last executing test programs: 8.898494062s ago: executing program 2 (id=1909): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0xe00, 0x0) pread64$auto(r0, 0x0, 0x800001, 0x8000000003a) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40141, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x3, 0x0, 0x4) unshare$auto(0x40000080) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x20140, 0x0) socketcall$auto_SYS_RECVMMSG(0x13, &(0x7f0000000180)=0x5) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise$auto(0x108000, 0x800032, 0x4) unshare$auto(0x1) setsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0x5, 0x6, 0x0, 0x74) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000401}, 0xc, 0x0}, 0xc001) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, r1, 0x301, 0x70bd29, 0x25dfdc02, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0xe7b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x3, 0x0, 0x4) unshare$auto(0x40000080) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x20140, 0x0) socketcall$auto_SYS_RECVMMSG(0x13, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) madvise$auto(0x108000, 0x800032, 0x4) unshare$auto(0x1) setsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0x5, 0x6, 0x0, 0x74) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000401}, 0xc, 0x0}, 0xc001) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0xffffffffffffffff, 0xff, "2af051a901800e085bdb76cfc83ae659", 0x0, 0xffffffffffffffff, 0x3, 0x5, 0xe5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, 0x18) setgroups$auto(0x999a, 0xfffffffffffffffc) r6 = bpf$auto(0x8, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x9, 0x80000009, 0xfffffe01, 0xe6d6, r1}, 0x92) mprotect$auto(0x110c230000, 0x9, 0x6) mremap$auto(0x110c231000, 0x7, 0x101, 0x3, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x18) r7 = socket(0xa, 0x1, 0x6) ioctl$auto(r5, 0x894b, 0x38) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) r8 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x410900, 0x0) connect$auto(r8, 0x0, 0x54) mmap$auto(0x6, 0x200007, 0xa, 0x10, 0xd, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x87c8256655b23a9a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400e700", @ANYBLOB="668f0da987b7624b2be3503677226d0849c2c32822e90e19cf23dcb684b1d2552be75037959fc7dbabc4c0c61dbe8bc7e30c3fc944e1e2e278f3fb0364e987dac0f05012229ad05cbd3cd041589bfe65a06b0d9e0b1ed8aedca169f3fe3e0a", @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x8841) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r9 = pidfd_open$auto(0x0, 0x9) setgroups$auto(0x8, &(0x7f0000000180)=0x6) write$auto_console_fops_tty_io(r9, &(0x7f00000001c0)="61a280226046bd2d42c1446da47d434bb2370ed4ea3455a7095ba3a3dbbbe561169b2c5515155296d3412daec0748c4142c37471fe5ebf71c18b4cbeb3b1d61ec734f1be12996a1a448de18bbcb640ed91afeb61e3a79a7c000fbbcf18d8592ce69ef42d403824f95191ce10691610e37c8b1c39139d433fe6a07a4072736f7da8d12933f851b8668bfe4c3fc5bbd8a9020000000000000000e9e3f24ae4bcfcdaf5498f6a3d928aeeef7f66b21400186b9a3f89a7ef8e0e1d3852ce3335f958af008910bf0de56d60d3f8ad1e694dcb44f6aa2b49a8337babe88034752259b08302c50ee5a894c78bc8cd245d", 0xed) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) bpf$auto(0x57, &(0x7f0000000440)=@bpf_attr_3={0x8, 0x9, 0x0, 0x9288, 0xffff, 0x6a9, 0x3, 0x81, 0xffff, "dbf0b24cdd6deff467c587e7b6084c52", r3, 0x7ff, r0, 0x0, 0x8, 0x6, 0x8, 0x8000, 0x7, 0x80000001, @attach_btf_obj_fd=r6, 0x3, 0x3a, 0x100000000, 0x1, 0xdbd, r2, r4}, 0x8) mmap$auto(0x0, 0x810004, 0x2, 0x10, 0x3, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 5.084378673s ago: executing program 3 (id=1918): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xebf, r0, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xa}, 0xfff}, 0x5, 0x1311) unshare$auto(0x40000080) dup2$auto(r1, r1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027"], 0x2c}, 0x1, 0x0, 0x0, 0x4c881}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x8, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x2) mmap$auto(0x1, 0x1, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) 5.022355225s ago: executing program 1 (id=1919): pread64$auto(0xffffffffffffffff, 0x0, 0xffff, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x151701, 0x0) mmap$auto(0x8, 0x1fc, 0xdf, 0x9b72, r0, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00vI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffbEm\xd7\xf0\x9a\xf0Z(\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x8) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r1, 0x0, 0x18) 4.997273113s ago: executing program 0 (id=1920): setsockopt$auto(0xffffffffffffffff, 0x114, 0x2, 0xffffffffffffffff, 0x20) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x66, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000300)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000005, 0x20006}, 0x6f4) io_getevents$auto(0x7, 0x9, 0x80000002, &(0x7f0000000000)={0x4, 0x2, 0xfd, 0x8}, &(0x7f00000003c0)={0x8000, 0x7fff}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x103100, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r2, 0xc0045405, 0x0) r3 = socket(0x33, 0x2, 0xffffffd9) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) getsockopt$auto(r3, 0x29, 0xcf, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25030000000600090000100000120001005c94d8479b3f8cdfd6aeab565f130000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r4 = socket(0x15, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x1, 0x0) r6 = gettid() accept$auto(0x3, 0x0, 0x0) kill$auto(r6, 0x11) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000100)="c19eb34b859ef8035e00000000000000df04917a704bd97d6046517937df218c5cc475a9aeeb21d0ba98b5b811d125588f7b6eae5138eec01e60274b9fb87024a6adb7dac15bb4b704e07d1e", 0x7fc, 0x0, 0x4, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sysfs$auto(0x2, 0x3b, 0x0) 4.268909687s ago: executing program 1 (id=1921): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4899c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20880, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mq_timedsend$auto(r0, 0x0, 0x5, 0x2b3, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x80000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 4.222994166s ago: executing program 2 (id=1922): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0xe00, 0x0) pread64$auto(r0, 0x0, 0x800001, 0x8000000003a) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40141, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x3, 0x0, 0x4) unshare$auto(0x40000080) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x20140, 0x0) socketcall$auto_SYS_RECVMMSG(0x13, &(0x7f0000000180)=0x5) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise$auto(0x108000, 0x800032, 0x4) unshare$auto(0x1) setsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0x5, 0x6, 0x0, 0x74) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000401}, 0xc, 0x0}, 0xc001) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x8) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r1, 0x0, 0x18) 2.246735979s ago: executing program 2 (id=1926): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_IPC_STAT(0x559e, 0x2, &(0x7f0000000300)={{0x3ff, 0xee01, 0xee01, 0x6, 0x7fffffff, 0x0, 0x5}, &(0x7f0000000200)=0x2, &(0x7f0000000240)=0x9, 0x10000, 0x4, 0x5ea, 0x10000, 0xe, 0xb6, 0x7, 0x3, @raw, @inferred=0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000e40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000001c40)={0x1a24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_HINT={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x6b0, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x69b, 