last executing test programs: 6.457084083s ago: executing program 1 (id=21): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x8, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x2, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10007, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x1, 0x0, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0x4000000002df, 0x15, r0, 0x8000) clone$auto(0x23918fa0, 0x9ec7, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x3e478395) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 5.714430448s ago: executing program 1 (id=26): mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x102, 0x0) sendfile$auto(r1, r1, 0x0, 0x1f8c) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r2 = socket(0x10, 0x3, 0xa) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff12}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x0, 0x2, 0x800000df, 0x9b72, 0xffffffffffffffff, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 5.692005312s ago: executing program 0 (id=27): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0x4008ae9c, 0x0) 5.506574353s ago: executing program 3 (id=28): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_ZEROCOPY(r0, 0x1, 0x3c, &(0x7f0000001e00)='.\\K}\xc3\x00', &(0x7f0000001e40)=0xd) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280, 0x0) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) 5.395659944s ago: executing program 1 (id=29): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirty_bytes\x00', 0x8a042, 0x0) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/enable\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgid(r4) waitid$auto_P_PGID(0x2, r5, 0x0, 0x6, 0x0) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000050) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) sendfile$auto(r0, r0, 0x0, 0x48) 5.298044564s ago: executing program 0 (id=30): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/local_cpulist\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) socket(0x2, 0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, 0x0, 0x500) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x60000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x9, 0x1, 0xbc3, 0x800, 0x3, 0x97c, 0xffff, 0x400000000003, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x9, 0xffffffffffffff81, 0x8]}, 0x0) 4.948416193s ago: executing program 3 (id=32): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) write$auto(0xffffffffffffffff, &(0x7f0000000040)='/dev/ram14\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r2) sendmsg$auto_NFSD_CMD_VERSION_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x10, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_ENABLED={0x4}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x844) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 4.507194062s ago: executing program 1 (id=34): rmdir$auto(0x0) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0) select$auto(0x2, &(0x7f0000000300)={[0x3, 0xff, 0x8, 0x7, 0x8, 0x2, 0x26, 0x2, 0xfe2, 0x6, 0xe, 0x7, 0x100000001, 0xffffffff80000001, 0x2, 0x8c]}, 0x0, 0x0, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getpid() madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x200, 0x4) madvise$auto(0xa1e, 0x1, 0x3) 3.857049256s ago: executing program 0 (id=36): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x8, 0xff, r0, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) r4 = bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb) read$auto_uinput_fops_uinput(r4, &(0x7f0000000380)=""/73, 0x49) 3.550555536s ago: executing program 3 (id=37): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x808882, 0x0) write$auto(r0, &(0x7f00000004c0)='1\x00\\\xa0\x04|\xfd\xca\x12\xfa\b\x1c\xc7k\x923\xe05\"3n\x84n#\xd1\xcaso\v\xf0\xda\xbb\x86\xbcX\xb4\x999\\\xa8&;<\xca\xa8\x05\x9d\x9e-\xc3\x93\xaa\xda\x02\x03\xddUbHu\x01\x00\n\x00\xac\xa7\x93T\aA\xbd\xc0\xb8K\xd7\xed\xcbP\xa1\xfe\xc7\xa1\x8b\xa7\x02\xad\xbc\xfaq*0F\xff&\xbb+\x9b\xe2\xbfd\xf7\xde\xb40\x1d=\x99\xe2\x06\xbf\x9cNS\xbf\x82\x9c\xfb', 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 3.364587133s ago: executing program 2 (id=38): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x4, 0x5, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2003, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x200c) socket(0x10, 0x2, 0x0) mmap$auto(0xa9b, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mprotect$auto(0x200000000000, 0x806121, 0x6) 2.895167919s ago: executing program 3 (id=39): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(r1, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x37, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0x83ad, 0x9, 0x6, 0x6, 0x81, 0x4, 0x1cd7, 0x8, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x1ff, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, &(0x7f0000000100), 0x3, 0x2}, 0x10000}, 0xffffffff, 0x4008) 2.746095485s ago: executing program 0 (id=40): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x2, 0x0) 