last executing test programs: 11.031148454s ago: executing program 3 (id=3224): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x8a141, 0x0) write$auto_lowpan_enable_fops_(r0, &(0x7f00000000c0)='3', 0x1) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) pidfd_open$auto(0x0, 0x0) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r1) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000dd86a5b9f9a86ff8d9dee72c2ee250ce878d", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf25090000000c0003800800018004006c80"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r1) r3 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_hwsim_fops_ps_(r3, 0x0, 0x0) r4 = getpgid$auto(0xffffffffffffffff) kill$auto(r4, 0x81) wait4$auto(0x0, 0x0, 0x2, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 10.931689851s ago: executing program 0 (id=3225): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) renameat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x508c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r1, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 10.903282932s ago: executing program 1 (id=3226): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) symlink$auto(0x0, &(0x7f0000000240)='./file0\x00') chdir$auto(&(0x7f0000000040)='./file0/../file0\x00') epoll_create$auto(0x4194) sysfs$auto(0x2, 0x3b, 0x0) 10.768731797s ago: executing program 2 (id=3227): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, 0xa, 0x508c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x69) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r1, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x3b, 0x0) 8.956617996s ago: executing program 3 (id=3228): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi23\x00', 0x42942, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000400), 0x2}, 0x9) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x4, 0x1, 0x7178, 0x0) mmap$auto(0x0, 0x2000a, 0xe0, 0x30eb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x1, 0x54, 0x0, 0x4) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), r2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mq_timedsend$auto(r0, &(0x7f0000000000)='(.e[\xa4x\xc9', 0x5, 0x2b0, &(0x7f0000000040)={0x1, 0x100000001}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x2c}, 0x92) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, 0xffffffffffffffff, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) read$auto_component_list_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/78, 0x4e) ioctl$auto_TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240)=0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff) sysfs$auto(0x2, 0x3b, 0x0) 8.750598264s ago: executing program 1 (id=3229): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi23\x00', 0x42942, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000400), 0x2}, 0x9) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x4, 0x1, 0x7178, 0x0) mmap$auto(0x0, 0x2000a, 0xe0, 0x30eb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x1, 0x54, 0x0, 0x4) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), r2) mq_timedsend$auto(r0, &(0x7f0000000000)='(.e[\xa4x\xc9', 0x5, 0x2b0, &(0x7f0000000040)={0x1, 0x100000001}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x2c}, 0x92) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, 0xffffffffffffffff, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) read$auto_component_list_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/78, 0x4e) ioctl$auto_TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240)=0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_SET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_MASK={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @pid=r4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x40000) sysfs$auto(0x2, 0x3b, 0x0) 8.709334439s ago: executing program 0 (id=3230): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') close_range$auto(0x2, 0x8, 0x0) splice$auto(r1, &(0x7f0000000140)=0x80, r0, &(0x7f0000000200)=0x80000000000000, 0x7f, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) r5 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) read$auto_fake_panic_fops_(r5, &(0x7f0000000480)=""/214, 0xd6) epoll_create$auto(0x4194) sysfs$auto(0x2, 0x3b, 0x0) 8.581935934s ago: executing program 2 (id=3231): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x8a141, 0x0) write$auto_lowpan_enable_fops_(r0, &(0x7f00000000c0)='3', 0x1) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) pidfd_open$auto(0x0, 0x0) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r2) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000dd86a5b9f9a86ff8d9dee72c2ee250ce878d", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf25090000000c0003800800018004006c80"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r2) r4 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) read$auto_hwsim_fops_ps_(r4, 0x0, 0x0) r5 = getpgid$auto(0xffffffffffffffff) kill$auto(r5, 0x81) wait4$auto(0x0, 0x0, 0x2, 0x0) sendmsg$auto_IPVS_CMD_FLUSH(r1, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x40080) sysfs$auto(0x2, 0x3b, 0x0) 6.881148784s ago: executing program 3 (id=3232): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x129400, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000a00)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f00000000c0)={&(0x7f0000000080), 0x180}, 0x40000000000002, &(0x7f0000000340), 0x7, 0xe505}, 0x800}, 0x7, 0x6) mq_timedsend$auto(r0, &(0x7f0000000380)='\xf2\x82\x96\xfb\x13b\xdf9\xd7\xc5\xd5\'\xf5\xd1\xf8C&\xb7s\x98%g\xa2\xc8\x97s\xd2\"\xab\x05e\xa1\x9fI\xd0\xc1\xa1\xc9\xf6\xba\xc9T\x9c\xfbE\xf6\x1e\x19!N\x89\xc6U\x88+Vz\xa7!$G\x94|\x1b\xcd\x1d\x90\xa5%\xba?\xef^\x93\x00jb\x96\xa53\x05HE\x9b\x85\x14\xa92^)\xef}\xd9Rp\"\x853\xb7K\x01\x87\xc9\xb4\xd1\x80H\x1e\x05\bVGa}\x82\x15S\xc7\xe9\xea\xc9\xa8ht$\x1f\x98\xe0\x1d3\xf6\x12\xfe\x9c3\xce\xe4\x81\x81fs\n\x18\x1f\xf1', 0x8, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) sysfs$auto(0x2, 0x3b, 0x0) 6.618131508s ago: executing program 1 (id=3233): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) splice$auto(r1, &(0x7f0000000140)=0x80, r0, &(0x7f0000000200)=0x80000000000000, 0x7f, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) r5 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) read$auto_fake_panic_fops_(r5, &(0x7f0000000480)=""/214, 0xd6) epoll_create$auto(0x4194) sysfs$auto(0x2, 0x3b, 0x0) 6.55709856s ago: executing program 0 (id=3234): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) sendmmsg$auto(r0, &(0x7f00000019c0)={{&(0x7f0000000840)="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", 0x6, &(0x7f00000018c0)={&(0x7f0000001840)="505df05455fa4a7309c864415e6910e4c542ea0ed4a02c69f17d61ce2b73bc1d95c40170ca86239ea54c3a737745cc3969cc99f39b28df91a8fdfffa6a090f44759b3bc8", 0x3}, 0xec, &(0x7f0000001900)="0d50a24e21ae53a4097b779959e4b32d611ff2021695b0999ca46a37eff83e5e8c09cf420bde50c56658864f9907187f7dab14b823f1cf6ed6efd3eb7fcc7777576f38a6649f34bb361c2fd400037357210ceec88a9188278dd5d097f5d32257ece51e9f6837ba2a5f9f9e3b08d11c87e25f6be1e00e7e0a334ff6b05914e8fa2a2ebc7942714633b01fccc30b58c7c5c82e1b6364ef397fac5805e7428fce38", 0x4b0a, 0x9}, 0x4}, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0x14a) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r2, r2, &(0x7f0000000040)=0x2, 0x7) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0x\x113\a\xc7\x91\x92@\xb2P', 0xf) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0xfffffffb, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x400000000000005, 0x5, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) (async) select$auto(0xfffffffb, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x400000000000005, 0x5, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') (async) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) read$auto(0x3, 0x0, 0x8080) madvise$auto(0xffffffff, 0x6d, 0x4) (async) madvise$auto(0xffffffff, 0x6d, 0x4) 6.445401302s ago: executing program 2 (id=3235): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x80003, 0x300) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) r1 = wait4$auto(0xffffffffffffffff, &(0x7f0000000400)=0xd22, 0x759, &(0x7f0000000480)={{0x5, 0x3}, {0x8, 0x7}, 0x1, 0x9, 0x1, 0x7, 0x0, 0x800, 0x1000, 0xafd, 0xfffffffffffffff8, 0x3, 0x100000001, 0x8000, 0xfffffffffffffffa, 0xa86}) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x80}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_WPAN_PHY_NAME={0x36, 0x2, '/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20040810) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0x5865, r2, 0x10}, 0x22) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x22) r3 = socket(0x28, 0x1, 0x0) read$auto(r3, &(0x7f0000000080)='ovs_flow\x00', 0x100000001) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x3, 0x4) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x100000000008000) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, 0x0, 0x1) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) 4.58361538s ago: executing program 0 (id=3236): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi23\x00', 0x42942, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000400), 0x2}, 0x9) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x4, 0x1, 0x7178, 0x0) mmap$auto(0x0, 0x2000a, 0xe0, 0x30eb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x1, 0x54, 0x0, 0x4) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), r2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mq_timedsend$auto(r0, &(0x7f0000000000)='(.e[\xa4x\xc9', 0x5, 0x2b0, &(0x7f0000000040)={0x1, 0x100000001}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x2c}, 0x92) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, 0xffffffffffffffff, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) read$auto_component_list_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/78, 0x4e) ioctl$auto_TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240)=0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_MASK={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @pid=r4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x40000) sysfs$auto(0x2, 0x3b, 0x0) 4.439204466s ago: executing program 1 (id=3237): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x8a141, 0x0) write$auto_lowpan_enable_fops_(r0, &(0x7f00000000c0)='3', 0x1) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) pidfd_open$auto(0x0, 0x0) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r1) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000dd86a5b9f9a86ff8d9dee72c2ee250ce878d", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf25090000000c0003800800018004006c80"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r1) r3 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_hwsim_fops_ps_(r3, 0x0, 0x0) r4 = getpgid$auto(0xffffffffffffffff) kill$auto(r4, 0x81) wait4$auto(0x0, 0x0, 0x2, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 4.437085692s ago: executing program 3 (id=3238): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) symlink$auto(0x0, &(0x7f0000000240)='./file0\x00') chdir$auto(&(0x7f0000000040)='./file0/../file0\x00') epoll_create$auto(0x4194) sysfs$auto(0x2, 0x3b, 0x0) 4.388707889s ago: executing program 2 (id=3239): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) renameat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x508c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r1, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 2.455214924s ago: executing program 0 (id=3240): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi23\x00', 0x42942, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000400), 0x2}, 0x9) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x4, 0x1, 0x7178, 0x0) mmap$auto(0x0, 0x2000a, 0xe0, 0x30eb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x1, 0x54, 0x0, 0x4) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), r2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mq_timedsend$auto(r0, &(0x7f0000000000)='(.e[\xa4x\xc9', 0x5, 0x2b0, &(0x7f0000000040)={0x1, 0x100000001}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x2c}, 0x92) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, 0xffffffffffffffff, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) read$auto_component_list_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/78, 0x4e) ioctl$auto_TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240)=0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff) sysfs$auto(0x2, 0x3b, 0x0) 2.430291057s ago: executing program 3 (id=3241): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x129400, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000a00)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f00000000c0)={&(0x7f0000000080), 0x180}, 0x40000000000002, &(0x7f0000000340), 0x7, 0xe505}, 0x800}, 0x7, 0x6) mq_timedsend$auto(r0, &(0x7f0000000380)='\xf2\x82\x96\xfb\x13b\xdf9\xd7\xc5\xd5\'\xf5\xd1\xf8C&\xb7s\x98%g\xa2\xc8\x97s\xd2\"\xab\x05e\xa1\x9fI\xd0\xc1\xa1\xc9\xf6\xba\xc9T\x9c\xfbE\xf6\x1e\x19!N\x89\xc6U\x88+Vz\xa7!$G\x94|\x1b\xcd\x1d\x90\xa5%\xba?\xef^\x93\x00jb\x96\xa53\x05HE\x9b\x85\x14\xa92^)\xef}\xd9Rp\"\x853\xb7K\x01\x87\xc9\xb4\xd1\x80H\x1e\x05\bVGa}\x82\x15S\xc7\xe9\xea\xc9\xa8ht$\x1f\x98\xe0\x1d3\xf6\x12\xfe\x9c3\xce\xe4\x81\x81fs\n\x18\x1f\xf1', 0x8, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) sysfs$auto(0x2, 0x3b, 0x0) 2.381424127s ago: executing program 2 (id=3242): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi23\x00', 0x42942, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000400), 0x2}, 0x9) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x4, 0x1, 0x7178, 0x0) mmap$auto(0x0, 0x2000a, 0xe0, 0x30eb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x1, 0x54, 0x0, 0x4) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), r2) mq_timedsend$auto(r0, &(0x7f0000000000)='(.e[\xa4x\xc9', 0x5, 0x2b0, &(0x7f0000000040)={0x1, 0x100000001}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x2c}, 0x92) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, 0xffffffffffffffff, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) read$auto_component_list_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/78, 0x4e) ioctl$auto_TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240)=0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_SET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_MASK={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @pid=r4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x40000) sysfs$auto(0x2, 0x3b, 0x0) 2.287440569s ago: executing program 1 (id=3243): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') close_range$auto(0x2, 0x8, 0x0) splice$auto(r1, &(0x7f0000000140)=0x80, r0, &(0x7f0000000200)=0x80000000000000, 0x7f, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) r5 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) read$auto_fake_panic_fops_(r5, &(0x7f0000000480)=""/214, 0xd6) epoll_create$auto(0x4194) sysfs$auto(0x2, 0x3b, 0x0) 166.188639ms ago: executing program 0 (id=3244): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi23\x00', 0x42942, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000400), 0x2}, 0x9) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x4, 0x1, 0x7178, 0x0) mmap$auto(0x0, 0x2000a, 0xe0, 0x30eb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x1, 0x54, 0x0, 0x4) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), r2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mq_timedsend$auto(r0, &(0x7f0000000000)='(.e[\xa4x\xc9', 0x5, 0x2b0, &(0x7f0000000040)={0x1, 0x100000001}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x2c}, 0x92) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, 0xffffffffffffffff, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) read$auto_component_list_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/78, 0x4e) ioctl$auto_TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000240)=0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff) sysfs$auto(0x2, 0x3b, 0x0) 111.563889ms ago: executing program 3 (id=3245): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi23\x00', 0x42942, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000400), 0x2}, 0x9) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r1 = socketpair$auto(0x4, 0x1, 0x7178, 0x0) mmap$auto(0x0, 0x2000a, 0xe0, 0x30eb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x3, 0x1, 0x54, 0x0, 0x4) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), r1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x1c, &(0x7f0000000040)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x2c}, 0x92) bpf$auto(0x401, &(0x7f0000000180)=@task_fd_query={0x2, 0xffffffffffffffff, 0x8209, 0x738, 0x401, 0x805, 0xe3, 0x1000805000000004, 0x4}, 0x6f4) read$auto_component_list_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/78, 0x4e) ioctl$auto_TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000240)=0x40) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x3b, 0x0) 49.586439ms ago: executing program 2 (id=3246): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0x5865, r1, 0x10}, 