0x2, "813f64cee00f84b8e4c9cf4a8f4c3a4083a91a50e935ab50daba30b3869618d6eaa040438fc095b5bd7dceb23d481ebe6cd67495476eab3e00f22cbe985919049097385537f68cc06fd275bf74371451c89fa386c1484be64eaa9ca9fb9dc76c95708c080ab6758aa9e4f1691907f298f4747df997c168d423d812dd14c9813db030314feb7b116178d40c10ef796884ff182aa34556736714923840f6157329069b5e91f788f145176bbde58a9fa55faaf0f8ebafe212895d8c1501ea6318fb368b595ebfbdeb5762e4fc97fe2b739047def0be7b20b35b606b13c8a5f3afb6c350f60b4ba8f67c240be62fe7fb25753568a96386e8639710c603887a169175d27777a3dfd3d4738a34f6f0e1c518e62655d23d8de8f8569dc9c66c7e91dad45f6f883ba4e0851ac984a3d87ae52f93e0a7720f0c0c112c774ffdbf538764d5fe7997464e23c6017a241252addd72dc331cd00256856a2ccb690c566e623ea7319a2aebf2b2dce92127750d5f60a13b82f4b4258a8b1a4dea11a46164c82e93c644a3fa23f3415a88c3679c9e9ade1086b225c1702df22b6c0d63ae20476df9d49d9b0c4cfc4122b0e42a8e348582d33124a521d9ff2b26ee700a3c506bb5e251fa5625ba1b33e3be0c1bfd476d73ef1a022c7402bacdc939bafc2b68c78a910642c6a7816451ad45d1f541e042f348a15c3c26752df9e5b16fe5ce5bd938a314d7e2c2666c74c8969414904c8eed908b639a1521eb4b7628a0f292d2933da9cbd06cd7e8be247d7705322ed0bdc3a0f5b649d7b15e8bad5af1c775b6557de6f7d2aacbb3c831c97c2b2d74856ed94f5cd5ab0b6d4292108e219de0e19b27f31b97ebb112db3e4ef69ab39ba2a9a2c1504beb13209d03b7a351dafba477378cdbc33843e62041d7cbb8c4e1a982879b6a3ad9eb68cf32414cb58200f6b89e6fa8bf075cb8fcee62fde2ccd7e63498369877235c5497e38fcd4d8e252bfbf11844bd2db0d74f8ad50ae0da23434304a956cff4ede622ef56bbd1ea30c7c9ab231f4c5117ef131c469e45cbeba5d14c8aaa30e60cfdf4cc65407d11ec57536cf9e4ffed34ae667210506e55706e0138e2930cc391a478f5d154ab96fff36489231be5c259d20d43ae5a2537f0bd45248488bc8fe8f89c1984e98bced721807386f1ecc2957fa8daafb94121ae70dccbb34fa03530b3165f41907fb3a78b16e4abc6d3788ade42b51c4585117fa5fa824d49edd4799a0b32db17bd07312d7c7e0131d98690f4a6b8cd3c462955e0d30a17334ed2444ff84cb927c87817690e5885140281270e2fd0ac665f072fdd6894d28c79c15ee22229b9cb0a383b3924dbcad1c263160f318004b6425aed85cd36740cf8e3b73cf19d74e7af413eec72d6cbedfaca18e1277d781a236d88caa6da32d6450ec145e13e885301f4eb3212ca2027463d32093f177d496a0c4671d9269e1e8a20c733da8d61805baaa6dc23e38addea327dadd75cb3de6fa8de6c6754a426485ac413a0d77c695750a0b848d72ac74e63114c494a5e56dfcdaf1a15c914e22d1237c2788d8b1f9f0f7c87a97fdf8a31629c9d28def5d6a40f003679a66f0e61e99a762ab8ddbc3817e412e3a34e1eb5c5bd37be89a9e149ebd7eff11d74b87bb038ee7f5412bf03bce0ab5eb901eadd19860d81c2c9e5543dfd85425eb45bbf0def69a0405ecd043fe9cb045cb06a782ad43a20701f547ea5dae5dce52c16bcd584b313e82356913dfe64bd591238443cc9d87ec9682dab91ebc1730d4106c7e632e71369c92d9d236341691582f1dda1c6be34443c6a20d9da1fcb4862974ba391c9edcee4cad890384263f16b5b4c3af817bdaf98415a7feee9e1cd3a5ad1d7189f9d2e1784c8a070a7188b74f1786049d830e776c23442f57104d2825aad5b610619ae8adc68cb2402870fad14d061c19e3588defa750f7d7ec08b13ec4dc3071593fa33a16da40364bf9cc155d0babca8bad91303f429d52a37682b0aae9dbd5950437235b0210d5762770e607a102fe0c92f0e53e0b12dbd761109a21f0ecd9c6dc3524899fcc9136aed2588d34aeb311ebd85e3df83e5e34e52a59e3ef1c5df6cfc88dc5cb0d35764dd17059d4cca2b6ce0246a80e71ed26fd48d600b898cc22538f031a5c2faf919f9224387eff462b8c0d02934cd00ccd63ba2fbb33c83e8e8ee0f46a25c13fefa951a24fb61b2c349f2852725c6160579d7fe633f0377eab432964783996b61bfacba3524e9b9401c15493af2516a16824a61b9ff3aa52b17b83b78b71f74083b24f9c897df64a01e96f8f5e8ae3dfd29252d373597959b2b97093aa41beba1624a68fe1ecb70de7147d9a34a4b106ab864c30aaf95ce5c8037"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x200}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TX_RATES={0x1347, 0x5a, 0x0, 0x1, [@nested={0x1140, 0x48, 0x0, 0x1, [@nested={0x4, 0x131}, @generic="967306c99f8228def12048a19117a2bdc6273fffd11c1656f73956424e57e8eba39081f420027a37becc3cc3094b734366bceb82af85ee904cf7658ed5b13378ca9087d2bf40e681303eaa554584bda734df434e935a2af46c98b9916fd57ccbf939bdca77332187624b39ef7ad6c2ab5ec089d1bd2abce37fe0d21b96f5901fb582d705a6e837406d6bf8a09087d641a3c5b1fb228ca6f1dceaa86c035b6ee7bfe72528ceac9baae0b7806cc37a61d0d8a9336f2e8fb1f34cdb29472f99d168e6f009d8caec335ed22a26696a494fea9e895bb94d47b0a24210e871816f7fe51996ed52bd05084fc67efdd12549b7bb4f12996b3164cc48a41d1d40ba9a7c7c1527562e315a71053369ef8bf3fed51e61b880490cf2b14e4a91c37687d264671bc85a550429dd6951471014676cc30649e38c60531860b19c736686bb123a8f7ab68517aabf85b19fdba0bfa0567fd3f5194e47044f8f3f7126883e6d9c4011a5d2024548ac61dda05fadf21ef57a4fc430940cbf24b7fdeed47bb11112bad86fa8612bdad2a0000e25dd3809f136d147afb7301942d64d75394a3773420bc900a547496ae2ff3d45cb6aa9088b29980d1e721c96ec322d40615578c8b351b5994688b85002f071c8aa26e2af0eaa7a849935676298cf82e807ced3d2b8f2b28ed4d0646e931bac0f0b7cac1f66690fe245c8c9854767b087016c926e13e20030407945918546ed3509309e75a446f48a2cd125efb544e01bc72cd9c3452247a1b3e5e833895317959e4faae42f5038af5196621c2b3399cc41a9b074f15382a947afc34ea1b3800a1809d3399d87b458d22ad1e25f115956842693dde3531546fbe2eeca2d2e815fb9c719550f5a0639e4d1d3615e025916f7a2fb4907e11edf4524b50e3a5c75ca2b9784fd855621945a2a11b1c962edf873b3b3ea3d690161cf817770ffc4068b1f8f90bc30ea40a843f4dba495d66cd5fe5cda7f855622d2cbe9ea50b77394787a50cf4e8b5fb076231745e30ce56f519bc6bcd7402e60fd5b9edc4f99d83deee0a75f5ba8fa967840d0f3f01485f896b8787f078e4e29f6076d967620f14767076e2f0cd0e4baaa64b0a8d5437992c95e516038460c2de593059b112314170b423096221330c0d1fd6c3230e42b95277e0fd11964146ace9da45367247bfa18c912cef92caca29542b3e0281aea579d2759c36eb51a9cdbaf005b2c536545c3450f1991b301b5cec744eee07c7b781223304eebb97775ce9339d6fd3fc754a0270b0a680d0d2b016ca578cd6febf8e831b253963815d0d81a71d4d1367a02c89832530969105e1aaf1685c7003f352c145efd2dfc428f12ab883c88057277cb83f17bcff9d41b5367d7a80e07b56269f32c62e20963ce59d84ff217840cf4952fd3d0ad0e11750fb48cb71e26e74e7739181ba16772fa3bc08a3ad6f052cbc30162800a30275c4769240482a84e32a9bc8036e35e857e01331d00abc5b4423def40006ee3c191c61bfb6733e1a5fc1eda16034f15c6bf94a261dac64c903ba1a32a2f388373f7af9667299bcfd502fb845b81e2dc2ddde30e8844666f081f61cec6ce68b4aaa4c8add4f0117034810cef1fd35fb3faa368b4b078783393111762ce147e3cf127c665f5550130d8949549d780fbbb90b672b030f41a80eff611f104ebf01dec6da302ec5434e290d186ee2c10375d7f5759fd9de1b3f5829feff42eb30d87027b73e47fea9a8a5e896e6d7e3b82b017b460781ce6e26a7d808e017729e7382bf82884e900bb7a71046749e2be0d17107244912bfdb7e22c736e07c9d44c8ba71b3e309c2ed0ac5c27c920dbe1066053f928305375bcf63dc6adf98ccfc1420ffca11878010c913506dd03ab18409c43beec65f74a010c1e94dcc63a72ac49ab3fff649552ef4c4427f4192232bd86ac6afe1d2cdd4a8c163c0a69b36851c697d84193b75e88df01d17db22efe1574e29038ce48e613268740c33c8642e78f73cca0d5e7e15ca3c9bb902733e87893a7c0c56bb95d7a7d2bf05da817d1aca75e25f92591580e04d88d1e6ab572a10bb9c81da35e18a8992853169608bdc339134e1e9eec7d5d2f6d95c21f431a6d85fcd10eacba7c2962deffb07a78e6488fdc182006f1e955ce6365b240540e62fc0904129a58ba37367c399d9a9dec271e762a225b17f2fdf7185988cc04f6d08e1abac6c66d2434422328abba9cabdadb7ca660ffd8617c7159a6bad95b6ed9251068d4f10b90851985ca35b0d4592752125373791d1670e85b95cdf4e2dcd91e44e7ff8a9f6b4241180828569a2d62e4e2f3d32322ae8598bebff98aa097c6d644980b5f9363243c213fc1beb39ce1d606a8ab33367cc7b922a61ada40d558ad4e086e02b0ae2deddf6a5fbb566c6bec8a57562c94542c4f7f2675b929faadda844134826af7c71723395be4391d274caf8276f1946f89dd1a344236696771bedc7b02cf1664b1f14085f79133c2575facc3360402bcad02f6744888fb73a1d9464ec950fb0b6a45c47557b62c452b4f6aac06ffee8d9dc7080227c9aad44aa775d028c03ccae88096084eb680127dd3098e9e45b008af93cc929529f51e5cf18fdd1e7ce6bbccfaf2e7a8320343a7041d39ecbdf2c70bf61eec14186fe17137c457e49f76d4f99d5cc99c96c92e67813982189bb86f189f69e2280438a18eb6de0b242798dea5c35f6bb9855a62d9d6d2e6b18460a0f45942ff426dd7f4392595f30ea37e3789e64eff6d554dec1e04ec4e6d04549ffb7114d38481ed14f2175689748209dfe0438b899029227ac045b2c6d4ece0f2d7c9e9a0ec89e24e9209dce750bfd7a895111dde71c87850f7e58a7d51e9b073087aacd1ac2b79ac56fe20722eef617c39d8f3541c6059a81bfffe40745aa9090f43d2e3e00d29ce51e517875065189726c51a1e9930876d0e5df6936e153e9af95615592792d0ee977aa4183a59c1da6a8d927c0d0d103eae380ab0e40f663b8a305fa428fd406540b00830d3457829fd872fbc87b10497ffe862e7b3fb9273cb12f6e496a18d99bd823b004885c0edb23cc7149dc5af137c0a5c3e0afd891450fe6a1a4515f43387ea3ea7d7bc15e5ba792478b016c7fe464c78096c2bb9ef20e47b1bf44f31260a62ebecd80c6f97e1137a3c2a1eaf50f9d50b2aac97318f789f03851430c0e85104debe25684f042ff908aa5f9f26c42599b2871a863b9f62b8b838b8b19dd0fe45eef87f0198dd60e7e40b8c0297e498e055769ec3448ecbb8fe680e465a0782a04133c2df527120327c2dc7192b511a00678e79e5d5a17440fa5d550297f92cebd9f8628579ef8b3adb0dea5b54274e443ddb1c3d156edc6102db050881b218f587d401df1ad1814ea5b75b55436cb5ab5c0f30c2d216f1068a578531864e3e74b88aa7efc67af3621a459a16b30a6cc611da45f98d6f807ecf5d3e93e30b050be77abbf1b8560e42e5124c49599b37a5232b65c98320dbd96638901ff838350ba45da8e200b38c7cae18b2bd7e99a844e40488917c88374bf5a24063c03d06d7e030514475d753d70bbc0b6e9399be23eb8f428609435d72f84b17369460e9ba8cc02a99bec485b0b8258d059dbcd4ea945bfcd4a1934f74bb688d79178afcef69caf9a8a324d157428f9130c01b4d3566151fa2d1293b09d368b7aa67bd5bf6e8b84d518d6bb3911e6b26cd538edfb6682ae213f88269380b87386307aa256eb66bca7eb94f47cfb51f3b5eb09cb11735fb2faae82a14533185c585239451cc33ad744859f9dc0c2523870c9f94ac3408269fe58ac0d009bb41d76b054a8510df4c3307d3f8fd12fbdc6b4ed292430fbccb8a222d42866ee70d0f8daf994c40d6f771def381a70b95edea95b6f82097f257593b56ccc5836144