last executing test programs: 35.719264668s ago: executing program 3 (id=2354): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x2, 0xa, 0xe57a) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd=r0, 0x2f, 0x1, 0x9, 0x81, @count=0x9, 0x0, 0x6, 0x8, 0x7, 0x1}, 0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) bind$auto(r1, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) r3 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) bind$auto(r3, 0x0, 0x3) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff}, 0x65) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x1d, 0x0, 0x1ff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r4) msgctl$auto_IPC_INFO(0xffffffff, 0x3, &(0x7f00000002c0)={{0x4, 0x0, 0xee00, 0x4, 0x1, 0x4, 0xffff}, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x2, 0xd, 0xffffffffffffffff, 0x35, 0xf, 0x7, 0x3494, 0x0, 0x9, @raw=0xa6, @inferred=0xffffffffffffffff}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80400100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000340)=ANY=[@ANYBLOB="b40600", @ANYRES16=r5, @ANYBLOB="210028bd7000fedbdf25030000003400058008001e00", @ANYRES32=r1, @ANYBLOB="1d00300002f6fb52dbc946e1e778b206df245c26d2cacd6da6a16481a600000008003100", @ANYRES32=r3, @ANYBLOB="bf040180ceb97c65edd4e12c751ff020f7f7c1ebac5815add7fa6b47527170784c9534dd9c3a4ff1121fb3e5f36932326bc185692f5d585948194e6a57a9b9161885018eb83a8fdf64adcbcb28c7cf3eda779984a60111d0be4152681163e4f895bd59f3ce48b3ac7e848041447314d6452eb9c13299cd22f42991aad31ca0512cc92ff06b0d591cfab1500fc1bf9cdbffcaf7f84b2d5ee954224f92fbb14908460cce21d792d5109a851fb0dadf9a16336bae7c6c37fa5529d0966346c3a557b30fd67f8bee56d40300b3c92bac970058667db38ed2b5e5f0ed140054800400068004004e8008001d00", @ANYRES32=r1, @ANYBLOB="a0033d80a70041002f4565762f617564696f31005649a3aab13b9d4ac6c027db56d4eec2dda7ee248dc4e964030d46ecb8b15a7cff47509729cf07fb5c6e89433a84441d75b49a62cea774551477b4141d559d8ba45595332e4fab22348abb5938405a3560a46dff6217bb7fea342aa4f4b490c0bfd46dbfc715be0198d76c4497297dfa4bdf3e66b82695392d0acc5777e29c4b0c4507cad336e8cb3f28fa49e2ae2c956b3883cfc544cc006ce1251a7e044c9334e5f436044cd49645aa88c93a029beec393fa4e3c50e11ec6ae0198cae708d7654133c531b2fcc188644593a35a546ff19b4e8106893b164393311bad054fa3f768a35a2eaacb1c6ae7f2de7813cf803c8c485ff65347d4c3830364d441662a4efe151e48269c3e51bd8cba0a29ae31ec18b8eac036d1db0d6f4b1593278172fcc4b8ffcaf162a8b68fc81bdf49d5bf3acb98c9338a3b28b9eb9fb157e846129ccd95f8fcf1d8afed4019892b5fed09485f5cbc0728fed8a0bbb9a6783b478afa64a8a6b3ab1e10bf12b8b52a722e5f2293708625b15ad008837527e8a10e6684cccd4e570581f5dfbb8cde5d38d6bb5df69d3d5b4129f586cf98b028b75df5c2ed8b73687295ffab3b35142457f52edd4085c6807b4c2f41a634a268d9924d77b42925c34a3ccdf2b9c1decac2119a487309ac6708dbd5b50cf0f0884c8dd69d7219a8eeddac9f90af131fa3ca194e97c361dd36def050223bd06c17998bf6a009b06a5f59c512bb9f6421cbd81ac93de5176576b5ea4133bb1bf96d733e80c94ea52e66996663195d47d300f77d06fc72dfc8a7d67051fbb5ad6ccae8cb766ce6d4dc68f2e9dc0abfb00440c3eddc56b898ccd87ae53864b7891edcfb748113c7dd8a10dcf60b37f8d302aab57542a58c89bcb896dec39294c48961cbd10fddbd1f0783a19fe6bbea8df9c1755b4b593cadda85f59284b78bf5382e22daaa2c0f10261ae23919ac19776ab8a1ccd314a5d68adc1d49e6872beac677c5e30fb7ce5ad657e0d5e7737ea743feb9963a3dc1c98adc289afcf7bd8acd2c6d3fec635da987ca490a0ed482b1a1d3c1ac59e615d003fba75488bf5052e397f722e166b98b24d6bf30ab94da32f0ebce310d5b5edca2a83b860c0be0fbf0e2d9eedafa7ee58d108bea08c1bf875289bb71facb81101faceacb689ad734a73dfb328ec84ec90e842da956312b6cbf2ea89fecf54db14c25da533ed90b257d54d71d9506a0428d66bb0af469c15831455c2036289fa304777d33bd8c0274a7d7ea5c1b51d798e0b482cc6004008d801c000a800c001f000e000000000000000900fb0024245e250000000000ab010480ca86e5914343be6997b4795a3093452b230a7d48a4879e0d99e2bb378be0a664c14c1fc159aacfae0152a920fe49b69d90d8a917726e10a85fc0c73f98c2f90b8e5c15ae186ddb4e179e8073fe98a75353059d49e1c9afb08bd57d99d778df5e31a1fb78991d995b31243e4fb5e4b6329a968474da23dfeb8a9a7b9cc7344cd1351c298e0265feb0ed156df0b26e0817f13de3ca8d08d6395b5e87d32e4875320ffd5facf6879941fdead87874b1c38875546f7ec0cc6d4d8c464c7f6b98d6c9396931752a80857900f8002db52b1b3a735c3ed6824c6ab75ea15f57dba6c39e547977a929d5861c1452107c7c7e28b26793d483bb15ba1b12265370accc7ec111e65d0e4e832316e0213f1dc9b4fc1c6b054f69c26706cd368c58cba18146b28fd5aef59848309561c498e486edf8e7dad40ac5c17c809f8f787149c6f17e470000004e00180004e814963efeccc514934068fbf36994f9bb99a9ff4a794ba00a8b8710489de3b7ef2ccb92d774340915328da65540dc6a0f6159ab485c0f7fc120eb5a9c5ec3db539651f4fdbd4e040800000c009000030000000000000008000000", @ANYRES32=r6, @ANYBLOB='\x00'], 0x6b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) prctl$auto(0x29, 0x3, r7, 0x0, 0x4) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 32.941805075s ago: executing program 3 (id=2359): mmap$auto(0x80, 0x31, 0x3, 0x14, 0xffffffffffffffff, 0x80) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x3, 0x3a) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) (fail_nth: 13) write$auto(0x6, 0x0, 0x100000001) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x1000, 0x20006, 0x3, 0x80ebf, r0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x80000001, 0x7, 0x0, 0x0, 0x1000004) madvise$auto(0x0, 0x200007, 0x19) keyctl$auto_KEYCTL_GET_KEYRING_ID(0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1) 32.746657044s ago: executing program 3 (id=2360): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0x7f, r0, @relative_fd, 0x4}, 0x13) 31.109721723s ago: executing program 3 (id=2364): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket(0x23, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x64004890) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram12\x00', 0xa100, 0x0) setsockopt$auto_SO_DONTROUTE(r2, 0xff, 0x5, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0xffffffff) recvmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000)="401b74ce4352ff99291303b63f9542fc7e0349eeaa504fed9ac3c58d5d0d9b5a0a185a7e711a048cfa7c4a01d2fffc493ec4dde809caa5296c5d617a0014e8f659d8778fae2a384ab8776224252a5fd029f6e569ad2244904ac4bd751dbbd9c8718eeadf95eb9c2f6587242f918fe0b0da16d19b6619de1848c87529", 0x7, &(0x7f0000000100)={&(0x7f0000000080)="cd2e1b909fc08d5e44bf38ed", 0x1}, 0x4d8, &(0x7f0000000180)="69f56afe5653d37acc622ed2f3beefdfeb9e67408457eb29197dd78ce1bf46630dd2", 0x4, 0x80}, 0x800}, 0xde4, 0x5, &(0x7f0000000200)={0x8, 0x400}) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r3, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x44442, 0x155) fcntl$auto_F_GETLEASE(r3, 0x401, 0xf) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000240), 0x82400, 0x0) sendfile$auto(0x3, r2, 0x0, 0x100400000000006) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r4) sendmsg$auto_TASKSTATS_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000ada61df0bb044d5348000000000000230bb5f22fa1b0c755f8742a4c1a2846abaaf40d11446956ac3f11ea74b76231d461b9", @ANYRES16=r5, @ANYBLOB="010a2bbd7000fbdbdf2501000000690004004e10534b535055415453906cad2336ca6b0067eaa130cc17538c661d08a669e61515af66d7fb7c18b3a59b41b7445b27dad1a168a412849723ba9869069aac5fd891ea4db34b390ac452f2789d77462409d682a7d5f216f05c2314cd26a6dced72a8426479000000"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 28.843909317s ago: executing program 3 (id=2368): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) socket(0x29, 0x2, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x100, &(0x7f00000000c0)={0x3, 0x0, 0x7fff, @raw=0x5}, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 17.619484724s ago: executing program 2 (id=2389): mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syncfs$auto(r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24001000", @ANYRES16=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r6, 0x81085520, r6) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 13.846817241s ago: executing program 2 (id=2392): r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) ioctl$auto_BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000280)={0xffff, 0x200, "cc532f50729024d8293e01cfcae369fc", 0x7, 0x7, 0x4, 0x5f6d, 0x2, 0x8, 0x3, "a626449105f3842f40d9d6ae7f57a4d2", "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"}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x940, 0x0) ioctl$auto_MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x60402, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x100, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(r3, r1, 0x0, 0x400010000006) rseq$auto(&(0x7f0000000200)={0xe, 0x405, 0x7, 0x807, 0x5, 0x2001}, 0x21, 0x1, 0x8000006) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (fail_nth: 1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 11.586981633s ago: executing program 0 (id=2395): r0 = pidfd_open$auto(0x1, 0x0) pread64$auto(r0, 0x0, 0x1008, 0x2000000000037) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x161040, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = epoll_create$auto(0x7) epoll_wait$auto(r2, 0x0, 0xe00a, 0x9) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000080)=0x1000) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af83, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x9959c8d334b991b, 0x0) select$auto(0x40a, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0xa, 0x0) setsockopt$auto_SO_TIMESTAMPING_OLD(r3, 0x6, 0x1f, &(0x7f0000000040)='(\x00', 0x7) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x10, "26300628afe90504fc2bbe91f2eb"}, 0x1) symlink$auto(0x0, 0x0) connect$auto(0x3, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x3b72, 0x0) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000100)="db805d27e4c1407bdac97ecc5b6a439815675191", 0x40001) io_uring_enter$auto(r3, 0x409, 0xbb, 0x2, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r4, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)=ANY=[@ANYBLOB="cbc80000", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25030000000800010002000000"], 0x1c}}, 0x24044880) prctl$auto(0x1000000003b, 0x0, 0x0, 0x45, 0x7) 11.207949316s ago: executing program 1 (id=2396): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) 8.835193523s ago: executing program 1 (id=2397): socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008aeb0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r2, 0x8000) r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r3, 0x0, 0xfffffdf1) ioctl$auto_SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000140)="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") fdatasync$auto(0xffffffffffffffff) madvise$auto(0x0, 0x400053, 0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) 8.835026586s ago: executing program 2 (id=2398): socket(0xa, 0x5, 0x84) open(0x0, 0x0, 0x57e) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0xffffffff, 0x9b7f, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/kdamond_pid\x00', 0x0, 0x0) unshare$auto(0x40000080) socket(0x29, 0x80000, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x238) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x31, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) pipe2$auto(0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x53) unshare$auto(0x100000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) 8.804621131s ago: executing program 0 (id=2399): mmap$auto(0xfffffffffffffffd, 0x100002020009, 0x4, 0x10, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x169a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r1 = io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) ioctl$auto_FIONCLEX(r2, 0x5450, 0xb) unshare$auto(0x40000080) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r4) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00000a00004e8f0bc0c6e581f300"], 0xfdef}, 0x1, 0x0, 0x0, 0x20008040}, 0x2000000) madvise$auto(0x1000, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCD(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="200029bd7000fddbdf2504000000a31df18fe09a0cc5207e0734ab489faebf8579f829bdc87e4fd3ccfbdb7fef8a5886e610f4c369b5a71b6a6b790f99dfec90dfa0564f8b2a869d9ae1f5789296cd5fc1c15b0e21c2512a8bb16b7809c443cb0b382ba4e3b4ef879dc8209ebc8b5d83c80646a75b2bcae4fd22014e3bdcbdfcdb5a0b37dd8f380c79c0f654ad98cee2efa956800be844d3fed63690be328bc833daa9ce4ea04a0a8286f7d79b3e585096c9c6aa0872ce9461142b1d47a827dd8d23687351bd5eed5c3d"], 0xd0}, 0x1, 0x0, 0x0, 0x48884}, 0x4000040) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0xf) syz_clone3(&(0x7f0000000380)={0x28022580, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.12168907s ago: executing program 1 (id=2400): mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syncfs$auto(r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24001000", @ANYRES16=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r6, 0x81085520, r6) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 6.1206791s ago: executing program 0 (id=2407): mmap$auto(0x0, 0x2000c, 0x10000000000df, 0x4eb2, 0x401, 0x8000) socket(0x2, 0x802, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0) r0 = io_uring_setup$auto(0xb, 0x0) read$auto_mon_fops_stat_usb_mon(r0, &(0x7f0000000100)=""/43, 0x2b) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000000c0)="983e0aa91c2bcf1a728945bf24c27065bf647eeb9ea7ce16c618e42d2114bbf31461bfdfe3688ada8c3e5a590c4b27801f422c703ed72185ff1a49bc8b010ad468fa84b40a98fd7ef079ba308e29c0b45454286d7e0867a2f68c19f565abbc0d490f4f4fd226dfb87e8ed4770a272026378a7891f425c971d20b13a4fec64f4ec502e02201bf82e5f4ca3f3e1bbb2ad60779b7b8fee165d2615e3119e322fa7f7410c1db981692e3aa1ba5b5344b4d979583a922aff6e38a2dda9f556f4492a419694df8b1dd22a5568b80302c67214b37", 0xd1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket(0x28, 0x1, 0x100) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu1\x00', 0x2000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r1, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory15/phys_index\x00', 0x20080, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) pwrite64$auto(r2, &(0x7f00000000c0)='/dev/virtual_nci\x00', 0x7, 0xc) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000440)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000480)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x10000, 0x0) pwrite64$auto(r3, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x00\x00\x00\x00\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x4) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram1\x00', 0x20001, 0x0) ioctl$auto_BLKRRPART(r4, 0x801070cf, 0x700000000000000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vivid.0/media10/uevent\x00', 0x410283, 0x0) 5.583035756s ago: executing program 2 (id=2401): socket(0x1e, 0xa, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket(0xa, 0x5, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x31, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020006, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r1, 0x0, 0x1) mmap$auto(0x0, 0x810004, 0xfffffffffffffffc, 0x8000000008011, 0x3, 0x81000000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x52) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r2 = prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x33, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.41682933s ago: executing program 0 (id=2402): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) 4.231207603s ago: executing program 1 (id=2403): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.875652182s ago: executing program 0 (id=2404): ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000004c0)={0xa15b, 0xffffffffffffffff}) ioctl$auto_MEMGETBADBLOCK(r0, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x40}, &(0x7f0000000280)=""/139, 0x8b, &(0x7f0000000340)=""/170, &(0x7f0000000180)}, 0x58) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = pipe$auto(0x0) mmap$auto(0x2, 0x20009, 0xb, 0xeb2, r1, 0x8040) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0), 0xff, 0xfffffffffffffffd) r3 = prctl$auto_PR_SYS_DISPATCH_ON(0x1000, 0x1, 0xffffffffffffffff, 0xbc2f, 0x7) mmap$auto(0x0, 0x400008, 0x3, 0x17, r3, 0x8000) bind$auto(0x3, 0x0, 0x6a) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\xb7ve\x89\xc8\x1c\x10\x97\x01\x1c\x19\xbf', 0x100000100800a3d8) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x8, 0x3, &(0x7f00000000c0)={{0x4000000000, 0x401}, {0x9, 0x83}}, 0x0) 1.739100513s ago: executing program 1 (id=2405): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000300"/17, 0x11) timer_create$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x600, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) io_getevents$auto(0x6, 0x8, 0x6, &(0x7f0000000040)={0xfcc, 0x1, 0x101, 0x8000000000008}, &(0x7f00000000c0)={0xb0e, 0x4}) r1 = socket(0xa, 0x4, 0xdc) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x8) fanotify_mark$auto(r2, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000000)=':,\x00') socket(0xa, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x6) getsockopt$auto(r1, 0x29, 0x8, 0x0, 0x0) sysfs$auto(0x2, 0x3b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0xd, 0x200, 0x8000000000000000, 0x0) 1.699374461s ago: executing program 2 (id=2406): r0 = pidfd_open$auto(0x1, 0x0) pread64$auto(r0, 0x0, 0x1008, 0x2000000000037) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x161040, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = epoll_create$auto(0x7) epoll_wait$auto(r2, 0x0, 0xe00a, 0x9) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000080)=0x1000) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af83, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x9959c8d334b991b, 0x0) select$auto(0x40a, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0xa, 0x0) setsockopt$auto_SO_TIMESTAMPING_OLD(r3, 0x6, 0x1f, &(0x7f0000000040)='(\x00', 0x7) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x10, "26300628afe90504fc2bbe91f2eb"}, 0x1) symlink$auto(0x0, 0x0) connect$auto(0x3, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x3b72, 