2.445045324s ago: executing program 1 (id=41): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x401, r1, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x8) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x3ff, 0x8}, 0x9) 2.01140108s ago: executing program 1 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) socket(0x15, 0x5, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) splice$auto(0x4, 0x0, r0, 0x0, 0x80000004, 0x9) write$auto(0x6, 0x0, 0x1) 1.930926429s ago: executing program 2 (id=43): mmap$auto(0x0, 0xe985, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x6, 0x6, 0x7, 0x1bb080, 0x97, 0xff, r0}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x0, 0x9c2a, 0xffffffff, @_sigsys={0x0, 0x5d35, 0x6}}}) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x8040) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.673226999s ago: executing program 2 (id=44): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x5, 0x8) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r0, 0x0, 0x20) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0x0, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x20000000000003, 0x8000400, 0x7, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cpu/0/msr\x00', 0x80600, 0x0) ioctl$auto_X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000000c0)=[0x5, 0x1, 0x1, 0x9b0, 0x10000, 0x1, 0x3, 0x4]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x8000}, 0x8000) 1.437441532s ago: executing program 0 (id=45): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r0, 0x1, 0x0, 0x0) 1.434013957s ago: executing program 3 (id=46): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1.226834311s ago: executing program 2 (id=47): mmap$auto(0x0, 0xb, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x801, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r1, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x24008010) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) 1.210003038s ago: executing program 0 (id=48): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000024c0)="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", 0xfff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd72ff1428a506f5cd946a3", 0x15) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd01, &(0x7f00000001c0)) 735.787854ms ago: executing program 2 (id=49): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4010}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 419.578899ms ago: executing program 3 (id=50): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) r1 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x24, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x108) 0s ago: executing program 2 (id=51): close_range$auto(0x0, 0x1c94, 0x2) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002b9b617ff7bc552f4b00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 97.436013][ T24] cfg80211: failed to load regulatory.db [ 97.476499][ T5812] cgroup: Unknown subsys name 'net' [ 97.616956][ T5812] cgroup: Unknown subsys name 'cpuset' [ 97.626929][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.594395][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.002274][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.011768][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.019944][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.030398][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.036921][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.040219][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.047664][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.059078][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.061890][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.069378][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.076062][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.088047][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.095911][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.096095][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.125241][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.132545][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.140586][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.148906][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.157721][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.172994][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.776970][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 102.793401][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 102.935148][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 103.001653][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 103.079981][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.088146][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.095745][ T5832] bridge_slave_0: entered allmulticast mode [ 103.103834][ T5832] bridge_slave_0: entered promiscuous mode [ 103.151663][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.158842][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.167169][ T5832] bridge_slave_1: entered allmulticast mode [ 103.175534][ T5832] bridge_slave_1: entered promiscuous mode [ 103.195881][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.203178][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.210680][ T5831] bridge_slave_0: entered allmulticast mode [ 103.218309][ T5831] bridge_slave_0: entered promiscuous mode [ 103.265217][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.272583][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.279934][ T5831] bridge_slave_1: entered allmulticast mode [ 103.287756][ T5831] bridge_slave_1: entered promiscuous mode [ 103.322768][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.329972][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.338027][ T5829] bridge_slave_0: entered allmulticast mode [ 103.345910][ T5829] bridge_slave_0: entered promiscuous mode [ 103.388095][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.395566][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.403042][ T5829] bridge_slave_1: entered allmulticast mode [ 103.411105][ T5829] bridge_slave_1: entered promiscuous mode [ 103.422386][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.442702][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.468243][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.492069][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.555765][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.569134][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.591785][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.599056][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.606592][ T5830] bridge_slave_0: entered allmulticast mode [ 103.614807][ T5830] bridge_slave_0: entered promiscuous mode [ 103.651073][ T5831] team0: Port device team_slave_0 added [ 103.659078][ T5832] team0: Port device team_slave_0 added [ 103.667791][ T5832] team0: Port device team_slave_1 added [ 103.674162][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.682075][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.689446][ T5830] bridge_slave_1: entered allmulticast mode [ 103.697381][ T5830] bridge_slave_1: entered promiscuous mode [ 103.719304][ T5831] team0: Port device team_slave_1 added [ 103.756395][ T5829] team0: Port device team_slave_0 added [ 103.801004][ T5829] team0: Port device team_slave_1 added [ 103.820679][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.827726][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.853791][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.872075][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.895817][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.903009][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.929276][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.942137][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.949118][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.975408][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.987516][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.000410][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.026738][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.041446][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.096901][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.104461][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.131251][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.144271][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.152313][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.152670][ T5840] Bluetooth: hci1: command tx timeout [ 104.179258][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.231053][ T5840] Bluetooth: hci0: command tx timeout [ 104.236809][ T5840] Bluetooth: hci2: command tx timeout [ 104.242978][ T5144] Bluetooth: hci3: command tx timeout [ 104.274113][ T5830] team0: Port device team_slave_0 added [ 104.288001][ T5832] hsr_slave_0: entered promiscuous mode [ 104.295009][ T5832] hsr_slave_1: entered promiscuous mode [ 104.318287][ T5830] team0: Port device team_slave_1 added [ 104.332366][ T5831] hsr_slave_0: entered promiscuous mode [ 104.339024][ T5831] hsr_slave_1: entered promiscuous mode [ 104.345612][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 104.351515][ T5831] Cannot create hsr debugfs directory [ 104.440642][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.447668][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.474161][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.502187][ T5829] hsr_slave_0: entered promiscuous mode [ 104.508782][ T5829] hsr_slave_1: entered promiscuous mode [ 104.515410][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 104.521259][ T5829] Cannot create hsr debugfs directory [ 104.536055][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.543254][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.569470][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.758230][ T5830] hsr_slave_0: entered