ba3f573b1ce3442d89487f2fc4ff5f9267f0763c476216eb2dda59c5d5bdf151d2ffa11a83fdcac24b576bc3bc82eaa862de34dbac61c4f8ece488dfa901ccac75be2ca81ec0d76d686c6c83a6c9b1e6873cc91060081916612b371bc4d5dd57c05118111f2bf38c7e6ea6002344b43308de6e8d560d7e033f88f1f0236bcad71cc39e51d4cdafe82b7bf0586a4e44978ad048a08b7be5542f0e0d85084538c3659666333df34af7da811c095c9181f99ff0d63d94b95bac924aeace39d6697a261f06cb7f852d6bab19d415faab16a59d2c93538ec2ecfc894976b059ffed00e5ed00ea87cae4bdaaa4f3ae912c26426252f96444a84f06ba44f4e58732631a1f70e4f56dd9229a471fb54a2ee0c8fc5b6d4ac3022dbe892617b7ffad935c9d254bfb7b482fddd2dce6306808bacf3e9a2b9bd9c0a7292f8ccf77479d23bb7bc75a176ae751be6cdaec98145c57197e6af358d4ec03c55fffe5f4a4ce9c6cf24a477ad0e840386a5ad6028af3cf91e8c553ead7350aba351287b204721b8fcb699d3e5748e3cea89cfd4d76a0dc9157dcba80733c6828abbdcd0e3fcc25b7d111a15b458ff545defcd233dfdc4ad5c9f425b1b368a308699aacab571330fa39a406ae31347c71a8fe1fb59d5f5742904779aee582e8af107ea49b3e4d06334f08a4d6b9c2452eb77a4298bd7f0f1e295f9689b201bdc6136893ce0802c3b2ebc886e64b317755c44e133dd1f1ac55ea27be04902a7500c17fd1df8653e922a06760b8cfd4e179f191fa10b412a870c8ecf7de3f8b04fa67f40a29b7d6f0c8dfcb49c4e719969e9a0d80501f533210a5117e533802d9a818a730b85e98bd9bd3bec12f74b830314ea77e14b9a32e2ed4e2c084c132ff2c6645b39cd748e52064e8676e6ed500cd068d7e4b6f875dc4f1aa9e78ebb90cdbbb8d24ddf7776d89071609639f3413d691182a50b5087e0c3e0edab2bb4da90ba60934edf8b4b9a2951a0d36d1df5b3087d841adce9cc76303171294053fb27fb030ef0fd809292f5f54e6cb82b231d1db8b6ffc058c919ebd1f51456234a7995dc588c8a003b7d383c0c5c9c6a54bb5a194859d2b9a84bd51db9fc37b048c24e70e38e276a85b267c0a2d8a841557e1acdb54e7da32698ebfccfab44792c0dd023b07aa6ab400a956b5ece2660a6fc2a50ce8b8bae3fd332b31c5ad0990699c58de0265d851b64d3015f573c0112473ef375d7ae63e60b9f641088531a177ba57665f7dc14d00cc541fde3cccf10fd1094c751ba5921723bb8f83412e15fe2f5ad605c6e99242d88b4cc1095f3c7878b6a72539394e91ebf3fa6ede4fa2f973d5760cce1f517470568689ab9bfc8613657d0cbfe1c846a268e905e46bdc9a91430f8a4620e92b93cda0556adce80e5a1cae7e66b0b49b810b19d45908ebdbdd8ea99aaec92b4363af5f7a96d5577a86962ff967a4ebd881c7a97179326aaeb54f4d40ddb15c94bd61588ad1f7f875342207c3d641ceeaeb6ef6b8130d6cc5686050769234e065b89764a3b3768cc0775845d3c52a79d22a08ed3f9fe323d1832a39dbf0bb7e95e9fbb11810de80e62deb6c1bd35684a7a174ee1a869d3511e6f3c117e4ced060012157f9d85a121b694c527613906abec8b84cfe1dc7d1eb77c513752df2955af6ef04546b5ac5b4983dda26251a1ba3e7ea0a9ffa0b39e59020e66084d1f7ea65a9b529e39780d3481a538ac6714d804852170b4bdd9a28ec591919e407c6e9aa8acf5774b96ba9a01fc25bfacd7dae1d3d6c194124e8c3c9e8408b75dd1d3da298157c738d1cc16cf5b8f94fb6473882728a1136e47e622090ca1df11c5e8d6e9cd4df42598d9b358e", @nested={0x4, 0xfb}, @generic="78266512179cdf6bfd493f54c13bc63e3da0f4cf4c7c1ec67e22d8e8a905e81e251e3de00d74c9e14d56eaceb606442fd97218afd6068b3f3be7c59a7594156ba4ce3c234e927bb1ab23aba2799e9cf517bec147a8f116375f20cd1b0b416a1bef1ea454fce0c79014147ea52e642837939183aecc3010f0c88628b5b25dfbc3620c77403fff77d068d3fcdf7d5f0b2fadd4c87e6146c232b0e1a6b23b5a850e3b2bae79d14c137219", @typed={0x8, 0x7b, 0x0, 0x0, @fd=r0}, @generic="10868ab89b03772589448c0f563a", @generic="797d9d6179710e7ac5c46f09319d06f4cc15878f97e3028719a02bb78f09fc35ad326a92c89e9c89feb96200f558a1b94b1ff31fde4419d71bf8a40c8d372bdfc8771f0494d5e378c8517bed096313aeca26a11ccc498e7d15a7622a2e82537e7f5c62a4bc4e3748b25fa26315ff5b48e871f3e529"]}, @generic="fd9d3f4f6b6c8c8b9fc7d5fff99060669d191964b5870b615d780e38d9ddd2", @nested={0x14f, 0x87, 0x0, 0x1, [@generic="647819265a9aba1c02bd441288f9babeca5e9e87afa6d9c33741c691dee1f14d79921495831e72ddc216651a951d15a196df622f172333d238a08b956ca077877e258d62b7d13a", @typed={0x8, 0x25, 0x0, 0x0, @str='T-#\x00'}, @nested={0x4, 0xdb}, @typed={0x8, 0xbe, 0x0, 0x0, @pid=r2}, @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x7}, @nested={0x4, 0x65}, @generic="948963fdbf8334866b296411ed10ffe9df9ea1760c2873babb67050123b6d2112bde7c1604b204d9ed9cd9fc5eafdd6edb9f7bc6490252475ab4f8a3519fc9df2e75b7a1f349d02771ece208a7f0a5ebb8c48941616bd26da1652ac6eb8d9e5eacd5dbfc83af2d71c72490472f411e7f3bb50110addbd7e83ed17867764301ee44e2f6b15cbf1cdb7a0554f2cbe6b8774fcb76523cb9e8df12df0d171c573e8e5bec742eae4bc81a1d9dc174c802f320c16905af6037f500"]}, @typed={0x8c, 0x139, 0x0, 0x0, @binary="157d23bcbadc6b7ff5dc3bf9ec8300b38d91ba1677f6b0af474799d636a02b53cc0b632ae49fb4efe02c4a6fcaeaa013b55bfb4f261ec5efc0ba8c13ac9cc37580f1130c5c7e60156eee99ed41bbcd8f8721d0106ae3c712e369a1a32abd9495eb6d8c92d65faa0eb1eefdf0f4569c1b9987e852b5ed54e96712f01da5c61de2154ce0c5705b5bce"}, @typed={0x5, 0x107, 0x0, 0x0, @str='\x00'}]}]}, 0x1a24}, 0x1, 0x0, 0x0, 0x2000010}, 0x11) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) epoll_create$auto(0x4194) sysfs$auto(0x2, 0x3b, 0x0) 2.241191347s ago: executing program 1 (id=1927): socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x0, 0x0) epoll_create$auto(0x3e) socket(0x2b, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:05/power/runtime_active_time\x00', 0x181380, 0x0) pselect6$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x5, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x8}, 0x6f4) io_getevents$auto(0x6, 0x8, 0x2, &(0x7f0000000000)={0xfc8, 0x5, 0x101, 0x8}, &(0x7f0000000040)={0xb0e, 0x7fff}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00c2000f188d1b8eb9afb0c89fa8ce06a652cfbd8caf", @ANYRES16, @ANYBLOB="000429bd7000fddbdf250f00000008001d000010000005000a0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) ioctl$auto(0x3, 0x541b, 0x7f) sysfs$auto(0x2, 0x3b, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x272) 1.718304257s ago: executing program 0 (id=1928): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x40) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$auto_RNDRESEEDCRNG2(r5, 0x5207, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r6 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) ioctl$auto(r6, 0x3b8b, r4) ioctl$auto_SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000000)={0x8, 0x8, 0x7fff, 0x92, 0x3, 0x82, 0x8, 0xfffffff7, 0x8000, 0x80, 0x6, 0x8, 0x0, 0x9, 0x9, 0x7, 0x7f, 0x80, "6c40611e24010143119703294f6080e6ee528835858559c0ed29cc8e9e7f6b03a395f006"}) 1.592727376s ago: executing program 0 (id=1929): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x2800, 0x0) mmap$auto(0x3, 0x7ff, 0x2, 0xf4, r0, 0x7fff) io_uring_setup$auto(0x6, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x9, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x8, 0x3}) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fc4f50f78df281039dd157c877ac6e2fc7dbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437023f69a5777674284501bd4661e84d7eeab5f94717d98d0624"], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x10) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x4e2083, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f27200e03e663c080c0d6c169eec931ca2a3bad720a6ea57ae99be44495b1fe078f2e9c5586aa5"}, 0xfffffffffffffff7, 0x0, 0x1, 0x5}, 0x800}, 0x4, 0x4) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000004c40), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_DEL(r4, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c63398581d1cf607a37359c0b370c25006b05b2b1aab83464b2ddd172e0b3f7cd98a64e3bc93b2fb8cbd69f4b3bf9f2fe2686b65bad5d34c8fba3f3ca03a2d99ec26c13e8c64652d4d1ae13606000000000000003108b030abe36903b7954fa272d3b1fff3eb4a41d79f5a3b021a8293f6196bc3", @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) ppoll$auto(0x0, 0x73, &(0x7f0000000140)={0x57, 0x81}, 0x0, 0x8) pread64$auto(0xffffffffffffffff, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\x05\x00/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbfA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xa9\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\x04\x97\xea\x00\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq\x00'/221, 0x100003ffd, 0xe) 958.784989ms ago: executing program 3 (id=1930): pread64$auto(0xffffffffffffffff, 0x0, 0xffff, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x151701, 0x0) mmap$auto(0x8, 0x1fc, 0xdf, 0x9b72, r0, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00vI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffbEm\xd7\xf0\x9a\xf0Z(\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r1, 0x0, 0x18) 146.370994ms ago: executing program 2 (id=1931): r0 = syz_open_procfs$namespace(0x0, 0x0) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) r1 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x18, 