last executing test programs: 47.920452755s ago: executing program 1 (id=312): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x7ffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) dup2$auto(0x5, 0x4) select$auto(0xb, &(0x7f0000000100)={[0x7f, 0x31, 0xffffffffffffffff, 0x80000000, 0x7, 0x6, 0x81, 0x67e, 0x8, 0x2, 0x5, 0x10001, 0x334, 0x4, 0xfffffffffffffffe, 0x8]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xfffffffd, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x3, 0x1, 0x6, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x2000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xc, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='[\x99}/:H\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) read$auto(0x3, 0x0, 0x8080) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x4, 0x0, [{0x1db, 0x13, 0x1}]}) 46.906701951s ago: executing program 1 (id=330): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0xfffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x800, 0x0) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, 0x0) r1 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r2 = bpf$auto(0x0, 0x0, 0x10) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x808}, 0x20004000) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x66871c73e4a73b9}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x840) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x80000000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r3) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) read$auto(r3, &(0x7f0000000080)='\x00', 0xff09) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x20000000) 45.75641272s ago: executing program 0 (id=332): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xb0ff0000, 0x0, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14", @ANYRES16=r2, @ANYBLOB="00042d2ab3c60d9447acec9703a36dbd7000fbdbdf2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x20004004) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r1, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb634715fd2dd8dd}, 0xc, &(0x7f0000001180)={&(0x7f00000000c0)={0x1088, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, "253acf065accd890f5605ef244b217"}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x1010, 0x131, 0x0, 0x1, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1ff}, @NL80211_ATTR_PMKR0_NAME={0x1004, 0x102, "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"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@typed={0x14, 0xc2, 0x0, 0x0, @ipv6=@empty}, @nested={0x24, 0x122, 0x0, 0x1, [@nested={0x4, 0x54}, @typed={0x11, 0x8f, 0x0, 0x0, @str='-+.--)),}\\{^\x00'}, @generic="25fea0f192a1e6eb"]}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0xcf}]}]}, 0x1088}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) write$auto(0x3, 0x0, 0x100000000) 44.436991981s ago: executing program 1 (id=333): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/sleep_millisecs\x00', 0x181482, 0x0) socket(0x10, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0xc) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x6, 0xffffbfff, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x6f) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 43.802849783s ago: executing program 1 (id=334): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) setns(0xc9, 0x0) socket(0x1a, 0x2, 0x5ca) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7ffff7ffefff}, 0x8000000000000001) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000280)=0x4) unshare$auto(0x40000080) unshare$auto(0x2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x6269c7, 0x0) ioctl$auto_TUNSETVNETHDRSZ2(r4, 0x400454d8, &(0x7f0000000300)=0x3) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, 0x0) openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/clk/clk_dump\x00', 0x20000, 0x0) r5 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/ns/cgroup\x00', 0x40000, 0x0) ioctl$auto_NS_GET_PID_IN_PIDNS(r5, 0x8004b708, &(0x7f0000000380)=0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 42.739829555s ago: executing program 0 (id=336): unshare$auto(0x40000080) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, r0, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20201, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r4 = socket(0xf, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x244201, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x12081, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141041, 0x0) write$auto(r5, &(0x7f0000001340)='\x04\"\x8e U\x00\x00\x00\xb8\n08\xc6\xb05>ha9\x89|e\x00\x00\x00\xa8%\xdc~kD\xa1\x1b\xc3\xe4\xc7\x89\x0e\xd4\x88\xac\x95\xacS\xe9$\xe7*\xcd\x8b\x9b\xd0o\xc7\xd8\xf7\x8a@%\x1d\xf8b\x14[H\xa2` \xb2\xef\xd7\xac\xfak\xb7\x02\x00}\xbcv\xfc\xe6\xbf\x14\x82jO\xde\xda\xda\x929\xd3\x04\xd0\xa2\xa0\xa6\xcb\x86\x15\xac\xcc\xf8\xa2\x01Z\x83`\xa1d\xedj8\x1e\xcc\x0fD\xa4\xe3\xa5\xba\xf9\xbe\x85\f\xbbrY\xb9\xc77\xd9d\xb5\x16\xc1\xe9\xe5\xc8X_\xefPG\x86=\x17>3\xb2\xdd\xbd\xa9\xe4R\x9c\xb0j[\"\f\xfb\tNz\xf4X]\xb90\x1c\xc3\x91jd\xe9\xb9\x87I\x19\xe4\x16\xa4\xad\xdcJ\xe4\x00\xd03/\x13,3\x87K\xd0J\xbb\xb9B\xff\xd9\xf1\xed\x04\xeb\x8d\x92\xa7-\x91\x8ai\xc6j\xeb\x90#1\x1d\xfd\xa3\xfeO\xcc\xe0\xe5\x1d\x8e\xedd\f,\t\xd8\x10Ho.z4\'\xe2\xad`\x94\xa6\xa2\xb2\xd6zMB\xf5\xcd\r7MO\x8f\xbc7%\xf1\xbbxB\xb4q\xa0\xe1-\x1c\xa2\xeb\xc0C\x04\x00\xfcG\xb6\x1e\x82\xaao\x1a\xa7\xbdw\x8b\xe6\bI\xfc\xa1\a\"\xe6\xc7z\xac\xe6\xce\xe34\x16\x9bdp\xb9\x02R\b\x83\x95\xde\x93\x12hP\xcbr6F\x84\xa7sf\xea\x8a\x1aee\xa4\xd0~\x00IC\xefT\xdc_G=]\xa3\xcb\xe0\x9f\n\xc5%\xe8PT\x87\xa4\xf3?f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) bind$auto(r1, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xe) bind$auto(r1, &(0x7f0000000000)=@llc={0x1a, 0x2, 0x5, 0x1, 0x1, 0x9, @broadcast}, 0x21) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(r2, &(0x7f00000001c0)=@ax25={0x3, @bcast}, 0xf60) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 37.253862166s ago: executing program 1 (id=343): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)=@bpf_attr_1={0xffffffffffffffff, 0x21f, @next_key=0x2f17, 0xff}, 0x6) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x18, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r4) write$auto(0x3, 0x0, 0xfffffdef) 34.433346981s ago: executing program 2 (id=346): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181302, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r0, 0x0, 0x80000000006) socket(0xa, 0x801, 0x106) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f00000000c0), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd2/queue/physical_block_size\x00', 0x400, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(r0, 0x8, 0xffffffff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x200000000000021, 0x9, 0x0, 0x0, 0xfffd) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 34.407891407s ago: executing program 0 (id=347): mmap$auto(0x40000, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r0, 0x0, 0x4) mremap$auto(0x1, 0x0, 0x4, 0x7, 0x100000000) read$auto(0xffffffffffffffff, 0x0, 0x5) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = socket(0x15, 0x5, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0xfffffffe) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5401", @ANYRES16=r3, @ANYBLOB="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"/429], 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = socket(0x27, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r4, 0x1963, 0x81}, 0x5, 0x10001) setsockopt$auto(r5, 0x113, 0x3, 0x0, 0x79ad226b) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r6, 0x0, 0x8, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x8402, 0x0) r7 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r7, 0xc0109207, 0x0) 33.318026093s ago: executing program 2 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="07031abd7025"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) unshare$auto(0xff) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) sendmsg$auto_NFSD_CMD_LISTENER_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r7, 0x1, 0x94d1) ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r7, 0x100, 0x100000001) lstat$auto(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x8000) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) 32.975548652s ago: executing program 2 (id=349): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, 0x0, 0x844) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) gettid() openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, 0x0, 0x5, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x400) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) shutdown$auto(r1, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 32.4560251s ago: executing program 2 (id=350): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) madvise$auto(0x1000, 0x400050, 0x9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0x2, 0x5, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x3, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8001, 0x8, 0x72, 0x4, 0x8, 0x3, 0x5, 0x7, @raw=0x8, @raw=0x9}) madvise$auto(0x0, 0x1, 0x1) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/sessionid\x00', 0x0, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000100)="c80d1b5d399b39", 0x7) setns(0xc9, 0x0) ioctl$auto_MEMERASE64(0xffffffffffffffff, 0x40104d14, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 30.617040222s ago: executing program 2 (id=351): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf253200000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) socket(0xa, 0x1, 0x84) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event1\x00', 0x1, 0x0) ioctl$auto_EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000140)) shutdown$auto(0x200000003, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0xaa60, 0xe, 0x8001, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 29.2558251s ago: executing program 2 (id=352): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2242, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/apparmor/current\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000640)={0x0, 0x8}, 0x6, 0x1000, 0x58) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) setns(0xc9, 0x40000000) socket(0x8, 0x80000, 0x80000003) getpeername$auto(0x3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x801, 0x0) socket(0x8, 0x80000, 0x80000003) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) pwrite64$auto(r3, &(0x7f0000000d40)='/proc/self/pagemap\x00', 0x4, 0x2) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8000, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 19.043098481s ago: executing program 32 (id=347): mmap$auto(0x40000, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r0, 0x0, 0x4) mremap$auto(0x1, 0x0, 0x4, 0x7, 0x100000000) read$auto(0xffffffffffffffff, 0x0, 0x5) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = socket(0x15, 0x5, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0xfffffffe) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5401", @ANYRES16=r3, @ANYBLOB="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"/429], 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = socket(0x27, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r4, 0x1963, 0x81}, 0x5, 0x10001) setsockopt$auto(r5, 0x113, 0x3, 0x0, 0x79ad226b) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r6, 0x0, 0x8, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x8402, 0x0) r7 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r7, 0xc0109207, 0x0) 2.665167326s ago: executing program 3 (id=382): mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x808040, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon37\x00', 0x640, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)='7', 0x7) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) madvise$auto(0xf, 0x8, 0xe) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x110c230000, 0x1, 0x9) r5 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/udp_ports_sync_all\x00', 0x1, 0x0) write$auto_dfs_sched_itmt_fops_itmt(r5, 0x0, 0x0) io_setup$auto(0x40087ffe, 0x0) 2.398627068s ago: executing program 3 (id=383): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4a4401, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0xfffffffffffffffe, 0x157283, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) setresuid$auto(0x0, 0x0, 0x221) r2 = syz_clone(0x38008080, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill$auto_SIGCONT(r2, r2, 0x12) arch_prctl$auto(0x5001, 0x2) rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffff5ab}, 0x0, 0x0, 0x8) writev$auto(r0, 0x0, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x3b72, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x10000000000, 0x4) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1.512645165s ago: executing program 3 (id=384): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xf, 0x3, 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1ea102, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x20202, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, r2, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x3, &(0x7f00000002c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x8}, 0x1) 1.387961172s ago: executing program 3 (id=385): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) connect$auto(0x3, 0x0, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x200007, 0x19) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) acct$auto(&(0x7f0000000e40)='/dev/snd/seq\x00') r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd7\x00', 0x109202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c05, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x201000, 0x2003f0, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) setrlimit$auto(0x6, &(0x7f0000000080)={0x8, 0x6f}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) sendmmsg$auto(r0, &(0x7f0000000340)={{0x0, 0x539fafba, &(0x7f0000000280)={0x0}, 0x4, &(0x7f00000002c0), 0x2, 0x3}, 0x7}, 0xffff7fff, 0x30) 386.038212ms ago: executing program 3 (id=386): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000040)=0x4) r2 = bpf$auto(0x0, 0x0, 0x10) r3 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) prctl$auto(0x23, 0xd, 0x0, 0x0, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r2, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r3, @ANYBLOB="01052cbd7000fcdbdf250800000008000100030000006d03028022472726c2c5ebc531b1720b9c6ff5d1a53bebb434cccec8225ba05bc56da579ed7444f6ea670f3fd7bd96fe7a7a5394060456ec9846d0630866a23f8dabfef66f90c20b0332a95a0adc8505ce9ac2cd268dbfbb3f56ea12cf2e56a8b5b72d4e5fcbc0511ef2f4a5ecb773ea42cb2a3bd3adc89c82c1865c7e6f61d1d43a43fd38f4683e9c3bea837e8249b9cfda5fdc0899058fd725da87706684c5b745cc09b80b001d00767863616e310000e0f05a66e7912561e7ac7b927ecc68c98b2f010f10fc9c3e0084b6c6c3c377ab8f7e7af51435416e0dd4010cb14fdb6cd49e3c9e3aa71cb8bd3f59f6fdbc4157f861675eb15d108b51faf3db739bffb52e4df768dc75da341ab313b45cf76aa4d52b07dd4ff08e834a6ad4d06396fdee3be97d246433e10c80f8f025fb0c32697218b8bbb75ac33ee1272882"], 0x38c}, 0x1, 0x0, 0x0, 0x808}, 0x20004000) r4 = gettid() tkill$auto(r4, 0x7) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f00000000c0)={0x6, 0x0, 0x4, 0x0, 0x5, 0x0}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000dc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000840)=ANY=[@ANYBLOB="20050000", @ANYRES16=r3, @ANYBLOB="100029bd7000fedbdf2503000000080001000c0000000800010003000000c50102809aea292ecfc037cba51daf336c432ffbb6af889ecb942c5b265d960400ed00f200e28008003600", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="4401ee80bcedf61113d5ea79395e9659f136e7f6ade9dcfc77b4a6b0313305265ad64e7f539d5a5df77b2f518635533ee280bf13c62439a87b6a9604004b00437b13cf0dce02ae326727fcd987548e532d65beaaa0517eeed230a3b0e69c9459dbb03e60c99ac9e9e65edc0e602542280a0ead0f5afc32ae08d68a4d020bb2961fb1eeb47cb3aea1a389a51fe52c7360ace9036981b02c6b33ac54d3a2782df61ca59fdff8dc5a3502163c624408000d00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08001c000a01010200"], 0x520}}, 0x40004) r6 = socket(0x15, 0x5, 0x0) setsockopt$auto(r6, 0x114, 0x2, 0xffffffffffffffff, 0x20) write$auto(0x3, 0x0, 0x100000000) r7 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) poll$auto(&(0x7f0000000240)={r7, 0x20, 0x2}, 0x5, 0x104) write$auto(0x3, 0x0, 0x7fffffff) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x2, 0x0) ioctl$auto(r0, 0x5603, 0xffffffffffffffff) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/stack\x00', 0x2400, 0x0) mmap$auto(0x1fffffffe000, 0x400005, 0x0, 0x3132, 0x9, 0x0) r8 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cec26\x00', 0x200, 0x0) ioctl$auto_CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000400)={0x800, 0x1, 0x1, 0x4009, 0x406, 0xfffffffc, "dd861925189ed33e97e92f6e18aa01fa", 0x5, 0x3, 0xf0, 0x1, 0x4, 0x12, 0x5f}) 0s ago: executing program 3 (id=387): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r0, 0x901064ae, 0x4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(r2, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\' 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.340862][ T6086] RSP: 002b:00007fc4b40c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.340893][ T6086] RAX: ffffffffffffffda RBX: 00007fc4b3425fa0 RCX: 00007fc4b319e0d9 [ 123.340914][ T6086] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 123.340934][ T6086] RBP: 00007fc4b3235024 R08: 0000000000000000 R09: 0000000000000000 [ 123.340953][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.340972][ T6086] R13: 00007fc4b3426038 R14: 00007fc4b3425fa0 R15: 00007ffc78c8edc8 [ 123.341015][ T6086] [ 125.250688][ T6125] Unable to find swap-space signature [ 125.347480][ T6118] random: crng reseeded on system resumption [ 125.568618][ T6118] hub 1-0:1.0: USB hub found [ 125.593970][ T6118] hub 1-0:1.0: 1 port detected [ 126.829370][ T6152] binder: 6145:6152 unknown command 0 [ 126.841573][ T6152] binder: 6145:6152 ioctl c0306201 0 returned -22 [ 128.073065][ T6168] nbd: socks must be embedded in a SOCK_ITEM attr [ 128.169640][ T6166] bond0: invalid ARP target specified [ 128.209338][ T6168] block nbd0: shutting down sockets [ 128.243256][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.55'. [ 128.336963][ T6166] team0 (unregistering): Port device team_slave_0 removed [ 128.352631][ T6166] team0 (unregistering): Port device team_slave_1 removed [ 130.154575][ T6202] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.680389][ T6204] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.688768][ T6212] netlink: 9 bytes leftover after parsing attributes in process `syz.1.63'. [ 131.934524][ T6223] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 132.812816][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.819382][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.916900][ T6223] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.283853][ T6255] Zero length message leads to an empty skb [ 140.699375][ T6311] Process accounting paused [ 143.328568][ T6374] ======================================================= [ 143.328568][ T6374] WARNING: The mand mount option has been deprecated and [ 143.328568][ T6374] and is ignored by this kernel. Remove the mand [ 143.328568][ T6374] option from the mount to silence this warning. [ 143.328568][ T6374] ======================================================= [ 151.142750][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 152.192171][ T6476] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 152.204647][ T6471] FAULT_INJECTION: forcing a failure. [ 152.204647][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 152.308905][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.0.101 Not tainted syzkaller #0 PREEMPT(full) [ 152.308943][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.308960][ T6471] Call Trace: [ 152.308969][ T6471] [ 152.308979][ T6471] dump_stack_lvl+0x100/0x190 [ 152.309017][ T6471] should_fail_ex.cold+0x5/0xa [ 152.309047][ T6471] should_failslab+0xc2/0x120 [ 152.309086][ T6471] kmem_cache_alloc_noprof+0x91/0x6a0 [ 152.309119][ T6471] ? rcu_is_watching+0x12/0xc0 [ 152.309152][ T6471] ? anon_vma_clone+0x2ba/0xcd0 [ 152.309200][ T6471] anon_vma_clone+0x2ba/0xcd0 [ 152.309265][ T6471] copy_vma+0x6ed/0xac0 [ 152.309306][ T6471] ? __pfx_copy_vma+0x10/0x10 [ 152.309385][ T6471] copy_vma_and_data+0x1cf/0x7c0 [ 152.309424][ T6471] ? __pfx_copy_vma_and_data+0x10/0x10 [ 152.309474][ T6471] ? __vma_start_write+0x17f/0x280 [ 152.309503][ T6471] ? __pfx___vma_start_write+0x10/0x10 [ 152.309543][ T6471] move_vma+0x574/0x1920 [ 152.309583][ T6471] ? __pfx_move_vma+0x10/0x10 [ 152.309621][ T6471] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 152.309668][ T6471] ? cap_mmap_addr+0x4b/0x120 [ 152.309701][ T6471] ? bpf_lsm_mmap_addr+0x9/0x30 [ 152.309737][ T6471] ? security_mmap_addr+0x71/0x1e0 [ 152.309781][ T6471] ? __get_unmapped_area+0x255/0x3e0 [ 152.309831][ T6471] ? vrm_set_new_addr+0x204/0x290 [ 152.309868][ T6471] mremap_to+0x234/0x4c0 [ 152.309900][ T6471] ? mas_walk+0x6ef/0x9b0 [ 152.309943][ T6471] ? __pfx_mremap_to+0x10/0x10 [ 152.309975][ T6471] ? check_prep_vma+0x912/0xe60 [ 152.310017][ T6471] __do_sys_mremap+0x88c/0x1850 [ 152.310064][ T6471] ? __pfx___do_sys_mremap+0x10/0x10 [ 152.310110][ T6471] ? __pfx_do_futex+0x10/0x10 [ 152.310155][ T6471] ? __x64_sys_futex+0x34f/0x4d0 [ 152.310213][ T6471] do_syscall_64+0x115/0x840 [ 152.310255][ T6471] ? clear_bhb_loop+0x70/0xc0 [ 152.310292][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.310324][ T6471] RIP: 0033:0x7fc4b319e0d9 [ 152.310349][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.310378][ T6471] RSP: 002b:00007fc4b4023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 152.310407][ T6471] RAX: ffffffffffffffda RBX: 00007fc4b3426450 RCX: 00007fc4b319e0d9 [ 152.310427][ T6471] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 152.310445][ T6471] RBP: 00007fc4b3235024 R08: 0000000100000000 R09: 0000000000000000 [ 152.310464][ T6471] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 152.310481][ T6471] R13: 00007fc4b34264e8 R14: 00007fc4b3426450 R15: 00007ffc78c8edc8 [ 152.310521][ T6471] [ 154.872022][ T6504] binder: 6503:6504 ioctl 541b 0 returned -22 [ 155.835829][ T6510] vhci_hcd: not connected 4 [ 156.297241][ T6518] syz.1.111 (6518) used greatest stack depth: 19752 bytes left [ 156.564468][ T6532] program syz.1.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.627732][ T6532] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 157.838641][ T6554] can: request_module (can-proto-5) failed. [ 159.948722][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.120'. [ 161.783505][ T4928] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 164.237603][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 164.248804][ T6652] netlink: 13 bytes leftover after parsing attributes in process `syz.2.132'. [ 164.378338][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 164.571924][ T6656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.617829][ T6656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.663650][ T6656] bond0 (unregistering): Released all slaves [ 168.801506][ T6707] mmap: syz.1.139 (6707) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.127743][ T4928] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 171.398738][ T6732] FAULT_INJECTION: forcing a failure. [ 171.398738][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 171.458324][ T6722] Process accounting resumed [ 171.575531][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.3.144 Not tainted syzkaller #0 PREEMPT(full) [ 171.575563][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.575578][ T6732] Call Trace: [ 171.575585][ T6732] [ 171.575594][ T6732] dump_stack_lvl+0x100/0x190 [ 171.575626][ T6732] should_fail_ex.cold+0x5/0xa [ 171.575654][ T6732] should_failslab+0xc2/0x120 [ 171.575691][ T6732] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 171.575725][ T6732] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 171.575755][ T6732] ? rcu_is_watching+0x12/0xc0 [ 171.575784][ T6732] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 171.575828][ T6732] krealloc_node_align_noprof+0x1f9/0x3e0 [ 171.575864][ T6732] snd_pcm_hw_rule_add+0x3b3/0x510 [ 171.575904][ T6732] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 171.575944][ T6732] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 171.575981][ T6732] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 171.576024][ T6732] ? mutex_init_lockdep+0xf1/0x120 [ 171.576048][ T6732] ? snd_pcm_attach_substream+0x287/0xd20 [ 171.576087][ T6732] snd_pcm_open_substream+0x942/0x1850 [ 171.576122][ T6732] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 171.576163][ T6732] ? snd_pcm_oss_open+0x5e5/0x1390 [ 171.576193][ T6732] snd_pcm_oss_open+0x735/0x1390 [ 171.576227][ T6732] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 171.576253][ T6732] ? __lock_acquire+0x49f/0x1a40 [ 171.576292][ T6732] ? __pfx_default_wake_function+0x10/0x10 [ 171.576331][ T6732] ? do_raw_spin_lock+0x128/0x260 [ 171.576359][ T6732] ? soundcore_open+0x231/0x5a0 [ 171.576399][ T6732] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 171.576425][ T6732] soundcore_open+0x2e3/0x5a0 [ 171.576464][ T6732] ? __pfx_soundcore_open+0x10/0x10 [ 171.576501][ T6732] chrdev_open+0x234/0x6a0 [ 171.576525][ T6732] ? __pfx_apparmor_file_open+0x10/0x10 [ 171.576553][ T6732] ? __pfx_chrdev_open+0x10/0x10 [ 171.576580][ T6732] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 171.576614][ T6732] do_dentry_open+0x6ab/0x14d0 [ 171.576638][ T6732] ? __pfx_chrdev_open+0x10/0x10 [ 171.576672][ T6732] vfs_open+0x82/0x3f0 [ 171.576707][ T6732] path_openat+0x2873/0x4280 [ 171.576744][ T6732] ? __pfx_path_openat+0x10/0x10 [ 171.576777][ T6732] do_file_open+0x20e/0x430 [ 171.576807][ T6732] ? __pfx_do_file_open+0x10/0x10 [ 171.576853][ T6732] ? alloc_fd+0x471/0x7a0 [ 171.576880][ T6732] ? do_getname+0x191/0x390 [ 171.576913][ T6732] do_sys_openat2+0x10f/0x1e0 [ 171.576946][ T6732] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.576994][ T6732] ? __fget_files+0x21f/0x3d0 [ 171.577022][ T6732] __x64_sys_openat+0x12d/0x210 [ 171.577054][ T6732] ? __pfx___x64_sys_openat+0x10/0x10 [ 171.577088][ T6732] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 171.577126][ T6732] ? syscall_user_dispatch+0x76/0x130 [ 171.577162][ T6732] do_syscall_64+0x115/0x840 [ 171.577195][ T6732] ? clear_bhb_loop+0x70/0xc0 [ 171.577225][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.577248][ T6732] RIP: 0033:0x7f4134b9e0d9 [ 171.577267][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.577289][ T6732] RSP: 002b:00007f4135a44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.577311][ T6732] RAX: ffffffffffffffda RBX: 00007f4134e25fa0 RCX: 00007f4134b9e0d9 [ 171.577326][ T6732] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 171.577340][ T6732] RBP: 00007f4134c35024 R08: 0000000000000000 R09: 0000000000000000 [ 171.577354][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.577367][ T6732] R13: 00007f4134e26038 R14: 00007f4134e25fa0 R15: 00007ffcaf6ce298 [ 171.577397][ T6732] [ 172.565737][ T30] audit: type=1800 audit(1786108454.171:3): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.147" name="lu_gp_id" dev="configfs" ino=14116 res=0 errno=0 [ 174.378325][ T6765] process 'syz.2.150' launched '/dev/fd/3' with NULL argv: empty string added [ 176.756114][ T6795] __vm_enough_memory: pid: 6795, comm: syz.0.155, bytes: 4398046457856 not enough memory for the allocation [ 176.808499][ T30] audit: type=1800 audit(1786108458.411:4): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.155" name="members" dev="configfs" ino=15232 res=0 errno=0 [ 178.352524][ T6796] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 180.372913][ T30] audit: type=1800 audit(1786108461.961:5): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.164" name="version" dev="configfs" ino=15418 res=0 errno=0 [ 183.625716][ T6863] syz.1.171 (6863) used greatest stack depth: 19400 bytes left [ 191.845594][ T6980] ubi0: attaching mtd0 [ 191.935895][ T6980] ubi0: scanning is finished [ 192.380334][ T6996] netlink: 25 bytes leftover after parsing attributes in process `syz.0.193'. [ 192.441801][ T6980] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 192.449701][ T6980] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 192.460009][ T6980] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 192.476225][ T6980] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 192.492374][ T6980] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 192.507722][ T6980] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 192.537817][ T6980] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1210639982 [ 192.556567][ T6980] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 192.571044][ T6972] ubi0: detaching mtd0 [ 192.585921][ T6999] ubi0: background thread "ubi_bgt0d" started, PID 6999 [ 192.782355][ T6972] ubi0: mtd0 is detached [ 194.261757][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268151][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.464521][ T7059] sd 0:0:1:0: PR command failed: 1026 [ 197.551526][ T7059] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 197.558472][ T7059] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 198.040260][ T7068] netlink: 29 bytes leftover after parsing attributes in process `syz.0.203'. [ 198.352953][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 200.350957][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'. [ 200.401377][ T7088] bond0: entered promiscuous mode [ 200.407699][ T7088] bond_slave_0: entered promiscuous mode [ 200.417621][ T7088] bond_slave_1: entered promiscuous mode [ 201.563514][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.213'. [ 201.987762][ T7110] Process accounting paused [ 202.226073][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 202.273582][ T7141] netlink: 354 bytes leftover after parsing attributes in process `syz.3.216'. [ 202.285199][ T7133] netlink: 13 bytes leftover after parsing attributes in process `syz.0.214'. [ 202.308491][ T7133] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 202.741667][ T7147] netlink: 286 bytes leftover after parsing attributes in process `syz.3.217'. [ 204.068458][ T30] audit: type=1800 audit(1786108485.671:6): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.222" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 205.214845][ T7178] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input8 [ 207.012375][ T7209] nbd: socks must be embedded in a SOCK_ITEM attr [ 207.058231][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 207.089759][ T7209] block nbd0: shutting down sockets [ 207.427983][ T7211] team0 (unregistering): Port device team_slave_0 removed [ 207.462600][ T7211] team0 (unregistering): Port device team_slave_1 removed [ 207.835576][ T7215] FAULT_INJECTION: forcing a failure. [ 207.835576][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 207.857815][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(full) [ 207.857855][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.857873][ T7215] Call Trace: [ 207.857883][ T7215] [ 207.857894][ T7215] dump_stack_lvl+0x100/0x190 [ 207.857933][ T7215] should_fail_ex.cold+0x5/0xa [ 207.857966][ T7215] should_failslab+0xc2/0x120 [ 207.858006][ T7215] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 207.858052][ T7215] ? sock_alloc_inode+0x26/0x2c0 [ 207.858081][ T7215] ? __pfx_sock_alloc_inode+0x10/0x10 [ 207.858109][ T7215] sock_alloc_inode+0x26/0x2c0 [ 207.858134][ T7215] ? __pfx_sock_alloc_inode+0x10/0x10 [ 207.858177][ T7215] alloc_inode+0x68/0x250 [ 207.858217][ T7215] sock_alloc+0x44/0x280 [ 207.858258][ T7215] ? security_socket_create+0x7f/0x250 [ 207.858298][ T7215] sock_create_lite+0x82/0x120 [ 207.858355][ T7215] __netlink_kernel_create+0xbd/0x750 [ 207.858392][ T7215] ? __kvmalloc_node_noprof+0x36d/0x970 [ 207.858437][ T7215] ? __pfx___netlink_kernel_create+0x10/0x10 [ 207.858488][ T7215] fib_net_init+0x2ab/0x440 [ 207.858526][ T7215] ? is_module_address+0x69/0xf0 [ 207.858557][ T7215] ? __pfx_fib_net_init+0x10/0x10 [ 207.858592][ T7215] ? timer_init_key+0x150/0x310 [ 207.858636][ T7215] ? __pfx_nl_fib_input+0x10/0x10 [ 207.858684][ T7215] ? devinet_init_net+0x56c/0x8d0 [ 207.858744][ T7215] ? __pfx_fib_net_init+0x10/0x10 [ 207.858783][ T7215] ops_init+0x1e2/0x5f0 [ 207.858838][ T7215] setup_net+0x118/0x3a0 [ 207.858890][ T7215] ? __pfx_setup_net+0x10/0x10 [ 207.858937][ T7215] ? mutex_init_lockdep+0xf1/0x120 [ 207.858977][ T7215] copy_net_ns+0x46f/0x7c0 [ 207.859037][ T7215] create_new_namespaces+0x3ea/0xac0 [ 207.859078][ T7215] unshare_nsproxy_namespaces+0xf2/0x220 [ 207.859116][ T7215] ksys_unshare+0x438/0xab0 [ 207.859156][ T7215] ? __pfx_ksys_unshare+0x10/0x10 [ 207.859205][ T7215] __x64_sys_unshare+0x31/0x40 [ 207.859240][ T7215] do_syscall_64+0x115/0x840 [ 207.859278][ T7215] ? clear_bhb_loop+0x70/0xc0 [ 207.859313][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.859342][ T7215] RIP: 0033:0x7fc4b319e0d9 [ 207.859365][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.859392][ T7215] RSP: 002b:00007fc4b40c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 207.859419][ T7215] RAX: ffffffffffffffda RBX: 00007fc4b3425fa0 RCX: 00007fc4b319e0d9 [ 207.859438][ T7215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 207.859455][ T7215] RBP: 00007fc4b3235024 R08: 0000000000000000 R09: 0000000000000000 [ 207.859472][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.859489][ T7215] R13: 00007fc4b3426038 R14: 00007fc4b3425fa0 R15: 00007ffc78c8edc8 [ 207.859530][ T7215] [ 208.836322][ T7230] tipc: Started in network mode [ 208.904706][ T7230] tipc: Node identity ee00, cluster identity 4711 [ 208.943781][ T7230] tipc: Node number set to 60928 [ 210.603568][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 212.393269][ T7257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.401196][ T7257] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 212.438795][ T7269] netlink: 17 bytes leftover after parsing attributes in process `syz.2.240'. [ 212.450683][ T7257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 