0x22) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r3, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x1c) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0x\x113\a\xc7\x91\x92@\xb2P', 0xf) timer_create$auto(0x2, &(0x7f00000000c0)={@sival_int=0x2, @inferred, 0xa}, &(0x7f0000000140)=0x2) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x71}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 1 (id=3247): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) socket(0x1d, 0x2, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffe11, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r1, r1, 0x8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop2\x00', 0x24040, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x401, 0x408, 0xf4b, 0x20000400004, 0x200000000040000d, 0x0}) r6 = wait4$auto(r5, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x3}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x8, 0x80ac, 0x2, 0xa, 0xfffffffffffffffe, 0x400}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYBLOB, @ANYRES32=r6, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c73cbaacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c4580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r6}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r6, 0xc, 0x6) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r7, 0x560a, r8) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48084) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): range [ 676.811215][T14878] netlink: zone id is out of range [ 676.827506][T14878] netlink: zone id is out of range [ 676.845310][T14878] netlink: get zone limit has 4 unknown bytes [ 677.119422][T14889] random: crng reseeded on system resumption [ 678.879270][T14908] mmap: syz.0.1119 (14908) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 683.170105][T14969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 683.190455][T14969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 683.197327][T14969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 683.205480][T14969] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 684.672931][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 685.232450][ T5640] Bluetooth: hci0: command 0x0419 tx timeout [ 685.239065][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 685.239081][T14617] Bluetooth: hci2: command 0x0c1a tx timeout [ 686.117088][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.132188][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.180003][T15006] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 686.222706][T15006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 686.234181][T15006] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 686.240625][T15006] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 686.551261][T15011] kexec: Could not allocate control_code_buffer [ 686.831946][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 687.993698][T15054] FAULT_INJECTION: forcing a failure. [ 687.993698][T15054] name failslab, interval 1, probability 0, space 0, times 0 [ 688.008806][T15054] CPU: 0 UID: 0 PID: 15054 Comm: syz.1.1137 Not tainted syzkaller #0 PREEMPT(full) [ 688.008851][T15054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 688.008872][T15054] Call Trace: [ 688.008884][T15054] [ 688.008896][T15054] dump_stack_lvl+0x100/0x190 [ 688.008944][T15054] should_fail_ex.cold+0x5/0xa [ 688.008985][T15054] should_failslab+0xc2/0x120 [ 688.009034][T15054] kmem_cache_alloc_noprof+0x91/0x6a0 [ 688.009075][T15054] ? d_instantiate+0x8a/0xb0 [ 688.009117][T15054] ? d_instantiate+0x8a/0xb0 [ 688.009154][T15054] ? alloc_empty_file_noaccount+0x2b/0xd0 [ 688.009207][T15054] alloc_empty_file_noaccount+0x2b/0xd0 [ 688.009254][T15054] alloc_file_pseudo_noaccount+0x183/0x290 [ 688.009304][T15054] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 688.009356][T15054] ? iput+0x3a/0x40 [ 688.009398][T15054] bdev_file_open_by_dev+0x13a/0x210 [ 688.009458][T15054] blkdev_bszset+0x170/0x240 [ 688.009515][T15054] ? __pfx_blkdev_bszset+0x10/0x10 [ 688.009569][T15054] ? find_held_lock+0x2b/0x80 [ 688.009619][T15054] ? __fget_files+0x215/0x3d0 [ 688.009649][T15054] ? hook_file_ioctl_common+0x140/0x440 [ 688.009700][T15054] blkdev_ioctl+0x513/0x6f0 [ 688.009733][T15054] ? __pfx_blkdev_ioctl+0x10/0x10 [ 688.009772][T15054] ? __pfx_blkdev_ioctl+0x10/0x10 [ 688.009805][T15054] __x64_sys_ioctl+0x18e/0x210 [ 688.009857][T15054] do_syscall_64+0x115/0x840 [ 688.009898][T15054] ? clear_bhb_loop+0x40/0x90 [ 688.009942][T15054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.009976][T15054] RIP: 0033:0x7f8735f9de99 [ 688.010004][T15054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.010036][T15054] RSP: 002b:00007f8736daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.010067][T15054] RAX: ffffffffffffffda RBX: 00007f8736226450 RCX: 00007f8735f9de99 [ 688.010087][T15054] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000002 [ 688.010107][T15054] RBP: 00007f8736033eaf R08: 0000000000000000 R09: 0000000000000000 [ 688.010127][T15054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.010146][T15054] R13: 00007f87362264e8 R14: 00007f8736226450 R15: 00007ffc8117a3c8 [ 688.010189][T15054] [ 688.278932][ T5640] Bluetooth: hci0: command 0x0419 tx timeout [ 688.285496][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 688.291600][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 689.963098][T15061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 689.970835][T15061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 689.980056][T15061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 689.990777][T15061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 691.472332][T14617] Bluetooth: hci1: command 0x0c1a tx timeout [ 692.032153][T14617] Bluetooth: hci3: command 0x0c1a tx timeout [ 692.032193][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 692.044388][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 703.300004][T13796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.563267][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 703.581917][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 703.590881][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 703.602558][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 703.617536][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 703.739183][T13796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.090795][T13796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.260423][T13796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.804056][T13796] bridge_slave_1: left allmulticast mode [ 704.814279][T13796] bridge_slave_1: left promiscuous mode [ 704.820225][T13796] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.836044][T13796] bridge_slave_0: left allmulticast mode [ 704.851989][T13796] bridge_slave_0: left promiscuous mode [ 704.862536][T13796] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.296333][T13796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.316922][T13796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.329828][T13796] bond0 (unregistering): Released all slaves [ 705.712534][ T5640] Bluetooth: hci0: command tx timeout [ 705.797008][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 706.039624][T13796] hsr_slave_0: left promiscuous mode [ 706.050987][T13796] hsr_slave_1: left promiscuous mode [ 706.057592][T13796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.065342][T13796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.074858][T13796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.082708][T13796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.097009][T13796] veth1_macvtap: left promiscuous mode [ 706.102655][T13796] veth0_macvtap: left promiscuous mode [ 706.108235][T13796] veth1_vlan: left promiscuous mode [ 706.114604][T13796] veth0_vlan: left promiscuous mode [ 706.356756][T13796] team0 (unregistering): Port device team_slave_1 removed [ 706.374494][T13796] team0 (unregistering): Port device team_slave_0 removed [ 707.329706][T15301] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.352030][T15301] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.359486][T15301] bridge_slave_0: entered allmulticast mode [ 707.389741][T15301] bridge_slave_0: entered promiscuous mode [ 707.411724][T15301] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.426174][T15301] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.433726][T15301] bridge_slave_1: entered allmulticast mode [ 707.445189][T15301] bridge_slave_1: entered promiscuous mode [ 707.580343][T15301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.639240][T15301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.791974][ T5640] Bluetooth: hci0: command tx timeout [ 708.068249][T15301] team0: Port device team_slave_0 added [ 708.091502][T15301] team0: Port device team_slave_1 added [ 708.189940][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 708.390833][T15301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.398148][T15301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.424760][T15301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.579251][T15301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.586415][T15301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.614249][T15301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.089475][T15301] hsr_slave_0: entered promiscuous mode [ 709.097602][T15301] hsr_slave_1: entered promiscuous mode [ 709.104413][T15301] debugfs: 'hsr0' already exists in 'hsr' [ 709.110346][T15301] Cannot create hsr debugfs directory [ 709.871964][ T5640] Bluetooth: hci0: command tx timeout [ 711.747624][T15301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 711.780307][T15301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 711.806967][T15301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 711.847418][T15301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 711.864069][T15301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 711.921407][T15301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.944955][T15301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 711.956833][ T5640] Bluetooth: hci0: command tx timeout [ 711.986906][T15301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 713.749792][T15301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.870092][T15301] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.904873][T13795] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.912203][T13795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.958459][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.965763][T13795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.636544][T13795] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.995989][T13795] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.349296][T14617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 715.365582][T14617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 715.377347][T14617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 715.394828][T14617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 715.411504][T14617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 715.447943][T13795] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.735322][T13795] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.320289][T13795] bridge_slave_1: left allmulticast mode [ 716.327693][T13795] bridge_slave_1: left promiscuous mode [ 716.348204][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.369802][T13795] bridge_slave_0: left allmulticast mode [ 716.375634][T13795] bridge_slave_0: left promiscuous mode [ 716.383366][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.574136][T13795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.586983][T13795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.600433][T13795] bond0 (unregistering): Released all slaves [ 716.749168][T15301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.420758][T13795] hsr_slave_0: left promiscuous mode [ 717.427268][T13795] hsr_slave_1: left promiscuous mode [ 717.434793][T13795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.443095][T13795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.451315][T13795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.459310][T13795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.472876][ T5640] Bluetooth: hci3: command tx timeout [ 717.486174][T13795] veth1_macvtap: left promiscuous mode [ 717.491755][T13795] veth0_macvtap: left promiscuous mode [ 717.498675][T13795] veth1_vlan: left promiscuous mode [ 717.504261][T13795] veth0_vlan: left promiscuous mode [ 717.744595][T13795] team0 (unregistering): Port device team_slave_1 removed [ 717.761285][T13795] team0 (unregistering): Port device team_slave_0 removed [ 717.984297][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 718.417242][T15301] veth0_vlan: entered promiscuous mode [ 718.478093][T15301] veth1_vlan: entered promiscuous mode [ 718.692545][T15301] veth0_macvtap: entered promiscuous mode [ 718.726655][T15301] veth1_macvtap: entered promiscuous mode [ 719.008150][T15541] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.024357][T15541] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.044993][T15541] bridge_slave_0: entered allmulticast mode [ 719.061749][T15541] bridge_slave_0: entered promiscuous mode [ 719.173149][T15541] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.180714][T15541] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.189773][T15541] bridge_slave_1: entered allmulticast mode [ 719.199132][T15541] bridge_slave_1: entered promiscuous mode [ 719.222787][T15301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.258234][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 719.455960][T15541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.467977][T15301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.553910][ T5640] Bluetooth: hci3: command tx timeout [ 719.640052][T15541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.829713][T13795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.839231][T13795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.849569][T13795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.861017][T13795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.894533][T15541] team0: Port device team_slave_0 added [ 719.914922][T15541] team0: Port device team_slave_1 added [ 720.013028][T15541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.027015][T15541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.062427][T15541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.085070][T15541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.093061][T15541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.120625][T15541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.384584][T15541] hsr_slave_0: entered promiscuous mode [ 720.391616][T15541] hsr_slave_1: entered promiscuous mode [ 720.587692][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.613220][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.708891][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.733686][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.279644][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 721.632009][ T5640] Bluetooth: hci3: command tx timeout [ 723.656949][T15541] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 723.684609][T15541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.712459][ T5640] Bluetooth: hci3: command tx timeout [ 723.747603][T15541] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 723.760507][T15541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.867886][T15541] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 723.904628][T15541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 723.924188][T15541] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 723.949919][T15541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.208712][T15541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.385460][T15541] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.560615][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.567844][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.322914][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.330201][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.308520][T15785] kvm: user requested TSC rate below hardware speed [ 729.767602][T15541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.624344][T15541] veth0_vlan: entered promiscuous mode [ 731.457561][T15541] veth1_vlan: entered promiscuous mode [ 732.220442][T15541] veth0_macvtap: entered promiscuous mode [ 732.238202][T15541] veth1_macvtap: entered promiscuous mode [ 732.305669][T15541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.367055][T15541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.417027][T13792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.474503][T13792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.489482][T13792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.610609][T13792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.088736][T13793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.131691][T13793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.190575][T13793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.204481][T13793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.819674][T15870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 