0x6, 0x10, 0x7, 0x10, 0xffffffffffffffff, 0xff, "2af051a901800e085bdb76cfc83ae659", 0x0, 0xffffffffffffffff, 0x3, 0x5, 0xe5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, 0x18) setgroups$auto(0x999a, 0xfffffffffffffffc) r6 = bpf$auto(0x8, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x9, 0x80000009, 0xfffffe01, 0xe6d6, r1}, 0x92) mprotect$auto(0x110c230000, 0x9, 0x6) mremap$auto(0x110c231000, 0x7, 0x101, 0x3, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x18) r7 = socket(0xa, 0x1, 0x6) ioctl$auto(r5, 0x894b, 0x38) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) r8 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x410900, 0x0) connect$auto(r8, 0x0, 0x54) mmap$auto(0x6, 0x200007, 0xa, 0x10, 0xd, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x87c8256655b23a9a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400e700", @ANYBLOB="668f0da987b7624b2be3503677226d0849c2c32822e90e19cf23dcb684b1d2552be75037959fc7dbabc4c0c61dbe8bc7e30c3fc944e1e2e278f3fb0364e987dac0f05012229ad05cbd3cd041589bfe65a06b0d9e0b1ed8aedca169f3fe3e0a", @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x8841) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r9 = pidfd_open$auto(0x0, 0x9) setgroups$auto(0x8, &(0x7f0000000180)=0x6) write$auto_console_fops_tty_io(r9, &(0x7f00000001c0)="61a280226046bd2d42c1446da47d434bb2370ed4ea3455a7095ba3a3dbbbe561169b2c5515155296d3412daec0748c4142c37471fe5ebf71c18b4cbeb3b1d61ec734f1be12996a1a448de18bbcb640ed91afeb61e3a79a7c000fbbcf18d8592ce69ef42d403824f95191ce10691610e37c8b1c39139d433fe6a07a4072736f7da8d12933f851b8668bfe4c3fc5bbd8a9020000000000000000e9e3f24ae4bcfcdaf5498f6a3d928aeeef7f66b21400186b9a3f89a7ef8e0e1d3852ce3335f958af008910bf0de56d60d3f8ad1e694dcb44f6aa2b49a8337babe88034752259b08302c50ee5a894c78bc8cd245d", 0xed) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) bpf$auto(0x57, &(0x7f0000000440)=@bpf_attr_3={0x8, 0x9, 0x0, 0x9288, 0xffff, 0x6a9, 0x3, 0x81, 0xffff, "dbf0b24cdd6deff467c587e7b6084c52", r3, 0x7ff, r0, 0x0, 0x8, 0x6, 0x8, 0x8000, 0x7, 0x80000001, @attach_btf_obj_fd=r6, 0x3, 0x3a, 0x100000000, 0x1, 0xdbd, r2, r4}, 0x8) mmap$auto(0x0, 0x810004, 0x2, 0x10, 0x3, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 120.233564ms ago: executing program 1 (id=1932): socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) epoll_create$auto(0x3e) socket(0x2b, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:05/power/runtime_active_time\x00', 0x181380, 0x0) pselect6$auto(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x5, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x8}, 0x6f4) io_getevents$auto(0x6, 0x8, 0x2, &(0x7f0000000000)={0xfc8, 0x5, 0x101, 0x8}, &(0x7f0000000040)={0xb0e, 0x7fff}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00c2000f188d1b8eb9afb0c89fa8ce06a652cfbd8caf", @ANYRES16, @ANYBLOB="000429bd7000fddbdf250f00000008001d000010000005000a0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000340), 0x8100, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) sysfs$auto(0x2, 0x3b, 0x0) 54.042228ms ago: executing program 3 (id=1933): setsockopt$auto(0xffffffffffffffff, 0x114, 0x2, 0xffffffffffffffff, 0x20) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x66, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000300)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000005, 0x20006}, 0x6f4) io_getevents$auto(0x7, 0x9, 0x80000002, &(0x7f0000000000)={0x4, 0x2, 0xfd, 0x8}, &(0x7f00000003c0)={0x8000, 0x7fff}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x103100, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r2, 0xc0045405, 0x0) r3 = socket(0x33, 0x2, 0xffffffd9) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) getsockopt$auto(r3, 0x29, 0xcf, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25030000000600090000100000120001005c94d8479b3f8cdfd6aeab565f130000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r4 = socket(0x15, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x1, 0x0) r6 = gettid() accept$auto(0x3, 0x0, 0x0) kill$auto(r6, 0x11) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000100)="c19eb34b859ef8035e00000000000000df04917a704bd97d6046517937df218c5cc475a9aeeb21d0ba98b5b811d125588f7b6eae5138eec01e60274b9fb87024a6adb7dac15bb4b704e07d1e", 0x7fc, 0x0, 0x4, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sysfs$auto(0x2, 0x3b, 0x0) 0s ago: executing program 0 (id=1934): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) settimeofday$auto(&(0x7f0000000180)={0xfffffffd, 0x9}, 0x0) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) writev$auto(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x5}, 0x5) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 78.777177][ T5615] cgroup: Unknown subsys name 'net' [ 78.912294][ T5615] cgroup: Unknown subsys name 'cpuset' [ 78.921883][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.413663][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.433879][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.445037][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.454620][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.454883][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.469997][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.480367][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.480420][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.495183][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.504472][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.504593][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.520051][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.521285][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.528092][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.538648][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.546829][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.551740][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.557470][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.566274][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.577961][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.590258][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.987415][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.998485][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.005991][ T5628] bridge_slave_0: entered allmulticast mode [ 84.015443][ T5628] bridge_slave_0: entered promiscuous mode [ 84.045522][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.054163][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.061850][ T5628] bridge_slave_1: entered allmulticast mode [ 84.070709][ T5628] bridge_slave_1: entered promiscuous mode [ 84.144163][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.185905][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.286586][ T5628] team0: Port device team_slave_0 added [ 84.314466][ T5628] team0: Port device team_slave_1 added [ 84.320386][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.327628][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.336584][ T5626] bridge_slave_0: entered allmulticast mode [ 84.344495][ T5626] bridge_slave_0: entered promiscuous mode [ 84.381294][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.388720][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.396065][ T5626] bridge_slave_1: entered allmulticast mode [ 84.403859][ T5626] bridge_slave_1: entered promiscuous mode [ 84.453358][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.461316][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.468698][ T5627] bridge_slave_0: entered allmulticast mode [ 84.476097][ T5627] bridge_slave_0: entered promiscuous mode [ 84.483616][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.490888][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.498093][ T5629] bridge_slave_0: entered allmulticast mode [ 84.505506][ T5629] bridge_slave_0: entered promiscuous mode [ 84.514257][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.521555][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.548291][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.572655][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.580005][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.587214][ T5627] bridge_slave_1: entered allmulticast mode [ 84.594767][ T5627] bridge_slave_1: entered promiscuous mode [ 