0x0) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000100)="db805d27e4c1407bdac97ecc5b6a439815675191", 0x40001) io_uring_enter$auto(r3, 0x409, 0xbb, 0x2, 0x0, 0x4) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r4, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)=ANY=[@ANYBLOB="cbc80000", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf25030000000800010002000000"], 0x1c}}, 0x24044880) prctl$auto(0x1000000003b, 0x0, 0x0, 0x45, 0x7) 151.987935ms ago: executing program 3 (id=2369): open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x41) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x5a7, 0x0, 0x1, &(0x7f0000000040), 0x5, 0x3}, 0x3}, 0x2, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) sendfile$auto(r1, r1, 0x0, 0xcd) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="1100000007000000000000000000000001", 0x11) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @remote}, 0x54) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0x7}, 0x5243, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x8, 0x104f) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = socket(0x22, 0x80003, 0x8) mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x861, 0x100001000000004, 0xfa31, 0x400, 0x8000) io_setup$auto(0x8000003, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20380, 0x0) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cec0\x00', 0x500, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000002c0)={"043af06e", 0xfff8, 0x4, 0x8, 0x0, 0x8001, "0c01e46e7862b39f8e4cab9dcad916", "ce3c9bda", "9bd40b06", "46e8b003", ["774342505b5f2cb4a2a8e579", "4cda2ce815ae2542205ad280", "c10758e1cc03d02c8d8a434d", "e8c5f2e0374e1377a09070e4"]}) kexec_load$auto(0x0, 0x4, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x548, 0x1b5, 0x5}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) 148.598775ms ago: executing program 0 (id=2415): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x1, 0xfffffffffffffff9, 0xffffffff, 0xebf, 0xffffffffffffffff, 0x8) r1 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x41d2, r1, 0x28000) socket(0x2, 0x3, 0xa) r2 = socket(0x2, 0x3, 0x0) mmap$auto(0x80000000, 0x8, 0x6, 0xeb0, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x84) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r2, @ANYBLOB="00f42abd7000ffdbcf251b000000", @ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8880) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fcntl$auto(r3, 0x7, 0x3) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd=r1, 0x6, @old_map_fd=r3}, 0x7) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(r5, r4, 0x0, 0xbe) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{0x0, 0x5a7, &(0x7f0000000000)={&(0x7f0000000300)="669b0c0c4afa", 0x28}, 0x1, 0x0, 0x5, 0x100001}, 0x2}, 0x2, 0x8) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x8080, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r6 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(r6, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003) 53.895355ms ago: executing program 2 (id=2408): sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5mS\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket(0x22, 0x80c17, 0x8) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) set_mempolicy$auto(0x7f, &(0x7f0000000180)=0x3, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, 0x0, 0x12081, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141041, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x2000, 0x0) ioctl$auto_USBDEVFS_IOCTL32(r3, 0xc00c5512, &(0x7f0000000080)={0x1, 0xd, 0xcc01}) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0xa9, &(0x7f0000000080)={0x80000003, 0xfff, 0x2, 0x6, 0x400085, 0xc, r4, [0x8, 0x4, 0xd], {0xd74c, 0x10000, 0x4, 0xb, 0x2, 0x2, 0x4, 0x406, 0x17c}, {0xff, 0x1, 0x10001, 0x7, 0x5, 0x800, 0x8, 0x400005, 0xa88}}) ioctl$auto_XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000000300)={0x101, 0x3, 0x8, 0x8, 0x9}) bpf$auto_BPF_BTF_LOAD(0x12, 0x0, 0x80000000) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000280), r1) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="080027bd7000fedbdf2502000000f217237023b9b1e05e8ad6c30cb38edb787b631f3dcd949bb37722bb79540a6e0e3272dbf46633d382708facc7cff550118799ae2286f4bedcc3f9206b768a2e640fab56832a83c023610b08a534f6e844871fe1eb46b25a3e1f77568c750db66e57"], 0x14}}, 0x20000040) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x940, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0xffff, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "00ff00", "01000002", "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00f0004000400", "5f00b60987bb00"]}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x57e) fcntl$auto_F_ADD_SEALS(r6, 0x410, 0x4) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x2, 0xfffffff6) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 1 (id=2409): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) kernel console output (not intermixed with test programs): t+0x384/0x670 [ 742.901129][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 742.901159][ T50] hci_rx_work+0x451/0xfc0 [ 742.901188][ T50] process_one_work+0xa23/0x1940 [ 742.901230][ T50] ? __pfx_process_one_work+0x10/0x10 [ 742.901268][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 742.901295][ T50] worker_thread+0x5ef/0xe50 [ 742.901335][ T50] ? kthread+0x13a/0x450 [ 742.901363][ T50] ? __pfx_worker_thread+0x10/0x10 [ 742.901393][ T50] kthread+0x370/0x450 [ 742.901421][ T50] ? __pfx_kthread+0x10/0x10 [ 742.901451][ T50] ret_from_fork+0x72b/0xd50 [ 742.901478][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 742.901506][ T50] ? __switch_to+0x800/0x10f0 [ 742.901539][ T50] ? __switch_to_asm+0x39/0x70 [ 742.901567][ T50] ? __pfx_kthread+0x10/0x10 [ 742.901598][ T50] ret_from_fork_asm+0x1a/0x30 [ 742.901639][ T50] [ 743.208121][ T50] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 743.222115][ T50] Bluetooth: hci3: failed to register connection device [ 743.229154][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 743.236879][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 743.246222][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 743.246267][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 743.246284][ T50] Workqueue: hci3 hci_rx_work [ 743.246314][ T50] Call Trace: [ 743.246322][ T50] [ 743.246331][ T50] dump_stack_lvl+0x100/0x190 [ 743.246370][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 743.246408][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 743.246448][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 743.246484][ T50] ? find_held_lock+0x2b/0x80 [ 743.246516][ T50] ? kobject_add_internal+0x25f/0x930 [ 743.246556][ T50] ? kobject_add_internal+0x25f/0x930 [ 743.246598][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 743.246628][ T50] kobject_add_internal+0x2c8/0x930 [ 743.246677][ T50] kobject_add+0x16a/0x1e0 [ 743.246716][ T50] ? __pfx_kobject_add+0x10/0x10 [ 743.246754][ T50] ? class_to_subsys+0x10f/0x150 [ 743.246783][ T50] ? kobject_put+0xb9/0x640 [ 743.246818][ T50] ? _raw_spin_unlock+0x28/0x50 [ 743.246850][ T50] device_add+0x294/0x1970 [ 743.246891][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 743.246918][ T50] ? __pfx_device_add+0x10/0x10 [ 743.246959][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 743.246997][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 743.247033][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 743.247070][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 743.247115][ T50] ? __pfx_bt_warn+0x10/0x10 [ 743.247135][ T50] ? hci_event_packet+0x186/0xcd0 [ 743.247168][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 743.247196][ T50] ? skb_pull_data+0x15f/0x1e0 [ 743.247223][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 743.247252][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 743.247285][ T50] hci_event_packet+0x51c/0xcd0 [ 743.247312][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 743.247343][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 743.247374][ T50] ? kcov_remote_start+0x384/0x670 [ 743.247407][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 743.247474][ T50] hci_rx_work+0x451/0xfc0 [ 743.247506][ T50] process_one_work+0xa23/0x1940 [ 743.247553][ T50] ? __pfx_process_one_work+0x10/0x10 [ 743.247596][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 743.247625][ T50] worker_thread+0x5ef/0xe50 [ 743.247675][ T50] ? kthread+0x13a/0x450 [ 743.247704][ T50] ? __pfx_worker_thread+0x10/0x10 [ 743.247738][ T50] kthread+0x370/0x450 [ 743.247769][ T50] ? __pfx_kthread+0x10/0x10 [ 743.247802][ T50] ret_from_fork+0x72b/0xd50 [ 743.247832][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 743.247862][ T50] ? __switch_to+0x800/0x10f0 [ 743.247899][ T50] ? __switch_to_asm+0x39/0x70 [ 743.247931][ T50] ? __pfx_kthread+0x10/0x10 [ 743.247964][ T50] ret_from_fork_asm+0x1a/0x30 [ 743.248010][ T50] [ 743.248052][ T50] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 743.548830][ T50] Bluetooth: hci3: failed to register connection device [ 743.555912][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 743.563965][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 743.573797][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 743.573829][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 743.573846][ T50] Workqueue: hci3 hci_rx_work [ 743.573876][ T50] Call Trace: [ 743.573884][ T50] [ 743.573892][ T50] dump_stack_lvl+0x100/0x190 [ 743.573924][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 743.573961][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 743.574001][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 743.574038][ T50] ? find_held_lock+0x2b/0x80 [ 743.574069][ T50] ? kobject_add_internal+0x25f/0x930 [ 743.574109][ T50] ? kobject_add_internal+0x25f/0x930 [ 743.574152][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 743.574181][ T50] kobject_add_internal+0x2c8/0x930 [ 743.574226][ T50] kobject_add+0x16a/0x1e0 [ 743.574264][ T50] ? __pfx_kobject_add+0x10/0x10 [ 743.574303][ T50] ? class_to_subsys+0x10f/0x150 [ 743.574331][ T50] ? kobject_put+0xb9/0x640 [ 743.574366][ T50] ? _raw_spin_unlock+0x28/0x50 [ 743.574410][ T50] device_add+0x294/0x1970 [ 743.574456][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 743.574483][ T50] ? __pfx_device_add+0x10/0x10 [ 743.574518][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 743.574550][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 743.574581][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 743.574617][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 743.574642][ T50] ? __pfx_bt_warn+0x10/0x10 [ 743.574660][ T50] ? hci_event_packet+0x186/0xcd0 [ 743.574690][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 743.574717][ T50] ? skb_pull_data+0x15f/0x1e0 [ 743.574741][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 743.574768][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 743.574797][ T50] hci_event_packet+0x51c/0xcd0 [ 743.574823][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 743.574851][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 743.574879][ T50] ? kcov_remote_start+0x384/0x670 [ 743.574910][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 743.574941][ T50] hci_rx_work+0x451/0xfc0 [ 743.574970][ T50] process_one_work+0xa23/0x1940 [ 743.575012][ T50] ? __pfx_process_one_work+0x10/0x10 [ 743.575051][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 743.575077][ T50] worker_thread+0x5ef/0xe50 [ 743.575118][ T50] ? kthread+0x13a/0x450 [ 743.575145][ T50] ? __pfx_worker_thread+0x10/0x10 [ 743.575175][ T50] kthread+0x370/0x450 [ 743.575203][ T50] ? __pfx_kthread+0x10/0x10 [ 743.575233][ T50] ret_from_fork+0x72b/0xd50 [ 743.575260][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 743.575288][ T50] ? __switch_to+0x800/0x10f0 [ 743.575320][ T50] ? __switch_to_asm+0x39/0x70 [ 743.575349][ T50] ? __pfx_kthread+0x10/0x10 [ 743.575379][ T50] ret_from_fork_asm+0x1a/0x30 [ 743.575421][ T50] [ 743.575512][ T50] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 743.870277][ T50] Bluetooth: hci3: failed to register connection device [ 743.877467][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 743.885213][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 743.900198][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 743.900228][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 743.900245][ T50] Workqueue: hci3 hci_rx_work [ 743.900274][ T50] Call Trace: [ 743.900282][ T50] [ 743.900290][ T50] dump_stack_lvl+0x100/0x190 [ 743.900319][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 743.900356][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 743.900394][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 743.900429][ T50] ? find_held_lock+0x2b/0x80 [ 743.900459][ T50] ? kobject_add_internal+0x25f/0x930 [ 743.900497][ T50] ? kobject_add_internal+0x25f/0x930 [ 743.900537][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 743.900567][ T50] kobject_add_internal+0x2c8/0x930 [ 743.900618][ T50] kobject_add+0x16a/0x1e0 [ 743.900655][ T50] ? __pfx_kobject_add+0x10/0x10 [ 743.900695][ T50] ? class_to_subsys+0x10f/0x150 [ 743.900723][ T50] ? kobject_put+0xb9/0x640 [ 743.900757][ T50] ? _raw_spin_unlock+0x28/0x50 [ 743.900788][ T50] device_add+0x294/0x1970 [ 743.900828][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 743.900854][ T50] ? __pfx_device_add+0x10/0x10 [ 743.900894][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 743.900931][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 743.900966][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 743.901002][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 743.901028][ T50] ? __pfx_bt_warn+0x10/0x10 [ 743.901049][ T50] ? hci_event_packet+0x186/0xcd0 [ 743.901083][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 743.901114][ T50] ? skb_pull_data+0x15f/0x1e0 [ 743.901141][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 743.901172][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 743.901205][ T50] hci_event_packet+0x51c/0xcd0 [ 743.901234][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 743.901266][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 743.901297][ T50] ? kcov_remote_start+0x384/0x670 [ 743.901333][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 743.901369][ T50] hci_rx_work+0x451/0xfc0 [ 743.901421][ T50] process_one_work+0xa23/0x1940 [ 743.901471][ T50] ? __pfx_process_one_work+0x10/0x10 [ 743.901518][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 743.901549][ T50] worker_thread+0x5ef/0xe50 [ 743.901603][ T50] ? kthread+0x13a/0x450 [ 743.901635][ T50] ? __pfx_worker_thread+0x10/0x10 [ 743.901671][ T50] kthread+0x370/0x450 [ 743.901704][ T50] ? __pfx_kthread+0x10/0x10 [ 743.901740][ T50] ret_from_fork+0x72b/0xd50 [ 743.901772][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 743.901806][ T50] ? __switch_to+0x800/0x10f0 [ 743.901845][ T50] ? __switch_to_asm+0x39/0x70 [ 743.901879][ T50] ? __pfx_kthread+0x10/0x10 [ 743.901926][ T50] ret_from_fork_asm+0x1a/0x30 [ 743.901973][ T50] [ 743.902073][ T50] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 744.197085][ T50] Bluetooth: hci3: failed to register connection device [ 744.206446][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 744.214189][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 744.223589][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 744.223618][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 744.223634][ T50] Workqueue: hci3 hci_rx_work [ 744.223661][ T50] Call Trace: [ 744.223669][ T50] [ 744.223678][ T50] dump_stack_lvl+0x100/0x190 [ 744.223713][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 744.223749][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 744.223784][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 744.223818][ T50] ? find_held_lock+0x2b/0x80 [ 744.223846][ T50] ? kobject_add_internal+0x25f/0x930 [ 744.223882][ T50] ? kobject_add_internal+0x25f/0x930 [ 744.223920][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 744.223947][ T50] kobject_add_internal+0x2c8/0x930 [ 744.223987][ T50] kobject_add+0x16a/0x1e0 [ 744.224022][ T50] ? __pfx_kobject_add+0x10/0x10 [ 744.224056][ T50] ? class_to_subsys+0x10f/0x150 [ 744.224083][ T50] ? kobject_put+0xb9/0x640 [ 744.224114][ T50] ? _raw_spin_unlock+0x28/0x50 [ 744.224143][ T50] device_add+0x294/0x1970 [ 744.224189][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 744.224213][ T50] ? __pfx_device_add+0x10/0x10 [ 744.224267][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 744.224302][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 744.224334][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 744.224368][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 744.224393][ T50] ? __pfx_bt_warn+0x10/0x10 [ 744.224412][ T50] ? hci_event_packet+0x186/0xcd0 [ 744.224444][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 744.224473][ T50] ? skb_pull_data+0x15f/0x1e0 [ 744.224498][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 744.224526][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 744.224557][ T50] hci_event_packet+0x51c/0xcd0 [ 744.224584][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 744.224613][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 744.224646][ T50] ? kcov_remote_start+0x384/0x670 [ 744.224679][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 744.224717][ T50] hci_rx_work+0x451/0xfc0 [ 744.224748][ T50] process_one_work+0xa23/0x1940 [ 744.224792][ T50] ? __pfx_process_one_work+0x10/0x10 [ 744.224835][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 744.224863][ T50] worker_thread+0x5ef/0xe50 [ 744.224906][ T50] ? kthread+0x13a/0x450 [ 744.224935][ T50] ? __pfx_worker_thread+0x10/0x10 [ 744.224968][ T50] kthread+0x370/0x450 [ 744.224997][ T50] ? __pfx_kthread+0x10/0x10 [ 744.225030][ T50] ret_from_fork+0x72b/0xd50 [ 744.225059][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 744.225088][ T50] ? __switch_to+0x800/0x10f0 [ 744.225123][ T50] ? __switch_to_asm+0x39/0x70 [ 744.225154][ T50] ? __pfx_kthread+0x10/0x10 [ 744.225187][ T50] ret_from_fork_asm+0x1a/0x30 [ 744.225231][ T50] [ 744.494212][ T50] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 744.509105][ T50] Bluetooth: hci3: failed to register connection device [ 744.517363][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 744.525032][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 744.534346][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 744.534374][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 744.534401][ T50] Workqueue: hci3 hci_rx_work [ 744.534428][ T50] Call Trace: [ 744.534435][ T50] [ 744.534443][ T50] dump_stack_lvl+0x100/0x190 [ 744.534469][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 744.534502][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 744.534535][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 744.534566][ T50] ? find_held_lock+0x2b/0x80 [ 744.534593][ T50] ? kobject_add_internal+0x25f/0x930 [ 744.534627][ T50] ? kobject_add_internal+0x25f/0x930 [ 744.534663][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 744.534694][ T50] kobject_add_internal+0x2c8/0x930 [ 744.534732][ T50] kobject_add+0x16a/0x1e0 [ 744.534765][ T50] ? __pfx_kobject_add+0x10/0x10 [ 744.534797][ T50] ? class_to_subsys+0x10f/0x150 [ 744.534822][ T50] ? kobject_put+0xb9/0x640 [ 744.534852][ T50] ? _raw_spin_unlock+0x28/0x50 [ 744.534879][ T50] device_add+0x294/0x1970 [ 744.534914][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 744.534938][ T50] ? __pfx_device_add+0x10/0x10 [ 744.534973][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 744.535005][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 744.535035][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 744.535067][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 744.535091][ T50] ? __pfx_bt_warn+0x10/0x10 [ 744.535109][ T50] ? hci_event_packet+0x186/0xcd0 [ 744.535139][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 744.535165][ T50] ? skb_pull_data+0x15f/0x1e0 [ 744.535189][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 744.535216][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 744.535245][ T50] hci_event_packet+0x51c/0xcd0 [ 744.535269][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 744.535316][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 744.535345][ T50] ? kcov_remote_start+0x384/0x670 [ 744.535378][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 744.535411][ T50] hci_rx_work+0x451/0xfc0 [ 744.535442][ T50] process_one_work+0xa23/0x1940 [ 744.535486][ T50] ? __pfx_process_one_work+0x10/0x10 [ 744.535528][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 744.535556][ T50] worker_thread+0x5ef/0xe50 [ 744.535599][ T50] ? kthread+0x13a/0x450 [ 744.535628][ T50] ? __pfx_worker_thread+0x10/0x10 [ 744.535660][ T50] kthread+0x370/0x450 [ 744.535695][ T50] ? __pfx_kthread+0x10/0x10 [ 744.535727][ T50] ret_from_fork+0x72b/0xd50 [ 744.535756][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 744.535786][ T50] ? __switch_to+0x800/0x10f0 [ 744.535822][ T50] ? __switch_to_asm+0x39/0x70 [ 744.535853][ T50] ? __pfx_kthread+0x10/0x10 [ 744.535885][ T50] ret_from_fork_asm+0x1a/0x30 [ 744.535929][ T50] [ 744.535952][ T50] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 744.832128][ T50] Bluetooth: hci3: failed to register connection device [ 746.329628][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.339687][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.882853][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 748.951271][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 751.020417][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 753.090120][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 755.159795][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 757.231553][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 759.298971][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 761.367719][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 763.437502][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 765.506378][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 767.577036][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 769.648183][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 771.719555][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 773.176606][T16609] FAULT_INJECTION: forcing a failure. [ 773.176606][T16609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.235248][T16609] CPU: 0 UID: 0 PID: 16609 Comm: syz.1.1500 Not tainted syzkaller #0 PREEMPT(full) [ 773.235281][T16609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 773.235295][T16609] Call Trace: [ 773.235302][T16609] [ 773.235311][T16609] dump_stack_lvl+0x100/0x190 [ 773.235344][T16609] should_fail_ex.cold+0x5/0xa [ 773.235369][T16609] _copy_from_iter+0x1f4/0x1690 [ 773.235415][T16609] ? __pfx__copy_from_iter+0x10/0x10 [ 773.235463][T16609] skb_copy_datagram_from_iter+0x11f/0x720 [ 773.235493][T16609] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 773.235524][T16609] unix_stream_sendmsg+0x536/0x1310 [ 773.235562][T16609] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 773.235599][T16609] ? apparmor_socket_sendmsg+0x15b/0x270 [ 773.235628][T16609] sock_write_iter+0x53a/0x5b0 [ 773.235650][T16609] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 773.235680][T16609] ? __pfx_sock_write_iter+0x10/0x10 [ 773.235709][T16609] ? bpf_lsm_file_permission+0x9/0x10 [ 773.235731][T16609] ? security_file_permission+0x76/0x210 [ 773.235766][T16609] ? rw_verify_area+0xce/0x6d0 [ 773.235803][T16609] vfs_write+0x6ac/0x1050 [ 773.235824][T16609] ? __pfx_sock_write_iter+0x10/0x10 [ 773.235849][T16609] ? __pfx_vfs_write+0x10/0x10 [ 773.235879][T16609] ? __x64_sys_futex+0x34f/0x4d0 [ 773.235923][T16609] ? __x64_sys_futex+0x358/0x4d0 [ 773.235950][T16609] ksys_write+0x1f8/0x250 [ 773.235969][T16609] ? __pfx_ksys_write+0x10/0x10 [ 773.235996][T16609] do_syscall_64+0x115/0x840 [ 773.236023][T16609] ? clear_bhb_loop+0x40/0x90 [ 773.236049][T16609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.236071][T16609] RIP: 0033:0x7f6a0379de99 [ 773.236088][T16609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.236109][T16609] RSP: 002b:00007f6a0466c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.236129][T16609] RAX: ffffffffffffffda RBX: 00007f6a03a26090 RCX: 00007f6a0379de99 [ 773.236143][T16609] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 773.236156][T16609] RBP: 00007f6a03833eaf R08: 0000000000000000 R09: 0000000000000000 [ 773.236169][T16609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.236181][T16609] R13: 00007f6a03a26128 R14: 00007f6a03a26090 R15: 00007fffa385efc8 [ 773.236207][T16609] [ 773.815678][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 775.855273][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 777.923873][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 779.992616][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 782.065259][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 782.442664][T16763] FAULT_INJECTION: forcing a failure. [ 782.442664][T16763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.515953][T16763] CPU: 0 UID: 0 PID: 16763 Comm: syz.1.1522 Not tainted syzkaller #0 PREEMPT(full) [ 782.515981][T16763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 782.515994][T16763] Call Trace: [ 782.516000][T16763] [ 782.516008][T16763] dump_stack_lvl+0x100/0x190 [ 782.516036][T16763] should_fail_ex.cold+0x5/0xa [ 782.516067][T16763] _copy_from_iter+0x1f4/0x1690 [ 782.516104][T16763] ? _copy_from_iter+0x270/0x1690 [ 782.516138][T16763] ? __pfx__copy_from_iter+0x10/0x10 [ 782.516175][T16763] ? __pfx__copy_from_iter+0x10/0x10 [ 782.516214][T16763] copy_page_from_iter+0x238/0x300 [ 782.516251][T16763] skb_copy_datagram_from_iter+0x399/0x720 [ 782.516287][T16763] unix_stream_sendmsg+0x536/0x1310 [ 782.516324][T16763] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 782.516358][T16763] ? apparmor_socket_sendmsg+0x15b/0x270 [ 782.516386][T16763] sock_write_iter+0x53a/0x5b0 [ 782.516406][T16763] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 782.516434][T16763] ? __pfx_sock_write_iter+0x10/0x10 [ 782.516465][T16763] ? bpf_lsm_file_permission+0x9/0x10 [ 782.516485][T16763] ? security_file_permission+0x76/0x210 [ 782.516517][T16763] ? rw_verify_area+0xce/0x6d0 [ 782.516551][T16763] vfs_write+0x6ac/0x1050 [ 782.516571][T16763] ? __pfx_sock_write_iter+0x10/0x10 [ 782.516594][T16763] ? __pfx_vfs_write+0x10/0x10 [ 782.516623][T16763] ? __x64_sys_futex+0x34f/0x4d0 [ 782.516647][T16763] ? __x64_sys_futex+0x358/0x4d0 [ 782.516673][T16763] ksys_write+0x1f8/0x250 [ 782.516692][T16763] ? __pfx_ksys_write+0x10/0x10 [ 782.516719][T16763] do_syscall_64+0x115/0x840 [ 782.516746][T16763] ? clear_bhb_loop+0x40/0x90 [ 782.516772][T16763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.516794][T16763] RIP: 0033:0x7f6a0379de99 [ 782.516811][T16763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.516832][T16763] RSP: 002b:00007f6a0466c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 782.516853][T16763] RAX: ffffffffffffffda RBX: 00007f6a03a26090 RCX: 00007f6a0379de99 [ 782.516867][T16763] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 782.516880][T16763] RBP: 00007f6a03833eaf R08: 0000000000000000 R09: 0000000000000000 [ 782.516893][T16763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.516906][T16763] R13: 00007f6a03a26128 R14: 00007f6a03a26090 R15: 00007fffa385efc8 [ 782.516932][T16763] [ 784.131501][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 784.811659][T16796] FAULT_INJECTION: forcing a failure. [ 784.811659][T16796] name failslab, interval 1, probability 0, space 0, times 0 [ 784.847705][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.0.1526 Not tainted syzkaller #0 PREEMPT(full) [ 784.847735][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 784.847749][T16796] Call Trace: [ 784.847756][T16796] [ 784.847764][T16796] dump_stack_lvl+0x100/0x190 [ 784.847794][T16796] should_fail_ex.cold+0x5/0xa [ 784.847820][T16796] should_failslab+0xc2/0x120 [ 784.847860][T16796] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 784.847891][T16796] ? __d_alloc+0x35/0xa50 [ 784.847920][T16796] __d_alloc+0x35/0xa50 [ 784.847949][T16796] d_alloc+0x4a/0x1e0 [ 784.847975][T16796] lookup_one_qstr_excl+0x171/0x250 [ 784.848008][T16796] start_dirop+0x59/0xb0 [ 784.848045][T16796] simple_start_creating+0xf9/0x110 [ 784.848067][T16796] ? __pfx_simple_start_creating+0x10/0x10 [ 784.848106][T16796] ? mntput+0x70/0xa0 [ 784.848141][T16796] ? simple_pin_fs+0xa3/0x190 [ 784.848176][T16796] debugfs_start_creating.part.0+0x82/0x170 [ 784.848310][T16796] __debugfs_create_file+0xb3/0x4f0 [ 784.848347][T16796] debugfs_create_file_full+0x41/0x60 [ 784.848384][T16796] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 784.848440][T16796] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 784.848512][T16796] ? kasan_save_track+0x14/0x30 [ 784.848541][T16796] ? __kasan_kmalloc+0xaa/0xb0 [ 784.848582][T16796] ? lockdep_init_map_type+0x5c/0x250 [ 784.848624][T16796] preinit_net.part.0+0x43b/0x920 [ 784.848660][T16796] copy_net_ns+0x339/0x7c0 [ 784.848710][T16796] create_new_namespaces+0x3ea/0xac0 [ 784.848738][T16796] unshare_nsproxy_namespaces+0xf2/0x220 [ 784.848763][T16796] ksys_unshare+0x438/0xab0 [ 784.848793][T16796] ? __pfx_ksys_unshare+0x10/0x10 [ 784.848835][T16796] __x64_sys_unshare+0x31/0x40 [ 784.848862][T16796] do_syscall_64+0x115/0x840 [ 784.848889][T16796] ? clear_bhb_loop+0x40/0x90 [ 784.848915][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.848937][T16796] RIP: 0033:0x7f66e299de99 [ 784.848955][T16796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.848976][T16796] RSP: 002b:00007f66e0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 784.848997][T16796] RAX: ffffffffffffffda RBX: 00007f66e2c25fa0 RCX: 00007f66e299de99 [ 784.849011][T16796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 784.849024][T16796] RBP: 00007f66e2a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 784.849038][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.849051][T16796] R13: 00007f66e2c26038 R14: 00007f66e2c25fa0 R15: 00007ffe68c699d8 [ 784.849078][T16796] [ 786.200781][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 786.627288][T16816] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 788.270691][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 790.339822][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 792.410076][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 794.479200][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 796.548143][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 798.350274][T17006] FAULT_INJECTION: forcing a failure. [ 798.350274][T17006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 798.416035][T17006] CPU: 0 UID: 0 PID: 17006 Comm: syz.1.1556 Not tainted syzkaller #0 PREEMPT(full) [ 798.416062][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 798.416075][T17006] Call Trace: [ 798.416082][T17006] [ 798.416089][T17006] dump_stack_lvl+0x100/0x190 [ 798.416116][T17006] should_fail_ex.cold+0x5/0xa [ 798.416135][T17006] ? prepare_alloc_pages+0x16d/0x5f0 [ 798.416166][T17006] should_fail_alloc_page+0xeb/0x140 [ 798.416200][T17006] prepare_alloc_pages+0x1f0/0x5f0 [ 798.416233][T17006] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 798.416262][T17006] ? rcu_is_watching+0x12/0xc0 [ 798.416292][T17006] ? __lock_acquire+0x49f/0x1a40 [ 798.416334][T17006] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 798.416358][T17006] ? __css_rstat_updated+0x1ce/0x5a0 [ 798.416396][T17006] ? do_raw_spin_lock+0x128/0x260 [ 798.416419][T17006] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 798.416460][T17006] ? find_held_lock+0x2b/0x80 [ 798.416498][T17006] ? __lock_acquire+0x49f/0x1a40 [ 798.416531][T17006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 798.416564][T17006] ? policy_nodemask+0xed/0x4f0 [ 798.416598][T17006] alloc_pages_mpol+0x1fb/0x540 [ 798.416630][T17006] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 798.416663][T17006] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 798.416710][T17006] folio_alloc_mpol_noprof+0x36/0x260 [ 798.416749][T17006] shmem_alloc_folio+0x135/0x160 [ 798.416788][T17006] shmem_alloc_and_add_folio+0x371/0xd40 [ 798.416820][T17006] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 798.416866][T17006] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 798.416900][T17006] shmem_get_folio_gfp+0x6ad/0x1910 [ 798.416932][T17006] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 798.416967][T17006] shmem_write_begin+0x1a4/0x420 [ 798.416996][T17006] ? __pfx_shmem_write_begin+0x10/0x10 [ 798.417025][T17006] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 798.417061][T17006] generic_perform_write+0x292/0xa40 [ 798.417108][T17006] ? __pfx_generic_perform_write+0x10/0x10 [ 798.417143][T17006] ? __mark_inode_dirty+0x55c/0x16e0 [ 798.417182][T17006] ? mnt_put_write_access_file+0x4e/0x100 [ 798.417207][T17006] ? file_update_time_flags+0x373/0x500 [ 798.417240][T17006] shmem_file_write_iter+0x10e/0x140 [ 798.417274][T17006] iter_file_splice_write+0x830/0x10b0 [ 798.417318][T17006] ? __pfx_iter_file_splice_write+0x10/0x10 [ 798.417349][T17006] ? __pfx___might_resched+0x10/0x10 [ 798.417403][T17006] ? __pfx_iter_file_splice_write+0x10/0x10 [ 798.417431][T17006] do_splice+0x109c/0x1f90 [ 798.417458][T17006] ? __lock_acquire+0x49f/0x1a40 [ 798.417495][T17006] ? ksys_write+0x190/0x250 [ 798.417524][T17006] ? __pfx_do_splice+0x10/0x10 [ 798.417547][T17006] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 798.417573][T17006] ? find_held_lock+0x2b/0x80 [ 798.417605][T17006] __do_splice+0x33b/0x370 [ 798.417633][T17006] ? __pfx___do_splice+0x10/0x10 [ 798.417666][T17006] __x64_sys_splice+0x187/0x250 [ 798.417696][T17006] do_syscall_64+0x115/0x840 [ 798.417725][T17006] ? clear_bhb_loop+0x40/0x90 [ 798.417767][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.417791][T17006] RIP: 0033:0x7f6a0379de99 [ 798.417810][T17006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.417833][T17006] RSP: 002b:00007f6a0468d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 798.417855][T17006] RAX: ffffffffffffffda RBX: 00007f6a03a25fa0 RCX: 00007f6a0379de99 [ 798.417871][T17006] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 798.417884][T17006] RBP: 00007f6a0468d090 R08: 0000000080000001 R09: 0000000000000009 [ 798.417899][T17006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.417913][T17006] R13: 00007f6a03a26038 R14: 00007f6a03a25fa0 R15: 00007fffa385efc8 [ 798.417958][T17006] [ 798.804962][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 800.846638][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 802.915667][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 804.985009][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 807.055273][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 807.455647][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.465794][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.124037][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 810.725538][T17201] FAULT_INJECTION: forcing a failure. [ 810.725538][T17201] name failslab, interval 1, probability 0, space 0, times 0 [ 810.798609][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.2.1584 Not tainted syzkaller #0 PREEMPT(full) [ 