735.845935][T15870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 735.863297][T15870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 735.881491][T15870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 735.918237][T15870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 735.951333][T15870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 735.963891][T15870] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 735.991975][T15870] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 736.831929][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 737.872425][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 737.872481][T14617] Bluetooth: hci2: command 0x0c1a tx timeout [ 737.953284][T14617] Bluetooth: hci3: command 0x0c1a tx timeout [ 739.144818][T15945] random: crng reseeded on system resumption [ 739.962311][T14617] Bluetooth: hci0: command 0x0c1a tx timeout [ 740.031873][T14617] Bluetooth: hci3: command 0x0c1a tx timeout [ 741.292396][T15990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2190955544 (280442309632 ns) > initial count (280442302208 ns). Using initial count to start timer. [ 741.337967][T15990] FAULT_INJECTION: forcing a failure. [ 741.337967][T15990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.351922][T15990] CPU: 0 UID: 0 PID: 15990 Comm: syz.2.1228 Not tainted syzkaller #0 PREEMPT(full) [ 741.351962][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 741.351981][T15990] Call Trace: [ 741.351991][T15990] [ 741.352003][T15990] dump_stack_lvl+0x100/0x190 [ 741.352042][T15990] should_fail_ex.cold+0x5/0xa [ 741.352076][T15990] _copy_to_user+0x32/0xd0 [ 741.352134][T15990] fs_name+0x25e/0x4a0 [ 741.352173][T15990] __x64_sys_sysfs+0xe6/0x120 [ 741.352213][T15990] do_syscall_64+0x115/0x840 [ 741.352257][T15990] ? clear_bhb_loop+0x40/0x90 [ 741.352296][T15990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.352329][T15990] RIP: 0033:0x7f88f139de99 [ 741.352355][T15990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.352386][T15990] RSP: 002b:00007f88f21dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 741.352416][T15990] RAX: ffffffffffffffda RBX: 00007f88f1626360 RCX: 00007f88f139de99 [ 741.352437][T15990] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 741.352456][T15990] RBP: 00007f88f21dc090 R08: 0000000000000000 R09: 0000000000000000 [ 741.352474][T15990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.352493][T15990] R13: 00007f88f16263f8 R14: 00007f88f1626360 R15: 00007ffc5263c158 [ 741.352533][T15990] [ 742.031973][T14617] Bluetooth: hci0: command 0x0c1a tx timeout [ 742.118366][T14617] Bluetooth: hci3: command 0x0c1a tx timeout [ 743.506680][T13797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.759365][T13797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.012834][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 744.027809][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 744.040278][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 744.053918][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 744.062117][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 744.130518][T13797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.531505][T13797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.839294][T13797] bridge_slave_1: left allmulticast mode [ 745.851169][T13797] bridge_slave_1: left promiscuous mode [ 745.862378][T13797] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.886456][T13797] bridge_slave_0: left allmulticast mode [ 745.896805][T13797] bridge_slave_0: left promiscuous mode [ 745.903161][T13797] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.192081][T14617] Bluetooth: hci1: command tx timeout [ 746.229449][T13797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.247152][T13797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.259890][T13797] bond0 (unregistering): Released all slaves [ 746.717653][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 747.301605][T13797] hsr_slave_0: left promiscuous mode [ 747.324500][T13797] hsr_slave_1: left promiscuous mode [ 747.341453][T13797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.354917][T13797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.363908][T13797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.371387][T13797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.396015][T13797] veth1_macvtap: left promiscuous mode [ 747.401666][T13797] veth0_macvtap: left promiscuous mode [ 747.408134][T13797] veth1_vlan: left promiscuous mode [ 747.413579][T13797] veth0_vlan: left promiscuous mode [ 747.562464][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.569234][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.147614][T13797] team0 (unregistering): Port device team_slave_1 removed [ 748.166840][T13797] team0 (unregistering): Port device team_slave_0 removed [ 748.272477][T14617] Bluetooth: hci1: command tx timeout [ 748.337016][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 749.046531][T16025] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.059526][T16025] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.067255][T16025] bridge_slave_0: entered allmulticast mode [ 749.077514][T16025] bridge_slave_0: entered promiscuous mode [ 749.103500][T16025] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.123728][T16025] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.147080][T16025] bridge_slave_1: entered allmulticast mode [ 749.177041][T16025] bridge_slave_1: entered promiscuous mode [ 749.578951][T16138] Invalid ELF header magic: != ELF [ 749.608788][T16025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.869525][T16025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.263724][T16025] team0: Port device team_slave_0 added [ 750.352111][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 750.361478][T16025] team0: Port device team_slave_1 added [ 750.368170][T14617] Bluetooth: hci1: command tx timeout [ 750.610939][T16025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.618782][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.649771][T16025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.664377][T16025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.671514][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.700370][T16025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.818119][T16025] hsr_slave_0: entered promiscuous mode [ 750.826493][T16025] hsr_slave_1: entered promiscuous mode [ 750.833546][T16025] debugfs: 'hsr0' already exists in 'hsr' [ 750.839376][T16025] Cannot create hsr debugfs directory [ 751.618421][T16165] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 752.433357][T14617] Bluetooth: hci1: command tx timeout [ 754.669789][T16025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 754.686155][T16025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 754.999691][T16025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 755.047028][T16025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 755.225298][T16025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 755.292911][T16025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 755.316083][T16025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 755.347053][T16025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.660612][T16274] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1254'. [ 755.696266][T16274] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 757.861102][T16025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.953389][T16025] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.996350][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.003643][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.075525][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.082824][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.197547][T16025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.293226][T16025] veth0_vlan: entered promiscuous mode [ 760.758278][T16025] veth1_vlan: entered promiscuous mode [ 761.456878][T16025] veth0_macvtap: entered promiscuous mode [ 761.470670][T16025] veth1_macvtap: entered promiscuous mode [ 762.707669][T16025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.000631][T16025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.105773][T13797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.129742][T13797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.168148][T13797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.206488][T13797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.582920][T13792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.601507][T13792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.804883][T16415] FAULT_INJECTION: forcing a failure. [ 763.804883][T16415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.826150][T16415] CPU: 0 UID: 0 PID: 16415 Comm: syz.2.1267 Not tainted syzkaller #0 PREEMPT(full) [ 763.826191][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 763.826211][T16415] Call Trace: [ 763.826222][T16415] [ 763.826233][T16415] dump_stack_lvl+0x100/0x190 [ 763.826277][T16415] should_fail_ex.cold+0x5/0xa [ 763.826315][T16415] _copy_to_user+0x32/0xd0 [ 763.826367][T16415] fs_name+0x25e/0x4a0 [ 763.826408][T16415] __x64_sys_sysfs+0xe6/0x120 [ 763.826449][T16415] do_syscall_64+0x115/0x840 [ 763.826487][T16415] ? clear_bhb_loop+0x40/0x90 [ 763.826527][T16415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.826562][T16415] RIP: 0033:0x7f88f139de99 [ 763.826598][T16415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.826630][T16415] RSP: 002b:00007f88f21dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 763.826662][T16415] RAX: ffffffffffffffda RBX: 00007f88f1626360 RCX: 00007f88f139de99 [ 763.826682][T16415] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 763.826702][T16415] RBP: 00007f88f21dc090 R08: 0000000000000000 R09: 0000000000000000 [ 763.826722][T16415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.826740][T16415] R13: 00007f88f16263f8 R14: 00007f88f1626360 R15: 00007ffc5263c158 [ 763.826781][T16415] [ 764.093884][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.103303][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.270539][T16433] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1235'. [ 766.062555][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 766.080885][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 766.094436][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 766.104566][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 766.120123][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 766.226601][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.452459][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.778010][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.916524][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.646978][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'. [ 768.192775][ T5640] Bluetooth: hci3: command tx timeout [ 768.463452][ T57] bridge_slave_1: left allmulticast mode [ 768.477990][ T57] bridge_slave_1: left promiscuous mode [ 768.488296][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.515597][ T57] bridge_slave_0: left allmulticast mode [ 768.521914][ T57] bridge_slave_0: left promiscuous mode [ 768.527824][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.717045][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.728452][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.740071][ T57] bond0 (unregistering): Released all slaves [ 769.378285][ T57] hsr_slave_0: left promiscuous mode [ 769.411356][ T57] hsr_slave_1: left promiscuous mode [ 769.420332][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.428086][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.439912][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.447488][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.487762][ T57] veth1_macvtap: left promiscuous mode [ 769.503117][ T57] veth0_macvtap: left promiscuous mode [ 769.513919][ T57] veth1_vlan: left promiscuous mode [ 769.526808][ T57] veth0_vlan: left promiscuous mode [ 770.085259][ T57] team0 (unregistering): Port device team_slave_1 removed [ 770.116910][ T57] team0 (unregistering): Port device team_slave_0 removed [ 770.273511][ T5640] Bluetooth: hci3: command tx timeout [ 770.349699][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 770.719081][T16440] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.733863][T16440] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.746905][T16440] bridge_slave_0: entered allmulticast mode [ 770.755926][T16440] bridge_slave_0: entered promiscuous mode [ 770.793176][T16440] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.803382][T16440] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.816125][T16440] bridge_slave_1: entered allmulticast mode [ 770.846400][T16440] bridge_slave_1: entered promiscuous mode [ 770.965300][T16440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.062011][T16440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.269013][T16525] zswap: compressor not available [ 771.378561][T16440] team0: Port device team_slave_0 added [ 771.402165][T16534] random: crng reseeded on system resumption [ 771.494404][T16440] team0: Port device team_slave_1 added [ 771.810495][T16545] syz.0.1279 uses obsolete (PF_INET,SOCK_PACKET) [ 772.101709][T16440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.109469][T16440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.143249][T16440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.345790][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 772.352966][ T5640] Bluetooth: hci3: command tx timeout [ 772.370117][T16440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.394448][T16440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.429886][T16440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.797106][T16440] hsr_slave_0: entered promiscuous mode [ 772.803956][T16440] hsr_slave_1: entered promiscuous mode [ 773.756788][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 774.433508][ T5640] Bluetooth: hci3: command tx timeout [ 776.174181][T16440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 776.216250][T16440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 776.240847][T16440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 776.272399][T16440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.310619][T16440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 776.361578][T16440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.383660][T16440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 776.415922][T16440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.459830][T16440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.523132][T16440] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.559956][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.567233][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.617996][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.625244][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.925508][T16440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.544548][T16440] veth0_vlan: entered promiscuous mode [ 782.570184][T16440] veth1_vlan: entered promiscuous mode [ 782.687396][T16440] veth0_macvtap: entered promiscuous mode [ 782.725798][T16440] veth1_macvtap: entered promiscuous mode [ 782.790860][T16440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.864372][T16440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.889531][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.929289][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.941243][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.973109][T13795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.925751][T13795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.948571][T13795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.189197][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.197510][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.946070][T16843] bridge0: port 3(batadv0) entered blocking state [ 786.953641][T16843] bridge0: port 3(batadv0) entered disabled state [ 786.960329][T16843] batadv0: entered allmulticast mode [ 786.968424][T16843] batadv0: entered promiscuous mode [ 786.976832][T16843] bridge0: port 3(batadv0) entered blocking state [ 786.985696][T16843] bridge0: port 3(batadv0) entered forwarding state [ 787.012375][ T1013] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 787.022053][ T1013] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 791.170818][ T30] audit: type=1800 audit(1784954817.707:8): pid=16921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1313" name="dbroot" dev="configfs" ino=136186 res=0 errno=0 [ 796.815221][T16989] netlink: 'syz.3.1323': attribute