84.602344][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.609839][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.617187][ T5629] bridge_slave_1: entered allmulticast mode [ 84.623393][ T50] Bluetooth: hci2: command tx timeout [ 84.629512][ T5639] Bluetooth: hci1: command tx timeout [ 84.629533][ T5645] Bluetooth: hci0: command tx timeout [ 84.630259][ T5629] bridge_slave_1: entered promiscuous mode [ 84.636610][ T5644] Bluetooth: hci3: command tx timeout [ 84.662116][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.669352][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.695457][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.717532][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.730112][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.764889][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.777457][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.838552][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.875824][ T5626] team0: Port device team_slave_0 added [ 84.885513][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.902027][ T5628] hsr_slave_0: entered promiscuous mode [ 84.910507][ T5628] hsr_slave_1: entered promiscuous mode [ 84.920278][ T5629] team0: Port device team_slave_0 added [ 84.929432][ T5626] team0: Port device team_slave_1 added [ 84.956273][ T5629] team0: Port device team_slave_1 added [ 84.984379][ T5627] team0: Port device team_slave_0 added [ 85.008803][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.015786][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.041928][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.056347][ T5627] team0: Port device team_slave_1 added [ 85.090034][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.097120][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.123271][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.145893][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.153076][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.179468][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.215045][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.222375][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.249817][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.261641][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.268822][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.295665][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.322533][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.329712][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.357062][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.465500][ T5629] hsr_slave_0: entered promiscuous mode [ 85.472017][ T5629] hsr_slave_1: entered promiscuous mode [ 85.478413][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 85.484390][ T5629] Cannot create hsr debugfs directory [ 85.494968][ T5626] hsr_slave_0: entered promiscuous mode [ 85.501645][ T5626] hsr_slave_1: entered promiscuous mode [ 85.507808][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 85.514195][ T5626] Cannot create hsr debugfs directory [ 85.524475][ T5627] hsr_slave_0: entered promiscuous mode [ 85.532530][ T5627] hsr_slave_1: entered promiscuous mode [ 85.538941][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 85.545202][ T5627] Cannot create hsr debugfs directory [ 85.922661][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.936904][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.970496][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.988573][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.015486][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.025373][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.033423][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.045284][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.123595][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.138623][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.152068][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.161870][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.174498][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.184584][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.207500][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.220195][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.297220][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.311365][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.319943][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.332488][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.350851][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.361797][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.370643][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.381676][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.475649][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.486807][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.505040][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.515341][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.526324][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.541606][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.553166][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.561971][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.572779][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.643764][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.677197][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.685150][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.698668][ T50] Bluetooth: hci3: command tx timeout [ 86.705201][ T5639] Bluetooth: hci2: command tx timeout [ 86.705215][ T5645] Bluetooth: hci1: command tx timeout [ 86.711495][ T5644] Bluetooth: hci0: command tx timeout [ 86.735673][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.742948][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.827762][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.913901][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.925743][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.978074][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.985354][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.026926][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.045061][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.052555][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.075111][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.141975][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.149348][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.210290][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.255648][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.262907][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.276996][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.284244][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.307797][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.315220][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.944153][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.144263][ T5628] veth0_vlan: entered promiscuous mode [ 88.182246][ T5628] veth1_vlan: entered promiscuous mode [ 88.297279][ T5628] veth0_macvtap: entered promiscuous mode [ 88.345275][ T5628] veth1_macvtap: entered promiscuous mode [ 88.440506][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.503760][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.563976][ T697] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.584619][ T697] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.606756][ T697] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.625138][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.641310][ T697] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.662665][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.695790][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.778979][ T5645] Bluetooth: hci1: command tx timeout [ 88.779761][ T5644] Bluetooth: hci0: command tx timeout [ 88.791023][ T50] Bluetooth: hci3: command tx timeout [ 88.796666][ T5639] Bluetooth: hci2: command tx timeout [ 88.864302][ T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.872281][ T5627] veth0_vlan: entered promiscuous mode [ 88.888514][ T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.922027][ T5627] veth1_vlan: entered promiscuous mode [ 88.958449][ T5629] veth0_vlan: entered promiscuous mode [ 88.971759][ T5626] veth0_vlan: entered promiscuous mode [ 88.984333][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.993989][ T5626] veth1_vlan: entered promiscuous mode [ 88.995005][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.029735][ T5629] veth1_vlan: entered promiscuous mode [ 89.131038][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.153231][ T5627] veth0_macvtap: entered promiscuous mode [ 89.176402][ T5627] veth1_macvtap: entered promiscuous mode [ 89.194597][ T5626] veth0_macvtap: entered promiscuous mode [ 89.235289][ T5626] veth1_macvtap: entered promiscuous mode [ 89.272838][ T5629] veth0_macvtap: entered promiscuous mode [ 89.293181][ T5629] veth1_macvtap: entered promiscuous mode [ 89.303153][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.325549][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.350803][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.364610][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.390770][ T363] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.400213][ T363] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.433360][ T363] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.444365][ T363] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.480949][ T363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.490163][ T363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.501626][ T363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.532433][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.552076][ T363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.660596][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.802516][ T3327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.847866][ T3327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.865908][ T3327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.876422][ T3327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.937813][ T697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.949010][ T697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.976156][ T697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.990537][ T697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.046694][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.055079][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.273176][ T3327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.283500][ T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.288847][ T3327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.321167][ T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.512989][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.523812][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.664973][ T5807] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.862829][ T5644] Bluetooth: hci1: command tx timeout [ 90.868412][ T50] Bluetooth: hci0: command tx timeout [ 90.868605][ T5639] Bluetooth: hci3: command tx timeout [ 90.873977][ T5645] Bluetooth: hci2: command tx timeout [ 90.961991][ T5813] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.670850][ T5825] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.922452][ T996] cfg80211: failed to load regulatory.db [ 93.325053][ T5849] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.970296][ T29] audit: type=1804 audit(4294967293.040:2): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 95.197299][ T29] audit: type=1804 audit(4294967293.270:3): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.13" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 96.811536][ T29] audit: type=1804 audit(4294967293.000:4): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 97.002373][ T29] audit: type=1804 audit(4294967293.000:5): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.17" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 98.685732][ T29] audit: type=1804 audit(4294967294.670:6): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.19" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 98.757961][ T29] audit: type=1804 audit(4294967294.740:7): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.21" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 104.843401][ T29] audit: type=1804 audit(4294967294.870:8): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.34" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 107.968892][ T6100] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.062365][ T6100] kvm: kvm [6099]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1000 [ 108.088911][ T29] audit: type=1804 audit(4294967293.000:9): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.41" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 108.224515][ T29] audit: type=1800 audit(4294967293.110:10): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.42" name="dbroot" dev="configfs" ino=11759 res=0 errno=0 [ 109.759850][ T29] audit: type=1804 audit(4294967293.000:11): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.44" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 117.159910][ T29] audit: type=1804 audit(4294967293.100:12): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.63" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 118.949025][ T29] audit: type=1804 audit(4294967293.000:13): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.65" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 132.861901][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.870461][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.225019][ T29] audit: type=1804 audit(4294967293.000:14): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.100" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 139.847350][ T29] audit: type=1804 audit(4294967293.000:15): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.112" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 141.727803][ T29] audit: type=1804 audit(4294967293.000:16): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.115" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 143.479706][ T29] audit: type=1804 audit(4294967293.000:17): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.120" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 145.711548][ T29] audit: type=1804 audit(4294967293.240:18): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.125" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 154.985799][ T29] audit: type=1804 audit(4294967293.000:19): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.146" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 166.836201][ T29] audit: type=1804 audit(4294967294.510:20): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.170" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 171.461032][ T29] audit: type=1804 audit(4294967293.110:21): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.183" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 175.596177][ T29] audit: type=1804 audit(4294967293.080:22): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.191" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 181.257049][ T29] audit: type=1804 audit(4294967293.000:23): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.202" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 183.337114][ T29] audit: type=1804 audit(4294967295.070:24): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.210" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 194.301339][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307797][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.622360][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 206.622818][ T4944] Bluetooth: hci2: command 0x0406 tx timeout [ 206.628470][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 206.628862][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 210.253559][ T29] audit: type=1804 audit(4294967293.000:25): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.275" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 215.392458][ T29] audit: type=1804 audit(4294967293.180:26): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.287" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 222.509148][ T29] audit: type=1804 audit(4294967293.530:27): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.302" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 233.886672][ T29] audit: type=1804 audit(4294967293.220:28): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.329" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 