last executing test programs: 2.949785794s ago: executing program 1 (id=196): keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0xa, 0x2, 0x0, 0x0, 0x42) close_range$auto(0x2, 0x8000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nvme_core/parameters/max_retries\x00', 0x101342, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) sendfile$auto(r0, 0x3, 0x0, 0xc01) 2.895967981s ago: executing program 1 (id=197): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x143203, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x1, 0x200, 0xe, "089b5451484db0a13e6915057feb6d7a9bc000"}) 2.771374497s ago: executing program 1 (id=200): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/virt_wifi0/unres_qlen_bytes\x00', 0x4001, 0x0) r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@generic={0xa, "509235679a5532c63bacddae0710"}, 0x54) write$auto(0x3, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video43\x00', 0x24840, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) rt_sigtimedwait$auto(&(0x7f00000010c0)={0x2dda}, &(0x7f00000011c0)={@siginfo_0_0={0x3, 0x10001, 0x18, @_sigsys={&(0x7f0000001100)="b8b596e2b833f004e2b356f49dd9b4b4519cb39912e1267c3d4e9b764015e94859ecc3802c0ad16152e8eb033bcde2594d4268bb4537e6b99eea8cddd953e044c067ebbfb4e02de3f99f3c6b55bea2971d10651e8ef9379ccdb5f2f806daa1370329b78e1f5b648ff59282bd918933e78b2fbe6e5780b63fb16d8fcc8ed6f706f4ef0ccca231a9a7d01c390b80be336cdd7c39fd589bd25f6127e8369efe77641fd354fc20d637416ee5cbc0f1972ff5476cbb7cf338b36a8982dade5c7594", 0x7, 0x4}}}, &(0x7f0000001240)={0x0, 0x7fffffffffffffff}, 0x8) write$auto(r1, 0x0, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r2, r2, 0x0, 0x7ffff003) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000100)={[0x1fe, 0x6, 0x2, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8000000000000000, 0x6]}, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x4, 0xe983, 0x9, 0xeb1, 0x401, 0x8000) 2.445825706s ago: executing program 3 (id=207): r0 = socket(0x2, 0x3, 0x2) r1 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) writev$auto(r1, 0x0, 0x8) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) close_range$auto(0x2, r0, 0x0) 2.43675798s ago: executing program 2 (id=208): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 2.238948039s ago: executing program 3 (id=209): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) pread64$auto(r0, &(0x7f0000000080)='MAC80211_HWSIM\x00', 0x3, 0x8) 2.005793905s ago: executing program 2 (id=211): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x84) getsockopt$auto(r0, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) 1.683192599s ago: executing program 2 (id=212): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4f) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9) 1.561641083s ago: executing program 0 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.429024822s ago: executing program 2 (id=214): setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x269) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r0, 0x0, 0x100082) ioctl$auto_SG_GET_NUM_WAITING(r0, 0x227d, 0x0) 1.411906449s ago: executing program 0 (id=215): openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x80, 0x0) r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/environ\x00', 0x2800, 0x0) preadv$auto(r0, &(0x7f00000001c0)={0x0, 0x6b}, 0x8, 0xd2d, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1.288344143s ago: executing program 0 (id=216): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x2}, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 1.164075401s ago: executing program 1 (id=217): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) fchdir$auto(r0) 1.100658141s ago: executing program 0 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x24, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x24}}, 0x24048084) 1.078701135s ago: executing program 2 (id=219): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a33, &(0x7f0000000140)={0x0, 0x7f}, 0x5, 0x0, 0xfff, 0x84}, 0xfffffffb}, 0x7fffffff, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r0 = socket(0x2, 0xa, 0x0) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000080)={0x0, 0x5ea}, 0x1, 0x0, 0x1, 0xaf23}, 0x6}, 0x5, 0x1997b23d) 1.019041148s ago: executing program 0 (id=220): socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf250d0000000c000600010000000000000008"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0xa, 0x2, 0x3a) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r0, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) 1.01565219s ago: executing program 3 (id=221): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x2) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000040), 0x424041, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0x3, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r0, 0x4018bc0e, &(0x7f0000000080)={0x5, 0x0, 0x5, 0x1}) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd=0xffffffffffffffff, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r2) pread64$auto(r0, &(0x7f0000000540)='%!:{\x14.*\x00', 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r5, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc050}, 0x4084) prctl$auto(0x44, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) 878.164825ms ago: executing program 0 (id=222): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setxattrat$auto(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0, 0x5d8) 825.161076ms ago: executing program 1 (id=223): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x9a28) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 793.531514ms ago: executing program 3 (id=224): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 383.721819ms ago: executing program 1 (id=225): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x181201, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) open(0x0, 0x80, 0xb5d1af1605322de0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 280.380513ms ago: executing program 2 (id=226): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) memfd_create$auto(0x0, 0x4) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) 198.919744ms ago: executing program 3 (id=227): r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60440, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r0, &(0x7f0000000100)=""/153, 0x99) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x801, 0x84) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) 0s ago: executing program 3 (id=228): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty24\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) write$auto(0x3, 0x0, 0x7) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. [ 80.511938][ T5815] cgroup: Unknown subsys name 'net' [ 80.645917][ T5815] cgroup: Unknown subsys name 'cpuset' [ 80.654419][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.095876][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.780846][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.791510][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.801374][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.811790][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.812344][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.828458][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.830734][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.836378][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.844960][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.850706][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.864503][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.872044][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.874195][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.879731][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.886854][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.901429][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.901641][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.908659][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.925797][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.940044][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.407957][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 84.502858][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 84.523309][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 84.592154][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 84.700556][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.708204][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.715546][ T5829] bridge_slave_0: entered allmulticast mode [ 84.722488][ T5829] bridge_slave_0: entered promiscuous mode [ 84.756327][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.764085][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.771171][ T5829] bridge_slave_1: entered allmulticast mode [ 84.778340][ T5829] bridge_slave_1: entered promiscuous mode [ 84.790327][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.797546][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.804942][ T5828] bridge_slave_0: entered allmulticast mode [ 84.811946][ T5828] bridge_slave_0: entered promiscuous mode [ 84.843148][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.850284][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.857684][ T5828] bridge_slave_1: entered allmulticast mode [ 84.864683][ T5828] bridge_slave_1: entered promiscuous mode [ 84.871564][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.878974][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.886134][ T5827] bridge_slave_0: entered allmulticast mode [ 84.893162][ T5827] bridge_slave_0: entered promiscuous mode [ 84.928442][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.935621][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.942693][ T5827] bridge_slave_1: entered allmulticast mode [ 84.950243][ T5827] bridge_slave_1: entered promiscuous mode [ 84.959625][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.999989][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.009303][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.016563][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.024189][ T5826] bridge_slave_0: entered allmulticast mode [ 85.031092][ T5826] bridge_slave_0: entered promiscuous mode [ 85.041449][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.069584][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.076908][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.084196][ T5826] bridge_slave_1: entered allmulticast mode [ 85.091071][ T5826] bridge_slave_1: entered promiscuous mode [ 85.099685][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.110938][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.150182][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.161085][ T5829] team0: Port device team_slave_0 added [ 85.197846][ T5829] team0: Port device team_slave_1 added [ 85.205654][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.216520][ T5828] team0: Port device team_slave_0 added [ 85.243320][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.255027][ T5828] team0: Port device team_slave_1 added [ 85.262017][ T5827] team0: Port device team_slave_0 added [ 85.298231][ T5827] team0: Port device team_slave_1 added [ 85.304742][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.311669][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.337574][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.385582][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.392519][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.418476][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.430812][ T5826] team0: Port device team_slave_0 added [ 85.437022][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.444129][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.470162][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.498869][ T5826] team0: Port device team_slave_1 added [ 85.505296][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.512216][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.538369][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.549930][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.557119][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.583339][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.614790][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.621725][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.647846][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.670119][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.677079][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.703042][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.731745][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.738798][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.764684][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.826738][ T5829] hsr_slave_0: entered promiscuous mode [ 85.834188][ T5829] hsr_slave_1: entered promiscuous mode [ 85.874958][ T5828] hsr_slave_0: entered promiscuous