type 8 has an invalid length. [ 797.474344][T17004] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 797.599259][ T30] audit: type=1800 audit(1784954824.137:9): pid=17006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1325" name="dbroot" dev="configfs" ino=138741 res=0 errno=0 [ 802.627891][T17087] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 802.644448][T17087] vhci_hcd vhci_hcd.3: invalid port number 0 [ 808.994998][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.003110][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.334990][T17330] netlink: 'syz.0.1374': attribute type 8 has an invalid length. [ 819.151512][T17358] MTRR 1 not used [ 819.323620][T17360] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 819.332310][T17360] vhci_hcd vhci_hcd.3: invalid port number 0 [ 823.705967][T17440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1389'. [ 823.773708][T17442] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 823.782192][T17442] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1389'. [ 838.189648][T17650] MTRR 1 not used [ 841.443437][T17720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1422'. [ 841.505524][T17714] netlink: 'syz.0.1422': attribute type 1 has an invalid length. [ 841.515311][T17714] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1422'. [ 853.772421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 857.070285][T17955] smpboot: CPU 1 is now offline [ 866.752306][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 869.154931][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.165759][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.561581][T18299] FAULT_INJECTION: forcing a failure. [ 881.561581][T18299] name failslab, interval 1, probability 0, space 0, times 0 [ 881.628817][T18299] CPU: 0 UID: 0 PID: 18299 Comm: syz.1.1506 Not tainted syzkaller #0 PREEMPT(full) [ 881.628850][T18299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 881.628866][T18299] Call Trace: [ 881.628873][T18299] [ 881.628883][T18299] dump_stack_lvl+0x100/0x190 [ 881.628917][T18299] should_fail_ex.cold+0x5/0xa [ 881.628945][T18299] should_failslab+0xc2/0x120 [ 881.628982][T18299] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 881.629015][T18299] ? lockdep_init_map_type+0x5c/0x250 [ 881.629064][T18299] ? __alloc_workqueue+0x781/0x1940 [ 881.629132][T18299] __alloc_workqueue+0x781/0x1940 [ 881.629170][T18299] alloc_workqueue_noprof+0xc7/0x130 [ 881.629201][T18299] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 881.629235][T18299] ? lockdep_init_map_type+0x5c/0x250 [ 881.629276][T18299] ? lockdep_init_map_type+0x5c/0x250 [ 881.629320][T18299] __rds_conn_create+0x1234/0x25a0 [ 881.629430][T18299] ? __pfx___rds_conn_create+0x10/0x10 [ 881.629460][T18299] ? __kasan_kmalloc+0xaa/0xb0 [ 881.629492][T18299] ? lockdep_init_map_type+0x5c/0x250 [ 881.629535][T18299] rds_conn_create_outgoing+0x44/0x60 [ 881.629575][T18299] rds_sendmsg+0x10da/0x34a0 [ 881.629645][T18299] ? __pfx_rds_sendmsg+0x10/0x10 [ 881.629684][T18299] ? __pfx_aa_sk_perm+0x10/0x10 [ 881.629749][T18299] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 881.629833][T18299] ? ____sys_sendmsg+0xa4d/0xbe0 [ 881.629902][T18299] ____sys_sendmsg+0xa4d/0xbe0 [ 881.629923][T18299] ? __pfx_rds_sendmsg+0x10/0x10 [ 881.629978][T18299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.630007][T18299] ? plist_check_list+0x1b8/0x280 [ 881.630092][T18299] ? plist_del+0x308/0x510 [ 881.630132][T18299] ___sys_sendmsg+0x190/0x1e0 [ 881.630158][T18299] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.630181][T18299] ? __lock_acquire+0x49f/0x1a40 [ 881.630219][T18299] ? futex_wake+0x220/0x5e0 [ 881.630294][T18299] __sys_sendmsg+0x160/0x210 [ 881.630327][T18299] ? __pfx___sys_sendmsg+0x10/0x10 [ 881.630375][T18299] do_syscall_64+0x115/0x840 [ 881.630403][T18299] ? clear_bhb_loop+0x40/0x90 [ 881.630432][T18299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.630457][T18299] RIP: 0033:0x7f6cd2d9de99 [ 881.630478][T18299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.630502][T18299] RSP: 002b:00007f6cd3c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.630526][T18299] RAX: ffffffffffffffda RBX: 00007f6cd3025fa0 RCX: 00007f6cd2d9de99 [ 881.630542][T18299] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 881.630557][T18299] RBP: 00007f6cd2e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 881.630571][T18299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.630586][T18299] R13: 00007f6cd3026038 R14: 00007f6cd3025fa0 R15: 00007ffc7e8e5838 [ 881.630616][T18299] [ 889.317890][T18412] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(320.8192.104), cmd(4) [ 889.915223][T18424] FAULT_INJECTION: forcing a failure. [ 889.915223][T18424] name failslab, interval 1, probability 0, space 0, times 0 [ 889.992504][T18424] CPU: 0 UID: 0 PID: 18424 Comm: syz.2.1527 Not tainted syzkaller #0 PREEMPT(full) [ 889.992536][T18424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 889.992550][T18424] Call Trace: [ 889.992558][T18424] [ 889.992566][T18424] dump_stack_lvl+0x100/0x190 [ 889.992597][T18424] should_fail_ex.cold+0x5/0xa [ 889.992623][T18424] should_failslab+0xc2/0x120 [ 889.992655][T18424] __kvmalloc_node_noprof+0x116/0x970 [ 889.992689][T18424] ? file_tty_write.isra.0+0x64e/0x890 [ 889.992819][T18424] file_tty_write.isra.0+0x64e/0x890 [ 889.992858][T18424] redirected_tty_write+0xd4/0x120 [ 889.992891][T18424] vfs_write+0x6ac/0x1050 [ 889.992915][T18424] ? __pfx_redirected_tty_write+0x10/0x10 [ 889.992949][T18424] ? __pfx_vfs_write+0x10/0x10 [ 889.992968][T18424] ? find_held_lock+0x2b/0x80 [ 889.993016][T18424] ksys_write+0x12a/0x250 [ 889.993037][T18424] ? __pfx_ksys_write+0x10/0x10 [ 889.993067][T18424] do_syscall_64+0x115/0x840 [ 889.993094][T18424] ? clear_bhb_loop+0x40/0x90 [ 889.993122][T18424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.993146][T18424] RIP: 0033:0x7f88f139de99 [ 889.993165][T18424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.993188][T18424] RSP: 002b:00007f88f2260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 889.993210][T18424] RAX: ffffffffffffffda RBX: 00007f88f1625fa0 RCX: 00007f88f139de99 [ 889.993225][T18424] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 889.993239][T18424] RBP: 00007f88f2260090 R08: 0000000000000000 R09: 0000000000000000 [ 889.993254][T18424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.993267][T18424] R13: 00007f88f1626038 R14: 00007f88f1625fa0 R15: 00007ffc5263c158 [ 889.993304][T18424] [ 892.997491][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 901.487880][T18597] netlink: 318 bytes leftover after parsing attributes in process `syz.1.1551'. [ 906.314661][T18675] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1560'. [ 922.137449][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.520011][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 922.532571][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 922.546010][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 922.558931][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 922.571396][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 922.760006][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.093619][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.363442][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.565742][ T48] bridge_slave_1: left allmulticast mode [ 924.585183][ T48] bridge_slave_1: left promiscuous mode [ 924.604764][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.629770][ T48] bridge_slave_0: left allmulticast mode [ 924.645396][ T48] bridge_slave_0: left promiscuous mode [ 924.659256][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.681653][ T5640] Bluetooth: hci0: command tx timeout [ 925.099909][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.134826][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.160555][ T48] bond0 (unregistering): Released all slaves [ 925.619655][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 926.209021][ T48] hsr_slave_0: left promiscuous mode [ 926.229089][ T48] hsr_slave_1: left promiscuous mode [ 926.249829][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.280231][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.309475][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.362022][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.401265][ T48] veth1_macvtap: left promiscuous mode [ 926.422810][ T48] veth0_macvtap: left promiscuous mode [ 926.438700][ T48] veth1_vlan: left promiscuous mode [ 926.449851][ T48] veth0_vlan: left promiscuous mode [ 926.757485][ T5640] Bluetooth: hci0: command tx timeout [ 927.105809][ T48] team0 (unregistering): Port device team_slave_1 removed [ 927.146952][ T48] team0 (unregistering): Port device team_slave_0 removed [ 927.398486][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 928.627251][T18898] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.660147][T18898] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.686776][T18898] bridge_slave_0: entered allmulticast mode [ 928.718605][T18898] bridge_slave_0: entered promiscuous mode [ 928.831942][ T5640] Bluetooth: hci0: command tx timeout [ 928.909279][T18898] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.948988][T18898] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.979827][T18898] bridge_slave_1: entered allmulticast mode [ 929.019853][T18898] bridge_slave_1: entered promiscuous mode [ 929.276093][T18898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.582775][T18898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.730148][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 929.803702][T18898] team0: Port device team_slave_0 added [ 929.898169][T18898] team0: Port device team_slave_1 added [ 930.342468][T18898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.359829][T18898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.421308][T18898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.598566][T18898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.627771][T18898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.687994][T18898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.912001][ T5640] Bluetooth: hci0: command tx timeout [ 931.011186][T18898] hsr_slave_0: entered promiscuous mode [ 931.068534][T18898] hsr_slave_1: entered promiscuous mode [ 931.114874][T18898] debugfs: 'hsr0' already exists in 'hsr' [ 931.141081][T18898] Cannot create hsr debugfs directory [ 931.820149][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 931.876737][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.885668][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.725487][T18898] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 936.756553][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 936.908956][T18898] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 936.950711][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 937.305398][T18898] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 937.338931][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 937.357461][T18898] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 937.376885][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 938.741555][T18898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.741315][T18898] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.057333][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.064616][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.357090][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.364389][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.190402][T18898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.325489][T18898] veth0_vlan: entered promiscuous mode [ 946.688885][T18898] veth1_vlan: entered promiscuous mode [ 947.669462][T18898] veth0_macvtap: entered promiscuous mode [ 947.822425][T19331] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 947.855054][T18898] veth1_macvtap: entered promiscuous mode [ 947.875840][T19331] kAFS: Invalid Command on /proc/fs/afs/cells file [ 948.490281][T18898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.991266][T18898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.269341][ T1013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.366834][ T1013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.387696][ T1013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.538633][ T1013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.491505][T13795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.529917][T13795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.137826][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.170553][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.567694][T19590] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1663'. [ 968.407633][T19610] loop6: detected capacity change from 0 to 2097152 [ 976.906343][T19722] sysfs_service_op_store: Client not running :-5: [ 987.468988][T19881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2190955544 (280442309632 ns) > initial count (280442302208 ns). Using initial count to start timer. [ 988.355899][T19888] FAULT_INJECTION: forcing a failure. [ 988.355899][T19888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.440143][T19888] CPU: 0 UID: 0 PID: 19888 Comm: syz.0.1705 Not tainted syzkaller #0 PREEMPT(full) [ 988.440177][T19888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 988.440191][T19888] Call Trace: [ 988.440199][T19888] [ 988.440208][T19888] dump_stack_lvl+0x100/0x190 [ 988.440241][T19888] should_fail_ex.cold+0x5/0xa [ 988.440268][T19888] _copy_to_user+0x32/0xd0 [ 988.440309][T19888] simple_read_from_buffer+0xcb/0x170 [ 988.440350][T19888] proc_fail_nth_read+0x1af/0x230 [ 988.440383][T19888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.440417][T19888] ? rw_verify_area+0xce/0x6d0 [ 988.440450][T19888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.440482][T19888] vfs_read+0x1e4/0xb40 [ 988.440522][T19888] ? __pfx_vfs_read+0x10/0x10 [ 988.440558][T19888] ? __fget_files+0x215/0x3d0 [ 988.440585][T19888] ? __fget_files+0x21f/0x3d0 [ 988.440614][T19888] ksys_read+0x12a/0x250 [ 988.440635][T19888] ? __pfx_ksys_read+0x10/0x10 [ 988.440664][T19888] do_syscall_64+0x115/0x840 [ 988.440693][T19888] ? clear_bhb_loop+0x40/0x90 [ 988.440722][T19888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.440746][T19888] RIP: 0033:0x7f119a35e6ce [ 988.440765][T19888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 988.440789][T19888] RSP: 002b:00007f119b23cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 988.440823][T19888] RAX: ffffffffffffffda RBX: 00007f119b23d6c0 RCX: 00007f119a35e6ce [ 988.440838][T19888] RDX: 000000000000000f RSI: 00007f119b23d0a0 RDI: 0000000000000006 [ 988.440852][T19888] RBP: 00007f119b23d090 R08: 0000000000000000 R09: 0000000000000000 [ 988.440897][T19888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.440911][T19888] R13: 00007f119a6263f8 R14: 00007f119a626360 R15: 00007fff46af47d8 [ 988.440941][T19888] [ 988.666605][T19892] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 993.315588][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.325915][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.177089][T19960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 995.241196][T19960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 995.296657][T19960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 995.373663][T19960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 995.430496][T19960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 995.536078][T19960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 995.571413][T19960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 995.606215][T19960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 995.632737][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 997.311823][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 997.391897][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 997.552450][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 999.391957][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 999.473013][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 999.632271][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 1001.712399][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 1005.508556][T20128] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input37 [ 1006.914707][T20148] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input38 [ 1011.896134][T20222] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1017.484937][T20300] sysfs_service_op_store: Client not running :-5: [ 1028.588246][T20446] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1044.908739][T20677] netlink: 318 bytes leftover after parsing attributes in process `syz.3.1820'. [ 1054.757653][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.766432][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.669841][T20832] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1062.749368][T20920] bonding: no command found in bonding_masters - use +ifname or -ifname [ 1069.433648][T21025] bonding: no command found in bonding_masters - use +ifname or -ifname [ 1103.874967][ T30] audit: type=1800 audit(1784955130.417:10): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1932" name="lu_gp_id" dev="configfs" ino=192820 res=0 errno=0 [ 1104.819381][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1930'. [ 1105.652796][T21556] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input39 [ 1109.148069][ T30] audit: type=1800 audit(1784955135.687:11): pid=21608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1943" name="lu_gp_id" dev="configfs" ino=193617 res=0 errno=0 [ 1112.187400][T21663] can: request_module (can-proto-0) failed. [ 1112.573862][T21669] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1950'. [ 1115.020052][ T30] audit: type=1800 audit(1784955141.557:12): pid=21694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1955" name="lu_gp_id" dev="configfs" ino=194779 res=0 errno=0 [ 1115.070871][T21698] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input40 [ 1116.193608][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.203513][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.310310][T21739] can: request_module (can-proto-0) failed. [ 1118.737845][T21762] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1963'. [ 1120.186737][T21773] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input41 [ 1123.814530][T21841] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1978'. [ 1125.656626][T21861] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 1126.620999][T21874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 1128.076119][T21897] openvswitch: netlink: Flow key attribute not present in set flow. [ 1132.563207][T21965] FAULT_INJECTION: forcing a failure. [ 1132.563207][T21965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1132.658793][T21965] CPU: 0 UID: 0 PID: 21965 Comm: syz.0.1996 Not tainted syzkaller #0 PREEMPT(full) [ 1132.658832][T21965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1132.658847][T21965] Call Trace: [ 1132.658854][T21965] [ 1132.658863][T21965] dump_stack_lvl+0x100/0x190 [ 1132.658897][T21965] should_fail_ex.cold+0x5/0xa [ 1132.658924][T21965] _copy_from_user+0x2e/0xd0 [ 1132.658963][T21965] copy_msghdr_from_user+0x9f/0x4c0 [ 1132.658995][T21965] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1132.659033][T21965] ___sys_sendmsg+0x106/0x1e0 [ 1132.659058][T21965] ? __pfx____sys_sendmsg+0x10/0x10 [ 1132.659080][T21965] ? __lock_acquire+0x49f/0x1a40 [ 1132.659119][T21965] ? get_pid_task+0x106/0x250 [ 1132.659179][T21965] __sys_sendmsg+0x160/0x210 [ 1132.659211][T21965] ? __pfx___sys_sendmsg+0x10/0x10 [ 1132.659257][T21965] do_syscall_64+0x115/0x840 [ 1132.659287][T21965] ? clear_bhb_loop+0x40/0x90 [ 1132.659316][T21965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.659339][T21965] RIP: 0033:0x7f119a39de99 [ 1132.659359][T21965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.659382][T21965] RSP: 002b:00007f119b27f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1132.659404][T21965] RAX: ffffffffffffffda RBX: 00007f119a626180 RCX: 00007f119a39de99 [ 1132.659419][T21965] RDX: 0000000000008020 RSI: 0000200000001900 RDI: 0000000000000004 [ 1132.659434][T21965] RBP: 00007f119b27f090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.659448][T21965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.659461][T21965] R13: 00007f119a626218 R14: 00007f119a626180 R15: 00007fff46af47d8 [ 1132.659490][T21965] [ 1133.417181][T21972] FAULT_INJECTION: forcing a failure. [ 1133.417181][T21972] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1133.452514][T21972] CPU: 0 UID: 0 PID: 21972 Comm: syz.3.1998 Not tainted syzkaller #0 PREEMPT(full) [ 1133.452548][T21972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1133.452562][T21972] Call Trace: [ 1133.452570][T21972] [ 1133.452579][T21972] dump_stack_lvl+0x100/0x190 [ 1133.452616][T21972] should_fail_ex.cold+0x5/0xa [ 1133.452643][T21972] get_futex_key+0x295/0x14f0 [ 1133.452670][T21972] ? __pfx_get_futex_key+0x10/0x10 [ 1133.452693][T21972] ? lock_acquire+0x1b9/0x370 [ 1133.452738][T21972] futex_wake+0xf4/0x5e0 [ 1133.452771][T21972] ? __pfx_futex_wake+0x10/0x10 [ 1133.452802][T21972] ? find_held_lock+0x2b/0x80 [ 1133.452831][T21972] ? exit_mm_release+0x19/0x30 [ 1133.452891][T21972] do_futex+0x2b2/0x440 [ 1133.452918][T21972] ? __pfx_do_futex+0x10/0x10 [ 1133.452941][T21972] ? __might_fault+0xc5/0x140 [ 1133.452981][T21972] mm_release+0x24a/0x2f0 [ 1133.453006][T21972] do_exit+0x707/0x2ae0 [ 1133.453043][T21972] ? __pfx_do_exit+0x10/0x10 [ 1133.453074][T21972] ? do_raw_spin_lock+0x128/0x260 [ 1133.453101][T21972] ? find_held_lock+0x2b/0x80 [ 1133.453129][T21972] ? get_signal+0x7e0/0x21e0 [ 1133.453157][T21972] do_group_exit+0xd5/0x2a0 [ 1133.453192][T21972] get_signal+0x1ec7/0x21e0 [ 1133.453227][T21972] ? __pfx_get_signal+0x10/0x10 [ 1133.453255][T21972] ? do_futex+0x190/0x440 [ 1133.453282][T21972] arch_do_signal_or_restart+0x91/0x7a0 [ 1133.453333][T21972] ? snd_pcm_oss_ioctl+0x2b6/0x3790 [ 1133.453411][T21972] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1133.453466][T21972] exit_to_user_mode_loop+0x139/0x6f0 [ 1133.453495][T21972] ? rcu_is_watching+0x12/0xc0 [ 1133.453525][T21972] do_syscall_64+0x652/0x840 [ 1133.453552][T21972] ? clear_bhb_loop+0x40/0x90 [ 1133.453580][T21972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.453610][T21972] RIP: 0033:0x7f01dd39de99 [ 1133.453629][T21972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.453652][T21972] RSP: 002b:00007f01de1af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1133.453674][T21972] RAX: fffffffffffffe00 RBX: 00007f01dd625fa8 RCX: 00007f01dd39de99 [ 1133.453690][T21972] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f01dd625fa8 [ 1133.453704][T21972] RBP: 00007f01dd625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.453718][T21972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.453731][T21972] R13: 00007f01dd626038 R14: 00007ffe83645d20 R15: 00007ffe83645e08 [ 1133.453760][T21972] [ 1136.006015][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 1138.773763][T22052] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input43 [ 1139.330708][T22068] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input44 [ 1143.141221][T22081] Process accounting resumed [ 1144.258843][T22122] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input45 [ 1144.642609][T22119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1144.705735][T22119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1144.772947][T22119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1144.836239][T22119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1146.352825][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 1146.752310][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 1146.832772][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 1146.912462][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 1147.568166][T22182] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input46 [ 1148.211480][T22190] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input47 [ 1149.063323][T22205] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1157.595976][T22337] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input48 [ 1162.920267][T22411] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input49 [ 1163.265768][T22422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2343919183 (2343919183 ns) > initial count (2343858270 ns). Using initial count to start timer. [ 1168.487629][T22510] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1172.764610][T21476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.885659][T14617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1172.906736][T14617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1172.918905][T14617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1172.940880][T14617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1172.949260][T14617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1173.220008][T21476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.379874][T21476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.747946][T21476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.992430][T22165] Bluetooth: hci0: command tx timeout [ 1175.719057][T21476] bridge_slave_1: left allmulticast mode [ 1175.733971][T21476] bridge_slave_1: left promiscuous mode [ 1175.752234][T21476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.770500][T21476] bridge_slave_0: left allmulticast mode [ 1175.783238][T21476] bridge_slave_0: left promiscuous mode [ 1175.795334][T21476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.230068][T21476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.253804][T21476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.276732][T21476] bond0 (unregistering): Released all slaves [ 1176.791404][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1177.072156][T22165] Bluetooth: hci0: command tx timeout [ 1177.199635][T21476] hsr_slave_0: left promiscuous mode [ 1177.245656][T21476] hsr_slave_1: left promiscuous mode [ 1177.270583][T22638] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input50 [ 1177.294054][T21476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.330736][T21476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.374703][T21476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.409751][T21476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.487910][T21476] veth1_macvtap: left promiscuous mode [ 1177.523820][T21476] veth0_macvtap: left promiscuous mode [ 1177.550827][T21476] veth1_vlan: left promiscuous mode [ 1177.584706][T22643] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51 [ 1177.597693][T21476] veth0_vlan: left promiscuous mode [ 1177.636580][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.644511][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.394714][T21476] team0 (unregistering): Port device team_slave_1 removed [ 1178.437777][T21476] team0 (unregistering): Port device team_slave_0 removed [ 1178.746682][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1179.153813][T22165] Bluetooth: hci0: command tx timeout [ 1179.550114][T22675] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2343919183 (2343919183 ns) > initial count (2343858270 ns). Using initial count to start timer. [ 1180.144881][T22572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.163690][T22572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.188932][T22572] bridge_slave_0: entered allmulticast mode [ 1180.218889][T22572] bridge_slave_0: entered promiscuous mode [ 1180.260711][T22572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.300280][T22572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.335728][T22572] bridge_slave_1: entered allmulticast mode [ 1180.370090][T22572] bridge_slave_1: entered promiscuous mode [ 1180.858672][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1180.907547][T22572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.975938][T22572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.231967][T22165] Bluetooth: hci0: command tx timeout [ 1181.308520][T22572] team0: Port device team_slave_0 added [ 1181.364639][T22572] team0: Port device team_slave_1 added [ 1181.770521][T22572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.797980][T22572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.879191][T22572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.985209][T22572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.005322][T22572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.068995][T22572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.807607][T22572] hsr_slave_0: entered promiscuous mode [ 1182.834733][T22572] hsr_slave_1: entered promiscuous mode [ 1182.850639][T22572] debugfs: 'hsr0' already exists in 'hsr' [ 1182.857939][T22572] Cannot create hsr debugfs directory [ 1182.976321][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1187.373646][T22797] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(320.8192.104), cmd(4) [ 1187.589992][T22807] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 1189.114084][T22572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1189.150451][T22572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1189.348993][T22572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1189.378554][T22572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1189.406823][T22572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1189.456364][T22572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1189.729613][T22572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1189.761172][T22572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1192.954637][T22572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.024540][T22572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.209434][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.216722][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.361461][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.368717][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.988276][T22947] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input53 [ 1195.019036][T22949] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input54 [ 1196.500436][T22572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.843700][T22572] veth0_vlan: entered promiscuous mode [ 1196.939673][T22572] veth1_vlan: entered promiscuous mode [ 1197.697378][T22572] veth0_macvtap: entered promiscuous mode [ 1198.018264][T22572] veth1_macvtap: entered promiscuous mode [ 1198.918487][T22572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.979056][T22572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.045593][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.095136][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.146565][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.223174][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.564052][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.600216][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.184207][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.222563][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.436159][T23070] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input55 [ 1213.276543][T23232] snd_virmidi snd_virmidi.0: control 61678:5:9:y:20389 is already present [ 1225.486671][T23425] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input57 [ 1235.553570][T23581] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input58 [ 1239.079567][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.088034][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.703295][T23731] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input59 [ 1245.256963][T23736] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input60 [ 1246.190944][T23763] FAULT_INJECTION: forcing a failure. [ 1246.190944][T23763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.292605][T23763] CPU: 0 UID: 0 PID: 23763 Comm: syz.3.2214 Not tainted syzkaller #0 PREEMPT(full) [ 1246.292637][T23763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1246.292651][T23763] Call Trace: [ 1246.292659][T23763] [ 1246.292668][T23763] dump_stack_lvl+0x100/0x190 [ 1246.292701][T23763] should_fail_ex.cold+0x5/0xa [ 1246.292728][T23763] _copy_from_user+0x2e/0xd0 [ 1246.292767][T23763] memdup_user+0x6b/0xe0 [ 1246.292830][T23763] __x64_sys_kexec_load+0x18e/0x230 [ 1246.292878][T23763] do_syscall_64+0x115/0x840 [ 1246.292907][T23763] ? clear_bhb_loop+0x40/0x90 [ 1246.292936][T23763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.292960][T23763] RIP: 0033:0x7f01dd39de99 [ 1246.292979][T23763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.293002][T23763] RSP: 002b:00007f01db5d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1246.293025][T23763] RAX: ffffffffffffffda RBX: 00007f01dd626270 RCX: 00007f01dd39de99 [ 1246.293040][T23763] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 1246.293054][T23763] RBP: 00007f01db5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.293068][T23763] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1246.293082][T23763] R13: 00007f01dd626308 R14: 00007f01dd626270 R15: 00007ffe83645e08 [ 1246.293111][T23763] [ 1246.926029][T23757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1246.933399][T23757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1246.976239][T23757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1247.008693][T23757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1247.043762][T23757] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1247.070454][T23757] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1248.991702][T22165] Bluetooth: hci3: command 0x0406 tx timeout [ 1248.997814][T22165] Bluetooth: hci1: command 0x0406 tx timeout [ 1249.004007][T14617] Bluetooth: hci2: command 0x0c1a tx timeout [ 1249.072057][T23803] Bluetooth: hci0: command 0x0c1a tx timeout [ 1251.152549][T23803] Bluetooth: hci0: command 0x0c1a tx timeout [ 1253.236173][T23803] Bluetooth: hci0: command 0x0c1a tx timeout [ 1258.327651][T23957] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input61 [ 1258.407174][T23958] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1260.318519][T23982] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input62 [ 1262.538904][T24014] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input63 [ 1264.214917][T24035] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input64 [ 1264.862633][T24048] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1266.515630][T24073] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input65 [ 1270.052854][T24133] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input66 [ 1271.374494][T24161] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1275.204213][T24213] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input67 [ 1275.381466][T24217] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input68 [ 1285.216032][T24371] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1285.269420][T24371] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1285.315156][T24371] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1285.368812][T24371] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1285.640524][T24392] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input69 [ 1286.752697][T24318] Bluetooth: hci2: command 0x0c1a tx timeout [ 1287.314784][T24318] Bluetooth: hci1: command 0x0406 tx timeout [ 1287.391736][T24318] Bluetooth: hci0: command 0x0c1a tx timeout [ 1287.398140][T24318] Bluetooth: hci3: command 0x0406 tx timeout [ 1288.604850][T24445] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input70 [ 1289.657015][T24468] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input71 [ 1291.707670][T24505] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1293.850653][T24538] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1295.284651][T24549] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input72 [ 1295.968039][T24302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1295.984828][T24302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1295.996538][T24302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1296.015526][T24302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1296.030399][T24302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1297.027936][T24352] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.408833][T24352] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.655833][T24352] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.017163][T24352] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.113530][T24302] Bluetooth: hci4: command tx timeout [ 1298.512180][T24603] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1299.432453][T24352] batadv0: left allmulticast mode [ 1299.438033][T24352] batadv0: left promiscuous mode [ 1299.445996][T24352] bridge0: port 3(batadv0) entered disabled state [ 1299.456242][T24352] bridge_slave_1: left allmulticast mode [ 1299.463227][T24352] bridge_slave_1: left promiscuous mode [ 1299.469724][T24352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.485272][T24352] bridge_slave_0: left allmulticast mode [ 1299.492744][T24352] bridge_slave_0: left promiscuous mode [ 1299.498634][T24352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.777540][T24352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.789875][T24352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.805078][T24352] bond0 (unregistering): Released all slaves [ 1300.193269][T24302] Bluetooth: hci4: command tx timeout [ 1300.516923][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.529351][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.826420][T24352] hsr_slave_0: left promiscuous mode [ 1300.868398][T24352] hsr_slave_1: left promiscuous mode [ 1300.897622][T24352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.907155][T24627] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1300.948487][T24352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.972455][T24352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.990445][T24352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.051036][T24352] veth1_macvtap: left promiscuous mode [ 1301.088465][T24352] veth0_macvtap: left promiscuous mode [ 1301.126599][T24352] veth1_vlan: left promiscuous mode [ 1301.158425][T24352] veth0_vlan: left promiscuous mode [ 1301.168734][T24642] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1301.744066][T24352] team0 (unregistering): Port device team_slave_1 removed [ 1301.767088][T24352] team0 (unregistering): Port device team_slave_0 removed [ 1302.020861][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1302.272688][T24302] Bluetooth: hci4: command tx timeout [ 1303.481445][T24565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.501304][T24565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.530516][T24565] bridge_slave_0: entered allmulticast mode [ 1303.558160][T24565] bridge_slave_0: entered promiscuous mode [ 1303.666732][T24565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.699551][T24565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.738389][T24565] bridge_slave_1: entered allmulticast mode [ 1303.766547][T24565] bridge_slave_1: entered promiscuous mode [ 1304.148133][T24565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.230203][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1304.299690][T24565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.351725][T24302] Bluetooth: hci4: command tx timeout [ 1304.423079][T24684] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1304.850350][T24565] team0: Port device team_slave_0 added [ 1304.888051][T24565] team0: Port device team_slave_1 added [ 1305.253916][T24565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.289830][T24565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.367165][T24565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.535805][T24565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.550987][T24565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.606083][T24565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.410221][T24565] hsr_slave_0: entered promiscuous mode [ 1306.426574][T24565] hsr_slave_1: entered promiscuous mode [ 1306.444356][T24565] debugfs: 'hsr0' already exists in 'hsr' [ 1306.465078][T24565] Cannot create hsr debugfs directory [ 1306.494011][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1308.345765][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1310.425737][T24786] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1311.780134][T24565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1311.836916][T24565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1311.876595][T24565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1311.936951][T24565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1311.980247][T24565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1312.037900][T24565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1312.103603][T24565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1312.170394][T24565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1314.518741][T24565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.647136][T24565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.728681][T24307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.735914][T24307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.876512][T24307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.883782][T24307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.763839][T24565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.627876][T24565] veth0_vlan: entered promiscuous mode [ 1321.966495][T24565] veth1_vlan: entered promiscuous mode [ 1322.083556][T24565] veth0_macvtap: entered promiscuous mode [ 1322.244855][T24565] veth1_macvtap: entered promiscuous mode [ 1322.437672][T24994] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input73 [ 1322.775144][T24565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.108998][T24565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.446782][T24351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.470767][T24351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.620218][T24351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.630015][T24351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.530596][T24352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.580128][T24352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.844648][T24508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.878160][T24508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.209905][T25067] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input74 [ 1332.500823][T25145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1332.544324][T25145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1332.563819][T25145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1332.585459][T25145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1332.599122][T25145] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1332.617085][T25145] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1333.324758][T25158] nvme_fabrics: missing parameter 'transport=%s' [ 1333.361340][T25158] nvme_fabrics: missing parameter 'nqn=%s' [ 1334.270565][T24302] Bluetooth: hci1: command 0x0406 tx timeout [ 1334.591041][T24302] Bluetooth: hci0: command 0x0c1a tx timeout [ 1334.598104][T24432] Bluetooth: hci3: command 0x0406 tx timeout [ 1334.676776][T24432] Bluetooth: hci4: command 0x0c1a tx timeout [ 1336.749451][T24432] Bluetooth: hci4: command 0x0c1a tx timeout [ 1338.828730][T24432] Bluetooth: hci4: command 0x0c1a tx timeout [ 1353.704516][T25499] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1355.790208][T25529] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input77 [ 1358.173132][T25573] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1360.121432][T25604] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1360.962148][T25611] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input78 [ 1361.952944][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.962981][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.043878][T25667] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input79 [ 1364.487776][T25677] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1365.031341][T25687] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input80 [ 1373.705560][T25821] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1376.156537][T25860] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input81 [ 1378.730541][T25895] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.262144.67108862), cmd(12) [ 1379.339215][T25907] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input82 [ 1380.866789][T25932] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1383.516101][T25969] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input83 [ 1384.225427][T25977] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input84 [ 1387.531534][T26028] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input85 [ 1389.169276][T26062] FAULT_INJECTION: forcing a failure. [ 1389.169276][T26062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1389.235154][T26062] CPU: 0 UID: 0 PID: 26062 Comm: syz.3.2479 Not tainted syzkaller #0 PREEMPT(full) [ 1389.235186][T26062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1389.235200][T26062] Call Trace: [ 1389.235209][T26062] [ 1389.235217][T26062] dump_stack_lvl+0x100/0x190 [ 1389.235251][T26062] should_fail_ex.cold+0x5/0xa [ 1389.235278][T26062] _copy_to_user+0x32/0xd0 [ 1389.235318][T26062] fs_name+0x25e/0x4a0 [ 1389.235348][T26062] __x64_sys_sysfs+0xe6/0x120 [ 1389.235377][T26062] do_syscall_64+0x115/0x840 [ 1389.235406][T26062] ? clear_bhb_loop+0x40/0x90 [ 1389.235434][T26062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.235458][T26062] RIP: 0033:0x7f1a5019de99 [ 1389.235476][T26062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.235499][T26062] RSP: 002b:00007f1a51006028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 1389.235522][T26062] RAX: ffffffffffffffda RBX: 00007f1a50426360 RCX: 00007f1a5019de99 [ 1389.235537][T26062] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 1389.235551][T26062] RBP: 00007f1a51006090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.235565][T26062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.235578][T26062] R13: 00007f1a504263f8 R14: 00007f1a50426360 R15: 00007fffea5bd998 [ 1389.235615][T26062] [ 1392.045628][T24294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.384650][T24302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1392.407320][T24302] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1392.416577][T24302] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1392.429243][T24302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1392.440914][T24302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1392.551194][T24294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.929853][T24294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.299669][T24294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.437882][T24294] bridge_slave_1: left allmulticast mode [ 1394.477018][T24294] bridge_slave_1: left promiscuous mode [ 1394.508584][T24302] Bluetooth: hci2: command tx timeout [ 1394.533066][T24294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.604324][T24294] bridge_slave_0: left allmulticast mode [ 1394.638140][T24294] bridge_slave_0: left promiscuous mode [ 1394.675228][T24294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.174289][T24294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.202423][T24294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.223592][T24294] bond0 (unregistering): Released all slaves [ 1395.828002][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1396.069054][T24294] hsr_slave_0: left promiscuous mode [ 1396.081961][T24294] hsr_slave_1: left promiscuous mode [ 1396.088961][T24294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.096515][T24294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.105933][T24294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.115289][T24294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.129505][T24294] veth1_macvtap: left promiscuous mode [ 1396.135183][T24294] veth0_macvtap: left promiscuous mode [ 1396.141884][T24294] veth1_vlan: left promiscuous mode [ 1396.147302][T24294] veth0_vlan: left promiscuous mode [ 1396.394519][T24294] team0 (unregistering): Port device team_slave_1 removed [ 1396.417140][T24294] team0 (unregistering): Port device team_slave_0 removed [ 1396.587583][T24302] Bluetooth: hci2: command tx timeout [ 1398.667905][T24302] Bluetooth: hci2: command tx timeout [ 1398.898849][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1399.015286][T26099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.024188][T26099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.036276][T26099] bridge_slave_0: entered allmulticast mode [ 1399.045883][T26099] bridge_slave_0: entered promiscuous mode [ 1399.105686][T26099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.119621][T26099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.127099][T26099] bridge_slave_1: entered allmulticast mode [ 1399.139916][T26099] bridge_slave_1: entered promiscuous mode [ 1399.390420][T26099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.459375][T26099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.700447][T26099] team0: Port device team_slave_0 added [ 1399.765257][T26099] team0: Port device team_slave_1 added [ 1399.944781][T26099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.982338][T26099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.072573][T26099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1400.120664][T26207] FAULT_INJECTION: forcing a failure. [ 1400.120664][T26207] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1400.175438][T26099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1400.186702][T26207] CPU: 0 UID: 0 PID: 26207 Comm: syz.3.2494 Not tainted syzkaller #0 PREEMPT(full) [ 1400.186744][T26207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1400.186758][T26207] Call Trace: [ 1400.186766][T26207] [ 1400.186774][T26207] dump_stack_lvl+0x100/0x190 [ 1400.186808][T26207] should_fail_ex.cold+0x5/0xa [ 1400.186835][T26207] get_futex_key+0xf74/0x14f0 [ 1400.186862][T26207] ? __pfx_get_futex_key+0x10/0x10 [ 1400.186885][T26207] ? lock_acquire+0x1b9/0x370 [ 1400.186930][T26207] futex_wake+0xf4/0x5e0 [ 1400.186963][T26207] ? __pfx_futex_wake+0x10/0x10 [ 1400.186993][T26207] ? find_held_lock+0x2b/0x80 [ 1400.187023][T26207] ? exit_mm_release+0x19/0x30 [ 1400.187058][T26207] do_futex+0x2b2/0x440 [ 1400.187084][T26207] ? __pfx_do_futex+0x10/0x10 [ 1400.187107][T26207] ? __might_fault+0xc5/0x140 [ 1400.187140][T26207] mm_release+0x24a/0x2f0 [ 1400.187165][T26207] do_exit+0x707/0x2ae0 [ 1400.187201][T26207] ? __pfx_do_exit+0x10/0x10 [ 1400.187233][T26207] ? do_raw_spin_lock+0x128/0x260 [ 1400.187258][T26207] ? find_held_lock+0x2b/0x80 [ 1400.187286][T26207] ? get_signal+0x7e0/0x21e0 [ 1400.187314][T26207] do_group_exit+0xd5/0x2a0 [ 1400.187349][T26207] get_signal+0x1ec7/0x21e0 [ 1400.187389][T26207] ? __pfx_get_signal+0x10/0x10 [ 1400.187417][T26207] ? do_futex+0x190/0x440 [ 1400.187445][T26207] arch_do_signal_or_restart+0x91/0x7a0 [ 1400.187487][T26207] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1400.187542][T26207] exit_to_user_mode_loop+0x139/0x6f0 [ 1400.187565][T26207] ? rcu_is_watching+0x12/0xc0 [ 1400.187596][T26207] do_syscall_64+0x652/0x840 [ 1400.187625][T26207] ? clear_bhb_loop+0x40/0x90 [ 1400.187654][T26207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.187678][T26207] RIP: 0033:0x7f1a5019de99 [ 1400.187697][T26207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.187725][T26207] RSP: 002b:00007f1a510690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1400.187747][T26207] RAX: fffffffffffffe00 RBX: 00007f1a50426098 RCX: 00007f1a5019de99 [ 1400.187762][T26207] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1a50426098 [ 1400.187777][T26207] RBP: 00007f1a50426090 R08: 0000000000000000 R09: 0000000000000000 [ 1400.187791][T26207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.187805][T26207] R13: 00007f1a50426128 R14: 00007fffea5bd8b0 R15: 00007fffea5bd998 [ 1400.187834][T26207] [ 1400.449749][T26099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.476022][T26099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.522670][T26099] hsr_slave_0: entered promiscuous mode [ 1400.529319][T26099] hsr_slave_1: entered promiscuous mode [ 1400.823182][T24302] Bluetooth: hci2: command tx timeout [ 1404.578539][T26284] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input86 [ 1404.702169][T26099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1404.786390][T26099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1405.106108][T26099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1405.154051][T26099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1405.301247][T26099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1405.331321][T26099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1405.403816][T26300] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input87 [ 1405.512153][T26099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1405.561785][T26099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1406.351795][T26324] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1407.572470][T26347] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1408.732456][T26099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.859778][T26099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.025322][T24294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.032564][T24294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.269820][T24294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.277063][T24294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.358262][T26411] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input88 [ 1413.287175][T26099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.004147][T26099] veth0_vlan: entered promiscuous mode [ 1414.376908][T26099] veth1_vlan: entered promiscuous mode [ 1415.665145][T26099] veth0_macvtap: entered promiscuous mode [ 1415.848575][T26099] veth1_macvtap: entered promiscuous mode [ 1416.321164][T26487] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1416.429888][T26099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.541596][T26099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.704965][T26073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.731443][T26073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.828004][T26073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.861211][T26073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.453712][T24307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.496729][T24307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.316767][T24352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.351310][T24352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.396094][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.406260][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.247304][T26666] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1428.335407][T26676] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1430.233972][T26704] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1430.284707][T26704] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1434.359588][T26759] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1435.185988][T26767] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input89 [ 1435.523123][T26778] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1441.206310][T26863] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input90 [ 1444.424571][T26920] vivid-007: ================= START STATUS ================= [ 1444.651756][T26920] vivid-007: Generate PTS: true [ 1444.788971][T26920] vivid-007: Generate SCR: true [ 1444.850478][T26920] tpg source WxH: 320x240 (Y'CbCr) [ 1444.921132][T26920] tpg field: 1 [ 1444.968058][T26920] tpg crop: (0,0)/320x240 [ 1445.012044][T26920] tpg compose: (0,0)/320x240 [ 1445.043016][T26920] tpg colorspace: 8 [ 1445.070691][T26920] tpg transfer function: 0/0 [ 1445.105153][T26920] tpg Y'CbCr encoding: 0/0 [ 1445.153338][T26920] tpg quantization: 0/0 [ 1445.179328][T26920] tpg RGB range: 0/2 [ 1445.200078][T26920] vivid-007: ================== END STATUS ================== [ 1451.093340][T27004] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input91 [ 1451.849980][T27019] vivid-007: ================= START STATUS ================= [ 1451.941734][T27019] vivid-007: Generate PTS: true [ 1452.022584][T27019] vivid-007: Generate SCR: true [ 1452.095862][T27019] tpg source WxH: 320x240 (Y'CbCr) [ 1452.160623][T27019] tpg field: 1 [ 1452.190825][T27019] tpg crop: (0,0)/320x240 [ 1452.266086][T27019] tpg compose: (0,0)/320x240 [ 1452.315194][T27019] tpg colorspace: 8 [ 1452.348154][T27019] tpg transfer function: 0/0 [ 1452.380730][T27019] tpg Y'CbCr encoding: 0/0 [ 1452.414055][T27019] tpg quantization: 0/0 [ 1452.444446][T27019] tpg RGB range: 0/2 [ 1452.470749][T27019] vivid-007: ================== END STATUS ================== [ 1460.372129][T27150] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1463.436590][T27165] NFSD: Failed to start, no listeners configured. [ 1463.825464][T27169] NFSD: Failed to start, no listeners configured. [ 1464.875373][T27200] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1467.297795][T27246] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1471.757165][T27307] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1473.289866][T27317] NFSD: Failed to start, no listeners configured. [ 1474.012033][T27321] NFSD: Failed to start, no listeners configured. [ 1475.930541][T27370] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1481.397870][T27451] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input92 [ 1484.470605][T27489] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1484.831262][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.839253][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.270773][T27608] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1499.581377][T27735] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1505.824728][T27820] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input93 [ 1506.154667][T27828] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1510.212471][T27881] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input94 [ 1510.286123][T27883] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input95 [ 1517.639065][T24302] Bluetooth: hci2: command 0x0406 tx timeout [ 1522.418274][T28061] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input96 [ 1530.025924][T28172] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input97 [ 1531.075388][T28192] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input98 [ 1532.536969][T28218] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1538.933582][T28320] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1543.116215][T28380] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input99 [ 1545.896114][T28434] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1546.278728][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.286266][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.580163][T28449] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input100 [ 1553.360896][T28535] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input101 [ 1557.943851][T28614] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input102 [ 1562.198521][T28680] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1569.019966][T28790] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input103 [ 1573.028205][T28855] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1574.011178][T28865] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1580.965143][T28977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1582.362632][T28996] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1582.636148][T29006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2343919183 (2343919183 ns) > initial count (2343858270 ns). Using initial count to start timer. [ 1591.323180][T29148] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2343919183 (2343919183 ns) > initial count (2343858270 ns). Using initial count to start timer. [ 1600.742607][T29289] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input104 [ 1600.986056][T29291] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1603.280698][T29319] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input105 [ 1605.745319][T29361] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input106 [ 1607.710311][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.722603][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.276422][T29405] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input107 [ 1610.775146][T29442] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input108 [ 1615.812521][T29528] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input109 [ 1621.605896][T29624] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input111 [ 1626.723748][T29710] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input112 [ 1643.724867][T29987] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1647.214616][T30035] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input113 [ 1652.035674][T30116] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input114 [ 1656.082968][T30188] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1657.750532][T30211] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input115 [ 1663.782663][T30317] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1669.153517][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.161774][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.368288][T30425] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1674.240052][T30478] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input116 [ 1682.985866][T30616] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input117 [ 1689.150208][T30705] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input118 [ 1704.545774][T30950] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1708.326099][T31016] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1710.293557][T31054] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1719.025140][T31178] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input120 [ 1722.945092][T31248] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 1730.394354][T31352] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input121 [ 1730.593058][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.601713][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.542115][T31364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1731.556682][T31364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1731.566197][T31364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1731.594071][T31364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1731.603061][T31364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1732.598040][T24326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.052076][T24326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.496801][T24326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.707904][T31364] Bluetooth: hci3: command tx timeout [ 1733.824438][T24326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.700039][T24326] bridge_slave_1: left allmulticast mode [ 1735.729189][T24326] bridge_slave_1: left promiscuous mode [ 1735.752340][T24326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.775421][T24326] bridge_slave_0: left allmulticast mode [ 1735.787744][T31364] Bluetooth: hci3: command tx timeout [ 1735.801912][T24326] bridge_slave_0: left promiscuous mode [ 1735.814526][T24326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.271227][T24326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1736.300669][T24326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1736.325066][T24326] bond0 (unregistering): Released all slaves [ 1736.484087][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1737.198290][T24326] hsr_slave_0: left promiscuous mode [ 1737.204400][T24326] hsr_slave_1: left promiscuous mode [ 1737.212163][T24326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1737.219865][T24326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1737.230349][T24326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1737.237923][T24326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1737.252663][T24326] veth1_macvtap: left promiscuous mode [ 1737.258935][T24326] veth0_macvtap: left promiscuous mode [ 1737.264598][T24326] veth1_vlan: left promiscuous mode [ 1737.271085][T24326] veth0_vlan: left promiscuous mode [ 1737.527070][T24326] team0 (unregistering): Port device team_slave_1 removed [ 1737.552618][T24326] team0 (unregistering): Port device team_slave_0 removed [ 1737.867608][T31364] Bluetooth: hci3: command tx timeout [ 1738.159629][T31363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.171734][T31363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.219422][T31363] bridge_slave_0: entered allmulticast mode [ 1738.289073][T31363] bridge_slave_0: entered promiscuous mode [ 1738.345672][T31363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.386197][T31363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.449084][T31363] bridge_slave_1: entered allmulticast mode [ 1738.504077][T31363] bridge_slave_1: entered promiscuous mode [ 1738.689262][T31363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1738.745189][T31363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.274412][T31363] team0: Port device team_slave_0 added [ 1739.403231][T31363] team0: Port device team_slave_1 added [ 1739.772184][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1739.810757][T31363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.821537][T31363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.852633][T31363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.950383][T31364] Bluetooth: hci3: command tx timeout [ 1740.016699][T31363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.035247][T31363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.065136][T31363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.562610][T31363] hsr_slave_0: entered promiscuous mode [ 1740.579850][T31363] hsr_slave_1: entered promiscuous mode [ 1740.599371][T31363] debugfs: 'hsr0' already exists in 'hsr' [ 1740.605159][T31363] Cannot create hsr debugfs directory [ 1742.455063][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1743.654843][T31532] FAULT_INJECTION: forcing a failure. [ 1743.654843][T31532] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.654897][T31532] CPU: 0 UID: 0 PID: 31532 Comm: syz.2.3145 Tainted: G L syzkaller #0 PREEMPT(full) [ 1743.654930][T31532] Tainted: [L]=SOFTLOCKUP [ 1743.654938][T31532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1743.654952][T31532] Call Trace: [ 1743.654959][T31532] [ 1743.654967][T31532] dump_stack_lvl+0x100/0x190 [ 1743.655000][T31532] should_fail_ex.cold+0x5/0xa [ 1743.655022][T31532] ? __pfx_debug_object_activate+0x10/0x10 [ 1743.655161][T31532] should_failslab+0xc2/0x120 [ 1743.655196][T31532] __kmalloc_noprof+0xfc/0x820 [ 1743.655224][T31532] ? rcu_is_watching+0x12/0xc0 [ 1743.655252][T31532] ? bit_cursor+0x89f/0x1490 [ 1743.655319][T31532] bit_cursor+0x89f/0x1490 [ 1743.655352][T31532] ? __pfx_bit_cursor+0x10/0x10 [ 1743.655386][T31532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1743.655428][T31532] ? get_color+0x1da/0x450 [ 1743.655481][T31532] ? __pfx_bit_cursor+0x10/0x10 [ 1743.655504][T31532] fbcon_cursor+0x43c/0x5e0 [ 1743.655539][T31532] ? mark_lock+0xa00/0xa20 [ 1743.655579][T31532] hide_cursor+0x87/0x230 [ 1743.655632][T31532] do_con_write+0x224c/0x4a30 [ 1743.655667][T31532] ? __mutex_lock+0x26d/0x1bd0 [ 1743.655728][T31532] ? __pfx___mutex_lock+0x10/0x10 [ 1743.655756][T31532] ? do_raw_spin_lock+0x128/0x260 [ 1743.655782][T31532] ? __pfx_do_con_write+0x10/0x10 [ 1743.655828][T31532] con_write+0x23/0xb0 [ 