242.565780][ T29] audit: type=1804 audit(4294967293.000:29): pid=8592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.348" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 255.740613][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.750353][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.457003][ T29] audit: type=1804 audit(4294967293.190:30): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.470" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 303.862188][ T9695] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 303.951418][ T9685] FAULT_INJECTION: forcing a failure. [ 303.951418][ T9685] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 303.995894][ T9685] CPU: 1 UID: 0 PID: 9685 Comm: syz.1.484 Not tainted syzkaller #0 PREEMPT(full) [ 303.995933][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.995956][ T9685] Call Trace: [ 303.995965][ T9685] [ 303.995975][ T9685] dump_stack_lvl+0x100/0x190 [ 303.996028][ T9685] should_fail_ex.cold+0x5/0xa [ 303.996059][ T9685] _copy_to_user+0x32/0xd0 [ 303.996102][ T9685] simple_read_from_buffer+0xcb/0x170 [ 303.996146][ T9685] proc_fail_nth_read+0x1af/0x230 [ 303.996184][ T9685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.996221][ T9685] ? rw_verify_area+0xce/0x6d0 [ 303.996259][ T9685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.996294][ T9685] vfs_read+0x1e4/0xb40 [ 303.996323][ T9685] ? __pfx_vfs_read+0x10/0x10 [ 303.996361][ T9685] ? __fget_files+0x215/0x3d0 [ 303.996395][ T9685] ? __fget_files+0x21f/0x3d0 [ 303.996445][ T9685] ksys_read+0x12a/0x250 [ 303.996470][ T9685] ? __pfx_ksys_read+0x10/0x10 [ 303.996505][ T9685] do_syscall_64+0x115/0x840 [ 303.996537][ T9685] ? clear_bhb_loop+0x40/0x90 [ 303.996569][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.996597][ T9685] RIP: 0033:0x7fb13255e7ce [ 303.996631][ T9685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.996655][ T9685] RSP: 002b:00007fb13351bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.996681][ T9685] RAX: ffffffffffffffda RBX: 00007fb13351c6c0 RCX: 00007fb13255e7ce [ 303.996698][ T9685] RDX: 000000000000000f RSI: 00007fb13351c0a0 RDI: 000000000000000a [ 303.996714][ T9685] RBP: 00007fb13351c090 R08: 0000000000000000 R09: 0000000000000000 [ 303.996730][ T9685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.996745][ T9685] R13: 00007fb132826038 R14: 00007fb132825fa0 R15: 00007ffcaf792bb8 [ 303.996782][ T9685] [ 307.841010][ T9767] vivid-011: ================= START STATUS ================= [ 307.849705][ T9767] vivid-011: Radio HW Seek Mode: Bounded [ 307.865817][ T9767] vivid-011: Radio Programmable HW Seek: false [ 307.884629][ T9767] vivid-011: RDS Rx I/O Mode: Block I/O [ 307.893368][ T9767] vivid-011: Generate RBDS Instead of RDS: false [ 307.909409][ T9767] vivid-011: RDS Reception: true [ 307.915830][ T9767] vivid-011: RDS Program Type: 0 inactive [ 307.923492][ T9767] vivid-011: RDS PS Name: inactive [ 307.929506][ T9767] vivid-011: RDS Radio Text: inactive [ 307.936840][ T9767] vivid-011: RDS Traffic Announcement: false inactive [ 307.944543][ T9767] vivid-011: RDS Traffic Program: false inactive [ 307.951459][ T9767] vivid-011: RDS Music: false inactive [ 307.960580][ T9767] vivid-011: ================== END STATUS ================== [ 308.444078][ T9785] netlink: 110 bytes leftover after parsing attributes in process `syz.0.499'. [ 310.964784][ T9840] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 312.403368][ T9863] Zero length message leads to an empty skb [ 317.164444][ T29] audit: type=1804 audit(4294967293.120:31): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.527" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 317.182424][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.201897][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.444830][ T9986] FAULT_INJECTION: forcing a failure. [ 317.444830][ T9986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.473137][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: syz.2.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.473182][ T9986] Tainted: [L]=SOFTLOCKUP [ 317.473190][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.473206][ T9986] Call Trace: [ 317.473214][ T9986] [ 317.473225][ T9986] dump_stack_lvl+0x100/0x190 [ 317.473265][ T9986] should_fail_ex.cold+0x5/0xa [ 317.473295][ T9986] _copy_to_user+0x32/0xd0 [ 317.473337][ T9986] fs_name+0x25e/0x4a0 [ 317.473370][ T9986] __x64_sys_sysfs+0xe6/0x120 [ 317.473402][ T9986] do_syscall_64+0x115/0x840 [ 317.473431][ T9986] ? clear_bhb_loop+0x40/0x90 [ 317.473463][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.473490][ T9986] RIP: 0033:0x7f3d4a59df99 [ 317.473514][ T9986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.473538][ T9986] RSP: 002b:00007f3d48772028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 317.473562][ T9986] RAX: ffffffffffffffda RBX: 00007f3d4a826360 RCX: 00007f3d4a59df99 [ 317.473580][ T9986] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 317.473595][ T9986] RBP: 00007f3d48772090 R08: 0000000000000000 R09: 0000000000000000 [ 317.473610][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.473632][ T9986] R13: 00007f3d4a8263f8 R14: 00007f3d4a826360 R15: 00007ffcba5b1808 [ 317.473668][ T9986] [ 319.754061][ T363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.992232][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.004942][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.015135][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.026469][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.036209][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.161108][ T363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.396912][ T363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.553087][ T363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.225557][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'. [ 321.595453][ T363] bridge_slave_1: left allmulticast mode [ 321.602535][ T363] bridge_slave_1: left promiscuous mode [ 321.613408][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.644706][ T363] bridge_slave_0: left allmulticast mode [ 321.658506][ T363] bridge_slave_0: left promiscuous mode [ 321.667706][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.005739][ T363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.018798][ T363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.031593][ T363] bond0 (unregistering): Released all slaves [ 322.050177][T10037] tunl0: entered promiscuous mode [ 322.055269][T10037] tunl0: entered allmulticast mode [ 322.060854][ T5639] Bluetooth: hci1: command tx timeout [ 322.839059][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 322.955196][ T363] hsr_slave_0: left promiscuous mode [ 322.965149][ T363] hsr_slave_1: left promiscuous mode [ 322.971833][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.982444][ T363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.998002][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.006383][ T363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.049325][ T363] veth1_macvtap: left promiscuous mode [ 323.055256][ T363] veth0_macvtap: left promiscuous mode [ 323.065762][ T363] veth1_vlan: left promiscuous mode [ 323.072038][ T363] veth0_vlan: left promiscuous mode [ 323.287355][ T363] team0 (unregistering): Port device team_slave_1 removed [ 323.306899][ T363] team0 (unregistering): Port device team_slave_0 removed [ 323.714441][T10013] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.722113][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.729870][T10013] bridge_slave_0: entered allmulticast mode [ 323.738494][T10013] bridge_slave_0: entered promiscuous mode [ 323.845910][T10013] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.859884][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.871990][T10013] bridge_slave_1: entered allmulticast mode [ 323.882974][T10013] bridge_slave_1: entered promiscuous mode [ 324.150052][ T5639] Bluetooth: hci1: command tx timeout [ 324.389625][T10013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.670924][T10013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.154704][T10013] team0: Port device team_slave_0 added [ 325.233845][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 325.249641][T10013] team0: Port device team_slave_1 added [ 