mode [ 85.881077][ T5828] hsr_slave_1: entered promiscuous mode [ 85.888385][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 85.894412][ T5828] Cannot create hsr debugfs directory [ 85.914933][ T5827] hsr_slave_0: entered promiscuous mode [ 85.921253][ T5827] hsr_slave_1: entered promiscuous mode [ 85.927651][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 85.933603][ T5827] Cannot create hsr debugfs directory [ 85.945494][ T5826] hsr_slave_0: entered promiscuous mode [ 85.951622][ T5826] hsr_slave_1: entered promiscuous mode [ 85.961396][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 85.968091][ T5826] Cannot create hsr debugfs directory [ 85.968213][ T5833] Bluetooth: hci1: command tx timeout [ 85.979715][ T52] Bluetooth: hci0: command tx timeout [ 85.985588][ T5838] Bluetooth: hci3: command tx timeout [ 86.043278][ T5838] Bluetooth: hci2: command tx timeout [ 86.427320][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.440042][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.460900][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.472637][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.520090][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.539999][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.556636][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.581006][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.677739][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.689290][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.718824][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.747338][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.896362][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.916093][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.937265][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.952002][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.006768][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.087105][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.112754][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.119936][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.143362][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.150430][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.167938][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.232112][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.263935][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.271058][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.284624][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.304226][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.311312][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.358897][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.407004][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.414178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.448962][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.456128][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.476732][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.575955][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.600911][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.608089][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.651162][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.658343][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.829098][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.958968][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.996490][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.017693][ T5826] veth0_vlan: entered promiscuous mode [ 88.043688][ T52] Bluetooth: hci0: command tx timeout [ 88.043704][ T5833] Bluetooth: hci1: command tx timeout [ 88.049134][ T5838] Bluetooth: hci3: command tx timeout [ 88.084634][ T5826] veth1_vlan: entered promiscuous mode [ 88.123251][ T5833] Bluetooth: hci2: command tx timeout [ 88.174548][ T5829] veth0_vlan: entered promiscuous mode [ 88.182802][ T5828] veth0_vlan: entered promiscuous mode [ 88.210140][ T5826] veth0_macvtap: entered promiscuous mode [ 88.221436][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.230383][ T5828] veth1_vlan: entered promiscuous mode [ 88.242517][ T5829] veth1_vlan: entered promiscuous mode [ 88.251578][ T5826] veth1_macvtap: entered promiscuous mode [ 88.306383][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.333829][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.342808][ T5829] veth0_macvtap: entered promiscuous mode [ 88.369789][ T3421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.378865][ T3421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.394814][ T5829] veth1_macvtap: entered promiscuous mode [ 88.402459][ T3421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.412331][ T3421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.422663][ T5828] veth0_macvtap: entered promiscuous mode [ 88.432568][ T5827] veth0_vlan: entered promiscuous mode [ 88.443854][ T5828] veth1_macvtap: entered promiscuous mode [ 88.479100][ T5827] veth1_vlan: entered promiscuous mode [ 88.500343][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.519127][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.535831][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.572720][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.598499][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.608139][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.618975][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.636380][ T1163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.651137][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.663999][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.676836][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.691268][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.701685][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.731990][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.771678][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.786988][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.792254][ T5827] veth0_macvtap: entered promiscuous mode [ 88.823144][ T5827] veth1_macvtap: entered promiscuous mode [ 