212.472847][ T7257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.001742][ T7122] Bluetooth: hci0: command 0x0c1a tx timeout [ 214.482014][ T7122] Bluetooth: hci3: command 0x0c1a tx timeout [ 214.488129][ T7122] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.080530][ T7309] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.228446][ T7337] random: crng reseeded on system resumption [ 216.302705][ T7121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.357748][ T7118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.374528][ T7118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.385569][ T7118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.396262][ T7118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.405296][ T7118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.631840][ T7121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.798305][ T7121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.968341][ T7121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.144706][ T7309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.159532][ T7309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.171849][ T7309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.183532][ T7309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.191290][ T7309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.305243][ T7121] bridge_slave_1: left allmulticast mode [ 218.322557][ T7121] bridge_slave_1: left promiscuous mode [ 218.349791][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.380156][ T7121] bridge_slave_0: left allmulticast mode [ 218.385892][ T7121] bridge_slave_0: left promiscuous mode [ 218.391785][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.486692][ T7118] Bluetooth: hci3: command tx timeout [ 218.587154][ T7121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.596283][ T7121] bond_slave_0: left promiscuous mode [ 218.605839][ T7121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.621112][ T7121] bond_slave_1: left promiscuous mode [ 218.629172][ T7121] bond0 (unregistering): Released all slaves [ 219.449142][ T7121] hsr_slave_0: left promiscuous mode [ 219.463149][ T7121] hsr_slave_1: left promiscuous mode [ 219.481251][ T7121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.497720][ T7121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.508672][ T7121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.516660][ T7121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.558885][ T7121] veth1_macvtap: left promiscuous mode [ 219.565725][ T7121] veth0_macvtap: left promiscuous mode [ 219.572573][ T7121] veth1_vlan: left promiscuous mode [ 219.578490][ T7121] veth0_vlan: left promiscuous mode [ 219.936479][ T7121] team0 (unregistering): Port device team_slave_1 removed [ 219.956170][ T7121] team0 (unregistering): Port device team_slave_0 removed [ 220.125101][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.240708][ T7118] Bluetooth: hci2: command tx timeout [ 220.562845][ T7118] Bluetooth: hci3: command tx timeout [ 220.769914][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.793872][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.802379][ T7338] bridge_slave_0: entered allmulticast mode [ 220.811027][ T7338] bridge_slave_0: entered promiscuous mode [ 220.875563][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.900265][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.916140][ T7338] bridge_slave_1: entered allmulticast mode [ 220.939983][ T7338] bridge_slave_1: entered promiscuous mode [ 221.339368][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.505146][ T7121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.531474][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.616358][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 221.735198][ T7338] team0: Port device team_slave_0 added [ 221.750214][ T7338] team0: Port device team_slave_1 added [ 221.797236][ T7121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.973504][ T7121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.991211][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.998456][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.007498][ T7365] bridge_slave_0: entered allmulticast mode [ 222.016426][ T7365] bridge_slave_0: entered promiscuous mode [ 222.027918][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.035706][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.063056][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.075812][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.082986][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.109194][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.143618][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.151327][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.159862][ T7365] bridge_slave_1: entered allmulticast mode [ 222.169389][ T7365] bridge_slave_1: entered promiscuous mode [ 222.308736][ T7121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.320722][ T7118] Bluetooth: hci2: command tx timeout [ 222.336376][ T7365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.349459][ T7365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.369374][ T7338] hsr_slave_0: entered promiscuous mode [ 222.377162][ T7338] hsr_slave_1: entered promiscuous mode [ 222.384491][ T7338] debugfs: 'hsr0' already exists in 'hsr' [ 222.390260][ T7338] Cannot create hsr debugfs directory [ 222.448963][ T7365] team0: Port device team_slave_0 added [ 222.512249][ T7365] team0: Port device team_slave_1 added [ 222.604667][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.612014][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.640436][ T7118] Bluetooth: hci3: command tx timeout [ 222.646982][ T7365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.689012][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.697674][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.725401][ T7365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.049076][ T7365] hsr_slave_0: entered promiscuous mode [ 223.061702][ T7365] hsr_slave_1: entered promiscuous mode [ 223.068313][ T7365] debugfs: 'hsr0' already exists in 'hsr' [ 223.081916][ T7365] Cannot create hsr debugfs directory [ 223.409811][ T7121] bridge_slave_1: left allmulticast mode [ 223.419299][ T7121] bridge_slave_1: left promiscuous mode [ 223.429093][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.469389][ T7121] bridge_slave_0: left allmulticast mode [ 223.485816][ T7121] bridge_slave_0: left promiscuous mode [ 223.507406][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.795166][ T7121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.821650][ T7121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.852056][ T7121] bond0 (unregistering): Released all slaves [ 224.097399][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 224.400556][ T7118] Bluetooth: hci2: command tx timeout [ 224.720685][ T7118] Bluetooth: hci3: command tx timeout [ 224.806809][ T7121] hsr_slave_0: left promiscuous mode [ 224.816793][ T7121] hsr_slave_1: left promiscuous mode [ 224.826015][ T7121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.835981][ T7121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.857643][ T7121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.872741][ T7121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.894896][ T7121] veth1_macvtap: left promiscuous mode [ 224.900503][ T7121] veth0_macvtap: left promiscuous mode [ 225.265590][ T7121] team0 (unregistering): Port device team_slave_1 removed [ 225.305565][ T7121] team0 (unregistering): Port device team_slave_0 removed [ 226.037034][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 226.480656][ T7118] Bluetooth: hci2: command tx timeout [ 227.665833][ T7365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.716809][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.738903][ T7365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.759204][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.781751][ T7365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.805989][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.829424][ T7365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.848199][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.149943][ T7338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.177966][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 228.189924][ T7338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.226746][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 228.235600][ T7338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.271335][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.388095][ T7338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.410869][ T7338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.554317][ T7365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.811042][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.834932][ T7365] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.991184][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.998424][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.026351][ T7117] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.033691][ T7117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.137971][ T7338] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.208676][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.215972][ T7119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.273446][ T7597] ubi0: attaching mtd0 [ 231.286336][ T7597] ubi0: scanning is finished [ 231.319227][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.326556][ T7119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.659660][ T7597] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 231.667606][ T7597] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 231.678221][ T7597] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 231.689619][ T7597] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 231.708143][ T7597] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 231.722556][ T7597] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 231.736917][ T7597] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1210639982 [ 231.794404][ T7597] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 231.821608][ T7599] ubi0: detaching mtd0 [ 231.829021][ T7606] ubi0: background thread "ubi_bgt0d" started, PID 7606 [ 231.902786][ T7599] ubi0: mtd0 is detached [ 233.269698][ T7365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.291480][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.648234][ T7615] Process accounting resumed [ 233.779833][ T7338] veth0_vlan: entered promiscuous mode [ 233.797337][ T7365] veth0_vlan: entered promiscuous mode [ 233.836669][ T7338] veth1_vlan: entered promiscuous mode [ 233.883584][ T7365] veth1_vlan: entered promiscuous mode [ 234.044232][ T7365] veth0_macvtap: entered promiscuous mode [ 234.067157][ T7338] veth0_macvtap: entered promiscuous mode [ 234.104549][ T7338] veth1_macvtap: entered promiscuous mode [ 234.127057][ T7365] veth1_macvtap: entered promiscuous mode [ 234.173886][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.193464][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.205695][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.251730][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.292967][ T7610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.313987][ T7610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.474362][ T7145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.548317][ T7610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.558047][ T7610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.654453][ T7119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.663718][ T7145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.682428][ T7119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.692897][ T7145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.730895][ T7610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.770551][ T7119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.784675][ T7610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.798321][ T7119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.808011][ T7610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.846501][ T7145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.868719][ T7145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.941508][ T7365] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 235.035196][ T7656] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 235.063094][ T7656] netlink: 9 bytes leftover after parsing attributes in process `syz.1.278'. [ 235.283635][ T7661] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 235.298583][ T7661] nbd: error processing sock list [ 235.338472][ T7663] vivid-011: ================= START STATUS ================= [ 235.347495][ T7663] vivid-011: Radio HW Seek Mode: Bounded [ 235.355246][ T7663] vivid-011: Radio Programmable HW Seek: false [ 235.362010][ T7663] vivid-011: RDS Rx I/O Mode: Block I/O [ 235.371069][ T7663] vivid-011: Generate RBDS Instead of RDS: false [ 235.378166][ T7663] vivid-011: RDS Reception: true [ 235.385965][ T7663] vivid-011: RDS Program Type: 0 inactive [ 235.392000][ T7663] vivid-011: RDS PS Name: inactive [ 235.397535][ T7663] vivid-011: RDS Radio Text: inactive [ 235.403181][ T7663] vivid-011: RDS Traffic Announcement: false inactive [ 235.410178][ T7663] vivid-011: RDS Traffic Program: false inactive [ 235.416933][ T7663] vivid-011: RDS Music: false inactive [ 235.423201][ T7663] vivid-011: ================== END STATUS ================== [ 235.690765][ T7675] ubi0: attaching mtd0 [ 235.704405][ T7675] ubi0: scanning is finished [ 235.968602][ T7675] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 235.985500][ T7675] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 235.993515][ T7675] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 236.004533][ T7675] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 236.013211][ T7675] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 236.020297][ T7675] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 236.028940][ T7675] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1210639982 [ 236.039375][ T7675] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 236.049988][ T7678] ubi0: detaching mtd0 [ 236.059204][ T7683] ubi0: background thread "ubi_bgt0d" started, PID 7683 [ 236.159588][ T7678] ubi0: mtd0 is detached [ 240.292700][ T7725] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.389187][ T7725] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.407590][ T7725] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 240.422603][ T7725] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 240.529101][ T7725] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.583726][ T7725] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 240.616899][ T7726] netlink: 'syz.3.286': attribute type 1 has an invalid length. [ 240.801639][ T7725] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 241.794712][ T7119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.017428][ T7119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.178282][ T7119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.320762][ T7118] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.396304][ T7309] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.413871][ T7309] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.423168][ T7309] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.435280][ T7309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.445687][ T7309] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.454519][ T7309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.560598][ T7309] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.658620][ T7119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.162641][ T7119] bridge_slave_1: left allmulticast mode [ 244.178415][ T7119] bridge_slave_1: left promiscuous mode [ 244.185958][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.212721][ T7119] bridge_slave_0: left allmulticast mode [ 244.218452][ T7119] bridge_slave_0: left promiscuous mode [ 244.218739][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.482695][ T7309] Bluetooth: hci4: command tx timeout [ 244.489839][ T7118] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.640844][ T7309] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.715469][ T7785] ovs_: entered promiscuous mode [ 245.097969][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 245.688880][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 245.832051][ T7119] hsr_slave_0: left promiscuous mode [ 245.853253][ T7119] hsr_slave_1: left promiscuous mode [ 245.867096][ T7119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.893233][ T7119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.932808][ T7119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.948222][ T7119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.988343][ T7119] veth1_macvtap: left promiscuous mode [ 246.001552][ T7119] veth0_macvtap: left promiscuous mode [ 246.011426][ T7119] veth1_vlan: left promiscuous mode [ 246.034163][ T7119] veth0_vlan: left promiscuous mode [ 246.560953][ T7118] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.567301][ T7309] Bluetooth: hci4: command tx timeout [ 247.276389][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 248.130775][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.156211][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.182452][ T7750] bridge_slave_0: entered allmulticast mode [ 248.206436][ T7750] bridge_slave_0: entered promiscuous mode [ 248.243852][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.258836][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.287354][ T7750] bridge_slave_1: entered allmulticast mode [ 248.289502][ T7118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.309908][ T7118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.318871][ T7750] bridge_slave_1: entered promiscuous mode [ 248.324899][ T7118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.338704][ T7118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.346618][ T7118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.506622][ T7750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.550217][ T7750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.643227][ T7309] Bluetooth: hci4: command tx timeout [ 248.735239][ T7119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.988619][ T7119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.038086][ T7750] team0: Port device team_slave_0 added [ 249.204021][ T7750] team0: Port device team_slave_1 added [ 249.300967][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 249.364465][ T7119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.490279][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.505386][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.547668][ T7750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.652047][ T7750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.659150][ T7750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.688793][ T7750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.838960][ T7119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.096056][ T7750] hsr_slave_0: entered promiscuous mode [ 250.103007][ T7750] hsr_slave_1: entered promiscuous mode [ 250.109551][ T7750] debugfs: 'hsr0' already exists in 'hsr' [ 250.116220][ T7750] Cannot create hsr debugfs directory [ 250.401825][ T7309] Bluetooth: hci2: command tx timeout [ 250.720929][ T7309] Bluetooth: hci4: command tx timeout [ 251.019011][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 251.100041][ T7119] bridge_slave_1: left allmulticast mode [ 251.106735][ T7119] bridge_slave_1: left promiscuous mode [ 251.114916][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.126083][ T7119] bridge_slave_0: left allmulticast mode [ 251.132331][ T7119] bridge_slave_0: left promiscuous mode [ 251.139438][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.299028][ T7119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.317675][ T7119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.327948][ T7119] bond0 (unregistering): Released all slaves [ 252.144347][ T7119] hsr_slave_0: left promiscuous mode [ 252.152148][ T7119] hsr_slave_1: left promiscuous mode [ 252.160259][ T7119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.169397][ T7119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.178166][ T7119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.187170][ T7119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.202179][ T7119] veth1_macvtap: left promiscuous mode [ 252.207800][ T7119] veth0_macvtap: left promiscuous mode [ 252.213508][ T7119] veth1_vlan: left promiscuous mode [ 252.219659][ T7119] veth0_vlan: left promiscuous mode [ 252.480634][ T7309] Bluetooth: hci2: command tx timeout [ 252.562824][ T7119] team0 (unregistering): Port device team_slave_1 removed [ 252.587594][ T7119] team0 (unregistering): Port device team_slave_0 removed [ 252.926610][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.934340][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.950690][ T7835] bridge_slave_0: entered allmulticast mode [ 252.991407][ T7835] bridge_slave_0: entered promiscuous mode [ 253.065013][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.082599][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.089861][ T7835] bridge_slave_1: entered allmulticast mode [ 253.098709][ T7835] bridge_slave_1: entered promiscuous mode [ 253.427954][ T7835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.513325][ T7835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.866470][ T7835] team0: Port device team_slave_0 added [ 253.921955][ T7835] team0: Port device team_slave_1 added [ 254.073757][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 254.128739][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.143919][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.174666][ T7835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.349218][ T7835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.356420][ T7835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.384887][ T7835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.560579][ T7309] Bluetooth: hci2: command tx timeout [ 254.612427][ T7835] hsr_slave_0: entered promiscuous mode [ 254.622126][ T7835] hsr_slave_1: entered promiscuous mode [ 254.632646][ T7835] debugfs: 'hsr0' already exists in 'hsr' [ 254.642845][ T7835] Cannot create hsr debugfs directory [ 254.652006][ T7750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.679479][ T7750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.688043][ T7750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.708510][ T7750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.778421][ T7750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.832332][ T7750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.853921][ T7750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.876936][ T7750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.546370][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.683297][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.694979][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.954999][ T7750] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.980194][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.987497][ T7250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.033730][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.041051][ T7250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.646171][ T7309] Bluetooth: hci2: command tx timeout [ 256.873339][ T7835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.958612][ T7835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.983077][ T7835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.030989][ T7835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.059688][ T7835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.095376][ T7835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.136186][ T7835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.159147][ T7835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.576038][ T7996] netlink: 25 bytes leftover after parsing attributes in process `syz.1.309'. [ 257.693996][ T8001] netlink: zone id is out of range [ 257.699368][ T8001] netlink: zone id is out of range [ 257.767625][ T7835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.796361][ T7750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.114685][ T8013] netlink: 32 bytes leftover after parsing attributes in process `syz.1.310'. [ 258.366835][ T7835] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.544780][ T7145] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.552029][ T7145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.644445][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.651669][ T7120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.717647][ T7750] veth0_vlan: entered promiscuous mode [ 258.750654][ T7750] veth1_vlan: entered promiscuous mode [ 258.932751][ T7750] veth0_macvtap: entered promiscuous mode [ 258.972514][ T7750] veth1_macvtap: entered promiscuous mode [ 259.108495][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.165679][ T7750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.240749][ T7250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.266476][ T7250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.484759][ T7121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.685470][ T7121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.900917][ T7121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.980542][ T7145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.118527][ T7118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.133765][ T7118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.144176][ T7118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.158507][ T7118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.169918][ T7118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.221220][ T7121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.418184][ T7131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.430605][ T7120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.462644][ T7131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.553076][ T7145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.598684][ T7145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.647933][ T7118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.665404][ T7118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.674348][ T7118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.685230][ T7118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.695918][ T7118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.998159][ T8074] vivid-007: ================= START STATUS ================= [ 261.037259][ T7835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.047469][ T8074] vivid-007: Enable Output Cropping: true grabbed [ 261.098217][ T8074] vivid-007: Enable Output Composing: true grabbed [ 261.153229][ T8074] vivid-007: Enable Output Scaler: true grabbed [ 261.246272][ T8074] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 261.310690][ T8074] vivid-007: Transmit Mode: HDMI grabbed [ 261.361452][ T8074] vivid-007: Hotplug Present: 0x00000000 [ 261.399689][ T8074] vivid-007: RxSense Present: 0x00000000 [ 261.423700][ T8074] vivid-007: EDID Present: 0x00000000 [ 261.446566][ T8074] vivid-007: ================== END STATUS ================== [ 261.599514][ T7121] bridge_slave_1: left allmulticast mode [ 261.624561][ T7121] bridge_slave_1: left promiscuous mode [ 261.642798][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.669670][ T7121] bridge_slave_0: left allmulticast mode [ 261.686741][ T7121] bridge_slave_0: left promiscuous mode [ 261.700755][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.879524][ T7121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.892095][ T7121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.909553][ T7121] bond0 (unregistering): Released all slaves [ 262.032864][ T7121] ovs_: left promiscuous mode [ 262.242308][ T7309] Bluetooth: hci0: command tx timeout [ 262.457495][ T7835] veth0_vlan: entered promiscuous mode [ 262.549357][ T7121] hsr_slave_0: left promiscuous mode [ 262.555539][ T7121] hsr_slave_1: left promiscuous mode [ 262.565281][ T7121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.574287][ T7121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.584380][ T7121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.593904][ T7121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.614754][ T7121] veth1_macvtap: left promiscuous mode [ 262.620332][ T7121] veth0_macvtap: left promiscuous mode [ 262.626438][ T7121] veth1_vlan: left promiscuous mode [ 262.633248][ T7121] veth0_vlan: left promiscuous mode [ 262.801156][ T7309] Bluetooth: hci3: command tx timeout [ 262.988106][ T7121] team0 (unregistering): Port device team_slave_1 removed [ 263.022974][ T7121] team0 (unregistering): Port device team_slave_0 removed [ 263.250575][ T7835] veth1_vlan: entered promiscuous mode [ 263.649816][ T7835] veth0_macvtap: entered promiscuous mode [ 263.815237][ T7835] veth1_macvtap: entered promiscuous mode [ 263.981648][ T8047] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.996868][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.013728][ T8047] bridge_slave_0: entered allmulticast mode [ 264.023535][ T8047] bridge_slave_0: entered promiscuous mode [ 264.045416][ T8047] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.053935][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.061234][ T8047] bridge_slave_1: entered allmulticast mode [ 264.069440][ T8047] bridge_slave_1: entered promiscuous mode [ 264.172136][ T7121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.233507][ T7835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.322567][ T7309] Bluetooth: hci0: command tx timeout [ 264.385533][ T8047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.409594][ T7835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.424208][ T8047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.467560][ T7121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.625146][ T8047] team0: Port device team_slave_0 added [ 264.706869][ T7121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.752431][ T8047] team0: Port device team_slave_1 added [ 264.768216][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.775857][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.783369][ T8062] bridge_slave_0: entered allmulticast mode [ 264.791678][ T8062] bridge_slave_0: entered promiscuous mode [ 264.883703][ T7309] Bluetooth: hci3: command tx timeout [ 264.902037][ T7121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.919018][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.928342][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.935824][ T8062] bridge_slave_1: entered allmulticast mode [ 264.944937][ T8062] bridge_slave_1: entered promiscuous mode [ 265.069804][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.077250][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.104720][ T8047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.138550][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.160600][ T7145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.199438][ T8047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.225672][ T8047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.256353][ T8047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.288058][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.459202][ T8062] team0: Port device team_slave_0 added [ 265.504521][ T8062] team0: Port device team_slave_1 added [ 265.604929][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.614738][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.641589][ T8062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.691218][ T8047] hsr_slave_0: entered promiscuous mode [ 265.697946][ T8047] hsr_slave_1: entered promiscuous mode [ 265.706440][ T8047] debugfs: 'hsr0' already exists in 'hsr' [ 265.712958][ T8047] Cannot create hsr debugfs directory [ 265.720588][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.727655][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.754612][ T8062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.774276][ T7610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.788111][ T7610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.840079][ T7121] bridge_slave_1: left allmulticast mode [ 265.846430][ T7121] bridge_slave_1: left promiscuous mode [ 265.854047][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.864841][ T7121] bridge_slave_0: left allmulticast mode [ 265.871714][ T7121] bridge_slave_0: left promiscuous mode [ 265.877415][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.022472][ T7121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.040248][ T7121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.051212][ T7121] bond0 (unregistering): Released all slaves [ 266.140196][ T8062] hsr_slave_0: entered promiscuous mode [ 266.146903][ T8062] hsr_slave_1: entered promiscuous mode [ 266.153638][ T8062] debugfs: 'hsr0' already exists in 'hsr' [ 266.159599][ T8062] Cannot create hsr debugfs directory [ 266.168274][ T7121] tipc: Left network mode [ 266.195564][ T7610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.211088][ T7610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.401561][ T7309] Bluetooth: hci0: command tx timeout [ 266.850844][ T7119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.960826][ T7309] Bluetooth: hci3: command tx timeout [ 267.054060][ T7121] hsr_slave_0: left promiscuous mode [ 267.060612][ T7121] hsr_slave_1: left promiscuous mode [ 267.067061][ T7121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.076810][ T7121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.086593][ T7121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.094622][ T7121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.112102][ T7121] veth1_macvtap: left promiscuous mode [ 267.117653][ T7121] veth0_macvtap: left promiscuous mode [ 267.126801][ T7121] veth1_vlan: left promiscuous mode [ 267.132457][ T7121] veth0_vlan: left promiscuous mode [ 267.704924][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 267.781378][ T7250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.852955][ T7250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.485315][ T7309] Bluetooth: hci0: command tx timeout [ 269.017352][ T8047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.042413][ T7309] Bluetooth: hci3: command tx timeout [ 269.044668][ T8047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.094831][ T8047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.140041][ T8047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.317898][ T8047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.348115][ T8047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.406425][ T8047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.466012][ T8047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 270.570276][ T8251] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input9 [ 271.021443][ T8047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.085147][ T8062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.133695][ T8062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.164785][ T8062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.213627][ T8062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.245789][ T8062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.302347][ T8062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.325659][ T8062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.379452][ T8062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.403685][ T8047] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.532728][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.540059][ T7120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.674056][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.681319][ T7119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.053246][ T7145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.335038][ T7145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.532813][ T7145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.766868][ T7145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.907824][ T8062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.969178][ T7118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.995445][ T7118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.006285][ T7118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.025902][ T7118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.041149][ T7118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.359384][ T8062] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.624267][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.631549][ T7119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.808477][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.815730][ T8058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.129650][ T7145] bridge_slave_1: left allmulticast mode [ 274.152031][ T7145] bridge_slave_1: left promiscuous mode [ 274.163541][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.188118][ T7145] bridge_slave_0: left allmulticast mode [ 274.197417][ T7145] bridge_slave_0: left promiscuous mode [ 274.214489][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.432913][ T7145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.450771][ T7145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.461017][ T7145] bond0 (unregistering): Released all slaves [ 274.830193][ T8047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.955622][ T7145] hsr_slave_0: left promiscuous mode [ 274.968206][ T7145] hsr_slave_1: left promiscuous mode [ 274.974451][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.985285][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.993820][ T7145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.012560][ T7145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.027173][ T7145] veth1_macvtap: left promiscuous mode [ 275.034752][ T7145] veth0_macvtap: left promiscuous mode [ 275.041697][ T7145] veth1_vlan: left promiscuous mode [ 275.047019][ T7145] veth0_vlan: left promiscuous mode [ 275.121237][ T7309] Bluetooth: hci4: command tx timeout [ 275.580256][ T7145] team0 (unregistering): Port device team_slave_1 removed [ 275.617830][ T7145] team0 (unregistering): Port device team_slave_0 removed [ 275.764231][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 276.173792][ T8047] veth0_vlan: entered promiscuous mode [ 276.231550][ T8047] veth1_vlan: entered promiscuous mode [ 277.200812][ T7309] Bluetooth: hci4: command tx timeout [ 277.246922][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 277.347140][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.354581][ T8286] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.362986][ T8286] bridge_slave_0: entered allmulticast mode [ 277.372355][ T8286] bridge_slave_0: entered promiscuous mode [ 277.409519][ T8062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.425896][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.433985][ T8286] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.441288][ T8286] bridge_slave_1: entered allmulticast mode [ 277.448692][ T8286] bridge_slave_1: entered promiscuous mode [ 277.494093][ T8286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.519725][ T8047] veth0_macvtap: entered promiscuous mode [ 277.532548][ T8286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.583831][ T8047] veth1_macvtap: entered promiscuous mode [ 277.596187][ T8286] team0: Port device team_slave_0 added [ 277.606509][ T8286] team0: Port device team_slave_1 added [ 277.681106][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.693732][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.720808][ T8286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.762845][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.787234][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.832702][ T8286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.972288][ T8286] hsr_slave_0: entered promiscuous mode [ 277.982157][ T8286] hsr_slave_1: entered promiscuous mode [ 278.032366][ T8047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.055146][ T8047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.217109][ T8405] netlink: 29 bytes leftover after parsing attributes in process `syz.3.325'. [ 278.601315][ T7145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.630999][ T7120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.648141][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 278.766634][ T8062] veth0_vlan: entered promiscuous mode [ 278.993712][ T7250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.023205][ T8062] veth1_vlan: entered promiscuous mode [ 279.098659][ T7145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.110720][ T7121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.134315][ T7145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.282054][ T7309] Bluetooth: hci4: command tx timeout [ 279.333408][ T7121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.370189][ T8062] veth0_macvtap: entered promiscuous mode [ 279.382957][ T7121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.462883][ T8062] veth1_macvtap: entered promiscuous mode [ 279.708488][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.743884][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.800700][ T7121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.838589][ T7121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.908040][ T7250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.022563][ T7250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.466362][ T7250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.482058][ T7250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.706243][ T8286] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.751306][ T8286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.768741][ T8058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.788759][ T8058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.838059][ T8286] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.872848][ T8286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.895510][ T8286] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.917282][ T8286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.951568][ T8286] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.988432][ T8286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.361304][ T7309] Bluetooth: hci4: command tx timeout [ 281.497593][ T8286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.649965][ T8286] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.985588][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.992878][ T7119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.249079][ T8488] ubi0: attaching mtd0 [ 282.261307][ T8488] ubi0: scanning is finished [ 282.422797][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.430047][ T7250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.484425][ T8488] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 282.512257][ T8488] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 282.566210][ T8488] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 282.601932][ T8488] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 282.613635][ T8488] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 282.659162][ T8488] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 282.714534][ T8488] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1210639982 [ 282.764799][ T8488] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 282.809200][ T8494] ubi0: detaching mtd0 [ 282.819164][ T8496] ubi0: background thread "ubi_bgt0d" started, PID 8496 [ 282.880721][ T8494] ubi0: mtd0 is detached [ 285.571925][ T8286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.389686][ T8286] veth0_vlan: entered promiscuous mode [ 286.967627][ T8286] veth1_vlan: entered promiscuous mode [ 287.866178][ T8286] veth0_macvtap: entered promiscuous mode [ 287.908832][ T8286] veth1_macvtap: entered promiscuous mode [ 288.027595][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.066834][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.125065][ T7121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.157721][ T7121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.200535][ T7119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.369131][ T7610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.485706][ T7121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.666841][ T7610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.737697][ T7121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.771673][ T7121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.901357][ T7610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.977951][ T7119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.986687][ T7119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.116784][ T7610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.154671][ T7118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.171317][ T7118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.181534][ T7118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.196724][ T7118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.213148][ T7118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.571862][ T8607] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 290.738902][ T7610] bridge_slave_1: left allmulticast mode [ 290.744793][ T7610] bridge_slave_1: left promiscuous mode [ 290.751579][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.762564][ T7610] bridge_slave_0: left allmulticast mode [ 290.774940][ T7610] bridge_slave_0: left promiscuous mode [ 290.781033][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.989506][ T7610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.001213][ T7610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.011590][ T7610] bond0 (unregistering): Released all slaves [ 291.280531][ T7309] Bluetooth: hci2: command tx timeout [ 291.491800][ T8632] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 292.776501][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 292.837203][ T7118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.853208][ T7118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.862372][ T7118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.871803][ T7118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.881157][ T7118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.944879][ T7610] hsr_slave_0: left promiscuous mode [ 292.967170][ T7610] hsr_slave_1: left promiscuous mode [ 292.981233][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.000539][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.012331][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.034752][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.058932][ T7610] veth1_macvtap: left promiscuous mode [ 293.083151][ T7610] veth0_macvtap: left promiscuous mode [ 293.089032][ T7610] veth1_vlan: left promiscuous mode [ 293.100885][ T7610] veth0_vlan: left promiscuous mode [ 293.360498][ T7309] Bluetooth: hci2: command tx timeout [ 293.503148][ T7610] team0 (unregistering): Port device team_slave_1 removed [ 293.545903][ T7610] team0 (unregistering): Port device team_slave_0 removed [ 294.019687][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 294.335409][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.344251][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.352123][ T8595] bridge_slave_0: entered allmulticast mode [ 294.360117][ T8595] bridge_slave_0: entered promiscuous mode [ 294.388026][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.395806][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.404241][ T8595] bridge_slave_1: entered allmulticast mode [ 294.413260][ T8595] bridge_slave_1: entered promiscuous mode [ 294.472645][ T8595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.503214][ T8595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.564685][ T8595] team0: Port device team_slave_0 added [ 294.583737][ T8595] team0: Port device team_slave_1 added [ 294.699999][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.715451][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.744755][ T8595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.791862][ T8595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.802832][ T8595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.837862][ T8595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.961304][ T7309] Bluetooth: hci3: command tx timeout [ 295.019875][ T7610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.349291][ T7610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.440638][ T7309] Bluetooth: hci2: command tx timeout [ 295.477234][ T8595] hsr_slave_0: entered promiscuous mode [ 295.487309][ T8595] hsr_slave_1: entered promiscuous mode [ 295.495283][ T8595] debugfs: 'hsr0' already exists in 'hsr' [ 295.501662][ T8595] Cannot create hsr debugfs directory [ 295.655835][ T7610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.859481][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 295.946530][ T7610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.618175][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.635069][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.649977][ T8660] bridge_slave_0: entered allmulticast mode [ 296.659868][ T8660] bridge_slave_0: entered promiscuous mode [ 296.669518][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.676944][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.685050][ T8660] bridge_slave_1: entered allmulticast mode [ 296.696260][ T8660] bridge_slave_1: entered promiscuous mode [ 297.040848][ T7309] Bluetooth: hci3: command tx timeout [ 297.052382][ T8660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.082435][ T8660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.293301][ T8660] team0: Port device team_slave_0 added [ 297.386661][ T8660] team0: Port device team_slave_1 added [ 297.520558][ T7309] Bluetooth: hci2: command tx timeout [ 297.546343][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.555081][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.584225][ T8660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.648620][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.655790][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.682796][ T8660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.963308][ T8660] hsr_slave_0: entered promiscuous mode [ 297.970139][ T8660] hsr_slave_1: entered promiscuous mode [ 297.977481][ T8660] debugfs: 'hsr0' already exists in 'hsr' [ 297.992427][ T8660] Cannot create hsr debugfs directory [ 298.098779][ T8595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 298.123885][ T8595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.155621][ T8595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 298.171648][ T8595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.204933][ T8595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.218680][ T8595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.228222][ T8595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 298.247495][ T8595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.545926][ T8595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.605894][ T8595] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.634294][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.641569][ T7119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.687418][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.694669][ T7119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.120788][ T7309] Bluetooth: hci3: command tx timeout [ 299.814508][ T8595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.897135][ T8595] veth0_vlan: entered promiscuous mode [ 299.916176][ T8595] veth1_vlan: entered promiscuous mode [ 299.971176][ T8595] veth0_macvtap: entered promiscuous mode [ 299.990785][ T8595] veth1_macvtap: entered promiscuous mode [ 300.032508][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.052173][ T8595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.081722][ T7250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.113884][ T7250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.184548][ T8058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.333397][ T7119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.352771][ T7119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.370958][ T7250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.407831][ T7250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.422501][ T7250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.629889][ T7118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.650101][ T7118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.659394][ T7118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.669285][ T7118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.679821][ T7118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.750570][ T8826] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 300.810802][ T8826] File: /dev/sda PID: 8826 Comm: syz.3.337 [ 301.203541][ T7309] Bluetooth: hci3: command tx timeout [ 301.708872][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.717570][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.729118][ T8829] bridge_slave_0: entered allmulticast mode [ 301.737611][ T8829] bridge_slave_0: entered promiscuous mode [ 301.747058][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.755195][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.767928][ T8829] bridge_slave_1: entered allmulticast mode [ 301.780274][ T8829] bridge_slave_1: entered promiscuous mode [ 301.834369][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.851030][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.900094][ T8829] team0: Port device team_slave_0 added [ 301.909991][ T8829] team0: Port device team_slave_1 added [ 301.957538][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.964635][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.994260][ T8829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.010947][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.017960][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.049379][ T8829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.127457][ T8829] hsr_slave_0: entered promiscuous mode [ 302.139010][ T8829] hsr_slave_1: entered promiscuous mode [ 302.145705][ T8829] debugfs: 'hsr0' already exists in 'hsr' [ 302.152153][ T8829] Cannot create hsr debugfs directory [ 302.721036][ T7309] Bluetooth: hci4: command tx timeout [ 304.800587][ T7309] Bluetooth: hci4: command tx timeout [ 306.882897][ T7309] Bluetooth: hci4: command tx timeout [ 308.960600][ T7309] Bluetooth: hci4: command tx timeout [ 310.107048][ T8910] FAULT_INJECTION: forcing a failure. [ 310.107048][ T8910] name failslab, interval 1, probability 0, space 0, times 0 [ 310.124979][ T8910] CPU: 0 UID: 0 PID: 8910 Comm: syz.3.363 Not tainted syzkaller #0 PREEMPT(full) [ 310.125041][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.125064][ T8910] Call Trace: [ 310.125075][ T8910] [ 310.125088][ T8910] dump_stack_lvl+0x100/0x190 [ 310.125133][ T8910] should_fail_ex.cold+0x5/0xa [ 310.125172][ T8910] should_failslab+0xc2/0x120 [ 310.125220][ T8910] __kmalloc_noprof+0xfc/0x820 [ 310.125263][ T8910] ? acpi_ns_search_one_scope+0x406/0x6a0 [ 310.125314][ T8910] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 310.125350][ T8910] ? acpi_ex_allocate_name_string+0x8c/0x340 [ 310.125399][ T8910] acpi_ex_allocate_name_string+0x8c/0x340 [ 310.125446][ T8910] acpi_ex_get_name_string+0x322/0xb90 [ 310.125499][ T8910] ? __pfx_acpi_ex_get_name_string+0x10/0x10 [ 310.125553][ T8910] acpi_ds_create_operand+0x3fd/0xc20 [ 310.125608][ T8910] ? __pfx_acpi_ds_create_operand+0x10/0x10 [ 310.125663][ T8910] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 310.125702][ T8910] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 310.125737][ T8910] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 310.125773][ T8910] ? __asan_memset+0x23/0x50 [ 310.125808][ T8910] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 310.125853][ T8910] acpi_ds_evaluate_name_path+0x158/0x4a0 [ 310.125909][ T8910] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 310.125969][ T8910] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 310.126002][ T8910] ? acpi_ut_trace_ptr+0x161/0x2a0 [ 310.126045][ T8910] acpi_ds_exec_end_op+0xb78/0x1e60 [ 310.126082][ T8910] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 310.126114][ T8910] acpi_ps_parse_loop+0x5e1/0x26e0 [ 310.126160][ T8910] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 310.126192][ T8910] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 310.126230][ T8910] ? acpi_ut_create_thread_state+0x6d/0x170 [ 310.126276][ T8910] acpi_ps_parse_aml+0x81e/0x1120 [ 310.126319][ T8910] acpi_ps_execute_method+0x5c4/0xe90 [ 310.126360][ T8910] ? acpi_ut_exit+0x107/0x170 [ 310.126400][ T8910] acpi_ns_evaluate+0x640/0x1670 [ 310.126451][ T8910] acpi_evaluate_object+0x420/0xe00 [ 310.126509][ T8910] ? __kvmalloc_node_noprof+0x34f/0x970 [ 310.126550][ T8910] ? seq_read_iter+0x819/0x1270 [ 310.126602][ T8910] ? vfs_read+0x82e/0xb40 [ 310.126636][ T8910] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 310.126688][ T8910] ? lock_acquire+0x1b9/0x370 [ 310.126752][ T8910] acpi_evaluate_integer+0xdf/0x220 [ 310.126797][ T8910] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 310.126843][ T8910] ? __lock_acquire+0x49f/0x1a40 [ 310.126908][ T8910] ? __pfx_status_show+0x10/0x10 [ 310.126957][ T8910] status_show+0xa0/0x120 [ 310.127008][ T8910] ? __pfx_status_show+0x10/0x10 [ 310.127070][ T8910] dev_attr_show+0x52/0xa0 [ 310.127122][ T8910] ? __pfx_dev_attr_show+0x10/0x10 [ 310.127174][ T8910] sysfs_kf_seq_show+0x217/0x3f0 [ 310.127232][ T8910] seq_read_iter+0x32f/0x1270 [ 310.127281][ T8910] ? lock_acquire+0x1b9/0x370 [ 310.127350][ T8910] kernfs_fop_read_iter+0x46c/0x610 [ 310.127395][ T8910] ? rw_verify_area+0xce/0x6d0 [ 310.127443][ T8910] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 310.127490][ T8910] vfs_read+0x82e/0xb40 [ 310.127532][ T8910] ? __pfx_vfs_read+0x10/0x10 [ 310.127590][ T8910] ksys_read+0x12a/0x250 [ 310.127620][ T8910] ? __pfx_ksys_read+0x10/0x10 [ 310.127664][ T8910] do_syscall_64+0x115/0x840 [ 310.127711][ T8910] ? clear_bhb_loop+0x70/0xc0 [ 310.127752][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.127786][ T8910] RIP: 0033:0x7f822e79e0d9 [ 310.127814][ T8910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.127845][ T8910] RSP: 002b:00007f822f6e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.127883][ T8910] RAX: ffffffffffffffda RBX: 00007f822ea25fa0 RCX: 00007f822e79e0d9 [ 310.127904][ T8910] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000009 [ 310.127924][ T8910] RBP: 00007f822e835024 R08: 0000000000000000 R09: 0000000000000000 [ 310.127943][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.127963][ T8910] R13: 00007f822ea26038 R14: 00007f822ea25fa0 R15: 00007ffcb05cf428 [ 310.128006][ T8910] [ 310.129257][ T8910] ACPI Error: [ 310.224116][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b177ba (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 310.224274][ C0] Call Trace: [ 310.224286][ C0] [ 310.224303][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 310.224343][ C0] ? sched_clock_cpu+0x6c/0x570 [ 310.224387][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 310.224420][ C0] mce_cpu_restart+0xd5/0x1f0 [ 310.224454][ C0] __flush_smp_call_function_queue+0x281/0x960 [ 310.224509][ C0] __sysvec_call_function_single+0x81/0x420 [ 310.224539][ C0] sysvec_call_function_single+0x51/0xc0 [ 310.224574][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 310.224603][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 310.224643][ C0] Code: 05 fb 62 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 5a 3c 0f 0f 82 ac 02 00 00 8b 35 2e 8e 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 62 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 310.224668][ C0] RSP: 0018:ffffc90000007570 EFLAGS: 00000206 [ 310.224691][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 310.224707][ C0] RDX: 0000000000000000 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580 [ 310.224724][ C0] RBP: ffffffff8ebe8000 R08: 0000000064b684b8 R09: 0000000000000007 [ 310.224740][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 310.224755][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.224786][ C0] ? unwind_next_frame+0x3be/0x2090 [ 310.224823][ C0] ? unwind_next_frame+0x3be/0x2090 [ 310.224862][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.224899][ C0] unwind_next_frame+0xd1/0x2090 [ 310.224935][ C0] ? unwind_next_frame+0xbd/0x2090 [ 310.224970][ C0] ? console_flush_one_record+0xac3/0xe50 [ 310.225008][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.225045][ C0] arch_stack_walk+0x94/0xf0 [ 310.225085][ C0] ? console_flush_one_record+0xac3/0xe50 [ 310.225121][ C0] stack_trace_save+0x8e/0xc0 [ 310.225155][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 310.225193][ C0] ? stack_trace_save+0x8e/0xc0 [ 310.225227][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 310.225262][ C0] kasan_save_stack+0x30/0x50 [ 310.225294][ C0] ? kasan_save_stack+0x30/0x50 [ 310.225329][ C0] ? kasan_save_track+0x14/0x30 [ 310.225359][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 310.225391][ C0] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 310.225423][ C0] ? __alloc_skb+0x140/0x710 [ 310.225454][ C0] ? skb_copy+0x1ca/0x3a0 [ 310.225489][ C0] ? mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 310.225524][ C0] ? mac80211_hwsim_tx_frame+0x1b7/0x250 [ 310.225559][ C0] ? mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 310.225593][ C0] ? __iterate_interfaces+0x2e6/0x650 [ 310.225626][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 310.225664][ C0] ? mac80211_hwsim_beacon+0xe5/0x2a0 [ 310.225691][ C0] ? __hrtimer_run_queues+0x462/0x9c0 [ 310.225721][ C0] ? hrtimer_run_softirq+0x17d/0x2c0 [ 310.225762][ C0] ? handle_softirqs+0x1ea/0x9b0 [ 310.225787][ C0] ? __irq_exit_rcu+0x162/0x210 [ 310.225812][ C0] ? irq_exit_rcu+0x9/0x30 [ 310.225838][ C0] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 310.225868][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.225895][ C0] ? console_flush_one_record+0xac3/0xe50 [ 310.225955][ C0] kasan_save_track+0x14/0x30 [ 310.225986][ C0] __kasan_slab_alloc+0x89/0x90 [ 310.226039][ C0] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 310.226073][ C0] ? __alloc_skb+0x140/0x710 [ 310.226111][ C0] __alloc_skb+0x140/0x710 [ 310.226153][ C0] ? __alloc_skb+0x5b7/0x710 [ 310.226183][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 310.226216][ C0] ? do_raw_spin_lock+0x128/0x260 [ 310.226249][ C0] skb_copy+0x1ca/0x3a0 [ 310.226283][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 310.226327][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 310.226361][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 310.226401][ C0] ? __lock_acquire+0x49f/0x1a40 [ 310.226443][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 310.226491][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 310.226528][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 310.226572][ C0] __iterate_interfaces+0x2e6/0x650 [ 310.226605][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 310.226643][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 310.226678][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 310.226718][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 310.226747][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 310.226774][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 310.226814][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 310.226846][ C0] handle_softirqs+0x1ea/0x9b0 [ 310.226877][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 310.226905][ C0] ? _raw_spin_unlock+0x28/0x50 [ 310.226932][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 310.226967][ C0] __irq_exit_rcu+0x162/0x210 [ 310.226996][ C0] irq_exit_rcu+0x9/0x30 [ 310.227021][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 310.227053][ C0] [ 310.227061][ C0] [ 310.227071][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.227097][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 310.227129][ C0] Code: 00 e8 71 0a 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 0f b7 21 00 48 85 ed 0f 85 d7 01 00 00 e8 61 bc 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 310.227151][ C0] RSP: 0018:ffffc9000378eed0 EFLAGS: 00000287 [ 310.227171][ C0] RAX: ffffffff8f9aec98 RBX: ffffffff8f9aec40 RCX: ffffc90006711000 [ 310.227189][ C0] RDX: 0000000000080000 RSI: ffffffff81e7f49f RDI: ffff88801d320000 [ 310.227205][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 310.227220][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000e80 [ 310.227235][ C0] R13: ffffffff8f9aec98 R14: ffffc9000378ef50 R15: dffffc0000000000 [ 310.227261][ C0] ? console_flush_one_record+0xabf/0xe50 [ 310.227302][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 310.227341][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 310.227379][ C0] console_unlock+0x103/0x260 [ 310.227409][ C0] ? __pfx_console_unlock+0x10/0x10 [ 310.227445][ C0] ? _printk+0xcf/0x110 [ 310.227473][ C0] vprintk_emit+0x407/0x6b0 [ 310.227511][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 310.227541][ C0] ? __pfx__printk+0x10/0x10 [ 310.227566][ C0] ? __asan_memcpy+0x3c/0x60 [ 310.227595][ C0] _printk+0xcf/0x110 [ 310.227619][ C0] ? __pfx__printk+0x10/0x10 [ 310.227645][ C0] ? __pfx_vsnprintf+0x10/0x10 [ 310.227680][ C0] ? irqentry_exit+0x24d/0xa00 [ 310.227717][ C0] acpi_os_vprintf+0x8c/0xc0 [ 310.227748][ C0] acpi_os_printf+0xcf/0x102 [ 310.227778][ C0] ? __pfx_acpi_os_printf+0x10/0x10 [ 310.227814][ C0] ? dump_stack_lvl+0x176/0x190 [ 310.227840][ C0] ? acpi_error+0x8f/0x140 [ 310.227870][ C0] acpi_error+0xbb/0x140 [ 310.227896][ C0] ? __pfx_acpi_error+0x10/0x10 [ 310.227923][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 310.227955][ C0] ? __kmalloc_noprof+0x343/0x820 [ 310.227983][ C0] ? acpi_ns_search_one_scope+0x406/0x6a0 [ 310.228022][ C0] ? acpi_ex_allocate_name_string+0x8c/0x340 [ 310.228058][ C0] acpi_ex_allocate_name_string+0x2d6/0x340 [ 310.228092][ C0] acpi_ex_get_name_string+0x322/0xb90 [ 310.228127][ C0] ? __pfx_acpi_ex_get_name_string+0x10/0x10 [ 310.228166][ C0] acpi_ds_create_operand+0x3fd/0xc20 [ 310.228206][ C0] ? __pfx_acpi_ds_create_operand+0x10/0x10 [ 310.228245][ C0] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 310.228275][ C0] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 310.228301][ C0] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 310.228328][ C0] ? __asan_memset+0x23/0x50 [ 310.228354][ C0] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 310.228386][ C0] acpi_ds_evaluate_name_path+0x158/0x4a0 [ 310.228427][ C0] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 310.228469][ C0] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 310.228498][ C0] ? acpi_ut_trace_ptr+0x161/0x2a0 [ 310.228529][ C0] acpi_ds_exec_end_op+0xb78/0x1e60 [ 310.228557][ C0] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 310.228581][ C0] acpi_ps_parse_loop+0x5e1/0x26e0 [ 310.228613][ C0] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 310.228639][ C0] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 310.228667][ C0] ? acpi_ut_create_thread_state+0x6d/0x170 [ 310.228700][ C0] acpi_ps_parse_aml+0x81e/0x1120 [ 310.228732][ C0] acpi_ps_execute_method+0x5c4/0xe90 [ 310.228762][ C0] ? acpi_ut_exit+0x107/0x170 [ 310.228790][ C0] acpi_ns_evaluate+0x640/0x1670 [ 310.228827][ C0] acpi_evaluate_object+0x420/0xe00 [ 310.228864][ C0] ? __kvmalloc_node_noprof+0x34f/0x970 [ 310.228894][ C0] ? seq_read_iter+0x819/0x1270 [ 310.228930][ C0] ? vfs_read+0x82e/0xb40 [ 310.228956][ C0] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 310.228995][ C0] ? lock_acquire+0x1b9/0x370 [ 310.229040][ C0] acpi_evaluate_integer+0xdf/0x220 [ 310.229073][ C0] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 310.229106][ C0] ? __lock_acquire+0x49f/0x1a40 [ 310.229154][ C0] ? __pfx_status_show+0x10/0x10 [ 310.229190][ C0] status_show+0xa0/0x120 [ 310.229227][ C0] ? __pfx_status_show+0x10/0x10 [ 310.229271][ C0] dev_attr_show+0x52/0xa0 [ 310.229310][ C0] ? __pfx_dev_attr_show+0x10/0x10 [ 310.229347][ C0] sysfs_kf_seq_show+0x217/0x3f0 [ 310.229389][ C0] seq_read_iter+0x32f/0x1270 [ 310.229425][ C0] ? lock_acquire+0x1b9/0x370 [ 310.229474][ C0] kernfs_fop_read_iter+0x46c/0x610 [ 310.229511][ C0] ? rw_verify_area+0xce/0x6d0 [ 310.229546][ C0] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 310.229581][ C0] vfs_read+0x82e/0xb40 [ 310.229607][ C0] ? __pfx_vfs_read+0x10/0x10 [ 310.229648][ C0] ksys_read+0x12a/0x250 [ 310.229671][ C0] ? __pfx_ksys_read+0x10/0x10 [ 310.229703][ C0] do_syscall_64+0x115/0x840 [ 310.229736][ C0] ? clear_bhb_loop+0x70/0xc0 [ 310.229776][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.229800][ C0] RIP: 0033:0x7f822e79e0d9 [ 310.229819][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.229842][ C0] RSP: 002b:00007f822f6e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.229864][ C0] RAX: ffffffffffffffda RBX: 00007f822ea25fa0 RCX: 00007f822e79e0d9 [ 310.229879][ C0] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000009 [ 310.229893][ C0] RBP: 00007f822e835024 R08: 0000000000000000 R09: 0000000000000000 [ 310.229908][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.229922][ C0] R13: 00007f822ea26038 R14: 00007f822ea25fa0 R15: 00007ffcb05cf428 [ 310.229968][ C0] [ 311.618489][ T8910] Could not allocate size 7 (20260408/exnames-68) [ 311.627909][ T8910] ACPI Error: Aborting method \_SB.LNKB._STA due to previous error (AE_NO_MEMORY) (20260408/psparse-543) [ 311.647054][ T7118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.670494][ T7118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.680174][ T7118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.695289][ T7118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.704760][ T7118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.887667][ T8916] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 312.694141][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.710541][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.730040][ T8911] bridge_slave_0: entered allmulticast mode [ 312.752902][ T8911] bridge_slave_0: entered promiscuous mode [ 312.770164][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.781572][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.800701][ T8911] bridge_slave_1: entered allmulticast mode [ 312.808916][ T8911] bridge_slave_1: entered promiscuous mode [ 312.870002][ T8911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.894892][ T8911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.952933][ T8911] team0: Port device team_slave_0 added [ 312.963818][ T8911] team0: Port device team_slave_1 added [ 313.010018][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.021999][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.048208][ T8911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.075269][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.090170][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.116357][ T8911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.203910][ T8911] hsr_slave_0: entered promiscuous mode [ 313.217621][ T8911] hsr_slave_1: entered promiscuous mode [ 313.224230][ T8911] debugfs: 'hsr0' already exists in 'hsr' [ 313.230002][ T8911] Cannot create hsr debugfs directory [ 313.760556][ T7118] Bluetooth: hci5: command tx timeout [ 315.842570][ T7118] Bluetooth: hci5: command tx timeout [ 316.683792][ T8963] cougar: G6 mapped to F18 [ 317.123187][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.129747][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.155620][ T8972] vivid-007: ================= START STATUS ================= [ 317.163517][ T8972] vivid-007: Generate PTS: true [ 317.168478][ T8972] vivid-007: Generate SCR: true [ 317.174948][ T8972] tpg source WxH: 320x240 (Y'CbCr) [ 317.180147][ T8972] tpg field: 1 [ 317.183858][ T8972] tpg crop: (0,0)/320x240 [ 317.188331][ T8972] tpg compose: (0,0)/320x240 [ 317.193260][ T8972] tpg colorspace: 8 [ 317.197136][ T8972] tpg transfer function: 0/0 [ 317.202179][ T8972] tpg Y'CbCr encoding: 0/0 [ 317.206697][ T8972] tpg quantization: 0/0 [ 317.211158][ T8972] tpg RGB range: 0/2 [ 317.216098][ T8972] vivid-007: ================== END STATUS ================== [ 317.823109][ T8979] nfs: Bad value for 'source' [ 317.922054][ T7118] Bluetooth: hci5: command tx timeout [ 319.137096][ T8994] FAULT_INJECTION: forcing a failure. [ 319.137096][ T8994] name failslab, interval 1, probability 0, space 0, times 0 [ 319.153112][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.3.373 Not tainted syzkaller #0 PREEMPT(full) [ 319.153157][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.153178][ T8994] Call Trace: [ 319.153191][ T8994] [ 319.153203][ T8994] dump_stack_lvl+0x100/0x190 [ 319.153250][ T8994] should_fail_ex.cold+0x5/0xa [ 319.153290][ T8994] should_failslab+0xc2/0x120 [ 319.153340][ T8994] __kmalloc_noprof+0xfc/0x820 [ 319.153386][ T8994] ? constrain_params_by_rules+0x175/0xd20 [ 319.153431][ T8994] constrain_params_by_rules+0x175/0xd20 [ 319.153465][ T8994] ? kfree+0x22b/0x6c0 [ 319.153505][ T8994] ? constrain_params_by_rules+0xa88/0xd20 [ 319.153547][ T8994] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 319.153600][ T8994] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 319.153635][ T8994] ? snd_pcm_oss_ioctl+0x1870/0x3790 [ 319.153671][ T8994] ? __x64_sys_ioctl+0x18e/0x210 [ 319.153725][ T8994] ? do_syscall_64+0x115/0x840 [ 319.153786][ T8994] ? snd_interval_refine+0x2d0/0x580 [ 319.153841][ T8994] snd_pcm_hw_refine+0x82a/0xb40 [ 319.153883][ T8994] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 319.153916][ T8994] ? snd_pcm_hw_refine+0x35c/0xb40 [ 319.153956][ T8994] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 319.153999][ T8994] ? __kasan_kmalloc+0xaa/0xb0 [ 319.154048][ T8994] snd_pcm_hw_param_first+0x2b0/0x680 [ 319.154096][ T8994] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 319.154141][ T8994] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 319.154182][ T8994] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 319.154223][ T8994] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 319.154274][ T8994] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 319.154332][ T8994] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 319.154371][ T8994] ? __pfx___mutex_lock+0x10/0x10 [ 319.154419][ T8994] ? find_held_lock+0x2b/0x80 [ 319.154462][ T8994] ? tomoyo_path_number_perm+0x28f/0x580 [ 319.154537][ T8994] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 319.154589][ T8994] snd_pcm_oss_get_formats+0x7d/0x350 [ 319.154629][ T8994] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 319.154681][ T8994] snd_pcm_oss_ioctl+0x1870/0x3790 [ 319.154720][ T8994] ? find_held_lock+0x2b/0x80 [ 319.154763][ T8994] ? __fget_files+0x215/0x3d0 [ 319.154795][ T8994] ? hook_file_ioctl_common+0x140/0x440 [ 319.154842][ T8994] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 319.154887][ T8994] ? __fget_files+0x21f/0x3d0 [ 319.154926][ T8994] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 319.154967][ T8994] __x64_sys_ioctl+0x18e/0x210 [ 319.155023][ T8994] do_syscall_64+0x115/0x840 [ 319.155071][ T8994] ? clear_bhb_loop+0x70/0xc0 [ 319.155114][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.155151][ T8994] RIP: 0033:0x7f822e79e0d9 [ 319.155192][ T8994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.155225][ T8994] RSP: 002b:00007f822f6c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.155257][ T8994] RAX: ffffffffffffffda RBX: 00007f822ea26090 RCX: 00007f822e79e0d9 [ 319.155280][ T8994] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000007 [ 319.155301][ T8994] RBP: 00007f822e835024 R08: 0000000000000000 R09: 0000000000000000 [ 319.155323][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.155342][ T8994] R13: 00007f822ea26128 R14: 00007f822ea26090 R15: 00007ffcb05cf428 [ 319.155386][ T8994] [ 320.000452][ T7118] Bluetooth: hci5: command tx timeout [ 324.027259][ T7118] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 324.382521][ T30] audit: type=1800 audit(1786108605.991:7): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.379" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 352.965286][ T7309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 352.986205][ T7309] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 352.994730][ T7309] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.003223][ T7309] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.012223][ T7309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.572872][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.580076][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.587829][ T9068] bridge_slave_0: entered allmulticast mode [ 353.595608][ T9068] bridge_slave_0: entered promiscuous mode [ 353.606529][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.613817][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.621362][ T9068] bridge_slave_1: entered allmulticast mode [ 353.628818][ T9068] bridge_slave_1: entered promiscuous mode [ 353.665446][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.677885][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.711304][ T9068] team0: Port device team_slave_0 added [ 353.719791][ T9068] team0: Port device team_slave_1 added [ 353.753433][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.761183][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.787697][ T9068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.800410][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.807400][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.833646][ T9068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.886339][ T9068] hsr_slave_0: entered promiscuous mode [ 353.893614][ T9068] hsr_slave_1: entered promiscuous mode [ 353.899913][ T9068] debugfs: 'hsr0' already exists in 'hsr' [ 353.907731][ T9068] Cannot create hsr debugfs directory [ 355.120625][ T7309] Bluetooth: hci6: command tx timeout [ 357.200628][ T7309] Bluetooth: hci6: command tx timeout [ 359.280688][ T7309] Bluetooth: hci6: command tx timeout [ 360.477584][ T7118] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.493946][ T7118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.505845][ T7118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.515783][ T7118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.523524][ T7118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.095195][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.103478][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.111423][ T9087] bridge_slave_0: entered allmulticast mode [ 361.119454][ T9087] bridge_slave_0: entered promiscuous mode [ 361.128819][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.136090][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.143402][ T9087] bridge_slave_1: entered allmulticast mode [ 361.151182][ T9087] bridge_slave_1: entered promiscuous mode [ 361.184388][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.197750][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.231454][ T9087] team0: Port device team_slave_0 added [ 361.239810][ T9087] team0: Port device team_slave_1 added [ 361.267970][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.275144][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.301592][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.314267][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.322597][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.348851][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.360756][ T7118] Bluetooth: hci6: command tx timeout [ 361.403630][ T9087] hsr_slave_0: entered promiscuous mode [ 361.410242][ T9087] hsr_slave_1: entered promiscuous mode [ 361.417036][ T9087] debugfs: 'hsr0' already exists in 'hsr' [ 361.425349][ T9087] Cannot create hsr debugfs directory [ 362.562314][ T7309] Bluetooth: hci7: command tx timeout [ 364.640895][ T7309] Bluetooth: hci7: command tx timeout [ 366.722359][ T7309] Bluetooth: hci7: command tx timeout [ 368.801122][ T7309] Bluetooth: hci7: command tx timeout [ 370.983848][ T7118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 370.997336][ T7118] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 371.006892][ T7118] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 371.017076][ T7118] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 371.024925][ T7118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 371.585851][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.593111][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.600707][ T9106] bridge_slave_0: entered allmulticast mode [ 371.608222][ T9106] bridge_slave_0: entered promiscuous mode [ 371.616849][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.624106][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.631689][ T9106] bridge_slave_1: entered allmulticast mode [ 371.639239][ T9106] bridge_slave_1: entered promiscuous mode [ 371.672842][ T9106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.686005][ T9106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.719945][ T9106] team0: Port device team_slave_0 added [ 371.728497][ T9106] team0: Port device team_slave_1 added [ 371.756766][ T9106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.764027][ T9106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.790042][ T9106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.802924][ T9106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.809894][ T9106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.835942][ T9106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.889277][ T9106] hsr_slave_0: entered promiscuous mode [ 371.896811][ T9106] hsr_slave_1: entered promiscuous mode [ 371.903292][ T9106] debugfs: 'hsr0' already exists in 'hsr' [ 371.909036][ T9106] Cannot create hsr debugfs directory [ 373.040599][ T7309] Bluetooth: hci8: command tx timeout [ 375.120685][ T7309] Bluetooth: hci8: command tx timeout [ 377.200659][ T7309] Bluetooth: hci8: command tx timeout [ 378.561836][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568323][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.280540][ T7309] Bluetooth: hci8: command tx timeout [ 385.763585][ T7309] Bluetooth: hci0: command 0x0406 tx timeout [ 411.363983][ T7309] Bluetooth: hci2: command 0x0406 tx timeout [ 413.538295][ T7309] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 413.554209][ T7309] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 413.565734][ T7309] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 413.574611][ T7309] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 413.584033][ T7309] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 414.169082][ T9132] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.176592][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.184025][ T9132] bridge_slave_0: entered allmulticast mode [ 414.191913][ T9132] bridge_slave_0: entered promiscuous mode [ 414.200816][ T9132] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.207993][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.215881][ T9132] bridge_slave_1: entered allmulticast mode [ 414.224234][ T9132] bridge_slave_1: entered promiscuous mode [ 414.258154][ T9132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.271866][ T9132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.305090][ T9132] team0: Port device team_slave_0 added [ 414.313568][ T9132] team0: Port device team_slave_1 added [ 414.343604][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.351052][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.377086][ T9132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.389543][ T9132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.396589][ T9132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.422695][ T9132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.476502][ T9132] hsr_slave_0: entered promiscuous mode [ 414.484638][ T9132] hsr_slave_1: entered promiscuous mode [ 414.491440][ T9132] debugfs: 'hsr0' already exists in 'hsr' [ 414.497296][ T9132] Cannot create hsr debugfs directory [ 415.680721][ T7752] Bluetooth: hci9: command tx timeout [ 416.486237][ T7309] Bluetooth: hci3: command 0x0406 tx timeout [ 417.760638][ T7309] Bluetooth: hci9: command tx timeout [ 419.840754][ T7309] Bluetooth: hci9: command tx timeout [ 420.538316][ T7118] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 420.554068][ T7118] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 420.562319][ T7118] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 420.572108][ T7118] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 420.579878][ T7118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 421.150015][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.157279][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.164986][ T9150] bridge_slave_0: entered allmulticast mode [ 421.172861][ T9150] bridge_slave_0: entered promiscuous mode [ 421.183449][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.190730][ T9150] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.197968][ T9150] bridge_slave_1: entered allmulticast mode [ 421.205927][ T9150] bridge_slave_1: entered promiscuous mode [ 421.239444][ T9150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.252339][ T9150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.287369][ T9150] team0: Port device team_slave_0 added [ 421.296544][ T9150] team0: Port device team_slave_1 added [ 421.326321][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.333392][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.359763][ T9150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.375776][ T9150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.382829][ T9150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.409307][ T9150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.459686][ T9150] hsr_slave_0: entered promiscuous mode [ 421.466453][ T9150] hsr_slave_1: entered promiscuous mode [ 421.473038][ T9150] debugfs: 'hsr0' already exists in 'hsr' [ 421.478809][ T9150] Cannot create hsr debugfs directory [ 421.920706][ T7309] Bluetooth: hci9: command tx timeout [ 422.640628][ T7309] Bluetooth: hci10: command tx timeout [ 424.720683][ T7118] Bluetooth: hci10: command tx timeout [ 426.720930][ T7118] Bluetooth: hci4: command 0x0406 tx timeout [ 426.801516][ T7309] Bluetooth: hci10: command tx timeout [ 428.880835][ T7309] Bluetooth: hci10: command tx timeout [ 431.049740][ T7118] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 431.065655][ T7118] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 431.076417][ T7118] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 431.086915][ T7118] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 431.094848][ T7118] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 431.667583][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.674857][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.682640][ T9170] bridge_slave_0: entered allmulticast mode [ 431.690136][ T9170] bridge_slave_0: entered promiscuous mode [ 431.698726][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.705967][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.713504][ T9170] bridge_slave_1: entered allmulticast mode [ 431.721354][ T9170] bridge_slave_1: entered promiscuous mode [ 431.754956][ T9170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.768718][ T9170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.801997][ T9170] team0: Port device team_slave_0 added [ 431.810648][ T9170] team0: Port device team_slave_1 added [ 431.838915][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.846554][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.873054][ T9170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.886469][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.893868][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.919844][ T9170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.967625][ T9170] hsr_slave_0: entered promiscuous mode [ 431.974588][ T9170] hsr_slave_1: entered promiscuous mode [ 431.981357][ T9170] debugfs: 'hsr0' already exists in 'hsr' [ 431.987111][ T9170] Cannot create hsr debugfs directory [ 433.200776][ T7118] Bluetooth: hci11: command tx timeout [ 435.280839][ T7118] Bluetooth: hci11: command tx timeout [ 436.963751][ T7118] Bluetooth: hci5: command 0x0406 tx timeout [ 437.360990][ T7309] Bluetooth: hci11: command tx timeout [ 439.360615][ T31] INFO: task syz.0.347:8697 blocked for more than 143 seconds. [ 439.369577][ T31] Not tainted syzkaller #0 [ 439.375020][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.384010][ T31] task:syz.0.347 state:D stack:28776 pid:8697 tgid:8688 ppid:8047 task_flags:0x400040 flags:0x00080002 [ 439.396180][ T31] Call Trace: [ 439.399503][ T31] [ 439.402610][ T31] __schedule+0x125c/0x6730 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 439.407263][ T31] ? do_raw_spin_lock+0x128/0x260 [ 439.412529][ T31] ? __pfx___schedule+0x10/0x10 [ 439.417979][ T31] ? find_held_lock+0x2b/0x80 [ 439.423304][ T31] ? schedule+0x225/0x2c0 [ 439.427739][ T31] schedule+0xdd/0x2c0 [ 439.433030][ T31] schedule_preempt_disabled+0x13/0x30 [ 439.438578][ T31] __mutex_lock+0xccc/0x1bd0 [ 439.446681][ T7309] Bluetooth: hci11: command tx timeout [ 439.455772][ T31] ? devlink_health_report+0x656/0xb00 [ 439.462376][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 439.467494][ T31] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 439.474252][ T31] ? devlink_health_report+0x656/0xb00 [ 439.479768][ T31] devlink_health_report+0x656/0xb00 [ 439.485283][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 439.493353][ T31] ? _copy_from_user+0x59/0xd0 [ 439.498219][ T31] nsim_dev_health_break_write+0x166/0x210 [ 439.504839][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 439.511320][ T31] full_proxy_write+0x135/0x1a0 [ 439.516242][ T31] vfs_write+0x2aa/0x1050 [ 439.521445][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 439.526893][ T31] ? __pfx_vfs_write+0x10/0x10 [ 439.531878][ T31] ? __fget_files+0x215/0x3d0 [ 439.536711][ T31] ? __fget_files+0x21f/0x3d0 [ 439.542678][ T31] ksys_write+0x12a/0x250 [ 439.547114][ T31] ? __pfx_ksys_write+0x10/0x10 [ 439.555536][ T31] do_syscall_64+0x115/0x840 [ 439.560258][ T31] ? clear_bhb_loop+0x70/0xc0 [ 439.565182][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.571195][ T31] RIP: 0033:0x7f0c69b9e0d9 [ 439.575659][ T31] RSP: 002b:00007f0c6a987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.584404][ T31] RAX: ffffffffffffffda RBX: 00007f0c69e26180 RCX: 00007f0c69b9e0d9 [ 439.592505][ T31] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 439.602979][ T31] RBP: 00007f0c69c35024 R08: 0000000000000000 R09: 0000000000000000 [ 439.611613][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.619659][ T31] R13: 00007f0c69e26218 R14: 00007f0c69e26180 R15: 00007fffafc1a138 [ 439.627901][ T31] [ 439.631172][ T31] [ 439.631172][ T31] Showing all locks held in the system: [ 439.638961][ T31] 1 lock held by khungtaskd/31: [ 439.644116][ T31] #0: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 439.658522][ T31] 2 locks held by getty/5370: [ 439.663393][ T31] #0: ffff88823bf128a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 439.673316][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 439.689796][ T31] 2 locks held by syz-executor/5599: [ 439.695202][ T31] 6 locks held by kworker/u10:7/7610: [ 439.700795][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 439.713759][ T31] #1: ffffc900035dfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 439.724572][ T31] #2: ffffffff90a82bc8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 439.734112][ T31] #3: ffff888032899128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 439.744448][ T31] #4: ffff88803289c258 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 439.759678][ T31] #5: ffff888054527b00 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 439.777454][ T31] 3 locks held by syz-executor/8586: [ 439.783092][ T31] 2 locks held by syz-executor/8595: [ 439.788440][ T31] 5 locks held by syz-executor/8660: [ 439.794204][ T31] #0: ffff8880340da450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 439.808014][ T31] #1: ffff888032cf9c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 439.842687][ T31] #2: ffff888029b410f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 439.874214][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 439.893691][ T31] #4: ffff888032899128 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 439.902712][ T31] 3 locks held by syz.0.347/8697: [ 439.907777][ T31] #0: ffff888033b86b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 439.917042][ T31] #1: ffff888020aa8450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 439.926176][ T31] #2: ffff88803289c258 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 [ 439.937310][ T31] 4 locks held by syz-executor/8829: [ 439.942993][ T31] #0: ffff8880340da450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 439.952439][ T31] #1: ffff88805b7cf080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 439.962645][ T31] #2: ffff888029b410f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 439.973147][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 439.983838][ T31] 4 locks held by syz-executor/8911: [ 439.989187][ T31] #0: ffff8880340da450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 439.999869][ T31] #1: ffff888048bbf480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 440.013363][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.019829][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.036234][ T31] #2: ffff888029b410f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 440.047616][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 440.058289][ T31] 4 locks held by syz-executor/9068: [ 440.063999][ T31] #0: ffff8880340da450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 440.073375][ T31] #1: ffff888047c33480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 440.084168][ T31] #2: ffff888029b410f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 440.094589][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 440.105251][ T31] 4 locks held by syz-executor/9087: [ 440.110850][ T31] #0: ffff8880340da450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 440.119950][ T31] #1: ffff888036191c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 440.130312][ T31] #2: ffff888029b410f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 440.141004][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 440.151707][ T31] 4 locks held by syz-executor/9106: [ 440.157052][ T31] #0: ffff8880340da450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 440.166798][ T31] #1: ffff888044f33480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 440.176980][ T31] #2: ffff888029b410f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 440.187450][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 440.198147][ T31] 4 locks held by syz-executor/9132: [ 440.204100][ T31] #0: ffff8880340da450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 440.213484][ T31] #1: ffff88807c719080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 440.223758][ T31] #2: ffff888029b410f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 440.234403][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 440.245175][ T31] 4 locks held by syz-executor/9150: [ 440.250862][ T31] #0: ffff8880340da450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 440.259970][ T31] #1: ffff888047af0880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 440.270449][ T31] #2: ffff888029b410f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 440.280950][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 440.291639][ T31] 4 locks held by syz-executor/9170: [ 440.302061][ T31] #0: ffff8880340da450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 440.320745][ T31] #1: ffff88807d60a080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 440.330764][ T31] #2: ffff888029b410f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 440.341058][ T31] #3: ffffffff90008be0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 440.352644][ T31] [ 440.355037][ T31] ============================================= [ 440.355037][ T31] [ 440.363640][ T31] NMI backtrace for cpu 0 [ 440.363662][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 440.363698][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.363716][ T31] Call Trace: [ 440.363726][ T31] [ 440.363736][ T31] dump_stack_lvl+0x100/0x190 [ 440.363776][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 440.363816][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 440.363857][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 440.363898][ T31] sys_info+0x141/0x190 [ 440.363927][ T31] watchdog+0xcb1/0x1030 [ 440.363982][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 440.364024][ T31] ? __pfx_watchdog+0x10/0x10 [ 440.364078][ T31] ? __kthread_parkme+0x18c/0x230 [ 440.364118][ T31] ? kthread+0x13a/0x450 [ 440.364158][ T31] ? __pfx_watchdog+0x10/0x10 [ 440.364202][ T31] kthread+0x370/0x450 [ 440.364243][ T31] ? __pfx_kthread+0x10/0x10 [ 440.364288][ T31] ret_from_fork+0x72b/0xd50 [ 440.364339][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 440.364379][ T31] ? __switch_to+0x800/0x10f0 [ 440.364424][ T31] ? __switch_to_asm+0x39/0x70 [ 440.364464][ T31] ? __pfx_kthread+0x10/0x10 [ 440.364507][ T31] ret_from_fork_asm+0x1a/0x30 [ 440.364564][ T31] [ 440.364579][ T31] Sending NMI from CPU 0 to CPUs 1: [ 440.500542][ C1] NMI backtrace for cpu 1 [ 440.500571][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 440.500602][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.500626][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 440.500669][ C1] RIP: 0010:mark_lock+0x8/0xa20 [ 440.500715][ C1] Code: e8 3d 5f 52 ff e9 5c fd ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 56 <41> 55 49 89 fd 41 54 49 89 f4 53 48 83 e4 f0 48 83 ec 70 65 48 8b [ 440.500741][ C1] RSP: 0018:ffffc900001e7a90 EFLAGS: 00000002 [ 440.500760][ C1] RAX: 0000000000000001 RBX: ffff88801eef68f0 RCX: 0000000000000040 [ 440.500777][ C1] RDX: 0000000000000008 RSI: ffff88801eef68f0 RDI: ffff88801eef5d00 [ 440.500793][ C1] RBP: ffffc900001e7aa0 R08: 0000000000000001 R09: 0000000000000003 [ 440.500810][ C1] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000785 [ 440.500826][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000001 [ 440.500841][ C1] FS: 0000000000000000(0000) GS:ffff888123ef4000(0000) knlGS:0000000000000000 [ 440.500866][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.500882][ C1] CR2: 000056545e5480e0 CR3: 000000007f540000 CR4: 00000000003526f0 [ 440.500900][ C1] Call Trace: [ 440.500907][ C1] [ 440.500918][ C1] __lock_acquire+0x49f/0x1a40 [ 440.500965][ C1] lock_acquire+0x1b9/0x370 [ 440.501004][ C1] ? wg_ratelimiter_gc_entries+0x62/0x510 [ 440.501041][ C1] ? __pfx___might_resched+0x10/0x10 [ 440.501084][ C1] _raw_spin_lock+0x2e/0x40 [ 440.501113][ C1] ? wg_ratelimiter_gc_entries+0x62/0x510 [ 440.501148][ C1] wg_ratelimiter_gc_entries+0x62/0x510 [ 440.501185][ C1] process_one_work+0xa23/0x1940 [ 440.501230][ C1] ? __pfx_process_one_work+0x10/0x10 [ 440.501273][ C1] ? __pfx_wg_ratelimiter_gc_entries+0x10/0x10 [ 440.501310][ C1] worker_thread+0x5ef/0xe50 [ 440.501354][ C1] ? kthread+0x13a/0x450 [ 440.501387][ C1] ? __pfx_worker_thread+0x10/0x10 [ 440.501423][ C1] kthread+0x370/0x450 [ 440.501456][ C1] ? __pfx_kthread+0x10/0x10 [ 440.501492][ C1] ret_from_fork+0x72b/0xd50 [ 440.501524][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 440.501562][ C1] ? __switch_to+0x800/0x10f0 [ 440.501602][ C1] ? __switch_to_asm+0x39/0x70 [ 440.501637][ C1] ? __pfx_kthread+0x10/0x10 [ 440.501672][ C1] ret_from_fork_asm+0x1a/0x30 [ 440.501715][ C1] [ 440.768619][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 440.775613][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 440.784760][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.794844][ T31] Call Trace: [ 440.798141][ T31] [ 440.801097][ T31] dump_stack_lvl+0x100/0x190 [ 440.805829][ T31] vpanic+0x552/0x970 [ 440.809853][ T31] ? __pfx_vpanic+0x10/0x10 [ 440.814394][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 440.820612][ T31] panic+0xd1/0xe0 [ 440.824387][ T31] ? __pfx_panic+0x10/0x10 [ 440.828852][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 440.835091][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 440.841387][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 440.847588][ T31] ? watchdog.cold+0x1ec/0x234 [ 440.852399][ T31] ? watchdog+0xcc1/0x1030 [ 440.856877][ T31] watchdog.cold+0x1fd/0x234 [ 440.861512][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 440.867358][ T31] ? __pfx_watchdog+0x10/0x10 [ 440.872092][ T31] ? __kthread_parkme+0x18c/0x230 [ 440.877175][ T31] ? kthread+0x13a/0x450 [ 440.881472][ T31] ? __pfx_watchdog+0x10/0x10 [ 440.886201][ T31] kthread+0x370/0x450 [ 440.890352][ T31] ? __pfx_kthread+0x10/0x10 [ 440.894990][ T31] ret_from_fork+0x72b/0xd50 [ 440.899624][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 440.904788][ T31] ? __switch_to+0x800/0x10f0 [ 440.909512][ T31] ? __switch_to_asm+0x39/0x70 [ 440.914310][ T31] ? __pfx_kthread+0x10/0x10 [ 440.918953][ T31] ret_from_fork_asm+0x1a/0x30 [ 440.923805][ T31] [ 440.927501][ T31] Kernel Offset: disabled [ 440.931838][ T31] Rebooting in 86400 seconds..