810.798637][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 810.798649][T17201] Call Trace: [ 810.798656][T17201] [ 810.798663][T17201] dump_stack_lvl+0x100/0x190 [ 810.798690][T17201] should_fail_ex.cold+0x5/0xa [ 810.798713][T17201] should_failslab+0xc2/0x120 [ 810.798743][T17201] kmem_cache_alloc_noprof+0x91/0x6a0 [ 810.798770][T17201] ? __pmd_alloc+0xbf/0x950 [ 810.798804][T17201] __pmd_alloc+0xbf/0x950 [ 810.798835][T17201] __handle_mm_fault+0xa9c/0x2a00 [ 810.798860][T17201] ? mt_find+0x45e/0x8e0 [ 810.798889][T17201] ? __pfx___handle_mm_fault+0x10/0x10 [ 810.798908][T17201] ? __pfx_mt_find+0x10/0x10 [ 810.798949][T17201] ? find_vma+0xbf/0x140 [ 810.798975][T17201] ? __pfx_find_vma+0x10/0x10 [ 810.799005][T17201] handle_mm_fault+0x37b/0xa30 [ 810.799030][T17201] fixup_user_fault+0x199/0x510 [ 810.799062][T17201] fault_in_user_writeable+0x70/0xe0 [ 810.799084][T17201] futex_wake_op+0xc2e/0xe70 [ 810.799118][T17201] ? __pfx_futex_wake_op+0x10/0x10 [ 810.799145][T17201] ? find_held_lock+0x2b/0x80 [ 810.799176][T17201] ? rcu_read_lock_any_held+0x6a/0xa0 [ 810.799202][T17201] ? find_held_lock+0x2b/0x80 [ 810.799226][T17201] ? ksys_write+0x190/0x250 [ 810.799244][T17201] ? ksys_write+0x190/0x250 [ 810.799264][T17201] do_futex+0x3d8/0x440 [ 810.799287][T17201] ? __pfx_do_futex+0x10/0x10 [ 810.799310][T17201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.799341][T17201] __x64_sys_futex+0x34f/0x4d0 [ 810.799364][T17201] ? fput+0x79/0x100 [ 810.799386][T17201] ? __pfx___x64_sys_futex+0x10/0x10 [ 810.799408][T17201] ? ksys_write+0x1ac/0x250 [ 810.799426][T17201] ? __pfx_ksys_write+0x10/0x10 [ 810.799451][T17201] do_syscall_64+0x115/0x840 [ 810.799475][T17201] ? clear_bhb_loop+0x40/0x90 [ 810.799505][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.799526][T17201] RIP: 0033:0x7f1cc059de99 [ 810.799542][T17201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.799561][T17201] RSP: 002b:00007f1cc14e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 810.799579][T17201] RAX: ffffffffffffffda RBX: 00007f1cc0825fa0 RCX: 00007f1cc059de99 [ 810.799592][T17201] RDX: 0000000000010005 RSI: 0000000000000085 RDI: 0000000000000000 [ 810.799604][T17201] RBP: 00007f1cc14e8090 R08: 0000000000000000 R09: 0000000010000007 [ 810.799617][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.799629][T17201] R13: 00007f1cc0826038 R14: 00007f1cc0825fa0 R15: 00007ffccbd56478 [ 810.799654][T17201] [ 811.304810][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 813.342183][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 815.411755][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 817.481233][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 819.550815][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 821.621687][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 823.690911][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 825.759030][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 827.729963][T17496] blktrace: Concurrent blktraces are not allowed on ram10 [ 827.829516][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 827.976823][T17496] blktrace: Concurrent blktraces are not allowed on ram10 [ 829.897729][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 830.039713][T17525] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 831.967503][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 832.804922][ T30] audit: type=1804 audit(4294967298.919:32): pid=17599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1634" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 834.038385][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 836.106156][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 838.175629][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 839.547880][ T30] audit: type=1800 audit(4294967298.361:33): pid=17704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1650" name="version" dev="configfs" ino=139873 res=0 errno=0 [ 840.245893][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 842.314963][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 844.384497][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 844.682983][T17791] FAULT_INJECTION: forcing a failure. [ 844.682983][T17791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.737032][T17791] CPU: 0 UID: 0 PID: 17791 Comm: syz.0.1661 Not tainted syzkaller #0 PREEMPT(full) [ 844.737060][T17791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 844.737074][T17791] Call Trace: [ 844.737081][T17791] [ 844.737089][T17791] dump_stack_lvl+0x100/0x190 [ 844.737130][T17791] should_fail_ex.cold+0x5/0xa [ 844.737153][T17791] _copy_from_user+0x2e/0xd0 [ 844.737189][T17791] copy_msghdr_from_user+0x9f/0x4c0 [ 844.737215][T17791] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 844.737260][T17791] ? rcu_is_watching+0x12/0xc0 [ 844.737288][T17791] ? ___sys_sendmsg+0x19d/0x1e0 [ 844.737310][T17791] ? kfree+0x1e5/0x6c0 [ 844.737336][T17791] ___sys_sendmsg+0x106/0x1e0 [ 844.737362][T17791] ? __pfx____sys_sendmsg+0x10/0x10 [ 844.737386][T17791] ? futex_hash+0x311/0x400 [ 844.737449][T17791] ? __pfx___might_resched+0x10/0x10 [ 844.737499][T17791] __sys_sendmmsg+0x20c/0x440 [ 844.737538][T17791] ? __pfx___sys_sendmmsg+0x10/0x10 [ 844.737581][T17791] ? __pfx_do_futex+0x10/0x10 [ 844.737606][T17791] ? __pfx_do_sys_openat2+0x10/0x10 [ 844.737651][T17791] ? __x64_sys_openat+0x12d/0x210 [ 844.737685][T17791] ? xfd_validate_state+0x129/0x190 [ 844.737721][T17791] __x64_sys_sendmmsg+0x9c/0x100 [ 844.737761][T17791] ? lockdep_hardirqs_on+0x78/0x100 [ 844.737791][T17791] do_syscall_64+0x115/0x840 [ 844.737852][T17791] ? clear_bhb_loop+0x40/0x90 [ 844.737882][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.737908][T17791] RIP: 0033:0x7f66e299de99 [ 844.737929][T17791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.737952][T17791] RSP: 002b:00007f66e0bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 844.737976][T17791] RAX: ffffffffffffffda RBX: 00007f66e2c26180 RCX: 00007f66e299de99 [ 844.737992][T17791] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000009 [ 844.738008][T17791] RBP: 00007f66e2a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 844.738023][T17791] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 844.738039][T17791] R13: 00007f66e2c26218 R14: 00007f66e2c26180 R15: 00007ffe68c699d8 [ 844.738069][T17791] [ 846.453832][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 848.522790][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 850.592162][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 852.661651][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 854.731414][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 856.250882][T17971] FAULT_INJECTION: forcing a failure. [ 856.250882][T17971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.349753][T17971] CPU: 0 UID: 0 PID: 17971 Comm: syz.0.1687 Not tainted syzkaller #0 PREEMPT(full) [ 856.349779][T17971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 856.349792][T17971] Call Trace: [ 856.349798][T17971] [ 856.349805][T17971] dump_stack_lvl+0x100/0x190 [ 856.349832][T17971] should_fail_ex.cold+0x5/0xa [ 856.349854][T17971] _copy_to_user+0x32/0xd0 [ 856.349887][T17971] fs_name+0x25e/0x4a0 [ 856.349915][T17971] __x64_sys_sysfs+0xe6/0x120 [ 856.349940][T17971] do_syscall_64+0x115/0x840 [ 856.349965][T17971] ? clear_bhb_loop+0x40/0x90 [ 856.349990][T17971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.350011][T17971] RIP: 0033:0x7f66e299de99 [ 856.350026][T17971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.350046][T17971] RSP: 002b:00007f66e0b72028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 856.350065][T17971] RAX: ffffffffffffffda RBX: 00007f66e2c26360 RCX: 00007f66e299de99 [ 856.350079][T17971] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 856.350091][T17971] RBP: 00007f66e0b72090 R08: 0000000000000000 R09: 0000000000000000 [ 856.350103][T17971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.350115][T17971] R13: 00007f66e2c263f8 R14: 00007f66e2c26360 R15: 00007ffe68c699d8 [ 856.350140][T17971] [ 856.968916][T16075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.541594][T16075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.579672][T12705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 857.591982][T12705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 857.604169][T12705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 857.612870][T12705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 857.620674][T12705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 857.957798][T16075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.136151][T16075] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.505089][T17992] random: crng reseeded on system resumption [ 858.771151][T17993] hub 1-0:1.0: USB hub found [ 858.804720][T16075] bridge_slave_1: left allmulticast mode [ 858.842686][T16075] bridge_slave_1: left promiscuous mode [ 858.866128][T17993] hub 1-0:1.0: 1 port detected [ 858.877544][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.939431][T16075] bridge_slave_0: left allmulticast mode [ 858.977903][T16075] bridge_slave_0: left promiscuous mode [ 859.016516][T16075] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.553156][T16075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.594959][T16075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.627598][T16075] bond0 (unregistering): Released all slaves [ 859.668768][T16145] Bluetooth: hci3: command tx timeout [ 860.308720][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 861.737168][T16145] Bluetooth: hci3: command tx timeout [ 862.745699][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 862.905033][T17979] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.935920][T17979] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.965808][T17979] bridge_slave_0: entered allmulticast mode [ 863.003037][T17979] bridge_slave_0: entered promiscuous mode [ 863.035377][T17979] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.068762][T17979] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.101625][T17979] bridge_slave_1: entered allmulticast mode [ 863.138959][T17979] bridge_slave_1: entered promiscuous mode [ 863.418155][T17979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.558447][T17979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.805052][T16145] Bluetooth: hci3: command tx timeout [ 863.950118][T17979] team0: Port device team_slave_0 added [ 863.978532][T17979] team0: Port device team_slave_1 added [ 864.282206][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 864.400200][T17979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.417162][T17979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.484016][T17979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.606060][T17979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.614683][T17979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.643911][T17979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.040962][T16075] hsr_slave_0: left promiscuous mode [ 865.061512][T16075] hsr_slave_1: left promiscuous mode [ 865.082703][T16075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.111586][T16075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.141262][T16075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.161420][T16075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.193065][T16075] veth1_macvtap: left promiscuous mode [ 865.206461][T16075] veth0_macvtap: left promiscuous mode [ 865.221788][T16075] veth1_vlan: left promiscuous mode [ 865.232878][T16075] veth0_vlan: left promiscuous mode [ 865.706542][T16075] team0 (unregistering): Port device team_slave_1 removed [ 865.741539][T16075] team0 (unregistering): Port device team_slave_0 removed [ 865.874370][T16145] Bluetooth: hci3: command tx timeout [ 866.059581][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 866.346619][T17979] hsr_slave_0: entered promiscuous mode [ 866.357773][T17979] hsr_slave_1: entered promiscuous mode [ 868.582476][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.593134][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.910397][T17979] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 870.945365][T17979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.975075][T17979] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 871.003382][T17979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.175895][T17979] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 871.199727][T17979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 871.223045][T17979] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 871.254236][T17979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 871.568124][T18241] FAULT_INJECTION: forcing a failure. [ 871.568124][T18241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.616171][T18241] CPU: 0 UID: 0 PID: 18241 Comm: syz.3.1709 Not tainted syzkaller #0 PREEMPT(full) [ 871.616197][T18241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 871.616210][T18241] Call Trace: [ 871.616216][T18241] [ 871.616224][T18241] dump_stack_lvl+0x100/0x190 [ 871.616252][T18241] should_fail_ex.cold+0x5/0xa [ 871.616276][T18241] _copy_from_iter+0x43a/0x1690 [ 871.616311][T18241] ? kernel_fpu_begin_mask+0x180/0x300 [ 871.616345][T18241] ? __pfx__copy_from_iter+0x10/0x10 [ 871.616375][T18241] ? do_raw_spin_lock+0x128/0x260 [ 871.616400][T18241] ? find_held_lock+0x2b/0x80 [ 871.616424][T18241] ? write_pool_user+0x11e/0x300 [ 871.616539][T18241] ? rcu_is_watching+0x12/0xc0 [ 871.616564][T18241] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 871.616590][T18241] write_pool_user+0xe4/0x300 [ 871.616622][T18241] ? __pfx_write_pool_user+0x10/0x10 [ 871.616665][T18241] do_iter_readv_writev+0x6f7/0x930 [ 871.616699][T18241] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 871.616735][T18241] ? bpf_lsm_file_permission+0x9/0x10 [ 871.616755][T18241] ? security_file_permission+0x76/0x210 [ 871.616786][T18241] ? rw_verify_area+0xce/0x6d0 [ 871.616817][T18241] vfs_writev+0x360/0xdd0 [ 871.616853][T18241] ? __pfx_vfs_writev+0x10/0x10 [ 871.616885][T18241] ? rcu_read_lock_any_held+0x6a/0xa0 [ 871.616925][T18241] ? __fget_files+0x21f/0x3d0 [ 871.616951][T18241] ? do_writev+0x13e/0x340 [ 871.616979][T18241] do_writev+0x13e/0x340 [ 871.617015][T18241] ? __pfx_do_writev+0x10/0x10 [ 871.617053][T18241] do_syscall_64+0x115/0x840 [ 871.617077][T18241] ? clear_bhb_loop+0x40/0x90 [ 871.617101][T18241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.617122][T18241] RIP: 0033:0x7fdee5b9de99 [ 871.617138][T18241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.617157][T18241] RSP: 002b:00007fdee6a3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 871.617176][T18241] RAX: ffffffffffffffda RBX: 00007fdee5e25fa0 RCX: 00007fdee5b9de99 [ 871.617189][T18241] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000003 [ 871.617201][T18241] RBP: 00007fdee6a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 871.617214][T18241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 871.617225][T18241] R13: 00007fdee5e26038 R14: 00007fdee5e25fa0 R15: 00007ffe2b478b98 [ 871.617250][T18241] [ 872.034859][T17979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.049814][T17979] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.079279][T17979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 872.089671][T17979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 872.230108][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.237295][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.291828][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.298963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.399792][T17979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.274191][T17979] veth0_vlan: entered promiscuous mode [ 876.477171][T17979] veth1_vlan: entered promiscuous mode [ 876.840784][T17979] veth0_macvtap: entered promiscuous mode [ 876.896744][T17979] veth1_macvtap: entered promiscuous mode [ 877.582059][T17979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.771256][T17979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.278166][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.334100][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.418107][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.488370][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.902707][T16081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.955318][T16081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.153074][T16072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.193888][T16072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.210479][T18385] sysfs_service_op_store: Client not running :-5: [ 879.979896][T18407] FAULT_INJECTION: forcing a failure. [ 879.979896][T18407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.020412][T18407] CPU: 0 UID: 0 PID: 18407 Comm: syz.1.1688 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.020447][T18407] Tainted: [L]=SOFTLOCKUP [ 880.020455][T18407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 880.020469][T18407] Call Trace: [ 880.020476][T18407] [ 880.020484][T18407] dump_stack_lvl+0x100/0x190 [ 880.020514][T18407] should_fail_ex.cold+0x5/0xa [ 880.020539][T18407] _copy_from_iter+0x1f4/0x1690 [ 880.020582][T18407] ? __pfx__copy_from_iter+0x10/0x10 [ 880.020630][T18407] skb_copy_datagram_from_iter+0x11f/0x720 [ 880.020660][T18407] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 880.020690][T18407] unix_stream_sendmsg+0x536/0x1310 [ 880.020728][T18407] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 880.020764][T18407] ? apparmor_socket_sendmsg+0x15b/0x270 [ 880.020804][T18407] sock_write_iter+0x53a/0x5b0 [ 