88.891249][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.910328][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.933175][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.949855][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.977912][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.000143][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.007605][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.036744][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.048845][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.058456][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.077168][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.117148][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.128802][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.241207][ T5922] Zero length message leads to an empty skb [ 89.249958][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.263198][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.444371][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.455568][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.633471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.708700][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.774342][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.923583][ T5930] zswap: compressor not available [ 90.123585][ T52] Bluetooth: hci0: command tx timeout [ 90.129388][ T5833] Bluetooth: hci1: command tx timeout [ 90.133178][ T5838] Bluetooth: hci3: command tx timeout [ 90.183781][ T5930] random: crng reseeded on system resumption [ 90.207805][ T52] Bluetooth: hci2: command tx timeout [ 90.247068][ T5940] Unable to find swap-space signature [ 90.323200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.331511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.368410][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.403636][ T5944] WARNING! power/level is deprecated; use power/control instead [ 90.423493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.643568][ T5944] hub 1-0:1.0: USB hub found [ 90.662160][ T5944] hub 1-0:1.0: 1 port detected [ 90.683404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.759754][ T5945] hub 1-0:1.0: USB hub found [ 90.797136][ T5945] hub 1-0:1.0: 1 port detected [ 90.917969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.993300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.994868][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 91.073075][ T5955] veth1_macvtap: entered allmulticast mode [ 91.195553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.274871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.283806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.825364][ T50] cfg80211: failed to load regulatory.db [ 92.102338][ T5972] binder: 5970:5972 ioctl c018620c 0 returned -1 [ 92.131819][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 92.204101][ T52] Bluetooth: hci1: command tx timeout [ 92.204121][ T5838] Bluetooth: hci0: command tx timeout [ 92.209535][ T5833] Bluetooth: hci3: command tx timeout [ 92.283684][ T52] Bluetooth: hci2: command tx timeout [ 93.035284][ T5986] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 93.455332][ T5988] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 94.531367][ T6006] zswap: compressor not available [ 94.768439][ T6016] vhci_hcd vhci_hcd.2: Wrong hub descriptor type for USB 3.0 roothub. [ 96.773748][ T6030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.790536][ T6030] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.840499][ T6039] zswap: compressor not available [ 96.871041][ T6056] ICMPv6: process `syz.3.22' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 96.932718][ T6030] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.038137][ T6030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.038296][ T6030] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.071985][ T6030] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.092844][ T6030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.094300][ T6030] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.101191][ T6030] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.102299][ T6030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.102340][ T6030] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.103867][ T6030] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.597666][ T6076] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 98.071274][ T6080] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 98.603030][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.084656][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.173143][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.173530][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.294121][ T6107] can0: slcan on pty185. [ 99.504223][ T6107] can0 (unregistered): slcan off pty185. [ 100.683558][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.149556][ T30] audit: type=1800 audit(1765368784.654:2): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.33" name="discovery_nqn" dev="configfs" ino=9327 res=0 errno=0 [ 101.163168][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.243040][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.253033][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.700056][ T6145] FAULT_INJECTION: forcing a failure. [ 101.700056][ T6145] name failslab, interval 1, probability 0, space 0, times 1 [ 101.741084][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) [ 101.741120][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.741141][ T6145] Call Trace: [ 101.741150][ T6145] [ 101.741160][ T6145] dump_stack_lvl+0x16c/0x1f0 [ 101.741189][ T6145] should_fail_ex+0x512/0x640 [ 101.741212][ T6145] ? kmem_cache_alloc_noprof+0x62/0x770 [ 101.741233][ T6145] should_failslab+0xc2/0x120 [ 101.741255][ T6145] kmem_cache_alloc_noprof+0x83/0x770 [ 101.741277][ T6145] ? __kernfs_new_node+0xd2/0x990 [ 101.741297][ T6145] ? __kernfs_new_node+0xd2/0x990 [ 101.741311][ T6145] __kernfs_new_node+0xd2/0x990 [ 101.741329][ T6145] ? __pfx___kernfs_new_node+0x10/0x10 [ 101.741350][ T6145] ? find_held_lock+0x2b/0x80 [ 101.741369][ T6145] ? kernfs_root+0xee/0x2a0 [ 101.741388][ T6145] kernfs_new_node+0x13c/0x1e0 [ 101.741410][ T6145] __kernfs_create_file+0x53/0x350 [ 101.741433][ T6145] sysfs_add_file_mode_ns+0x207/0x3c0 [ 101.741453][ T6145] sysfs_merge_group+0x1aa/0x340 [ 101.741471][ T6145] ? __pfx_sysfs_merge_group+0x10/0x10 [ 101.741490][ T6145] ? __pfx_dev_add_physical_location+0x10/0x10 [ 101.741506][ T6145] ? bus_to_subsys+0x131/0x160 [ 101.741527][ T6145] dpm_sysfs_add+0x237/0x280 [ 101.741543][ T6145] device_add+0x9cc/0x1980 [ 101.741560][ T6145] ? __pfx_device_add+0x10/0x10 [ 101.741575][ T6145] ? lockdep_init_map_type+0x5c/0x270 [ 101.741590][ T6145] ? __init_waitqueue_head+0xca/0x150 [ 101.741611][ T6145] rfkill_register+0x1ad/0xb40 [ 101.741628][ T6145] nfc_register_device+0x11f/0x410 [ 101.741646][ T6145] nci_register_device+0x7f1/0xb80 [ 101.741669][ T6145] ? __pfx_nci_register_device+0x10/0x10 [ 101.741694][ T6145] ? lockdep_init_map_type+0x5c/0x270 [ 101.741712][ T6145] virtual_ncidev_open+0x141/0x220 [ 101.741732][ T6145] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 101.741750][ T6145] misc_open+0x26d/0x450 [ 101.741772][ T6145] ? __pfx_misc_open+0x10/0x10 [ 101.741793][ T6145] chrdev_open+0x234/0x6a0 [ 101.741814][ T6145] ? __pfx_chrdev_open+0x10/0x10 [ 101.741839][ T6145] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 101.741865][ T6145] do_dentry_open+0x748/0x1590 [ 101.741884][ T6145] ? __pfx_chrdev_open+0x10/0x10 [ 101.741910][ T6145] vfs_open+0x82/0x3f0 [ 101.741927][ T6145] path_openat+0x2078/0x3140 [ 101.741954][ T6145] ? __pfx_path_openat+0x10/0x10 [ 101.741982][ T6145] do_filp_open+0x20b/0x470 [ 101.742002][ T6145] ? __pfx_do_filp_open+0x10/0x10 [ 101.742037][ T6145] ? alloc_fd+0x471/0x7d0 [ 101.742062][ T6145] do_sys_openat2+0x11f/0x280 [ 101.742085][ T6145] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.742110][ T6145] __x64_sys_openat+0x174/0x210 [ 101.742126][ T6145] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.742151][ T6145] do_syscall_64+0xcd/0xf80 [ 101.742171][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.742185][ T6145] RIP: 0033:0x7f6675b8f7c9 [ 101.742203][ T6145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.742218][ T6145] RSP: 002b:00007f6676a74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.742232][ T6145] RAX: ffffffffffffffda RBX: 00007f6675de5fa0 RCX: 00007f6675b8f7c9 [ 101.742242][ T6145] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 101.742251][ T6145] RBP: 00007f6675c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.742259][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.742268][ T6145] R13: 00007f6675de6038 R14: 00007f6675de5fa0 R15: 00007ffe77b3d608 [ 101.742288][ T6145] [ 102.763048][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.970315][ T6173] Process accounting resumed [ 103.244734][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.330133][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.330253][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.577585][ T30] audit: type=1800 audit(1765368787.104:3): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="features" dev="configfs" ino=8488 res=0 errno=0 [ 103.933929][ T6172] syz.2.38 (6172) used greatest stack depth: 19688 bytes left [ 105.029749][ T6201] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.992488][ T6209] Invalid ELF header magic: != ELF [ 107.257891][ T5917] Process accounting resumed [ 108.893595][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 109.070906][ T6254] netlink: set zone limit has 8 unknown bytes [ 109.191043][ T6252] netlink: zone id is out of range [ 109.197455][ T6257] openvswitch: netlink: Flow key attribute not present in set flow. [ 109.220557][ T6252] netlink: del zone limit has 4 unknown bytes [ 109.406912][ T6243] kexec: Could not allocate control_code_buffer [ 110.554898][ T6281] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 110.934854][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.108089][ T6277] kexec: Could not allocate control_code_buffer [ 112.941096][ T6317] input: f as /devices/virtual/input/input9 [ 113.016913][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.711394][ T30] audit: type=1800 audit(1765368797.234:4): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.71" name="discovery_nqn" dev="configfs" ino=9744 res=0 errno=0 [ 114.095754][ T6340] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 114.602131][ T6341] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 115.191411][ T6349] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 115.507609][ T5942] Process accounting resumed [ 116.133984][ T6349] kexec: Could not allocate control_code_buffer [ 116.466308][ T6371] rnbd_client L213: map_device: Parameters missing [ 116.475197][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 116.494744][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 116.815751][ T6383] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 116.973810][ T5917] Process accounting resumed [ 117.290232][ T6387] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 117.864528][ T6400] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.888542][ T6383] block2mtd: illegal erase size [ 117.921622][ T6400] FAULT_INJECTION: forcing a failure. [ 117.921622][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 117.953066][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.2.85 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.953109][ T6400] Tainted: [L]=SOFTLOCKUP [ 117.953119][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.953135][ T6400] Call Trace: [ 117.953144][ T6400] [ 117.953154][ T6400] dump_stack_lvl+0x16c/0x1f0 [ 117.953194][ T6400] should_fail_ex+0x512/0x640 [ 117.953235][ T6400] ? kmem_cache_alloc_noprof+0x62/0x770 [ 117.953271][ T6400] should_failslab+0xc2/0x120 [ 117.953311][ T6400] kmem_cache_alloc_noprof+0x83/0x770 [ 117.953342][ T6400] ? fc_mount+0xa2/0x220 [ 117.953371][ T6400] ? alloc_vfsmnt+0x23/0x6b0 [ 117.953404][ T6400] ? alloc_vfsmnt+0x23/0x6b0 [ 117.953428][ T6400] alloc_vfsmnt+0x23/0x6b0 [ 117.953458][ T6400] fc_mount+0x105/0x220 [ 117.953491][ T6400] trace_automount+0xfb/0x110 [ 117.953526][ T6400] __traverse_mounts+0x1b9/0x830 [ 117.953559][ T6400] step_into_slowpath+0x772/0xf50 [ 117.953594][ T6400] ? __d_lookup+0x25c/0x4a0 [ 117.953630][ T6400] ? __pfx_step_into_slowpath+0x10/0x10 [ 117.953662][ T6400] ? __d_lookup+0x266/0x4a0 [ 117.953694][ T6400] ? lookup_fast+0x156/0x610 [ 117.953721][ T6400] ? inode_permission+0x37b/0x640 [ 117.953755][ T6400] link_path_walk+0xd26/0x1c70 [ 117.953803][ T6400] path_openat+0x1bd/0x3140 [ 117.953849][ T6400] ? do_syscall_64+0xcd/0xf80 [ 117.953882][ T6400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.953922][ T6400] ? __pfx_path_openat+0x10/0x10 [ 117.953976][ T6400] do_filp_open+0x20b/0x470 [ 117.954016][ T6400] ? __pfx_do_filp_open+0x10/0x10 [ 117.954082][ T6400] ? alloc_fd+0x471/0x7d0 [ 117.954131][ T6400] do_sys_openat2+0x11f/0x280 [ 117.954161][ T6400] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.954205][ T6400] __x64_sys_openat+0x174/0x210 [ 117.954236][ T6400] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.954281][ T6400] do_syscall_64+0xcd/0xf80 [ 117.954317][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.954345][ T6400] RIP: 0033:0x7f662958f7c9 [ 117.954367][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.954393][ T6400] RSP: 002b:00007f662a3e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.954419][ T6400] RAX: ffffffffffffffda RBX: 00007f66297e5fa0 RCX: 00007f662958f7c9 [ 117.954438][ T6400] RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 117.954456][ T6400] RBP: 00007f6629613f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.954473][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.954489][ T6400] R13: 00007f66297e6038 R14: 00007f66297e5fa0 R15: 00007fff0c900748 [ 117.954527][ T6400] [ 118.990595][ T6409] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 120.158868][ T6409] kexec: Could not allocate control_code_buffer [ 121.364094][ T6457] openvswitch: netlink: Flow key attribute not present in set flow. [ 122.276460][ T6469] hub 1-0:1.0: USB hub found [ 122.334202][ T6469] hub 1-0:1.0: 1 port detected [ 122.419366][ T6471] hub 1-0:1.0: USB hub found [ 122.445603][ T6471] hub 1-0:1.0: 1 port detected [ 122.567631][ T6473] block nbd2: not configured, cannot reconfigure [ 123.089410][ T6478] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.125587][ T6478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.163646][ T6478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.207116][ T6478] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.249198][ T6498] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.440696][ T6501] binder: 6500:6501 ioctl c018620c 0 returned -1 [ 124.442007][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 125.164630][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.170737][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.243957][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.250013][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.966581][ T6543] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 127.100128][ T6545] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 128.571053][ T6571] mkiss: ax0: crc mode is auto. [ 128.617678][ T6573] ptp ptp0: new virtual clock ptp1 [ 128.644476][ T6573] ptp ptp0: new virtual clock ptp2 [ 128.684382][ T6573] ptp ptp0: new virtual clock ptp3 [ 128.720529][ T6573] ptp ptp0: guarantee physical clock free running [ 130.010487][ T6600] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.745507][ T6608] syz.0.130(6608): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 130.990858][ T6612] process 'syz.0.132' launched ':,' with NULL argv: empty string added [ 131.062002][ T6615] batman_adv: Routing algorithm '7' is not supported [ 131.313090][ T5885] Process accounting resumed [ 131.742660][ T6047] netdevsim netdevsim511 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.856599][ T9] Process accounting resumed [ 133.278277][ T9] Process accounting resumed [ 133.320649][ T6665] block nbd2: not configured, cannot reconfigure [ 134.698735][ T6700] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 135.503236][ T6707] Process accounting resumed [ 137.071025][ T5884] Process accounting resumed [ 137.252461][ T6756] binder: 6755:6756 ioctl c018620c 0 returned -1 [ 137.290381][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.179'. [ 137.894732][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.901266][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.930377][ T6766] input: jJǸ-9%v as /devices/virtual/input/input15 [ 138.597817][ T6785] binder: 6784:6785 ioctl c018620c 0 returned -1 [ 138.605781][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.190'. [ 138.665312][ T6790] FAULT_INJECTION: forcing a failure. [ 138.665312][ T6790] name failslab, interval 1, probability 0, space 0, times 0 [ 138.725711][ T6790] CPU: 0 UID: 0 PID: 6790 Comm: syz.0.192 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.725735][ T6790] Tainted: [L]=SOFTLOCKUP [ 138.725741][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.725750][ T6790] Call Trace: [ 138.725760][ T6790] [ 138.725766][ T6790] dump_stack_lvl+0x16c/0x1f0 [ 138.725788][ T6790] should_fail_ex+0x512/0x640 [ 138.725810][ T6790] ? kmem_cache_alloc_noprof+0x62/0x770 [ 138.725830][ T6790] should_failslab+0xc2/0x120 [ 138.725851][ T6790] kmem_cache_alloc_noprof+0x83/0x770 [ 138.725867][ T6790] ? mas_alloc_nodes+0x27b/0x380 [ 138.725885][ T6790] ? mas_alloc_nodes+0x27b/0x380 [ 138.725898][ T6790] mas_alloc_nodes+0x27b/0x380 [ 138.725913][ T6790] mas_preallocate+0x5e3/0xee0 [ 138.725934][ T6790] ? __pfx_mas_preallocate+0x10/0x10 [ 138.725955][ T6790] ? vm_area_alloc+0x1f/0x160 [ 138.725971][ T6790] ? lockdep_init_map_type+0x5c/0x270 [ 138.725988][ T6790] __mmap_region+0x1262/0x2a00 [ 138.726006][ T6790] ? __lock_acquire+0x436/0x2890 [ 138.726018][ T6790] ? __pfx___mmap_region+0x10/0x10 [ 138.726040][ T6790] ? lock_acquire+0x179/0x330 [ 138.726060][ T6790] ? finish_task_switch.isra.0+0x207/0xbd0 [ 138.726115][ T6790] ? rcu_is_watching+0x12/0xc0 [ 138.726139][ T6790] mmap_region+0x1ab/0x3f0 [ 138.726155][ T6790] ? __get_unmapped_area+0x267/0x3f0 [ 138.726177][ T6790] do_mmap+0xa3e/0x1210 [ 138.726200][ T6790] ? __pfx_do_mmap+0x10/0x10 [ 138.726220][ T6790] ? __pfx_down_write_killable+0x10/0x10 [ 138.726244][ T6790] vm_mmap_pgoff+0x29e/0x470 [ 138.726267][ T6790] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 138.726284][ T6790] ? fput+0x70/0xf0 [ 138.726297][ T6790] ? __sys_connect+0xe0/0x160 [ 138.726321][ T6790] ? __x64_sys_futex+0x1e0/0x4c0 [ 138.726336][ T6790] ? __x64_sys_futex+0x1e9/0x4c0 [ 138.726355][ T6790] ksys_mmap_pgoff+0x7d/0x5c0 [ 138.726373][ T6790] ? xfd_validate_state+0x61/0x180 [ 138.726386][ T6790] ? __pfx_ksys_write+0x10/0x10 [ 138.726408][ T6790] __x64_sys_mmap+0x125/0x190 [ 138.726424][ T6790] do_syscall_64+0xcd/0xf80 [ 138.726442][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.726457][ T6790] RIP: 0033:0x7f6675b8f7c9 [ 138.726469][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.726482][ T6790] RSP: 002b:00007f6676a74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 138.726496][ T6790] RAX: ffffffffffffffda RBX: 00007f6675de5fa0 RCX: 00007f6675b8f7c9 [ 138.726506][ T6790] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 138.726515][ T6790] RBP: 00007f6675c13f91 R08: 0000000000000002 R09: 0000000800008000 [ 138.726524][ T6790] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 138.726532][ T6790] R13: 00007f6675de6038 R14: 00007f6675de5fa0 R15: 00007ffe77b3d608 [ 138.726555][ T6790] [ 139.274569][ T6795] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 139.290837][ T6796] nfs: Unknown parameter 'nl802154' [ 141.367028][ T6859] syz.2.219 uses obsolete (PF_INET,SOCK_PACKET) [ 141.560049][ T6869] FAULT_INJECTION: forcing a failure. [ 141.560049][ T6869] name failslab, interval 1, probability 0, space 0, times 0 [ 141.577553][ T6869] CPU: 1 UID: 0 PID: 6869 Comm: syz.1.223 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.577603][ T6869] Tainted: [L]=SOFTLOCKUP [ 141.577613][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.577628][ T6869] Call Trace: [ 141.577637][ T6869] [ 141.577649][ T6869] dump_stack_lvl+0x16c/0x1f0 [ 141.577688][ T6869] should_fail_ex+0x512/0x640 [ 141.577730][ T6869] ? __kmalloc_cache_noprof+0x5f/0x800 [ 141.577765][ T6869] should_failslab+0xc2/0x120 [ 141.577809][ T6869] __kmalloc_cache_noprof+0x80/0x800 [ 141.577841][ T6869] ? snd_midi_event_new+0x6f/0x210 [ 141.577881][ T6869] ? snd_midi_event_new+0x6f/0x210 [ 141.577914][ T6869] snd_midi_event_new+0x6f/0x210 [ 141.577949][ T6869] snd_virmidi_output_open+0x106/0x670 [ 141.577989][ T6869] open_substream+0x480/0x9d0 [ 141.578031][ T6869] rawmidi_open_priv+0x543/0x6e0 [ 141.578080][ T6869] snd_rawmidi_open+0x4cb/0xbf0 [ 141.578130][ T6869] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 141.578176][ T6869] ? __pfx_default_wake_function+0x10/0x10 [ 141.578218][ T6869] ? kobject_get_unless_zero+0x156/0x1e0 [ 141.578259][ T6869] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 141.578302][ T6869] snd_open+0x22d/0x4c0 [ 141.578337][ T6869] ? __pfx_snd_open+0x10/0x10 [ 141.578371][ T6869] chrdev_open+0x234/0x6a0 [ 141.578411][ T6869] ? __pfx_apparmor_file_open+0x10/0x10 [ 141.578450][ T6869] ? __pfx_chrdev_open+0x10/0x10 [ 141.578494][ T6869] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 141.578544][ T6869] do_dentry_open+0x748/0x1590 [ 141.578589][ T6869] ? __pfx_chrdev_open+0x10/0x10 [ 141.578641][ T6869] vfs_open+0x82/0x3f0 [ 141.578674][ T6869] path_openat+0x2078/0x3140 [ 141.578727][ T6869] ? __pfx_path_openat+0x10/0x10 [ 141.578781][ T6869] do_filp_open+0x20b/0x470 [ 141.578822][ T6869] ? __pfx_do_filp_open+0x10/0x10 [ 141.578889][ T6869] ? alloc_fd+0x471/0x7d0 [ 141.578938][ T6869] do_sys_openat2+0x11f/0x280 [ 141.578967][ T6869] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.579012][ T6869] __x64_sys_openat+0x174/0x210 [ 141.579043][ T6869] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.579088][ T6869] do_syscall_64+0xcd/0xf80 [ 141.579126][ T6869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.579155][ T6869] RIP: 0033:0x7f038978f7c9 [ 141.579178][ T6869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.579203][ T6869] RSP: 002b:00007f038a6e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.579230][ T6869] RAX: ffffffffffffffda RBX: 00007f03899e5fa0 RCX: 00007f038978f7c9 [ 141.579249][ T6869] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 141.579266][ T6869] RBP: 00007f0389813f91 R08: 0000000000000000 R09: 0000000000000000 [ 141.579283][ T6869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.579300][ T6869] R13: 00007f03899e6038 R14: 00007f03899e5fa0 R15: 00007fff01a338e8 [ 141.579336][ T6869] [ 142.127046][ T6874] FAULT_INJECTION: forcing a failure. [ 142.127046][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 142.203594][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.1.225 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.203641][ T6874] Tainted: [L]=SOFTLOCKUP [ 142.203650][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.203666][ T6874] Call Trace: [ 142.203675][ T6874] [ 142.203686][ T6874] dump_stack_lvl+0x16c/0x1f0 [ 142.203726][ T6874] should_fail_ex+0x512/0x640 [ 142.203769][ T6874] ? __kmalloc_noprof+0xca/0x910 [ 142.203802][ T6874] should_failslab+0xc2/0x120 [ 142.203845][ T6874] __kmalloc_noprof+0xeb/0x910 [ 142.203875][ T6874] ? tracepoint_add_func+0x2a6/0xea0 [ 142.203919][ T6874] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 142.203957][ T6874] ? tracepoint_add_func+0x2a6/0xea0 [ 142.203996][ T6874] tracepoint_add_func+0x2a6/0xea0 [ 142.204035][ T6874] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 142.204079][ T6874] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 142.204115][ T6874] tracepoint_probe_register+0xbf/0x100 [ 142.204159][ T6874] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 142.204202][ T6874] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 142.204242][ T6874] ? debugfs_create_file_full+0x41/0x60 [ 142.204291][ T6874] blk_register_tracepoints+0x75/0x430 [ 142.204319][ T6874] blk_trace_setup_finalize+0x336/0x3d0 [ 142.204353][ T6874] blk_trace_setup+0x200/0x3b0 [ 142.204387][ T6874] ? __pfx_blk_trace_setup+0x10/0x10 [ 142.204419][ T6874] ? vsnprintf+0x331/0x11e0 [ 142.204456][ T6874] ? __pfx_vsnprintf+0x10/0x10 [ 142.204503][ T6874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.204555][ T6874] ? do_vfs_ioctl+0x128/0x14f0 [ 142.204595][ T6874] blk_trace_ioctl+0x2ce/0x300 [ 142.204634][ T6874] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 142.204670][ T6874] ? find_held_lock+0x2b/0x80 [ 142.204705][ T6874] ? hook_file_ioctl_common+0x144/0x410 [ 142.204752][ T6874] blkdev_ioctl+0x1fa/0x6e0 [ 142.204779][ T6874] ? __pfx_blkdev_ioctl+0x10/0x10 [ 142.204810][ T6874] ? __pfx_blkdev_ioctl+0x10/0x10 [ 142.204839][ T6874] __x64_sys_ioctl+0x18e/0x210 [ 142.204875][ T6874] do_syscall_64+0xcd/0xf80 [ 142.204911][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.204938][ T6874] RIP: 0033:0x7f038978f7c9 [ 142.204959][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.204983][ T6874] RSP: 002b:00007f038a6e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.205016][ T6874] RAX: ffffffffffffffda RBX: 00007f03899e5fa0 RCX: 00007f038978f7c9 [ 142.205034][ T6874] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000004 [ 142.205052][ T6874] RBP: 00007f0389813f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.205068][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.205084][ T6874] R13: 00007f03899e6038 R14: 00007f03899e5fa0 R15: 00007fff01a338e8 [ 142.205121][ T6874] [ 142.205358][ T6874] ------------[ cut here ]------------ [ 142.502447][ T6874] WARNING: kernel/trace/blktrace.c:1334 at blk_register_tracepoints+0x353/0x430, CPU#1: syz.1.225/6874 [ 142.502976][ T6874] Modules linked in: [ 142.503019][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.1.225 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.503060][ T6874] Tainted: [L]=SOFTLOCKUP [ 