1743.655860][T31532] n_tty_write+0x431/0x1160 [ 1743.655910][T31532] ? __pfx_n_tty_write+0x10/0x10 [ 1743.655945][T31532] ? __kasan_kmalloc+0xaa/0xb0 [ 1743.655975][T31532] ? __pfx_woken_wake_function+0x10/0x10 [ 1743.656002][T31532] ? rcu_is_watching+0x12/0xc0 [ 1743.656029][T31532] ? file_tty_write.isra.0+0x694/0x890 [ 1743.656058][T31532] ? kfree+0x1e5/0x6c0 [ 1743.656080][T31532] ? __pfx_n_tty_write+0x10/0x10 [ 1743.656119][T31532] file_tty_write.isra.0+0x4d2/0x890 [ 1743.656157][T31532] redirected_tty_write+0xd4/0x120 [ 1743.656193][T31532] vfs_write+0x6ac/0x1050 [ 1743.656215][T31532] ? __pfx_redirected_tty_write+0x10/0x10 [ 1743.656250][T31532] ? __pfx_vfs_write+0x10/0x10 [ 1743.656283][T31532] ? find_held_lock+0x2b/0x80 [ 1743.656335][T31532] ksys_write+0x12a/0x250 [ 1743.656356][T31532] ? __pfx_ksys_write+0x10/0x10 [ 1743.656385][T31532] do_syscall_64+0x115/0x840 [ 1743.656412][T31532] ? clear_bhb_loop+0x40/0x90 [ 1743.656440][T31532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.656464][T31532] RIP: 0033:0x7fc87e79de99 [ 1743.656483][T31532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.656505][T31532] RSP: 002b:00007fc87f658028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1743.656527][T31532] RAX: ffffffffffffffda RBX: 00007fc87ea25fa0 RCX: 00007fc87e79de99 [ 1743.656543][T31532] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1743.656557][T31532] RBP: 00007fc87f658090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.656571][T31532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.656585][T31532] R13: 00007fc87ea26038 R14: 00007fc87ea25fa0 R15: 00007fffb9792808 [ 1743.656615][T31532] [ 1744.796856][T31363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1744.804526][T31363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1744.955584][T31363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1744.972321][T31363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1744.973133][T31363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1744.983366][T31363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1745.215199][T31363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1745.227138][T31363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1748.893076][T31363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.046330][T31363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.249894][T24351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.257160][T24351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.477727][T24351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.477843][T24351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.643488][T31671] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input122 [ 1752.723854][T31692] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1753.875099][T31363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1754.638012][T31363] veth0_vlan: entered promiscuous mode [ 1755.340284][T31363] veth1_vlan: entered promiscuous mode [ 1755.756043][T31363] veth0_macvtap: entered promiscuous mode [ 1755.824592][T31363] veth1_macvtap: entered promiscuous mode [ 1755.922099][T31363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1755.965748][T31363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1756.054094][T24326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.110276][T24326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.184140][T24326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.269398][T24326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.066698][T24307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.103845][T24307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.472976][T26149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.499056][T26149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.302856][T31777] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1758.512769][T31778] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1761.144530][T31816] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1767.758182][T31914] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1769.436849][T31931] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input123 [ 1769.956127][T31952] FAULT_INJECTION: forcing a failure. [ 1769.956127][T31952] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.024181][T31952] CPU: 0 UID: 0 PID: 31952 Comm: syz.0.3186 Tainted: G L syzkaller #0 PREEMPT(full) [ 1770.024220][T31952] Tainted: [L]=SOFTLOCKUP [ 1770.024229][T31952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1770.024243][T31952] Call Trace: [ 1770.024251][T31952] [ 1770.024259][T31952] dump_stack_lvl+0x100/0x190 [ 1770.024293][T31952] should_fail_ex.cold+0x5/0xa [ 1770.024321][T31952] should_failslab+0xc2/0x120 [ 1770.024358][T31952] __kmalloc_cache_noprof+0x91/0x6c0 [ 1770.024384][T31952] ? refill_pi_state_cache+0x91/0x260 [ 1770.024422][T31952] refill_pi_state_cache+0x91/0x260 [ 1770.024454][T31952] futex_lock_pi+0x17d/0x7f0 [ 1770.024489][T31952] ? __pfx_futex_lock_pi+0x10/0x10 [ 1770.024523][T31952] ? __pfx___futex_wait+0x10/0x10 [ 1770.024579][T31952] ? __pfx_futex_wake_mark+0x10/0x10 [ 1770.024618][T31952] ? __do_sys_brk+0x43b/0xa80 [ 1770.024651][T31952] ? __do_sys_brk+0x43b/0xa80 [ 1770.024690][T31952] do_futex+0x371/0x440 [ 1770.024718][T31952] ? __pfx_do_futex+0x10/0x10 [ 1770.024751][T31952] __x64_sys_futex+0x34f/0x4d0 [ 1770.024784][T31952] ? __pfx___x64_sys_futex+0x10/0x10 [ 1770.024823][T31952] do_syscall_64+0x115/0x840 [ 1770.024853][T31952] ? clear_bhb_loop+0x40/0x90 [ 1770.024882][T31952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.024907][T31952] RIP: 0033:0x7f119a39de99 [ 1770.024929][T31952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.024953][T31952] RSP: 002b:00007f119b1fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1770.024976][T31952] RAX: ffffffffffffffda RBX: 00007f119a626540 RCX: 00007f119a39de99 [ 1770.024991][T31952] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 1770.025005][T31952] RBP: 00007f119a433eaf R08: 0000000000000000 R09: 000000008000fff5 [ 1770.025028][T31952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.025042][T31952] R13: 00007f119a6265d8 R14: 00007f119a626540 R15: 00007fff46af47d8 [ 1770.025073][T31952] [ 1771.742011][T31972] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1775.685725][T32028] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input124 [ 1781.832657][T32124] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input125 [ 1792.035491][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.043879][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.886237][T32350] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1800.163127][T32412] FAULT_INJECTION: forcing a failure. [ 1800.163127][T32412] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.345784][T32412] CPU: 0 UID: 0 PID: 32412 Comm: syz.1.3247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1800.345824][T32412] Tainted: [L]=SOFTLOCKUP [ 1800.345833][T32412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1800.345848][T32412] Call Trace: [ 1800.345855][T32412] [ 1800.345864][T32412] dump_stack_lvl+0x100/0x190 [ 1800.345895][T32412] should_fail_ex.cold+0x5/0xa [ 1800.345923][T32412] should_failslab+0xc2/0x120 [ 1800.345957][T32412] __kmalloc_noprof+0xfc/0x820 [ 1800.345988][T32412] ? tracepoint_add_func+0x3a8/0x1150 [ 1800.346031][T32412] ? __pfx_blk_add_trace_bio_remap+0x10/0x10 [ 1800.346100][T32412] tracepoint_add_func+0x3a8/0x1150 [ 1800.346136][T32412] ? __pfx_blk_add_trace_bio_remap+0x10/0x10 [ 1800.346176][T32412] ? __pfx_blk_add_trace_bio_remap+0x10/0x10 [ 1800.346210][T32412] tracepoint_probe_register+0xc4/0x110 [ 1800.346248][T32412] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1800.346286][T32412] ? __pfx_blk_add_trace_bio_remap+0x10/0x10 [ 1800.346320][T32412] ? relay_open+0x793/0xa00 [ 1800.346354][T32412] blk_register_tracepoints+0x2eb/0x440 [ 1800.346380][T32412] blk_trace_setup_finalize+0x320/0x3a0 [ 1800.346409][T32412] blk_trace_setup+0x254/0x440 [ 1800.346443][T32412] ? __pfx_blk_trace_setup+0x10/0x10 [ 1800.346470][T32412] ? lockdep_hardirqs_on+0x16/0x100 [ 1800.346563][T32412] ? __pfx_vsnprintf+0x10/0x10 [ 1800.346607][T32412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1800.346645][T32412] ? do_vfs_ioctl+0x226/0x13e0 [ 1800.346685][T32412] blk_trace_ioctl+0x245/0x320 [ 1800.346717][T32412] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1800.346752][T32412] ? find_held_lock+0x2b/0x80 [ 1800.346783][T32412] ? __fget_files+0x215/0x3d0 [ 1800.346804][T32412] ? hook_file_ioctl_common+0x140/0x440 [ 1800.346841][T32412] blkdev_ioctl+0x17c/0x6f0 [ 1800.346866][T32412] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1800.346892][T32412] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1800.346917][T32412] __x64_sys_ioctl+0x18e/0x210 [ 1800.346955][T32412] do_syscall_64+0x115/0x840 [ 1800.346982][T32412] ? clear_bhb_loop+0x40/0x90 [ 1800.347010][T32412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.347035][T32412] RIP: 0033:0x7fbb0119de99 [ 1800.347054][T32412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1800.347078][T32412] RSP: 002b:00007fbaff3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1800.347101][T32412] RAX: ffffffffffffffda RBX: 00007fbb01426180 RCX: 00007fbb0119de99 [ 1800.347117][T32412] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000009 [ 1800.347132][T32412] RBP: 00007fbb01233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1800.347177][T32412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1800.347192][T32412] R13: 00007fbb01426218 R14: 00007fbb01426180 R15: 00007fffc01dfbc8 [ 1800.347223][T32412] [ 1801.252848][T32412] ------------[ cut here ]------------ [ 1801.259109][T32412] ret [ 1801.259127][T32412] WARNING: kernel/trace/blktrace.c:1367 at blk_register_tracepoints+0x41c/0x440, CPU#0: syz.1.3247/32412 [ 1801.275103][T32412] Modules linked in: [ 1801.280476][T32412] CPU: 0 UID: 0 PID: 32412 Comm: syz.1.3247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.292411][T32412] Tainted: [L]=SOFTLOCKUP [ 1801.296976][T32412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1801.307588][T32412] RIP: 0010:blk_register_tracepoints+0x41c/0x440 [ 1801.313961][T32412] Code: 0f 0b 90 e9 7d fe ff ff e8 71 8e f7 ff 90 0f 0b 90 e9 9c fe ff ff e8 63 8e f7 ff 90 0f 0b 90 e9 bb fe ff ff e8 55 8e f7 ff 90 <0f> 0b 90 e9 da fe ff ff e8 47 8e f7 ff 90 0f 0b 90 e8 3e 8e f7 ff [ 1801.334718][T32412] RSP: 0018:ffffc90003c77af8 EFLAGS: 00010287 [ 1801.341576][T32412] RAX: 000000000004657e RBX: 00000000fffffff4 RCX: ffffc90007832000 [ 1801.349657][T32412] RDX: 0000000000080000 RSI: ffffffff82121a6b RDI: ffff88807fa3be00 [ 1801.359080][T32412] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1801.367176][T32412] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 1801.375354][T32412] R13: ffff88802747a540 R14: ffffc90003c77d98 R15: 0000000000000001 [ 1801.384931][T32412] FS: 00007fbaff3d56c0(0000) GS:ffff888123de6000(0000) knlGS:0000000000000000 [ 1801.395101][T32412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1801.401952][T32412] CR2: 00007fbb011eb580 CR3: 000000007a9f8000 CR4: 00000000003526f0 [ 1801.410279][T32412] Call Trace: [ 1801.413577][T32412] [ 1801.416541][T32412] blk_trace_setup_finalize+0x320/0x3a0 [ 1801.422210][T32412] blk_trace_setup+0x254/0x440 [ 1801.427012][T32412] ? __pfx_blk_trace_setup+0x10/0x10 [ 1801.432515][T32412] ? lockdep_hardirqs_on+0x16/0x100 [ 1801.437831][T32412] ? __pfx_vsnprintf+0x10/0x10 [ 1801.442683][T32412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1801.448767][T32412] ? do_vfs_ioctl+0x226/0x13e0 [ 1801.453603][T32412] blk_trace_ioctl+0x245/0x320 [ 1801.458658][T32412] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1801.464009][T32412] ? find_held_lock+0x2b/0x80 [ 1801.468857][T32412] ? __fget_files+0x215/0x3d0 [ 1801.473581][T32412] ? hook_file_ioctl_common+0x140/0x440 [ 1801.480779][T32412] blkdev_ioctl+0x17c/0x6f0 [ 1801.485312][T32412] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1801.491143][T32412] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1801.496199][T32412] __x64_sys_ioctl+0x18e/0x210 [ 1801.501147][T32412] do_syscall_64+0x115/0x840 [ 1801.505763][T32412] ? clear_bhb_loop+0x40/0x90 [ 1801.510503][T32412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.516763][T32412] RIP: 0033:0x7fbb0119de99 [ 1801.521375][T32412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.541126][T32412] RSP: 002b:00007fbaff3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1801.549690][T32412] RAX: ffffffffffffffda RBX: 00007fbb01426180 RCX: 00007fbb0119de99 [ 1801.557805][T32412] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000009 [ 1801.565812][T32412] RBP: 00007fbb01233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1801.573884][T32412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.583169][T32412] R13: 00007fbb01426218 R14: 00007fbb01426180 R15: 00007fffc01dfbc8 [ 1801.592035][T32412] [ 1801.595147][T32412] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1801.602456][T32412] CPU: 0 UID: 0 PID: 32412 Comm: syz.1.3247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.613786][T32412] Tainted: [L]=SOFTLOCKUP [ 1801.618137][T32412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1801.628229][T32412] Call Trace: [ 1801.631612][T32412] [ 1801.634561][T32412] dump_stack_lvl+0x100/0x190 [ 1801.639267][T32412] vpanic+0x552/0x970 [ 1801.643270][T32412] ? __pfx_vpanic+0x10/0x10 [ 1801.647803][T32412] panic+0xd1/0xe0 [ 1801.651546][T32412] ? __pfx_panic+0x10/0x10 [ 1801.656014][T32412] check_panic_on_warn.cold+0x19/0x34 [ 1801.661433][T32412] ? blk_register_tracepoints+0x41c/0x440 [ 1801.667182][T32412] __warn.cold+0x191/0x318 [ 1801.671620][T32412] __report_bug+0x30f/0x440 [ 1801.676339][T32412] ? blk_register_tracepoints+0x41c/0x440 [ 1801.682120][T32412] ? __pfx___report_bug+0x10/0x10 [ 1801.687182][T32412] ? tracepoint_probe_register+0xd2/0x110 [ 1801.692938][T32412] ? __kasan_kmalloc+0x8a/0xb0 [ 1801.697754][T32412] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1801.703439][T32412] ? blk_register_tracepoints+0x41c/0x440 [ 1801.709200][T32412] report_bug+0xb2/0x220 [ 1801.713479][T32412] ? blk_register_tracepoints+0x41c/0x440 [ 1801.719224][T32412] handle_bug+0x16a/0x2a0 [ 1801.723586][T32412] exc_invalid_op+0x17/0x50 [ 1801.728163][T32412] asm_exc_invalid_op+0x1a/0x20 [ 1801.733042][T32412] RIP: 0010:blk_register_tracepoints+0x41c/0x440 [ 1801.739391][T32412] Code: 0f 0b 90 e9 7d fe ff ff e8 71 8e f7 ff 90 0f 0b 90 e9 9c fe ff ff e8 63 8e f7 ff 90 0f 0b 90 e9 bb fe ff ff e8 55 8e f7 ff 90 <0f> 0b 90 e9 da fe ff ff e8 47 8e f7 ff 90 0f 0b 90 e8 3e 8e f7 ff [ 1801.759058][T32412] RSP: 0018:ffffc90003c77af8 EFLAGS: 00010287 [ 1801.765153][T32412] RAX: 000000000004657e RBX: 00000000fffffff4 RCX: ffffc90007832000 [ 1801.773158][T32412] RDX: 0000000000080000 RSI: ffffffff82121a6b RDI: ffff88807fa3be00 [ 1801.782290][T32412] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1801.790306][T32412] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 1801.798295][T32412] R13: ffff88802747a540 R14: ffffc90003c77d98 R15: 0000000000000001 [ 1801.806296][T32412] ? blk_register_tracepoints+0x41b/0x440 [ 1801.812043][T32412] ? blk_register_tracepoints+0x41b/0x440 [ 1801.817803][T32412] blk_trace_setup_finalize+0x320/0x3a0 [ 1801.823402][T32412] blk_trace_setup+0x254/0x440 [ 1801.828325][T32412] ? __pfx_blk_trace_setup+0x10/0x10 [ 1801.833638][T32412] ? lockdep_hardirqs_on+0x16/0x100 [ 1801.838900][T32412] ? __pfx_vsnprintf+0x10/0x10 [ 1801.843986][T32412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1801.850259][T32412] ? do_vfs_ioctl+0x226/0x13e0 [ 1801.855058][T32412] blk_trace_ioctl+0x245/0x320 [ 1801.859876][T32412] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1801.865215][T32412] ? find_held_lock+0x2b/0x80 [ 1801.869939][T32412] ? __fget_files+0x215/0x3d0 [ 1801.874633][T32412] ? hook_file_ioctl_common+0x140/0x440 [ 1801.880210][T32412] blkdev_ioctl+0x17c/0x6f0 [ 1801.884734][T32412] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1801.889961][T32412] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1801.895023][T32412] __x64_sys_ioctl+0x18e/0x210 [ 1801.899820][T32412] do_syscall_64+0x115/0x840 [ 1801.904435][T32412] ? clear_bhb_loop+0x40/0x90 [ 1801.909311][T32412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.915866][T32412] RIP: 0033:0x7fbb0119de99 [ 1801.920314][T32412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.939965][T32412] RSP: 002b:00007fbaff3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1801.948473][T32412] RAX: ffffffffffffffda RBX: 00007fbb01426180 RCX: 00007fbb0119de99 [ 1801.956512][T32412] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000009 [ 1801.964514][T32412] RBP: 00007fbb01233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1801.972507][T32412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.980495][T32412] R13: 00007fbb01426218 R14: 00007fbb01426180 R15: 00007fffc01dfbc8 [ 1801.988533][T32412] [ 1801.991643][T32412] Kernel Offset: disabled [ 1801.996045][T32412] Rebooting in 86400 seconds..