880.020827][T18407] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 880.020856][T18407] ? __pfx_sock_write_iter+0x10/0x10 [ 880.020883][T18407] ? bpf_lsm_file_permission+0x9/0x10 [ 880.020903][T18407] ? security_file_permission+0x76/0x210 [ 880.020934][T18407] ? rw_verify_area+0xce/0x6d0 [ 880.020968][T18407] vfs_write+0x6ac/0x1050 [ 880.020987][T18407] ? __pfx_sock_write_iter+0x10/0x10 [ 880.021011][T18407] ? __pfx_vfs_write+0x10/0x10 [ 880.021028][T18407] ? find_held_lock+0x2b/0x80 [ 880.021070][T18407] ksys_write+0x1f8/0x250 [ 880.021089][T18407] ? __pfx_ksys_write+0x10/0x10 [ 880.021115][T18407] do_syscall_64+0x115/0x840 [ 880.021141][T18407] ? clear_bhb_loop+0x40/0x90 [ 880.021166][T18407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.021195][T18407] RIP: 0033:0x7f00a2f9de99 [ 880.021212][T18407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.021234][T18407] RSP: 002b:00007f00a3edc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 880.021253][T18407] RAX: ffffffffffffffda RBX: 00007f00a3226090 RCX: 00007f00a2f9de99 [ 880.021268][T18407] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 880.021281][T18407] RBP: 00007f00a3033eaf R08: 0000000000000000 R09: 0000000000000000 [ 880.021293][T18407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.021307][T18407] R13: 00007f00a3226128 R14: 00007f00a3226090 R15: 00007ffcd291e818 [ 880.021333][T18407] [ 880.370962][T18414] FAULT_INJECTION: forcing a failure. [ 880.370962][T18414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.384229][T18414] CPU: 0 UID: 0 PID: 18414 Comm: syz.1.1725 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.384259][T18414] Tainted: [L]=SOFTLOCKUP [ 880.384266][T18414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 880.384278][T18414] Call Trace: [ 880.384284][T18414] [ 880.384291][T18414] dump_stack_lvl+0x100/0x190 [ 880.384318][T18414] should_fail_ex.cold+0x5/0xa [ 880.384341][T18414] _copy_to_user+0x32/0xd0 [ 880.384375][T18414] simple_read_from_buffer+0xcb/0x170 [ 880.384411][T18414] proc_fail_nth_read+0x1af/0x230 [ 880.384441][T18414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.384470][T18414] ? rw_verify_area+0xce/0x6d0 [ 880.384500][T18414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.384527][T18414] vfs_read+0x1e4/0xb40 [ 880.384548][T18414] ? __pfx_vfs_read+0x10/0x10 [ 880.384579][T18414] ? __fget_files+0x215/0x3d0 [ 880.384603][T18414] ? __fget_files+0x21f/0x3d0 [ 880.384628][T18414] ksys_read+0x12a/0x250 [ 880.384645][T18414] ? __pfx_ksys_read+0x10/0x10 [ 880.384670][T18414] do_syscall_64+0x115/0x840 [ 880.384695][T18414] ? clear_bhb_loop+0x40/0x90 [ 880.384720][T18414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.384741][T18414] RIP: 0033:0x7f00a2f5e6ce [ 880.384756][T18414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 880.384776][T18414] RSP: 002b:00007f00a3efcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 880.384794][T18414] RAX: ffffffffffffffda RBX: 00007f00a3efd6c0 RCX: 00007f00a2f5e6ce [ 880.384807][T18414] RDX: 000000000000000f RSI: 00007f00a3efd0a0 RDI: 0000000000000004 [ 880.384819][T18414] RBP: 00007f00a3efd090 R08: 0000000000000000 R09: 0000000000000000 [ 880.384831][T18414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.384842][T18414] R13: 00007f00a3226038 R14: 00007f00a3225fa0 R15: 00007ffcd291e818 [ 880.384867][T18414] [ 882.418942][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'. [ 883.538249][T18476] FAULT_INJECTION: forcing a failure. [ 883.538249][T18476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.578528][T18476] CPU: 0 UID: 0 PID: 18476 Comm: syz.3.1734 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.578562][T18476] Tainted: [L]=SOFTLOCKUP [ 883.578569][T18476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 883.578583][T18476] Call Trace: [ 883.578589][T18476] [ 883.578597][T18476] dump_stack_lvl+0x100/0x190 [ 883.578625][T18476] should_fail_ex.cold+0x5/0xa [ 883.578648][T18476] _copy_from_user+0x2e/0xd0 [ 883.578683][T18476] copy_msghdr_from_user+0x9f/0x4c0 [ 883.578709][T18476] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 883.578737][T18476] ? rcu_is_watching+0x12/0xc0 [ 883.578762][T18476] ? ___sys_sendmsg+0x19d/0x1e0 [ 883.578783][T18476] ? kfree+0x1e5/0x6c0 [ 883.578807][T18476] ___sys_sendmsg+0x106/0x1e0 [ 883.578831][T18476] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.578860][T18476] ? futex_hash+0x311/0x400 [ 883.578900][T18476] ? __pfx___might_resched+0x10/0x10 [ 883.578941][T18476] __sys_sendmmsg+0x20c/0x440 [ 883.578974][T18476] ? __pfx___sys_sendmmsg+0x10/0x10 [ 883.579012][T18476] ? __pfx_do_futex+0x10/0x10 [ 883.579046][T18476] ? xfd_validate_state+0x129/0x190 [ 883.579077][T18476] __x64_sys_sendmmsg+0x9c/0x100 [ 883.579107][T18476] ? lockdep_hardirqs_on+0x78/0x100 [ 883.579133][T18476] do_syscall_64+0x115/0x840 [ 883.579158][T18476] ? clear_bhb_loop+0x40/0x90 [ 883.579184][T18476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.579205][T18476] RIP: 0033:0x7fdee5b9de99 [ 883.579223][T18476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.579243][T18476] RSP: 002b:00007fdee69fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 883.579263][T18476] RAX: ffffffffffffffda RBX: 00007fdee5e26180 RCX: 00007fdee5b9de99 [ 883.579277][T18476] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000009 [ 883.579290][T18476] RBP: 00007fdee5c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 883.579303][T18476] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 883.579316][T18476] R13: 00007fdee5e26218 R14: 00007fdee5e26180 R15: 00007ffe2b478b98 [ 883.579342][T18476] [ 888.785918][T18545] FAULT_INJECTION: forcing a failure. [ 888.785918][T18545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.830703][T18545] CPU: 0 UID: 0 PID: 18545 Comm: syz.3.1744 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.830742][T18545] Tainted: [L]=SOFTLOCKUP [ 888.830750][T18545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 888.830763][T18545] Call Trace: [ 888.830771][T18545] [ 888.830779][T18545] dump_stack_lvl+0x100/0x190 [ 888.830809][T18545] should_fail_ex.cold+0x5/0xa [ 888.830834][T18545] _copy_from_iter+0x1f4/0x1690 [ 888.830874][T18545] ? _copy_from_iter+0x270/0x1690 [ 888.830921][T18545] ? __pfx__copy_from_iter+0x10/0x10 [ 888.830958][T18545] ? __pfx__copy_from_iter+0x10/0x10 [ 888.830998][T18545] copy_page_from_iter+0x238/0x300 [ 888.831036][T18545] skb_copy_datagram_from_iter+0x399/0x720 [ 888.831070][T18545] unix_stream_sendmsg+0x536/0x1310 [ 888.831106][T18545] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 888.831140][T18545] ? apparmor_socket_sendmsg+0x15b/0x270 [ 888.831168][T18545] sock_write_iter+0x53a/0x5b0 [ 888.831188][T18545] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 888.831216][T18545] ? __pfx_sock_write_iter+0x10/0x10 [ 888.831243][T18545] ? bpf_lsm_file_permission+0x9/0x10 [ 888.831264][T18545] ? security_file_permission+0x76/0x210 [ 888.831296][T18545] ? rw_verify_area+0xce/0x6d0 [ 888.831331][T18545] vfs_write+0x6ac/0x1050 [ 888.831350][T18545] ? __pfx_sock_write_iter+0x10/0x10 [ 888.831379][T18545] ? __pfx_vfs_write+0x10/0x10 [ 888.831396][T18545] ? find_held_lock+0x2b/0x80 [ 888.831438][T18545] ksys_write+0x1f8/0x250 [ 888.831458][T18545] ? __pfx_ksys_write+0x10/0x10 [ 888.831485][T18545] do_syscall_64+0x115/0x840 [ 888.831511][T18545] ? clear_bhb_loop+0x40/0x90 [ 888.831536][T18545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.831558][T18545] RIP: 0033:0x7fdee5b9de99 [ 888.831575][T18545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.831596][T18545] RSP: 002b:00007fdee6a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 888.831615][T18545] RAX: ffffffffffffffda RBX: 00007fdee5e26090 RCX: 00007fdee5b9de99 [ 888.831630][T18545] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 888.831642][T18545] RBP: 00007fdee5c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 888.831655][T18545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.831667][T18545] R13: 00007fdee5e26128 R14: 00007fdee5e26090 R15: 00007ffe2b478b98 [ 888.831694][T18545] [ 889.745382][T18568] zswap: compressor 000 not available [ 891.892024][ T30] audit: type=1800 audit(4294967299.362:34): pid=18617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1752" name="members" dev="configfs" ino=147913 res=0 errno=0 [ 891.982865][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'. [ 893.421286][T18629] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1755'. [ 893.467143][T18629] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1755'. [ 893.531475][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 893.540804][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 901.681415][T18790] FAULT_INJECTION: forcing a failure. [ 901.681415][T18790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.785150][T18790] CPU: 0 UID: 0 PID: 18790 Comm: syz.3.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.785201][T18790] Tainted: [L]=SOFTLOCKUP [ 901.785208][T18790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 901.785220][T18790] Call Trace: [ 901.785227][T18790] [ 901.785234][T18790] dump_stack_lvl+0x100/0x190 [ 901.785260][T18790] should_fail_ex.cold+0x5/0xa [ 901.785283][T18790] _copy_to_user+0x32/0xd0 [ 901.785316][T18790] fs_name+0x25e/0x4a0 [ 901.785342][T18790] __x64_sys_sysfs+0xe6/0x120 [ 901.785367][T18790] do_syscall_64+0x115/0x840 [ 901.785392][T18790] ? clear_bhb_loop+0x40/0x90 [ 901.785417][T18790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.785437][T18790] RIP: 0033:0x7fdee5b9de99 [ 901.785453][T18790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.785490][T18790] RSP: 002b:00007fdee69bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 901.785510][T18790] RAX: ffffffffffffffda RBX: 00007fdee5e26360 RCX: 00007fdee5b9de99 [ 901.785524][T18790] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 901.785536][T18790] RBP: 00007fdee69bb090 R08: 0000000000000000 R09: 0000000000000000 [ 901.785549][T18790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.785562][T18790] R13: 00007fdee5e263f8 R14: 00007fdee5e26360 R15: 00007ffe2b478b98 [ 901.785588][T18790] [ 903.510786][T16075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.726661][T16075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.896780][T16075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.124737][T16075] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.224313][T12705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 904.235057][T12705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 904.247954][T12705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 904.261084][T12705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 904.271188][T12705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 905.231166][T16075] bridge_slave_1: left allmulticast mode [ 905.271148][T16075] bridge_slave_1: left promiscuous mode [ 905.301731][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.344705][T16075] bridge_slave_0: left allmulticast mode [ 905.371087][T16075] bridge_slave_0: left promiscuous mode [ 905.387082][T16075] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.795510][T16075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.820695][T16075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.851000][T16075] bond0 (unregistering): Released all slaves [ 906.309062][T12705] Bluetooth: hci3: command tx timeout [ 907.683082][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 907.847491][T16075] hsr_slave_0: left promiscuous mode [ 907.867653][T16075] hsr_slave_1: left promiscuous mode [ 907.880413][T16075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.897944][T16075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.923422][T16075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.947151][T16075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.982710][T16075] veth1_macvtap: left promiscuous mode [ 907.989128][T16075] veth0_macvtap: left promiscuous mode [ 907.995498][T16075] veth1_vlan: left promiscuous mode [ 908.000900][T16075] veth0_vlan: left promiscuous mode [ 908.240658][T16075] team0 (unregistering): Port device team_slave_1 removed [ 908.259436][T16075] team0 (unregistering): Port device team_slave_0 removed [ 908.377620][T12705] Bluetooth: hci3: command tx timeout [ 909.848403][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 910.201887][T18926] FAULT_INJECTION: forcing a failure. [ 910.201887][T18926] name failslab, interval 1, probability 0, space 0, times 0 [ 910.235764][T18926] CPU: 0 UID: 0 PID: 18926 Comm: syz.2.1792 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.235798][T18926] Tainted: [L]=SOFTLOCKUP [ 910.235806][T18926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 910.235819][T18926] Call Trace: [ 910.235826][T18926] [ 910.235833][T18926] dump_stack_lvl+0x100/0x190 [ 910.235862][T18926] should_fail_ex.cold+0x5/0xa [ 910.235886][T18926] should_failslab+0xc2/0x120 [ 910.235918][T18926] __kmalloc_node_noprof+0x101/0x830 [ 910.235945][T18926] ? lockdep_init_map_type+0x5c/0x250 [ 910.235967][T18926] ? blk_mq_alloc_tag_set+0x477/0x1330 [ 910.235997][T18926] blk_mq_alloc_tag_set+0x477/0x1330 [ 910.236020][T18926] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 910.236048][T18926] ? idr_alloc+0xdd/0x130 [ 910.236076][T18926] ? __pfx_idr_alloc+0x10/0x10 [ 910.236110][T18926] loop_add+0x3b7/0xb60 [ 910.236136][T18926] ? __pfx_loop_add+0x10/0x10 [ 910.236176][T18926] ? find_held_lock+0x2b/0x80 [ 910.236202][T18926] ? __fget_files+0x215/0x3d0 [ 910.236224][T18926] loop_control_ioctl+0xae/0x620 [ 910.236250][T18926] ? __pfx_loop_control_ioctl+0x10/0x10 [ 910.236280][T18926] ? __pfx_loop_control_ioctl+0x10/0x10 [ 910.236308][T18926] __x64_sys_ioctl+0x18e/0x210 [ 910.236341][T18926] do_syscall_64+0x115/0x840 [ 910.236366][T18926] ? clear_bhb_loop+0x40/0x90 [ 910.236392][T18926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.236414][T18926] RIP: 0033:0x7f1cc059de99 [ 910.236431][T18926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.236458][T18926] RSP: 002b:00007f1cc14e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.236478][T18926] RAX: ffffffffffffffda RBX: 00007f1cc0825fa0 RCX: 00007f1cc059de99 [ 910.236492][T18926] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 910.236507][T18926] RBP: 00007f1cc14e8090 R08: 0000000000000000 R09: 0000000000000000 [ 910.236520][T18926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.236533][T18926] R13: 00007f1cc0826038 R14: 00007f1cc0825fa0 R15: 00007ffccbd56478 [ 910.236560][T18926] [ 910.477948][T12705] Bluetooth: hci3: command tx timeout [ 910.864082][T18820] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.949903][T18820] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.002828][T18820] bridge_slave_0: entered allmulticast mode [ 911.058961][T18820] bridge_slave_0: entered promiscuous mode [ 911.404667][T18947] FAULT_INJECTION: forcing a failure. [ 911.404667][T18947] name failslab, interval 1, probability 0, space 0, times 0 [ 911.572069][T18947] CPU: 0 UID: 0 PID: 18947 Comm: syz.0.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.572108][T18947] Tainted: [L]=SOFTLOCKUP [ 911.572116][T18947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 911.572131][T18947] Call Trace: [ 911.572138][T18947] [ 911.572146][T18947] dump_stack_lvl+0x100/0x190 [ 911.572177][T18947] should_fail_ex.cold+0x5/0xa [ 911.572203][T18947] should_failslab+0xc2/0x120 [ 911.572237][T18947] __kmalloc_cache_noprof+0x91/0x6c0 [ 911.572260][T18947] ? rcu_is_watching+0x12/0xc0 [ 911.572290][T18947] ? __request_module+0x2b7/0x6a0 [ 911.572327][T18947] __request_module+0x2b7/0x6a0 [ 911.572353][T18947] ? __pfx___request_module+0x10/0x10 [ 911.572392][T18947] ? find_held_lock+0x2b/0x80 [ 911.572420][T18947] ? inet6_create+0xb9f/0x12b0 [ 911.572453][T18947] inet6_create+0xbdc/0x12b0 [ 911.572479][T18947] ? inet6_create+0x7f/0x12b0 [ 911.572507][T18947] __sock_create+0x339/0x860 [ 911.572538][T18947] __sys_socket+0x14d/0x260 [ 911.572564][T18947] ? __pfx___sys_socket+0x10/0x10 [ 911.572597][T18947] __x64_sys_socket+0x72/0xb0 [ 911.572622][T18947] ? lockdep_hardirqs_on+0x78/0x100 [ 911.572651][T18947] do_syscall_64+0x115/0x840 [ 911.572678][T18947] ? clear_bhb_loop+0x40/0x90 [ 911.572707][T18947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.572731][T18947] RIP: 0033:0x7f66e299de99 [ 911.572750][T18947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.572772][T18947] RSP: 002b:00007f66e0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 911.572796][T18947] RAX: ffffffffffffffda RBX: 00007f66e2c25fa0 RCX: 00007f66e299de99 [ 911.572811][T18947] RDX: 0000000000000086 RSI: 0000000000000005 RDI: 000000000000000a [ 911.572826][T18947] RBP: 00007f66e2a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 911.572840][T18947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.572854][T18947] R13: 00007f66e2c26038 R14: 00007f66e2c25fa0 R15: 00007ffe68c699d8 [ 911.572884][T18947] [ 912.400444][T18820] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.492991][T18820] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.518089][T12705] Bluetooth: hci3: command tx timeout [ 912.542330][T18820] bridge_slave_1: entered allmulticast mode [ 912.607319][T18820] bridge_slave_1: entered promiscuous mode [ 913.034140][T18820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.187164][T18820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.755822][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 913.772569][T18820] team0: Port device team_slave_0 added [ 913.977472][T18820] team0: Port device team_slave_1 added [ 914.083196][T18820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.093123][T18820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.140069][T18820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.199399][T18820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.220583][T18820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.282164][T18820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.525144][T18820] hsr_slave_0: entered promiscuous mode [ 914.564600][T18820] hsr_slave_1: entered promiscuous mode [ 915.713713][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 918.427218][T18820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 918.480932][T18820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.507791][T18820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 918.584473][T18820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.618476][T18820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 918.688530][T18820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.741954][T18820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 918.810449][T18820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 919.162678][T19091] FAULT_INJECTION: forcing a failure. [ 919.162678][T19091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.294481][T19091] CPU: 0 UID: 0 PID: 19091 Comm: syz.2.