142.503071][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.503086][ T6874] RIP: 0010:blk_register_tracepoints+0x353/0x430 [ 142.503120][ T6874] Code: 00 00 5b e9 3f ba f7 ff e8 3a ba f7 ff 90 0f 0b 90 e9 ef fc ff ff e8 2c ba f7 ff 90 0f 0b 90 e9 0e fd ff ff e8 1e ba f7 ff 90 <0f> 0b 90 e9 2d fd ff ff e8 10 ba f7 ff 90 0f 0b 90 e9 4c fd ff ff [ 142.503148][ T6874] RSP: 0018:ffffc90019477b20 EFLAGS: 00010283 [ 142.503175][ T6874] RAX: 000000000006dbcd RBX: 00000000fffffff4 RCX: ffffc9000c589000 [ 142.503196][ T6874] RDX: 0000000000080000 RSI: ffffffff81c68bd2 RDI: 0000000000000005 [ 142.503216][ T6874] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 142.503235][ T6874] R10: 00000000fffffff4 R11: 0000000000000000 R12: 200000000040000d [ 142.503277][ T6874] R13: ffffc90019477da8 R14: ffff888141f72fa8 R15: 0000000000000001 [ 142.503297][ T6874] FS: 00007f038a6e46c0(0000) GS:ffff888124a04000(0000) knlGS:0000000000000000 [ 142.503324][ T6874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.503344][ T6874] CR2: 00007f6675de20b8 CR3: 0000000020f0c000 CR4: 00000000003526f0 [ 142.503363][ T6874] Call Trace: [ 142.503374][ T6874] [ 142.503386][ T6874] blk_trace_setup_finalize+0x336/0x3d0 [ 142.503421][ T6874] blk_trace_setup+0x200/0x3b0 [ 142.503459][ T6874] ? __pfx_blk_trace_setup+0x10/0x10 [ 142.503492][ T6874] ? vsnprintf+0x331/0x11e0 [ 142.503531][ T6874] ? __pfx_vsnprintf+0x10/0x10 [ 142.503584][ T6874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.503631][ T6874] ? do_vfs_ioctl+0x128/0x14f0 [ 142.503671][ T6874] blk_trace_ioctl+0x2ce/0x300 [ 142.503708][ T6874] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 142.503749][ T6874] ? find_held_lock+0x2b/0x80 [ 142.503787][ T6874] ? hook_file_ioctl_common+0x144/0x410 [ 142.503838][ T6874] blkdev_ioctl+0x1fa/0x6e0 [ 142.503867][ T6874] ? __pfx_blkdev_ioctl+0x10/0x10 [ 142.503902][ T6874] ? __pfx_blkdev_ioctl+0x10/0x10 [ 142.503932][ T6874] __x64_sys_ioctl+0x18e/0x210 [ 142.503970][ T6874] do_syscall_64+0xcd/0xf80 [ 142.504006][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.504036][ T6874] RIP: 0033:0x7f038978f7c9 [ 142.504060][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.504087][ T6874] RSP: 002b:00007f038a6e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.504116][ T6874] RAX: ffffffffffffffda RBX: 00007f03899e5fa0 RCX: 00007f038978f7c9 [ 142.504137][ T6874] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000004 [ 142.504156][ T6874] RBP: 00007f0389813f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.504175][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.504194][ T6874] R13: 00007f03899e6038 R14: 00007f03899e5fa0 R15: 00007fff01a338e8 [ 142.504282][ T6874] [ 142.504298][ T6874] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.504319][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.1.225 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.504360][ T6874] Tainted: [L]=SOFTLOCKUP [ 142.504370][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.504385][ T6874] Call Trace: [ 142.504394][ T6874] [ 142.504405][ T6874] dump_stack_lvl+0x3d/0x1f0 [ 142.504442][ T6874] vpanic+0x640/0x6f0 [ 142.504471][ T6874] ? blk_register_tracepoints+0x353/0x430 [ 142.504499][ T6874] panic+0xca/0xd0 [ 142.504525][ T6874] ? __pfx_panic+0x10/0x10 [ 142.504562][ T6874] check_panic_on_warn+0xab/0xb0 [ 142.504590][ T6874] __warn+0x108/0x3c0 [ 142.504623][ T6874] __report_bug+0x2a0/0x520 [ 142.504650][ T6874] ? blk_register_tracepoints+0x353/0x430 [ 142.504682][ T6874] ? __pfx___report_bug+0x10/0x10 [ 142.504716][ T6874] ? __mutex_unlock_slowpath+0x161/0x790 [ 142.504756][ T6874] ? tracepoint_add_func+0x2a6/0xea0 [ 142.504798][ T6874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.504836][ T6874] ? __pfx_blk_add_trace_rq_merge+0x10/0x10 [ 142.504874][ T6874] ? blk_register_tracepoints+0x353/0x430 [ 142.504905][ T6874] report_bug+0xb2/0x220 [ 142.504933][ T6874] ? blk_register_tracepoints+0x353/0x430 [ 142.504963][ T6874] handle_bug+0x127/0x260 [ 142.505004][ T6874] exc_invalid_op+0x17/0x50 [ 142.505044][ T6874] asm_exc_invalid_op+0x1a/0x20 [ 142.505072][ T6874] RIP: 0010:blk_register_tracepoints+0x353/0x430 [ 142.505104][ T6874] Code: 00 00 5b e9 3f ba f7 ff e8 3a ba f7 ff 90 0f 0b 90 e9 ef fc ff ff e8 2c ba f7 ff 90 0f 0b 90 e9 0e fd ff ff e8 1e ba f7 ff 90 <0f> 0b 90 e9 2d fd ff ff e8 10 ba f7 ff 90 0f 0b 90 e9 4c fd ff ff [ 142.505129][ T6874] RSP: 0018:ffffc90019477b20 EFLAGS: 00010283 [ 142.505149][ T6874] RAX: 000000000006dbcd RBX: 00000000fffffff4 RCX: ffffc9000c589000 [ 142.505167][ T6874] RDX: 0000000000080000 RSI: ffffffff81c68bd2 RDI: 0000000000000005 [ 142.505184][ T6874] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 142.505198][ T6874] R10: 00000000fffffff4 R11: 0000000000000000 R12: 200000000040000d [ 142.505214][ T6874] R13: ffffc90019477da8 R14: ffff888141f72fa8 R15: 0000000000000001 [ 142.505242][ T6874] ? blk_register_tracepoints+0x352/0x430 [ 142.505283][ T6874] blk_trace_setup_finalize+0x336/0x3d0 [ 142.505315][ T6874] blk_trace_setup+0x200/0x3b0 [ 142.505351][ T6874] ? __pfx_blk_trace_setup+0x10/0x10 [ 142.505383][ T6874] ? vsnprintf+0x331/0x11e0 [ 142.505417][ T6874] ? __pfx_vsnprintf+0x10/0x10 [ 142.505465][ T6874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.505507][ T6874] ? do_vfs_ioctl+0x128/0x14f0 [ 142.505542][ T6874] blk_trace_ioctl+0x2ce/0x300 [ 142.505575][ T6874] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 142.505614][ T6874] ? find_held_lock+0x2b/0x80 [ 142.505649][ T6874] ? hook_file_ioctl_common+0x144/0x410 [ 142.505695][ T6874] blkdev_ioctl+0x1fa/0x6e0 [ 142.505722][ T6874] ? __pfx_blkdev_ioctl+0x10/0x10 [ 142.505751][ T6874] ? __pfx_blkdev_ioctl+0x10/0x10 [ 142.505781][ T6874] __x64_sys_ioctl+0x18e/0x210 [ 142.505818][ T6874] do_syscall_64+0xcd/0xf80 [ 142.505855][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.505884][ T6874] RIP: 0033:0x7f038978f7c9 [ 142.505906][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.505933][ T6874] RSP: 002b:00007f038a6e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.505960][ T6874] RAX: ffffffffffffffda RBX: 00007f03899e5fa0 RCX: 00007f038978f7c9 [ 142.505979][ T6874] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000004 [ 142.505998][ T6874] RBP: 00007f0389813f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.506016][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.506033][ T6874] R13: 00007f03899e6038 R14: 00007f03899e5fa0 R15: 00007fff01a338e8 [ 142.506073][ T6874] [ 142.506416][ T6874] Kernel Offset: disabled