [ 497.874485][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.880929][ T5907] [ 497.880929][ T5907] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 497.888362][ T5907] __lock_acquire+0x1173/0x1ba0 [ 497.893769][ T5907] lock_acquire+0x179/0x350 [ 497.898814][ T5907] __mutex_lock+0x199/0xb90 [ 497.903870][ T5907] smc_vlan_by_tcpsk+0x251/0x620 [ 497.909358][ T5907] __smc_connect+0x44b/0x4880 [ 497.914577][ T5907] smc_connect_work+0x54c/0xae0 [ 497.919967][ T5907] process_one_work+0x9cc/0x1b70 [ 497.925451][ T5907] worker_thread+0x6c8/0xf10 [ 497.930603][ T5907] kthread+0x3c2/0x780 [ 497.935211][ T5907] ret_from_fork+0x45/0x80 [ 497.940169][ T5907] ret_from_fork_asm+0x1a/0x30 [ 497.945487][ T5907] [ 497.945487][ T5907] other info that might help us debug this: [ 497.945487][ T5907] [ 497.955718][ T5907] Possible unsafe locking scenario: [ 497.955718][ T5907] [ 497.963226][ T5907] CPU0 CPU1 [ 497.968600][ T5907] ---- ---- [ 497.973970][ T5907] lock(sk_lock-AF_INET); [ 497.978408][ T5907] lock(rtnl_mutex); [ 497.984950][ T5907] lock(sk_lock-AF_INET); [ 497.991938][ T5907] lock(rtnl_mutex); [ 497.995948][ T5907] [ 497.995948][ T5907] *** DEADLOCK *** [ 497.995948][ T5907] [ 498.004115][ T5907] 3 locks held by kworker/0:4/5907: [ 498.009334][ T5907] #0: ffff88803138fd48 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 498.020090][ T5907] #1: ffffc90004057d18 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 498.031871][ T5907] #2: ffff88814d6db058 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53a/0xae0 [ 498.041653][ T5907] [ 498.041653][ T5907] stack backtrace: [ 498.047583][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: kworker/0:4 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 498.047620][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 498.047640][ T5907] Workqueue: smc_hs_wq smc_connect_work [ 498.047674][ T5907] Call Trace: [ 498.047683][ T5907] [ 498.047702][ T5907] dump_stack_lvl+0x116/0x1f0 [ 498.047737][ T5907] print_circular_bug+0x275/0x350 [ 498.047777][ T5907] check_noncircular+0x14c/0x170 [ 498.047818][ T5907] __lock_acquire+0x1173/0x1ba0 [ 498.047845][ T5907] lock_acquire+0x179/0x350 [ 498.047865][ T5907] ? smc_vlan_by_tcpsk+0x251/0x620 [ 498.047897][ T5907] ? __pfx___might_resched+0x10/0x10 [ 498.047931][ T5907] ? kasan_save_stack+0x42/0x60 [ 498.047966][ T5907] ? kasan_save_stack+0x33/0x60 [ 498.048000][ T5907] ? kasan_save_track+0x14/0x30 [ 498.048041][ T5907] __mutex_lock+0x199/0xb90 [ 498.048076][ T5907] ? smc_vlan_by_tcpsk+0x251/0x620 [ 498.048107][ T5907] ? smc_vlan_by_tcpsk+0x251/0x620 [ 498.048137][ T5907] ? __pfx___mutex_lock+0x10/0x10 [ 498.048176][ T5907] ? find_held_lock+0x2b/0x80 [ 498.048209][ T5907] ? smc_vlan_by_tcpsk+0x251/0x620 [ 498.048238][ T5907] ? rtnl_lock+0x9/0x20 [ 498.048258][ T5907] smc_vlan_by_tcpsk+0x251/0x620 [ 498.048290][ T5907] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 498.048325][ T5907] __smc_connect+0x44b/0x4880 [ 498.048357][ T5907] ? __pfx___smc_connect+0x10/0x10 [ 498.048395][ T5907] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 498.048423][ T5907] ? __local_bh_enable_ip+0xa4/0x120 [ 498.048455][ T5907] smc_connect_work+0x54c/0xae0 [ 498.048481][ T5907] ? __pfx_smc_connect_work+0x10/0x10 [ 498.048508][ T5907] ? rcu_is_watching+0x12/0xc0 [ 498.048537][ T5907] process_one_work+0x9cc/0x1b70 [ 498.048586][ T5907] ? __pfx_process_one_work+0x10/0x10 [ 498.048617][ T5907] ? assign_work+0x1a0/0x250 [ 498.048642][ T5907] worker_thread+0x6c8/0xf10 [ 498.048675][ T5907] ? __pfx_worker_thread+0x10/0x10 [ 498.048703][ T5907] kthread+0x3c2/0x780 [ 498.048726][ T5907] ? __pfx_kthread+0x10/0x10 [ 498.048748][ T5907] ? __pfx_kthread+0x10/0x10 [ 498.048771][ T5907] ? __pfx_kthread+0x10/0x10 [ 498.048793][ T5907] ? __pfx_kthread+0x10/0x10 [ 498.048816][ T5907] ? rcu_is_watching+0x12/0xc0 [ 498.048845][ T5907] ? __pfx_kthread+0x10/0x10 [ 498.048869][ T5907] ret_from_fork+0x45/0x80 [ 498.048894][ T5907] ? __pfx_kthread+0x10/0x10 [ 498.048917][ T5907] ret_from_fork_asm+0x1a/0x30 [ 498.048962][ T5907] [ 498.348116][T13688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2154'. [ 498.600101][T13688] ipvlan1: entered allmulticast mode [ 498.613623][T13688] veth0_vlan: entered allmulticast mode [ 506.677174][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.683510][ T1299] ieee802154 phy1 wpan1: encryption failed: -22