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.294513][T19091] Tainted: [L]=SOFTLOCKUP [ 919.294520][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 919.294533][T19091] Call Trace: [ 919.294539][T19091] [ 919.294547][T19091] dump_stack_lvl+0x100/0x190 [ 919.294573][T19091] should_fail_ex.cold+0x5/0xa [ 919.294596][T19091] _copy_to_user+0x32/0xd0 [ 919.294629][T19091] fs_name+0x25e/0x4a0 [ 919.294661][T19091] __x64_sys_sysfs+0xe6/0x120 [ 919.294686][T19091] do_syscall_64+0x115/0x840 [ 919.294711][T19091] ? clear_bhb_loop+0x40/0x90 [ 919.294736][T19091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.294757][T19091] RIP: 0033:0x7f1cc059de99 [ 919.294773][T19091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.294793][T19091] RSP: 002b:00007f1cc1464028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 919.294812][T19091] RAX: ffffffffffffffda RBX: 00007f1cc0826360 RCX: 00007f1cc059de99 [ 919.294825][T19091] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 919.294836][T19091] RBP: 00007f1cc1464090 R08: 0000000000000000 R09: 0000000000000000 [ 919.294848][T19091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.294860][T19091] R13: 00007f1cc08263f8 R14: 00007f1cc0826360 R15: 00007ffccbd56478 [ 919.294885][T19091] [ 920.578148][T18820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.042347][T18820] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.441428][T16079] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.448604][T16079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.702575][T16081] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.709815][T16081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.038745][T19222] random: crng reseeded on system resumption [ 926.097841][T19224] FAULT_INJECTION: forcing a failure. [ 926.097841][T19224] name failslab, interval 1, probability 0, space 0, times 0 [ 926.171010][T19224] CPU: 0 UID: 0 PID: 19224 Comm: syz.0.1818 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.171046][T19224] Tainted: [L]=SOFTLOCKUP [ 926.171055][T19224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 926.171069][T19224] Call Trace: [ 926.171077][T19224] [ 926.171089][T19224] dump_stack_lvl+0x100/0x190 [ 926.171120][T19224] should_fail_ex.cold+0x5/0xa [ 926.171146][T19224] should_failslab+0xc2/0x120 [ 926.171180][T19224] __kmalloc_node_noprof+0x101/0x830 [ 926.171210][T19224] ? lockdep_init_map_type+0x5c/0x250 [ 926.171233][T19224] ? blk_mq_alloc_tag_set+0x477/0x1330 [ 926.171266][T19224] blk_mq_alloc_tag_set+0x477/0x1330 [ 926.171291][T19224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.171322][T19224] ? idr_alloc+0xdd/0x130 [ 926.171351][T19224] ? __pfx_idr_alloc+0x10/0x10 [ 926.171388][T19224] loop_add+0x3b7/0xb60 [ 926.171416][T19224] ? __pfx_loop_add+0x10/0x10 [ 926.171460][T19224] ? find_held_lock+0x2b/0x80 [ 926.171489][T19224] ? __fget_files+0x215/0x3d0 [ 926.171513][T19224] loop_control_ioctl+0xae/0x620 [ 926.171542][T19224] ? __pfx_loop_control_ioctl+0x10/0x10 [ 926.171574][T19224] ? __pfx_loop_control_ioctl+0x10/0x10 [ 926.171604][T19224] __x64_sys_ioctl+0x18e/0x210 [ 926.171640][T19224] do_syscall_64+0x115/0x840 [ 926.171668][T19224] ? clear_bhb_loop+0x40/0x90 [ 926.171698][T19224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.171726][T19224] RIP: 0033:0x7f66e299de99 [ 926.171744][T19224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.171767][T19224] RSP: 002b:00007f66e0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 926.171788][T19224] RAX: ffffffffffffffda RBX: 00007f66e2c25fa0 RCX: 00007f66e299de99 [ 926.171804][T19224] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 926.171819][T19224] RBP: 00007f66e0bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 926.171833][T19224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.171847][T19224] R13: 00007f66e2c26038 R14: 00007f66e2c25fa0 R15: 00007ffe68c699d8 [ 926.171876][T19224] [ 926.788228][T18820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.350246][T18820] veth0_vlan: entered promiscuous mode [ 927.504876][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.513216][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.520615][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.527801][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.535694][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.545305][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.552646][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.560745][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.567822][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.576635][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.583984][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.593510][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.602277][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.611704][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.618783][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.626445][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.633732][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.641283][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.648508][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.657573][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.665021][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.673184][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.682798][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.691990][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.699531][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.706601][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.715975][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.730125][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.737177][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.744474][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.751693][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.762561][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.771530][T12705] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 927.987095][T19257] FAULT_INJECTION: forcing a failure. [ 927.987095][T19257] name failslab, interval 1, probability 0, space 0, times 0 [ 928.041399][T19257] CPU: 0 UID: 0 PID: 19257 Comm: syz.3.1822 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.041438][T19257] Tainted: [L]=SOFTLOCKUP [ 928.041447][T19257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 928.041463][T19257] Call Trace: [ 928.041472][T19257] [ 928.041481][T19257] dump_stack_lvl+0x100/0x190 [ 928.041514][T19257] should_fail_ex.cold+0x5/0xa [ 928.041542][T19257] should_failslab+0xc2/0x120 [ 928.041577][T19257] __kmalloc_noprof+0xfc/0x820 [ 928.041608][T19257] ? trace_kmem_cache_alloc+0xdd/0x100 [ 928.041644][T19257] ? lsm_blob_alloc+0x68/0x90 [ 928.041692][T19257] lsm_blob_alloc+0x68/0x90 [ 928.041732][T19257] security_sk_alloc+0x2d/0x290 [ 928.041761][T19257] sk_prot_alloc+0x1d1/0x2a0 [ 928.041788][T19257] sk_alloc+0x36/0xe80 [ 928.041829][T19257] inet_create+0x3a0/0x1060 [ 928.041864][T19257] ? inet_create+0x94/0x1060 [ 928.041901][T19257] __sock_create+0x339/0x860 [ 928.041931][T19257] mptcp_subflow_create_socket+0xec/0xa30 [ 928.042083][T19257] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 928.042124][T19257] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 928.042184][T19257] ? find_held_lock+0x2b/0x80 [ 928.042216][T19257] ? tomoyo_check_inet_address+0x40d/0x6d0 [ 928.042258][T19257] __mptcp_nmpc_sk+0x17f/0x880 [ 928.042285][T19257] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 928.042320][T19257] mptcp_connect+0x7e/0xaf0 [ 928.042349][T19257] __inet_stream_connect+0x208/0xfa0 [ 928.042389][T19257] ? __pfx___inet_stream_connect+0x10/0x10 [ 928.042423][T19257] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 928.042486][T19257] ? __pfx_inet_stream_connect+0x10/0x10 [ 928.042583][T19257] ? __local_bh_enable_ip+0x9e/0x120 [ 928.042616][T19257] ? __pfx_inet_stream_connect+0x10/0x10 [ 928.042647][T19257] inet_stream_connect+0x57/0xa0 [ 928.042682][T19257] __sys_connect_file+0x141/0x1a0 [ 928.042716][T19257] __sys_connect+0x141/0x170 [ 928.042746][T19257] ? __pfx___sys_connect+0x10/0x10 [ 928.042800][T19257] __x64_sys_connect+0x72/0xb0 [ 928.042829][T19257] ? lockdep_hardirqs_on+0x78/0x100 [ 928.042860][T19257] do_syscall_64+0x115/0x840 [ 928.042890][T19257] ? clear_bhb_loop+0x40/0x90 [ 928.042921][T19257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.042946][T19257] RIP: 0033:0x7fdee5b9de99 [ 928.042967][T19257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.042992][T19257] RSP: 002b:00007fdee6a1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 928.043016][T19257] RAX: ffffffffffffffda RBX: 00007fdee5e26090 RCX: 00007fdee5b9de99 [ 928.043033][T19257] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000003 [ 928.043049][T19257] RBP: 00007fdee5c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 928.043064][T19257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.043079][T19257] R13: 00007fdee5e26128 R14: 00007fdee5e26090 R15: 00007ffe2b478b98 [ 928.043111][T19257] [ 928.439498][T18820] veth1_vlan: entered promiscuous mode [ 928.461065][T18820] veth0_macvtap: entered promiscuous mode [ 928.470129][T18820] veth1_macvtap: entered promiscuous mode [ 928.485713][T18820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.495971][T18820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.581508][T16081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.611993][T16081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.622470][T16081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.631724][T16081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.283259][T16081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.323029][T16081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.561817][T16075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.580331][T16075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.712115][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.721198][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.473957][T19303] FAULT_INJECTION: forcing a failure. [ 931.473957][T19303] name failslab, interval 1, probability 0, space 0, times 0 [ 931.535299][T19303] CPU: 0 UID: 0 PID: 19303 Comm: syz.2.1828 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.535342][T19303] Tainted: [L]=SOFTLOCKUP [ 931.535352][T19303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 931.535368][T19303] Call Trace: [ 931.535377][T19303] [ 931.535387][T19303] dump_stack_lvl+0x100/0x190 [ 931.535421][T19303] should_fail_ex.cold+0x5/0xa [ 931.535450][T19303] should_failslab+0xc2/0x120 [ 931.535496][T19303] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 931.535545][T19303] ? __alloc_skb+0x140/0x710 [ 931.535583][T19303] __alloc_skb+0x140/0x710 [ 931.535616][T19303] ? __pfx___alloc_skb+0x10/0x10 [ 931.535652][T19303] ? tcp_send_mss+0x1ae/0x2a0 [ 931.535785][T19303] mptcp_sendmsg_frag+0x7e3/0x3020 [ 931.535821][T19303] ? do_raw_spin_lock+0x128/0x260 [ 931.535849][T19303] ? find_held_lock+0x2b/0x80 [ 931.535880][T19303] ? __wait_for_common+0x1f3/0x4c0 [ 931.535912][T19303] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 931.535947][T19303] __subflow_push_pending+0x34b/0xb70 [ 931.535988][T19303] __mptcp_push_pending+0x2cc/0x540 [ 931.536025][T19303] ? __pfx___mptcp_push_pending+0x10/0x10 [ 931.536067][T19303] mptcp_sendmsg+0xda9/0x2210 [ 931.536110][T19303] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 931.536145][T19303] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 931.536174][T19303] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 931.536207][T19303] inet_sendmsg+0x11c/0x140 [ 931.536243][T19303] sock_sendmsg+0x352/0x410 [ 931.536268][T19303] ? __pfx_inet_sendmsg+0x10/0x10 [ 931.536302][T19303] ? __pfx_sock_sendmsg+0x10/0x10 [ 931.536325][T19303] ? do_splice_direct+0x174/0x240 [ 931.536370][T19303] splice_to_socket+0xb3c/0x11a0 [ 931.536411][T19303] ? __pfx_splice_to_socket+0x10/0x10 [ 931.536471][T19303] ? lockdep_init_map_type+0x5c/0x250 [ 931.536502][T19303] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 931.536543][T19303] ? __pfx_splice_to_socket+0x10/0x10 [ 931.536572][T19303] direct_splice_actor+0x192/0x690 [ 931.536602][T19303] splice_direct_to_actor+0x345/0xa30 [ 931.536631][T19303] ? __pfx_direct_splice_actor+0x10/0x10 [ 931.536663][T19303] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 931.536699][T19303] do_splice_direct+0x174/0x240 [ 931.536727][T19303] ? __pfx_do_splice_direct+0x10/0x10 [ 931.536755][T19303] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 931.536782][T19303] ? bpf_lsm_file_permission+0x9/0x10 [ 931.536805][T19303] ? security_file_permission+0x76/0x210 [ 931.536842][T19303] ? rw_verify_area+0xce/0x6d0 [ 931.536881][T19303] do_sendfile+0xadc/0xe20 [ 931.536926][T19303] ? __pfx_do_sendfile+0x10/0x10 [ 931.536969][T19303] ? __x64_sys_futex+0x34f/0x4d0 [ 931.536995][T19303] ? __x64_sys_futex+0x358/0x4d0 [ 931.537026][T19303] __x64_sys_sendfile64+0x1d8/0x220 [ 931.537056][T19303] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 931.537094][T19303] do_syscall_64+0x115/0x840 [ 931.537124][T19303] ? clear_bhb_loop+0x40/0x90 [ 931.537154][T19303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.537180][T19303] RIP: 0033:0x7f1cc059de99 [ 931.537201][T19303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.537225][T19303] RSP: 002b:00007f1cc14e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 931.537249][T19303] RAX: ffffffffffffffda RBX: 00007f1cc0825fa0 RCX: 00007f1cc059de99 [ 931.537266][T19303] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 931.537281][T19303] RBP: 00007f1cc0633eaf R08: 0000000000000000 R09: 0000000000000000 [ 931.537296][T19303] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 931.537312][T19303] R13: 00007f1cc0826038 R14: 00007f1cc0825fa0 R15: 00007ffccbd56478 [ 931.537354][T19303] [ 933.554367][T19333] sd 0:0:1:0: PR command failed: 1026 [ 933.641541][T19333] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 933.666874][T19333] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 952.407221][T19618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1872'. [ 952.528777][T19622] ======================================================= [ 952.528777][T19622] WARNING: The mand mount option has been deprecated and [ 952.528777][T19622] and is ignored by this kernel. Remove the mand [ 952.528777][T19622] option from the mount to silence this warning. [ 952.528777][T19622] ======================================================= [ 952.563861][T19618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.563910][T19618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.570377][T19618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.570402][T19618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.411006][T19769] FAULT_INJECTION: forcing a failure. [ 962.411006][T19769] name fail_futex, interval 1, probability 0, space 0, times 0 [ 962.482759][T19769] CPU: 0 UID: 0 PID: 19769 Comm: syz.3.