promiscuous mode [ 104.765369][ T5830] hsr_slave_1: entered promiscuous mode [ 104.772050][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 104.777818][ T5830] Cannot create hsr debugfs directory [ 105.184315][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.199851][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.212112][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.235068][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.311586][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.323787][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.339031][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.352665][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.467085][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.482658][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.498109][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.512139][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.607732][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.631062][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.644693][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.657693][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.734991][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.817421][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.869178][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.876732][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.908567][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.915823][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.946205][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.978904][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.013747][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.045394][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.052697][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.096439][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.104103][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.117091][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.142573][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.155251][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.162449][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.206179][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.213448][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.231220][ T5840] Bluetooth: hci1: command tx timeout [ 106.269353][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.312954][ T5840] Bluetooth: hci2: command tx timeout [ 106.318438][ T5840] Bluetooth: hci3: command tx timeout [ 106.325283][ T5144] Bluetooth: hci0: command tx timeout [ 106.339336][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.346602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.377328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.384623][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.711898][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.838901][ T5831] veth0_vlan: entered promiscuous mode [ 106.895564][ T5831] veth1_vlan: entered promiscuous mode [ 107.015209][ T5831] veth0_macvtap: entered promiscuous mode [ 107.046099][ T5831] veth1_macvtap: entered promiscuous mode [ 107.076952][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.135648][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.164896][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.178145][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.195565][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.233624][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.243833][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.254342][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.274631][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.386800][ T5832] veth0_vlan: entered promiscuous mode [ 107.394120][ T5829] veth0_vlan: entered promiscuous mode [ 107.421745][ T5832] veth1_vlan: entered promiscuous mode [ 107.471463][ T5829] veth1_vlan: entered promiscuous mode [ 107.479604][ T5830] veth0_vlan: entered promiscuous mode [ 107.492004][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.501333][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.567257][ T5830] veth1_vlan: entered promiscuous mode [ 107.620000][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.637091][ T5829] veth0_macvtap: entered promiscuous mode [ 107.642957][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.665006][ T5832] veth0_macvtap: entered promiscuous mode [ 107.678158][ T5829] veth1_macvtap: entered promiscuous mode [ 107.688153][ T5830] veth0_macvtap: entered promiscuous mode [ 107.699523][ T5832] veth1_macvtap: entered promiscuous mode [ 107.716745][ T5830] veth1_macvtap: entered promiscuous mode [ 