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.482796][T19769] Tainted: [L]=SOFTLOCKUP [ 962.482804][T19769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 962.482819][T19769] Call Trace: [ 962.482827][T19769] [ 962.482836][T19769] dump_stack_lvl+0x100/0x190 [ 962.482866][T19769] should_fail_ex.cold+0x5/0xa [ 962.482892][T19769] get_futex_key+0x1d2/0x14f0 [ 962.482919][T19769] ? __pfx_get_futex_key+0x10/0x10 [ 962.482950][T19769] futex_wait_setup+0x91/0x540 [ 962.482989][T19769] __futex_wait+0x19f/0x300 [ 962.483021][T19769] ? __pfx___futex_wait+0x10/0x10 [ 962.483052][T19769] ? futex_hash+0x311/0x400 [ 962.483076][T19769] ? __pfx_futex_wake_mark+0x10/0x10 [ 962.483111][T19769] ? __pfx_futex_hash+0x10/0x10 [ 962.483140][T19769] futex_wait+0xe6/0x370 [ 962.483171][T19769] ? __pfx_futex_wait+0x10/0x10 [ 962.483208][T19769] ? find_held_lock+0x2b/0x80 [ 962.483237][T19769] ? __fget_files+0x215/0x3d0 [ 962.483258][T19769] ? __fget_files+0x215/0x3d0 [ 962.483282][T19769] do_futex+0x265/0x440 [ 962.483308][T19769] ? __pfx_do_futex+0x10/0x10 [ 962.483335][T19769] ? fdget+0x18b/0x210 [ 962.483358][T19769] __x64_sys_futex+0x34f/0x4d0 [ 962.483388][T19769] ? __pfx___x64_sys_futex+0x10/0x10 [ 962.483424][T19769] do_syscall_64+0x115/0x840 [ 962.483473][T19769] ? clear_bhb_loop+0x40/0x90 [ 962.483503][T19769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.483529][T19769] RIP: 0033:0x7fdee5b9de99 [ 962.483549][T19769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.483575][T19769] RSP: 002b:00007fdee69fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 962.483599][T19769] RAX: ffffffffffffffda RBX: 00007fdee5e26188 RCX: 00007fdee5b9de99 [ 962.483616][T19769] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdee5e26188 [ 962.483632][T19769] RBP: 00007fdee5e26180 R08: 0000000000000000 R09: 0000000000000000 [ 962.483647][T19769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.483662][T19769] R13: 00007fdee5e26218 R14: 00007ffe2b478ab0 R15: 00007ffe2b478b98 [ 962.483702][T19769] [ 974.943939][T19947] FAULT_INJECTION: forcing a failure. [ 974.943939][T19947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.003783][T19947] CPU: 0 UID: 0 PID: 19947 Comm: syz.0.1913 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.003819][T19947] Tainted: [L]=SOFTLOCKUP [ 975.003828][T19947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 975.003843][T19947] Call Trace: [ 975.003851][T19947] [ 975.003860][T19947] dump_stack_lvl+0x100/0x190 [ 975.003891][T19947] should_fail_ex.cold+0x5/0xa [ 975.003916][T19947] _copy_from_iter+0x1f4/0x1690 [ 975.003960][T19947] ? __pfx__copy_from_iter+0x10/0x10 [ 975.004008][T19947] skb_copy_datagram_from_iter+0x11f/0x720 [ 975.004039][T19947] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 975.004068][T19947] unix_stream_sendmsg+0x536/0x1310 [ 975.004108][T19947] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 975.004145][T19947] ? apparmor_socket_sendmsg+0x15b/0x270 [ 975.004175][T19947] sock_write_iter+0x53a/0x5b0 [ 975.004198][T19947] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 975.004230][T19947] ? __pfx_sock_write_iter+0x10/0x10 [ 975.004260][T19947] ? bpf_lsm_file_permission+0x9/0x10 [ 975.004282][T19947] ? security_file_permission+0x76/0x210 [ 975.004317][T19947] ? rw_verify_area+0xce/0x6d0 [ 975.004354][T19947] vfs_write+0x6ac/0x1050 [ 975.004375][T19947] ? __pfx_sock_write_iter+0x10/0x10 [ 975.004400][T19947] ? __pfx_vfs_write+0x10/0x10 [ 975.004432][T19947] ? __x64_sys_futex+0x34f/0x4d0 [ 975.004457][T19947] ? __x64_sys_futex+0x358/0x4d0 [ 975.004486][T19947] ksys_write+0x1f8/0x250 [ 975.004507][T19947] ? __pfx_ksys_write+0x10/0x10 [ 975.004535][T19947] do_syscall_64+0x115/0x840 [ 975.004571][T19947] ? clear_bhb_loop+0x40/0x90 [ 975.004599][T19947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.004623][T19947] RIP: 0033:0x7f66e299de99 [ 975.004642][T19947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.004666][T19947] RSP: 002b:00007f66e0bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 975.004688][T19947] RAX: ffffffffffffffda RBX: 00007f66e2c26090 RCX: 00007f66e299de99 [ 975.004704][T19947] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 975.004719][T19947] RBP: 00007f66e2a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 975.004733][T19947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.004747][T19947] R13: 00007f66e2c26128 R14: 00007f66e2c26090 R15: 00007ffe68c699d8 [ 975.004776][T19947] [ 990.834349][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.840773][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.190599][ T30] audit: type=1800 audit(4294967308.012:35): pid=20262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1950" name="version" dev="configfs" ino=163843 res=0 errno=0 [ 999.485667][T20294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1955'. [ 999.572402][T20294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.616570][T20294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.643167][T20294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.663242][T20294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.469932][T20486] FAULT_INJECTION: forcing a failure. [ 1013.469932][T20486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.509638][T20486] CPU: 0 UID: 0 PID: 20486 Comm: syz.1.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 1013.509676][T20486] Tainted: [L]=SOFTLOCKUP [ 1013.509685][T20486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1013.509701][T20486] Call Trace: [ 1013.509709][T20486] [ 1013.509719][T20486] dump_stack_lvl+0x100/0x190 [ 1013.509760][T20486] should_fail_ex.cold+0x5/0xa [ 1013.509789][T20486] _copy_from_iter+0x1f4/0x1690 [ 1013.509853][T20486] ? _copy_from_iter+0x270/0x1690 [ 1013.509894][T20486] ? __pfx__copy_from_iter+0x10/0x10 [ 1013.509937][T20486] ? __pfx__copy_from_iter+0x10/0x10 [ 1013.509985][T20486] copy_page_from_iter+0x238/0x300 [ 1013.510039][T20486] skb_copy_datagram_from_iter+0x399/0x720 [ 1013.510081][T20486] unix_stream_sendmsg+0x536/0x1310 [ 1013.510125][T20486] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1013.510166][T20486] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1013.510199][T20486] sock_write_iter+0x53a/0x5b0 [ 1013.510224][T20486] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1013.510258][T20486] ? __pfx_sock_write_iter+0x10/0x10 [ 1013.510294][T20486] ? bpf_lsm_file_permission+0x9/0x10 [ 1013.510320][T20486] ? security_file_permission+0x76/0x210 [ 1013.510359][T20486] ? rw_verify_area+0xce/0x6d0 [ 1013.510401][T20486] vfs_write+0x6ac/0x1050 [ 1013.510425][T20486] ? __pfx_sock_write_iter+0x10/0x10 [ 1013.510454][T20486] ? __pfx_vfs_write+0x10/0x10 [ 1013.510489][T20486] ? __x64_sys_futex+0x34f/0x4d0 [ 1013.510518][T20486] ? __x64_sys_futex+0x358/0x4d0 [ 1013.510550][T20486] ksys_write+0x1f8/0x250 [ 1013.510574][T20486] ? __pfx_ksys_write+0x10/0x10 [ 1013.510606][T20486] do_syscall_64+0x115/0x840 [ 1013.510637][T20486] ? clear_bhb_loop+0x40/0x90 [ 1013.510669][T20486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.510695][T20486] RIP: 0033:0x7fe05859de99 [ 1013.510716][T20486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.510741][T20486] RSP: 002b:00007fe05943f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1013.510765][T20486] RAX: ffffffffffffffda RBX: 00007fe058826090 RCX: 00007fe05859de99 [ 1013.510782][T20486] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1013.510798][T20486] RBP: 00007fe058633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1013.510813][T20486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.510829][T20486] R13: 00007fe058826128 R14: 00007fe058826090 R15: 00007fff88ff3f68 [ 1013.510861][T20486] [ 1028.558728][T16145] Bluetooth: hci3: command 0x0406 tx timeout [ 1051.957278][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1051.967188][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.193401][T21239] FAULT_INJECTION: forcing a failure. [ 1063.193401][T21239] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.308193][T21239] CPU: 0 UID: 0 PID: 21239 Comm: syz.1.2075 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.308233][T21239] Tainted: [L]=SOFTLOCKUP [ 1063.308242][T21239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1063.308258][T21239] Call Trace: [ 1063.308266][T21239] [ 1063.308275][T21239] dump_stack_lvl+0x100/0x190 [ 1063.308309][T21239] should_fail_ex.cold+0x5/0xa [ 1063.308337][T21239] should_failslab+0xc2/0x120 [ 1063.308374][T21239] __kmalloc_noprof+0xfc/0x820 [ 1063.308410][T21239] ? snd_pcm_plugin_build+0x91/0x680 [ 1063.308530][T21239] snd_pcm_plugin_build+0x91/0x680 [ 1063.308566][T21239] snd_pcm_plugin_build_io+0x207/0x5f0 [ 1063.308598][T21239] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 1063.308631][T21239] ? lockdep_hardirqs_on+0x78/0x100 [ 1063.308673][T21239] snd_pcm_oss_change_params_locked+0x2eb3/0x39f0 [ 1063.308714][T21239] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1063.308745][T21239] ? __pfx___mutex_lock+0x10/0x10 [ 1063.308793][T21239] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1063.308822][T21239] snd_pcm_oss_sync+0x265/0x840 [ 1063.308852][T21239] snd_pcm_oss_release+0x238/0x300 [ 1063.308879][T21239] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1063.308906][T21239] __fput+0x3ff/0xb50 [ 1063.308942][T21239] task_work_run+0x150/0x240 [ 1063.308980][T21239] ? __pfx_task_work_run+0x10/0x10 [ 1063.309025][T21239] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1063.309051][T21239] ? rcu_is_watching+0x12/0xc0 [ 1063.309083][T21239] do_syscall_64+0x652/0x840 [ 1063.309112][T21239] ? clear_bhb_loop+0x40/0x90 [ 1063.309142][T21239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.309168][T21239] RIP: 0033:0x7fe05859de99 [ 1063.309188][T21239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.309213][T21239] RSP: 002b:00007fe05941e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1063.309238][T21239] RAX: 0000000000000000 RBX: 00007fe058826180 RCX: 00007fe05859de99 [ 1063.309254][T21239] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1063.309268][T21239] RBP: 00007fe058633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1063.309284][T21239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.309299][T21239] R13: 00007fe058826218 R14: 00007fe058826180 R15: 00007fff88ff3f68 [ 1063.309329][T21239] [ 1110.123349][T21902] FAULT_INJECTION: forcing a failure. [ 1110.123349][T21902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.207056][T21902] CPU: 0 UID: 0 PID: 21902 Comm: syz.1.2159 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.207094][T21902] Tainted: [L]=SOFTLOCKUP [ 1110.207102][T21902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1110.207117][T21902] Call Trace: [ 1110.207125][T21902] [ 1110.207134][T21902] dump_stack_lvl+0x100/0x190 [ 1110.207164][T21902] should_fail_ex.cold+0x5/0xa [ 1110.207190][T21902] _copy_from_user+0x2e/0xd0 [ 1110.207237][T21902] copy_msghdr_from_user+0x9f/0x4c0 [ 1110.207266][T21902] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1110.207297][T21902] ? rcu_is_watching+0x12/0xc0 [ 1110.207325][T21902] ? ___sys_sendmsg+0x19d/0x1e0 [ 1110.207348][T21902] ? kfree+0x1e5/0x6c0 [ 1110.207374][T21902] ___sys_sendmsg+0x106/0x1e0 [ 1110.207400][T21902] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.207425][T21902] ? futex_hash+0x311/0x400 [ 1110.207468][T21902] ? __pfx___might_resched+0x10/0x10 [ 1110.207510][T21902] __sys_sendmmsg+0x20c/0x440 [ 1110.207546][T21902] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1110.207587][T21902] ? __pfx_do_futex+0x10/0x10 [ 1110.207624][T21902] ? xfd_validate_state+0x129/0x190 [ 1110.207669][T21902] __x64_sys_sendmmsg+0x9c/0x100 [ 1110.207700][T21902] ? lockdep_hardirqs_on+0x78/0x100 [ 1110.207727][T21902] do_syscall_64+0x115/0x840 [ 1110.207753][T21902] ? clear_bhb_loop+0x40/0x90 [ 1110.207779][T21902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.207802][T21902] RIP: 0033:0x7fe05859de99 [ 1110.207820][T21902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.207841][T21902] RSP: 002b:00007fe05941e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1110.207862][T21902] RAX: ffffffffffffffda RBX: 00007fe058826180 RCX: 00007fe05859de99 [ 1110.207876][T21902] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000008 [ 1110.207890][T21902] RBP: 00007fe058633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1110.207903][T21902] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 1110.207917][T21902] R13: 00007fe058826218 R14: 00007fe058826180 R15: 00007fff88ff3f68 [ 1110.207943][T21902] [ 1112.101184][T21916] FAULT_INJECTION: forcing a failure. [ 1112.101184][T21916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.162684][T21916] CPU: 0 UID: 0 PID: 21916 Comm: syz.1.2168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.162718][T21916] Tainted: [L]=SOFTLOCKUP [ 1112.162726][T21916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1112.162740][T21916] Call Trace: [ 1112.162747][T21916] [ 1112.162755][T21916] dump_stack_lvl+0x100/0x190 [ 1112.162786][T21916] should_fail_ex.cold+0x5/0xa [ 1112.162811][T21916] _copy_from_iter+0x1f4/0x1690 [ 1112.162851][T21916] ? _copy_from_iter+0x270/0x1690 [ 1112.162886][T21916] ? __pfx__copy_from_iter+0x10/0x10 [ 1112.162923][T21916] ? __pfx__copy_from_iter+0x10/0x10 [ 1112.162965][T21916] copy_page_from_iter+0x238/0x300 [ 1112.163048][T21916] skb_copy_datagram_from_iter+0x399/0x720 [ 1112.163090][T21916] unix_stream_sendmsg+0x536/0x1310 [ 1112.163135][T21916] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1112.163177][T21916] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1112.163210][T21916] sock_write_iter+0x53a/0x5b0 [ 1112.163236][T21916] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1112.163270][T21916] ? __pfx_sock_write_iter+0x10/0x10 [ 1112.163303][T21916] ? bpf_lsm_file_permission+0x9/0x10 [ 1112.163330][T21916] ? security_file_permission+0x76/0x210 [ 1112.163372][T21916] ? rw_verify_area+0xce/0x6d0 [ 1112.163413][T21916] vfs_write+0x6ac/0x1050 [ 1112.163438][T21916] ? __pfx_sock_write_iter+0x10/0x10 [ 1112.163466][T21916] ? __pfx_vfs_write+0x10/0x10 [ 1112.163501][T21916] ? __x64_sys_futex+0x34f/0x4d0 [ 1112.163530][T21916] ? __x64_sys_futex+0x358/0x4d0 [ 1112.163562][T21916] ksys_write+0x1f8/0x250 [ 1112.163586][T21916] ? __pfx_ksys_write+0x10/0x10 [ 1112.163618][T21916] do_syscall_64+0x115/0x840 [ 1112.163648][T21916] ? clear_bhb_loop+0x40/0x90 [ 1112.163680][T21916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.163706][T21916] RIP: 0033:0x7fe05859de99 [ 1112.163727][T21916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.163752][T21916] RSP: 002b:00007fe05943f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1112.163776][T21916] RAX: ffffffffffffffda RBX: 00007fe058826090 RCX: 00007fe05859de99 [ 1112.163793][T21916] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1112.163809][T21916] RBP: 00007fe058633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1112.163826][T21916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.163841][T21916] R13: 00007fe058826128 R14: 00007fe058826090 R15: 00007fff88ff3f68 [ 1112.163872][T21916] [ 1113.077517][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1113.083956][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.489902][ T30] audit: type=1800 audit(4294967299.523:36): pid=21998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2170" name="lu_gp_id" dev="configfs" ino=180252 res=0 errno=0 [ 1123.002345][T22078] FAULT_INJECTION: forcing a failure. [ 1123.002345][T22078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.041094][T22078] CPU: 0 UID: 0 PID: 22078 Comm: syz.0.2183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1123.041135][T22078] Tainted: [L]=SOFTLOCKUP [ 1123.041144][T22078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1123.041171][T22078] Call Trace: [ 1123.041180][T22078] [ 1123.041189][T22078] dump_stack_lvl+0x100/0x190 [ 1123.041220][T22078] should_fail_ex.cold+0x5/0xa [ 1123.041246][T22078] _copy_from_iter+0x1f4/0x1690 [ 1123.041289][T22078] ? __pfx__copy_from_iter+0x10/0x10 [ 1123.041333][T22078] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1123.041365][T22078] skb_copy_datagram_from_iter+0x11f/0x720 [ 1123.041397][T22078] ? unix_scm_to_skb+0x241/0x520 [ 1123.041428][T22078] unix_stream_sendmsg+0x536/0x1310 [ 1123.041466][T22078] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1123.041503][T22078] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1123.041532][T22078] sock_write_iter+0x53a/0x5b0 [ 1123.041555][T22078] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1123.041585][T22078] ? __pfx_sock_write_iter+0x10/0x10 [ 1123.041615][T22078] ? bpf_lsm_file_permission+0x9/0x10 [ 1123.041637][T22078] ? security_file_permission+0x76/0x210 [ 1123.041682][T22078] ? rw_verify_area+0xce/0x6d0 [ 1123.041717][T22078] vfs_write+0x6ac/0x1050 [ 1123.041738][T22078] ? __pfx_sock_write_iter+0x10/0x10 [ 1123.041761][T22078] ? __pfx_vfs_write+0x10/0x10 [ 1123.041791][T22078] ? __x64_sys_futex+0x34f/0x4d0 [ 1123.041814][T22078] ? __x64_sys_futex+0x358/0x4d0 [ 1123.041841][T22078] ksys_write+0x1f8/0x250 [ 1123.041861][T22078] ? __pfx_ksys_write+0x10/0x10 [ 1123.041888][T22078] do_syscall_64+0x115/0x840 [ 1123.041914][T22078] ? clear_bhb_loop+0x40/0x90 [ 1123.041940][T22078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.041963][T22078] RIP: 0033:0x7f66e299de99 [ 1123.041980][T22078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.042001][T22078] RSP: 002b:00007f66e0bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1123.042022][T22078] RAX: ffffffffffffffda RBX: 00007f66e2c26090 RCX: 00007f66e299de99 [ 1123.042046][T22078] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1123.042059][T22078] RBP: 00007f66e2a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1123.042072][T22078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.042085][T22078] R13: 00007f66e2c26128 R14: 00007f66e2c26090 R15: 00007ffe68c699d8 [ 1123.042112][T22078] [ 1133.596593][T22237] FAULT_INJECTION: forcing a failure. [ 1133.596593][T22237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.655318][T22237] CPU: 0 UID: 0 PID: 22237 Comm: syz.1.2206 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.655359][T22237] Tainted: [L]=SOFTLOCKUP [ 1133.655369][T22237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1133.655386][T22237] Call Trace: [ 1133.655394][T22237] [ 1133.655404][T22237] dump_stack_lvl+0x100/0x190 [ 1133.655437][T22237] should_fail_ex.cold+0x5/0xa [ 1133.655466][T22237] _copy_from_iter+0x1f4/0x1690 [ 1133.655511][T22237] ? _copy_from_iter+0x270/0x1690 [ 1133.655552][T22237] ? __pfx__copy_from_iter+0x10/0x10 [ 1133.655598][T22237] ? __pfx__copy_from_iter+0x10/0x10 [ 1133.655646][T22237] copy_page_from_iter+0x238/0x300 [ 1133.655690][T22237] skb_copy_datagram_from_iter+0x399/0x720 [ 1133.655734][T22237] unix_stream_sendmsg+0x536/0x1310 [ 1133.655777][T22237] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1133.655818][T22237] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1133.655850][T22237] sock_write_iter+0x53a/0x5b0 [ 1133.655875][T22237] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1133.655909][T22237] ? __pfx_sock_write_iter+0x10/0x10 [ 1133.655942][T22237] ? bpf_lsm_file_permission+0x9/0x10 [ 1133.655967][T22237] ? security_file_permission+0x76/0x210 [ 1133.656005][T22237] ? rw_verify_area+0xce/0x6d0 [ 1133.656046][T22237] vfs_write+0x6ac/0x1050 [ 1133.656070][T22237] ? __pfx_sock_write_iter+0x10/0x10 [ 1133.656105][T22237] ? __pfx_vfs_write+0x10/0x10 [ 1133.656132][T22237] ? do_raw_spin_lock+0x128/0x260 [ 1133.656161][T22237] ? find_held_lock+0x2b/0x80 [ 1133.656199][T22237] ? __x64_sys_futex+0x34f/0x4d0 [ 1133.656227][T22237] ? __x64_sys_futex+0x358/0x4d0 [ 1133.656260][T22237] ksys_write+0x1f8/0x250 [ 1133.656284][T22237] ? __pfx_ksys_write+0x10/0x10 [ 1133.656316][T22237] do_syscall_64+0x115/0x840 [ 1133.656359][T22237] ? clear_bhb_loop+0x40/0x90 [ 1133.656389][T22237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.656415][T22237] RIP: 0033:0x7fe05859de99 [ 1133.656435][T22237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.656459][T22237] RSP: 002b:00007fe05943f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1133.656482][T22237] RAX: ffffffffffffffda RBX: 00007fe058826090 RCX: 00007fe05859de99 [ 1133.656499][T22237] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1133.656514][T22237] RBP: 00007fe058633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1133.656529][T22237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.656544][T22237] R13: 00007fe058826128 R14: 00007fe058826090 R15: 00007fff88ff3f68 [ 1133.656575][T22237] [ 1158.638049][ T30] audit: type=1800 audit(4294967304.278:37): pid=22596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2254" name="lu_gp_id" dev="configfs" ino=185763 res=0 errno=0 [ 1174.202939][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1174.211253][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1200.605808][T23205] FAULT_INJECTION: forcing a failure. [ 1200.605808][T23205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.668576][T23205] CPU: 0 UID: 0 PID: 23205 Comm: syz.1.2334 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.668613][T23205] Tainted: [L]=SOFTLOCKUP [ 1200.668621][T23205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1200.668636][T23205] Call Trace: [ 1200.668644][T23205] [ 1200.668653][T23205] dump_stack_lvl+0x100/0x190 [ 1200.668683][T23205] should_fail_ex.cold+0x5/0xa [ 1200.668709][T23205] _copy_from_iter+0x1f4/0x1690 [ 1200.668751][T23205] ? _copy_from_iter+0x270/0x1690 [ 1200.668787][T23205] ? __pfx__copy_from_iter+0x10/0x10 [ 1200.668827][T23205] ? __pfx__copy_from_iter+0x10/0x10 [ 1200.668870][T23205] copy_page_from_iter+0x238/0x300 [ 1200.668911][T23205] skb_copy_datagram_from_iter+0x399/0x720 [ 1200.668949][T23205] unix_stream_sendmsg+0x536/0x1310 [ 1200.668988][T23205] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1200.669032][T23205] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1200.669066][T23205] sock_write_iter+0x53a/0x5b0 [ 1200.669089][T23205] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1200.669119][T23205] ? __pfx_sock_write_iter+0x10/0x10 [ 1200.669150][T23205] ? bpf_lsm_file_permission+0x9/0x10 [ 1200.669172][T23205] ? security_file_permission+0x76/0x210 [ 1200.669206][T23205] ? rw_verify_area+0xce/0x6d0 [ 1200.669243][T23205] vfs_write+0x6ac/0x1050 [ 1200.669265][T23205] ? __pfx_sock_write_iter+0x10/0x10 [ 1200.669291][T23205] ? __pfx_vfs_write+0x10/0x10 [ 1200.669322][T23205] ? __x64_sys_futex+0x34f/0x4d0 [ 1200.669347][T23205] ? __x64_sys_futex+0x358/0x4d0 [ 1200.669376][T23205] ksys_write+0x1f8/0x250 [ 1200.669398][T23205] ? __pfx_ksys_write+0x10/0x10 [ 1200.669427][T23205] do_syscall_64+0x115/0x840 [ 1200.669457][T23205] ? clear_bhb_loop+0x40/0x90 [ 1200.669485][T23205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.669509][T23205] RIP: 0033:0x7fe05859de99 [ 1200.669528][T23205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.669550][T23205] RSP: 002b:00007fe05943f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1200.669572][T23205] RAX: ffffffffffffffda RBX: 00007fe058826090 RCX: 00007fe05859de99 [ 1200.669588][T23205] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1200.669602][T23205] RBP: 00007fe058633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1200.669616][T23205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.669629][T23205] R13: 00007fe058826128 R14: 00007fe058826090 R15: 00007fff88ff3f68 [ 1200.669657][T23205] [ 1206.328747][T23315] FAULT_INJECTION: forcing a failure. [ 1206.328747][T23315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.462191][T23315] CPU: 0 UID: 0 PID: 23315 Comm: syz.1.2346 Tainted: G L syzkaller #0 PREEMPT(full) [ 1206.462224][T23315] Tainted: [L]=SOFTLOCKUP [ 1206.462231][T23315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1206.462244][T23315] Call Trace: [ 1206.462251][T23315] [ 1206.462259][T23315] dump_stack_lvl+0x100/0x190 [ 1206.462286][T23315] should_fail_ex.cold+0x5/0xa [ 1206.462310][T23315] _copy_to_user+0x32/0xd0 [ 1206.462344][T23315] keyctl_capabilities+0x5a/0x160 [ 1206.462370][T23315] __do_sys_keyctl+0x427/0x5a0 [ 1206.462395][T23315] do_syscall_64+0x115/0x840 [ 1206.462420][T23315] ? clear_bhb_loop+0x40/0x90 [ 1206.462446][T23315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.462467][T23315] RIP: 0033:0x7fe05859de99 [ 1206.462490][T23315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.462510][T23315] RSP: 002b:00007fe05939a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1206.462530][T23315] RAX: ffffffffffffffda RBX: 00007fe058826540 RCX: 00007fe05859de99 [ 1206.462544][T23315] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1206.462556][T23315] RBP: 00007fe05939a090 R08: 00000000000003ff R09: 0000000000000000 [ 1206.462569][T23315] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1206.462581][T23315] R13: 00007fe0588265d8 R14: 00007fe058826540 R15: 00007fff88ff3f68 [ 1206.462607][T23315] [ 1217.247474][T23474] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1217.260402][T23474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1217.278104][T23474] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1217.293638][T23474] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1217.302617][T23474] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1218.948341][T16080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.403514][T23474] Bluetooth: hci4: command tx timeout [ 1219.481550][T16080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.838543][T16080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.109440][T16080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.575516][T23515] FAULT_INJECTION: forcing a failure. [ 1220.575516][T23515] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.623151][T23515] CPU: 0 UID: 0 PID: 23515 Comm: syz.1.2378 Tainted: G L syzkaller #0 PREEMPT(full) [ 1220.623199][T23515] Tainted: [L]=SOFTLOCKUP [ 1220.623211][T23515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1220.623234][T23515] Call Trace: [ 1220.623242][T23515] [ 1220.623252][T23515] dump_stack_lvl+0x100/0x190 [ 1220.623284][T23515] should_fail_ex.cold+0x5/0xa [ 1220.623312][T23515] should_failslab+0xc2/0x120 [ 1220.623349][T23515] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1220.623379][T23515] ? d_instantiate+0x8a/0xb0 [ 1220.623408][T23515] ? d_instantiate+0x8a/0xb0 [ 1220.623436][T23515] ? alloc_empty_file+0x5b/0x1c0 [ 1220.623472][T23515] alloc_empty_file+0x5b/0x1c0 [ 1220.623505][T23515] alloc_file_pseudo+0x183/0x290 [ 1220.623539][T23515] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1220.623573][T23515] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 1220.623604][T23515] sock_alloc_file+0x50/0x210 [ 1220.623642][T23515] __sys_socketpair+0x321/0x5b0 [ 1220.623672][T23515] ? __pfx___sys_socketpair+0x10/0x10 [ 1220.623701][T23515] ? xfd_validate_state+0x129/0x190 [ 1220.623739][T23515] __x64_sys_socketpair+0x96/0x100 [ 1220.623767][T23515] ? lockdep_hardirqs_on+0x78/0x100 [ 1220.623798][T23515] do_syscall_64+0x115/0x840 [ 1220.623827][T23515] ? clear_bhb_loop+0x40/0x90 [ 1220.623857][T23515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.623882][T23515] RIP: 0033:0x7fe05859de99 [ 1220.623915][T23515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.623938][T23515] RSP: 002b:00007fe059460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1220.623960][T23515] RAX: ffffffffffffffda RBX: 00007fe058825fa0 RCX: 00007fe05859de99 [ 1220.623976][T23515] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1220.623991][T23515] RBP: 00007fe058633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1220.624005][T23515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.624020][T23515] R13: 00007fe058826038 R14: 00007fe058825fa0 R15: 00007fff88ff3f68 [ 1220.624048][T23515] [ 1221.192339][T16080] bridge_slave_1: left allmulticast mode [ 1221.225497][T16080] bridge_slave_1: left promiscuous mode [ 1221.254669][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.295453][T16080] bridge_slave_0: left allmulticast mode [ 1221.325392][T16080] bridge_slave_0: left promiscuous mode [ 1221.352101][T16080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.472943][T23474] Bluetooth: hci4: command tx timeout [ 1222.211938][T16080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1222.265144][T16080] bond0 (unregistering): Released all slaves [ 1222.957457][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1223.541598][T23474] Bluetooth: hci4: command tx timeout [ 1223.752741][T23473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.794784][T23473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.828126][T23473] bridge_slave_0: entered allmulticast mode [ 1223.856034][T23473] bridge_slave_0: entered promiscuous mode [ 1223.994616][T23473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.022752][T23473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.047761][T23473] bridge_slave_1: entered allmulticast mode [ 1224.075298][T23473] bridge_slave_1: entered promiscuous mode [ 1224.270801][T23473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.425722][T23473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.708608][T23473] team0: Port device team_slave_0 added [ 1224.751342][T23473] team0: Port device team_slave_1 added [ 1224.912252][T23597] blktrace: Concurrent blktraces are not allowed on ram10 [ 1224.969864][T23598] blktrace: Concurrent blktraces are not allowed on ram10 [ 1225.075232][T23473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.113642][T23473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.230941][T23473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.295775][T23473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.323496][T23473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.369154][T23602] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1225.410864][T23473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.518236][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1225.617761][T23474] Bluetooth: hci4: command tx timeout [ 1226.002448][T23473] hsr_slave_0: entered promiscuous mode [ 1226.037674][T23473] hsr_slave_1: entered promiscuous mode [ 1226.070581][T23473] debugfs: 'hsr0' already exists in 'hsr' [ 1226.108171][T23473] Cannot create hsr debugfs directory [ 1226.482743][T16080] hsr_slave_0: left promiscuous mode [ 1226.513456][T16080] hsr_slave_1: left promiscuous mode [ 1226.539873][T16080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.581694][T16080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.621952][T16080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.659928][T16080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.719994][T16080] veth1_macvtap: left promiscuous mode [ 1226.739240][T16080] veth0_macvtap: left promiscuous mode [ 1227.300406][T16080] team0 (unregistering): Port device team_slave_1 removed [ 1227.375781][T16080] team0 (unregistering): Port device team_slave_0 removed [ 1227.734301][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1230.255456][T23630] Process accounting resumed [ 1234.768278][T23473] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1234.806625][T23473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1234.840653][T23473] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1234.880301][T23473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1234.968982][T23473] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1235.003877][T23473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1235.036262][T23473] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1235.093119][T23473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.325200][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.334018][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1236.382915][T23473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.505821][T23473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.577668][T23231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.584854][T23231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.688216][T23231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.695375][T23231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.593122][ T30] audit: type=1800 audit(4294967371.204:38): pid=23825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2407" name="members" dev="configfs" ino=194846 res=0 errno=0 [ 1239.918675][T23473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.117766][T23473] veth0_vlan: entered promiscuous mode [ 1240.193883][T23473] veth1_vlan: entered promiscuous mode [ 1242.132877][T23473] veth0_macvtap: entered promiscuous mode [ 1242.680912][T23473] veth1_macvtap: entered promiscuous mode [ 1243.144027][T23473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.341376][T23473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.452793][T16076] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.491348][T16076] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.620265][T16076] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.661814][T16076] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.908641][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.943754][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.033662][T23231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.067395][T23231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.931743][T23906] BUG: unable to handle page fault for address: ffffc900166a9fe8 [ 1245.939483][T23906] #PF: supervisor write access in kernel mode [ 1245.945551][T23906] #PF: error_code(0x0002) - not-present page [ 1245.951544][T23906] PGD 13fe60067 P4D 13fe60067 PUD 1cafa067 PMD 62bb1067 PTE 0 [ 1245.959045][T23906] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1245.964437][T23906] CPU: 0 UID: 0 PID: 23906 Comm: syz.1.2409 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.975379][T23906] Tainted: [L]=SOFTLOCKUP [ 1245.979703][T23906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1245.989760][T23906] RIP: 0010:write_comp_data+0x75/0x90 [ 1245.995174][T23906] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 42 [ 1246.014791][T23906] RSP: 0018:ffffc90004cbfe78 EFLAGS: 00050257 [ 1246.020872][T23906] RAX: ffffc900166aa000 RBX: 0000000000000000 RCX: ffffffff82458885 [ 1246.028852][T23906] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1246.036821][T23906] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1246.044800][T23906] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1246.052776][T23906] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1246.060751][T23906] FS: 00007fe0593bb6c0(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 1246.069691][T23906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1246.076305][T23906] CR2: ffffc900166a9fe8 CR3: 000000007db90000 CR4: 00000000003526f0 [ 1246.084275][T23906] Call Trace: [ 1246.087552][T23906] [ 1246.090482][T23906] rseq_register+0x115/0x350 [ 1246.095111][T23906] __x64_sys_rseq+0x1b8/0x2e0 [ 1246.099808][T23906] do_syscall_64+0x115/0x840 [ 1246.104411][T23906] ? clear_bhb_loop+0x40/0x90 [ 1246.109089][T23906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.114982][T23906] RIP: 0033:0x7fe05859de99 [ 1246.119395][T23906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.139007][T23906] RSP: 002b:00007fe0593bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1246.147424][T23906] RAX: ffffffffffffffda RBX: 00007fe058826450 RCX: 00007fe05859de99 [ 1246.155480][T23906] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1246.163458][T23906] RBP: 00007fe058633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1246.171455][T23906] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1246.179424][T23906] R13: 00007fe0588264e8 R14: 00007fe058826450 R15: 00007fff88ff3f68 [ 1246.187403][T23906] [ 1246.190419][T23906] Modules linked in: [ 1246.194335][T23906] CR2: ffffc900166a9fe8 [ 1246.198490][T23906] ---[ end trace 0000000000000000 ]--- [ 1246.203942][T23906] RIP: 0010:write_comp_data+0x75/0x90 [ 1246.209320][T23906] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 42 [ 1246.229015][T23906] RSP: 0018:ffffc90004cbfe78 EFLAGS: 00050257 [ 1246.235079][T23906] RAX: ffffc900166aa000 RBX: 0000000000000000 RCX: ffffffff82458885 [ 1246.243059][T23906] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1246.251061][T23906] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1246.259057][T23906] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1246.267040][T23906] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1246.275020][T23906] FS: 00007fe0593bb6c0(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 1246.283955][T23906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1246.290571][T23906] CR2: ffffc900166a9fe8 CR3: 000000007db90000 CR4: 00000000003526f0 [ 1246.298580][T23906] Kernel panic - not syncing: Fatal exception [ 1246.304717][T23906] Kernel Offset: disabled [ 1246.309043][T23906] Rebooting in 86400 seconds..