107.756995][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.776099][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.795552][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.813209][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.842411][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.864276][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.904374][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.912171][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.947852][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.958923][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.010381][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.063606][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.130503][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.180422][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.189245][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.233981][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.244934][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.262167][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.278402][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.294260][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.305459][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.324438][ T5144] Bluetooth: hci1: command tx timeout [ 108.390984][ T5144] Bluetooth: hci0: command tx timeout [ 108.396479][ T5144] Bluetooth: hci3: command tx timeout [ 108.402689][ T5840] Bluetooth: hci2: command tx timeout [ 108.418345][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.437074][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.509027][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.530631][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.571362][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.582312][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.663110][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.688888][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.697471][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.705574][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.985031][ T5918] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 109.023046][ T5918] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 109.036701][ T5918] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 109.046219][ T5918] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 109.055053][ T5918] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 109.067427][ T5918] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 109.078605][ T5918] head: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 109.088061][ T5918] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 109.099547][ T5918] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 109.109297][ T5918] page dumped because: unmovable page [ 109.118412][ T5918] page_owner tracks the page as allocated [ 109.147907][ T5918] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5807, tgid 5807 (sftp-server), ts 85050851576, free_ts 85047835515 [ 109.169636][ T5918] post_alloc_hook+0x153/0x170 [ 109.175013][ T5918] get_page_from_freelist+0x111d/0x3140 [ 109.181317][ T5918] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 109.187424][ T5918] alloc_pages_mpol+0x1fb/0x550 [ 109.194540][ T5918] alloc_pages_noprof+0x131/0x390 [ 109.199746][ T5918] skb_page_frag_refill+0x365/0x5b0 [ 109.206023][ T5918] try_fill_recv+0x7f1/0x2950 [ 109.211878][ T5918] virtnet_poll+0x1502/0x3a70 [ 109.216777][ T5918] __napi_poll.constprop.0+0xaf/0x450 [ 109.225219][ T5918] net_rx_action+0xa40/0xf20 [ 109.230444][ T5918] handle_softirqs+0x1eb/0x9e0 [ 109.235349][ T5918] __irq_exit_rcu+0xef/0x150 [ 109.240781][ T5918] irq_exit_rcu+0x9/0x30 [ 109.245219][ T5918] common_interrupt+0xbe/0xe0 [ 109.251285][ T5918] asm_common_interrupt+0x26/0x40 [ 109.256499][ T5918] page last free pid 5807 tgid 5807 stack trace: [ 109.263755][ T5918] __free_frozen_pages+0x7e1/0x10d0 [ 109.269210][ T5918] __folio_put+0x3b4/0x540 [ 109.275768][ T5918] skb_release_data+0x667/0x9d0 [ 109.281275][ T5918] napi_consume_skb+0x1f6/0x320 [ 109.286574][ T5918] skb_defer_free_flush+0x1f1/0x290 [ 109.292622][ T5918] net_rx_action+0x3ca/0xf20 [ 109.297461][ T5918] handle_softirqs+0x1eb/0x9e0 [ 109.303482][ T5918] __irq_exit_rcu+0xef/0x150 [ 109.308353][ T5918] irq_exit_rcu+0x9/0x30 [ 109.313242][ T5918] common_interrupt+0xbe/0xe0 [ 109.318135][ T5918] asm_common_interrupt+0x26/0x40 [ 109.573732][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.390475][ T5144] Bluetooth: hci1: command tx timeout [ 110.471056][ T5840] Bluetooth: hci3: command tx timeout [ 110.476572][ T5840] Bluetooth: hci2: command tx timeout [ 110.483492][ T5144] Bluetooth: hci0: command tx timeout [ 110.746056][ T5945] FAULT_INJECTION: forcing a failure. [ 110.746056][ T5945] name failslab, interval 1, probability 0, space 0, times 1 [ 110.764569][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: syz.3.11 Not tainted syzkaller #0 PREEMPT(full) [ 110.764611][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.764636][ T5945] Call Trace: [ 110.764646][ T5945] [ 110.764661][ T5945] dump_stack_lvl+0x100/0x190 [ 110.764720][ T5945] should_fail_ex.cold+0x5/0xa [ 110.764758][ T5945] should_failslab+0xc2/0x120 [ 110.764794][ T5945] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 110.764837][ T5945] ? acpi_ut_create_generic_state+0x61/0xc0 [ 110.764898][ T5945] acpi_ut_create_generic_state+0x61/0xc0 [ 110.764949][ T5945] acpi_ds_scope_stack_push+0x70/0x790 [ 110.765018][ T5945] acpi_ds_init_aml_walk+0x2d8/0x680 [ 110.765076][ T5945] acpi_ds_call_control_method+0x3a2/0xab0 [ 110.765132][ T5945] acpi_ps_parse_aml+0xacd/0x1120 [ 110.765192][ T5945] acpi_ps_execute_method+0x5c4/0xe90 [ 110.765236][ T5945] acpi_ns_evaluate+0x640/0x1670 [ 110.765281][ T5945] acpi_evaluate_object+0x420/0xe00 [ 110.765329][ T5945] ? kasan_save_stack+0x30/0x50 [ 110.765398][ T5945] ? kasan_save_track+0x14/0x30 [ 110.765456][ T5945] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 110.765513][ T5945] acpi_evaluate_integer+0xdf/0x220 [ 110.765556][ T5945] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 110.765617][ T5945] ? __pfx_status_show+0x10/0x10 [ 110.765664][ T5945] status_show+0xa0/0x120 [ 110.765709][ T5945] ? __pfx_status_show+0x10/0x10 [ 110.765767][ T5945] dev_attr_show+0x52/0xa0 [ 110.765801][ T5945] ? __pfx_dev_attr_show+0x10/0x10 [ 110.765831][ T5945] sysfs_kf_seq_show+0x217/0x3a0 [ 110.765880][ T5945] seq_read_iter+0x32f/0x1270 [ 110.765952][ T5945] kernfs_fop_read_iter+0x46c/0x610 [ 110.766000][ T5945] ? rw_verify_area+0xce/0x6d0 [ 110.766049][ T5945] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 110.766088][ T5945] vfs_read+0x825/0xb30 [ 110.766146][ T5945] ? __pfx_vfs_read+0x10/0x10 [ 110.766226][ T5945] ksys_read+0x12a/0x250 [ 110.766279][ T5945] ? __pfx_ksys_read+0x10/0x10 [ 110.766344][ T5945] do_syscall_64+0x106/0xf80 [ 110.766383][ T5945] ? clear_bhb_loop+0x40/0x90 [ 110.766426][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.766459][ T5945] RIP: 0033:0x7f8edc79c799 [ 110.766486][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.766520][ T5945] RSP: 002b:00007f8eda9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.766552][ T5945] RAX: ffffffffffffffda RBX: 00007f8edca15fa0 RCX: 00007f8edc79c799 [ 110.766575][ T5945] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 110.766595][ T5945] RBP: 00007f8edc832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 110.766616][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.766635][ T5945] R13: 00007f8edca16038 R14: 00007f8edca15fa0 R15: 00007ffc5d395fc8 [ 110.766681][ T5945] [ 111.065225][ T5945] ACPI Error: ffff88802a104000 walk still has a scope list (20251212/dswstate-694) [ 111.105332][ T5945] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 111.478442][ T5954] netlink: 226 bytes leftover after parsing attributes in process `syz.0.13'. [ 111.488711][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 111.524805][ T5954] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 111.997923][ T5962] Â: entered promiscuous mode [ 112.054940][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 112.110906][ T5969] netlink: 25 bytes leftover after parsing attributes in process `syz.2.20'. [ 112.308774][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21'. [ 112.443199][ T5974] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 112.451992][ T5974] netlink: 230 bytes leftover after parsing attributes in process `syz.3.22'. [ 112.608716][ T5974] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 113.823481][ T6008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.923087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.970420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.979457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.989157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 114.071933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 114.110606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.152004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 114.185421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.231190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 114.240855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.761601][ T6016] mmap: syz.1.34 (6016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.203025][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'. [ 117.867082][ T6048] bond0: option all_slaves_active: invalid value () [ 118.304213][ T6066] netlink: 54 bytes leftover after parsing attributes in process `syz.2.49'. [ 119.021850][ T6070] [ 119.024342][ T6070] ====================================================== [ 119.031405][ T6070] WARNING: possible circular locking dependency detected [ 119.038733][ T6070] syzkaller #0 Not tainted [ 119.043192][ T6070] ------------------------------------------------------ [ 119.050331][ T6070] syz.3.50/6070 is trying to acquire lock: [ 119.056280][ T6070] ffff888012f77ae8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 119.068056][ T6070] [ 119.068056][ T6070] but task is already holding lock: [ 119.075467][ T6070] ffff88807f420ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 119.084630][ T6070] [ 119.084630][ T6070] which lock already depends on the new lock. [ 119.084630][ T6070] [ 119.095049][ T6070] [ 119.095049][ T6070] the existing dependency chain (in reverse order) is: [ 119.104170][ T6070] [ 119.104170][ T6070] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 119.111994][ T6070] lock_sock_nested+0x41/0xf0 [ 119.117634][ T6070] smc_listen_out+0x1f5/0x4b0 [ 119.122897][ T6070] smc_listen_work+0x4c2/0x50e0 [ 119.128470][ T6070] process_one_work+0x9d7/0x1920 [ 119.133954][ T6070] worker_thread+0x5da/0xe40 [ 119.139088][ T6070] kthread+0x370/0x450 [ 119.143704][ T6070] ret_from_fork+0x754/0xd80 [ 119.148871][ T6070] ret_from_fork_asm+0x1a/0x30 [ 119.154203][ T6070] [ 119.154203][ T6070] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 119.164426][ T6070] __lock_acquire+0x14b8/0x2630 [ 119.169852][ T6070] lock_acquire+0x1cf/0x380 [ 119.174906][ T6070] __flush_work+0x4de/0xcb0 [ 119.180099][ T6070] cancel_work_sync+0xd1/0xf0 [ 119.185344][ T6070] smc_clcsock_release+0x5f/0xe0 [ 119.190846][ T6070] __smc_release+0x5c2/0x880 [ 119.196088][ T6070] smc_close_non_accepted+0xda/0x200 [ 119.201954][ T6070] smc_close_active+0x4ff/0x1070 [ 119.207454][ T6070] __smc_release+0x634/0x880 [ 119.212604][ T6070] smc_release+0x1fc/0x620 [ 119.217573][ T6070] __sock_release+0xb3/0x260 [ 119.222725][ T6070] sock_close+0x1c/0x30 [ 119.227422][ T6070] __fput+0x3ff/0xb40 [ 119.231962][ T6070] task_work_run+0x150/0x240 [ 119.237130][ T6070] exit_to_user_mode_loop+0x100/0x4a0 [ 119.243074][ T6070] do_syscall_64+0x668/0xf80 [ 119.248240][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.254712][ T6070] [ 119.254712][ T6070] other info that might help us debug this: [ 119.254712][ T6070] [ 119.264959][ T6070] Possible unsafe locking scenario: [ 119.264959][ T6070] [ 119.272521][ T6070] CPU0 CPU1 [ 119.278035][ T6070] ---- ---- [ 119.283417][ T6070] lock(sk_lock-AF_SMC/1); [ 119.287958][ T6070] lock((work_completion)(&new_smc->smc_listen_work)); [ 119.297440][ T6070] lock(sk_lock-AF_SMC/1); [ 119.304532][ T6070] lock((work_completion)(&new_smc->smc_listen_work)); [ 119.311516][ T6070] [ 119.311516][ T6070] *** DEADLOCK *** [ 119.311516][ T6070] [ 119.319764][ T6070] 3 locks held by syz.3.50/6070: [ 119.324715][ T6070] #0: ffff888078dc1908 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 119.335290][ T6070] #1: ffff88807f420ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 119.344751][ T6070] #2: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 119.353983][ T6070] [ 119.353983][ T6070] stack backtrace: [ 119.359902][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT(full) [ 119.359932][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 119.359946][ T6070] Call Trace: [ 119.359955][ T6070] [ 119.359964][ T6070] dump_stack_lvl+0x100/0x190 [ 119.360006][ T6070] print_circular_bug.cold+0x178/0x1c7 [ 119.360045][ T6070] check_noncircular+0x146/0x160 [ 119.360108][ T6070] __lock_acquire+0x14b8/0x2630 [ 119.360156][ T6070] lock_acquire+0x1cf/0x380 [ 119.360184][ T6070] ? __flush_work+0x4ca/0xcb0 [ 119.360220][ T6070] ? __flush_work+0x4ca/0xcb0 [ 119.360253][ T6070] __flush_work+0x4de/0xcb0 [ 119.360285][ T6070] ? __flush_work+0x4ca/0xcb0 [ 119.360319][ T6070] ? __pfx___flush_work+0x10/0x10 [ 119.360353][ T6070] ? __pfx_wq_barrier_func+0x10/0x10 [ 119.360382][ T6070] ? __pfx___might_resched+0x10/0x10 [ 119.360417][ T6070] cancel_work_sync+0xd1/0xf0 [ 119.360439][ T6070] smc_clcsock_release+0x5f/0xe0 [ 119.360463][ T6070] __smc_release+0x5c2/0x880 [ 119.360500][ T6070] ? __pfx_sock_def_readable+0x10/0x10 [ 119.360523][ T6070] smc_close_non_accepted+0xda/0x200 [ 119.360546][ T6070] smc_close_active+0x4ff/0x1070 [ 119.360570][ T6070] __smc_release+0x634/0x880 [ 119.360606][ T6070] smc_release+0x1fc/0x620 [ 119.360642][ T6070] __sock_release+0xb3/0x260 [ 119.360670][ T6070] ? __pfx_sock_close+0x10/0x10 [ 119.360697][ T6070] sock_close+0x1c/0x30 [ 119.360750][ T6070] __fput+0x3ff/0xb40 [ 119.360778][ T6070] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.360809][ T6070] task_work_run+0x150/0x240 [ 119.360841][ T6070] ? __pfx_task_work_run+0x10/0x10 [ 119.360877][ T6070] exit_to_user_mode_loop+0x100/0x4a0 [ 119.360907][ T6070] do_syscall_64+0x668/0xf80 [ 119.360933][ T6070] ? clear_bhb_loop+0x40/0x90 [ 119.360959][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.360982][ T6070] RIP: 0033:0x7f8edc79c799 [ 119.361007][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.361029][ T6070] RSP: 002b:00007ffc5d396128 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 119.361050][ T6070] RAX: 0000000000000000 RBX: 00007f8edca17da0 RCX: 00007f8edc79c799 [ 119.361064][ T6070] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 119.361078][ T6070] RBP: 00007f8edca17da0 R08: 00007f8edca16038 R09: 0000000000000000 [ 119.361092][ T6070] R10: 00000000005e7cdc R11: 0000000000000246 R12: 000000000001d200 [ 119.361105][ T6070] R13: 00007f8edca15fac R14: 000000000001d011 R15: 00007ffc5d396230 [ 119.361127][ T6070]