325.351123][T10013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.368331][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.464817][T10013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.602934][T10013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.613417][T10013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.641606][T10013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.672825][T10099] netlink: 326 bytes leftover after parsing attributes in process `syz.0.540'. [ 325.823121][T10013] hsr_slave_0: entered promiscuous mode [ 325.845526][T10013] hsr_slave_1: entered promiscuous mode [ 325.873944][T10013] debugfs: 'hsr0' already exists in 'hsr' [ 325.899054][T10013] Cannot create hsr debugfs directory [ 326.218979][ T5639] Bluetooth: hci1: command tx timeout [ 328.300031][ T5639] Bluetooth: hci1: command tx timeout [ 329.292103][T10013] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.315213][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.532569][T10013] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 329.553867][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 329.564967][T10013] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 329.588964][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 329.664525][T10013] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 329.704620][T10013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.751145][T10013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.783344][T10013] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.809790][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.817354][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.851231][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.858759][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.487967][T10255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.553'. [ 332.526699][T10255] tunl0: entered promiscuous mode [ 332.537522][T10255] tunl0: entered allmulticast mode [ 332.915965][ T29] audit: type=1804 audit(4294967293.000:32): pid=10267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.554" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 333.593612][T10013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.904741][T10013] veth0_vlan: entered promiscuous mode [ 335.143925][T10013] veth1_vlan: entered promiscuous mode [ 335.509509][T10013] veth0_macvtap: entered promiscuous mode [ 335.526347][T10013] veth1_macvtap: entered promiscuous mode [ 335.649040][T10013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.682771][T10013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.705417][ T1179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.729533][ T1179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.760946][ T1179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.929363][ T1179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.340580][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.353153][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.893853][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.902024][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.931120][ T29] audit: type=1804 audit(4294967293.010:33): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.567" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 343.023294][T10440] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 355.630976][T10669] FAULT_INJECTION: forcing a failure. [ 355.630976][T10669] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 355.645946][T10669] CPU: 1 UID: 0 PID: 10669 Comm: syz.0.609 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.645981][T10669] Tainted: [L]=SOFTLOCKUP [ 355.645988][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.646011][T10669] Call Trace: [ 355.646053][T10669] [ 355.646087][T10669] dump_stack_lvl+0x100/0x190 [ 355.646185][T10669] should_fail_ex.cold+0x5/0xa [ 355.646225][T10669] ? prepare_alloc_pages+0x16d/0x5f0 [ 355.646281][T10669] should_fail_alloc_page+0xeb/0x140 [ 355.646327][T10669] prepare_alloc_pages+0x1f0/0x5f0 [ 355.646369][T10669] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 355.646406][T10669] ? __lock_acquire+0x49f/0x1a40 [ 355.646473][T10669] ? __lock_acquire+0x49f/0x1a40 [ 355.646509][T10669] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.646550][T10669] ? find_held_lock+0x2b/0x80 [ 355.646579][T10669] ? is_bpf_text_address+0x8a/0x1a0 [ 355.646634][T10669] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 355.646681][T10669] ? vma_is_special_huge+0x23f/0x2d0 [ 355.646716][T10669] ? __pfx_vma_is_special_huge+0x10/0x10 [ 355.646749][T10669] ? unwind_next_frame+0x3be/0x2090 [ 355.646795][T10669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.646849][T10669] ? policy_nodemask+0xed/0x4f0 [ 355.646887][T10669] alloc_pages_mpol+0x1fb/0x540 [ 355.646926][T10669] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 355.646962][T10669] ? __kasan_check_byte+0x13/0x50 [ 355.647000][T10669] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 355.647046][T10669] alloc_pages_noprof+0x1a/0x160 [ 355.647070][T10669] __pmd_alloc+0x3b/0x950 [ 355.647108][T10669] __handle_mm_fault+0xa9c/0x2a00 [ 355.647135][T10669] ? mt_find+0x45e/0x8e0 [ 355.647261][T10669] ? __pfx___handle_mm_fault+0x10/0x10 [ 355.647285][T10669] ? __pfx_mt_find+0x10/0x10 [ 355.647332][T10669] ? find_vma+0xbf/0x140 [ 355.647360][T10669] ? __pfx_find_vma+0x10/0x10 [ 355.647393][T10669] handle_mm_fault+0x37b/0xa30 [ 355.647424][T10669] do_user_addr_fault+0x74c/0x12f0 [ 355.647470][T10669] exc_page_fault+0x6f/0xd0 [ 355.647559][T10669] asm_exc_page_fault+0x26/0x30 [ 355.647597][T10669] RIP: 0010:__get_user_4+0x14/0x30 [ 355.647622][T10669] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 355.647645][T10669] RSP: 0018:ffffc9000e30fd20 EFLAGS: 00050287 [ 355.647708][T10669] RAX: 0000000000000003 RBX: 00000000c0045520 RCX: ffffc9000e30fcc4 [ 355.647724][T10669] RDX: 00007ffffffff000 RSI: ffffffff825c1371 RDI: ffffffff8c400a80 [ 355.647739][T10669] RBP: ffff888033622038 R08: 0000000000000001 R09: ffffffff974a9f60 [ 355.647754][T10669] R10: 0000000000000200 R11: 0000000000000001 R12: 00000000fffffdfd [ 355.647768][T10669] R13: 00000000c0045520 R14: 0000000000000003 R15: ffff888021332000 [ 355.647794][T10669] ? __might_fault+0x111/0x140 [ 355.647833][T10669] snd_hwdep_control_ioctl+0x6e/0x3d0 [ 355.647966][T10669] snd_ctl_ioctl+0x6a4/0x11b0 [ 355.648034][T10669] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 355.648075][T10669] ? find_held_lock+0x2b/0x80 [ 355.648106][T10669] ? __fget_files+0x215/0x3d0 [ 355.648148][T10669] ? hook_file_ioctl_common+0x140/0x440 [ 355.648275][T10669] ? __fget_files+0x21f/0x3d0 [ 355.648303][T10669] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 355.648337][T10669] __x64_sys_ioctl+0x18e/0x210 [ 355.648380][T10669] do_syscall_64+0x115/0x840 [ 355.648408][T10669] ? clear_bhb_loop+0x40/0x90 [ 355.648439][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.648466][T10669] RIP: 0033:0x7f6f88f9df99 [ 355.648488][T10669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.648508][T10669] RSP: 002b:00007f6f89ebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.648529][T10669] RAX: ffffffffffffffda RBX: 00007f6f89225fa0 RCX: 00007f6f88f9df99 [ 355.648545][T10669] RDX: 0000000000000003 RSI: 00000000c0045520 RDI: 0000000000000004 [ 355.648558][T10669] RBP: 00007f6f89ebf090 R08: 0000000000000000 R09: 0000000000000000 [ 355.648572][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.648586][T10669] R13: 00007f6f89226038 R14: 00007f6f89225fa0 R15: 00007ffce17fce98 [ 355.648618][T10669] [ 357.667706][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 362.474504][T10791] futex_wake_op: syz.0.629 tries to shift op by -2048; fix this program [ 362.555140][T10791] futex_wake_op: syz.0.629 tries to shift op by -2048; fix this program [ 364.480825][ T29] audit: type=1800 audit(4294967294.210:34): pid=10832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.634" name=22050820 dev="tmpfs" ino=863 res=0 errno=0 [ 368.086675][T10902] i2c i2c-0: delete_device: Can't find device in list [ 368.726165][T10913] syz.0.646 (10913) used greatest stack depth: 18864 bytes left [ 370.068506][T10958] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 370.228962][T10956] FAULT_INJECTION: forcing a failure. [ 370.228962][T10956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.293286][T10956] CPU: 0 UID: 0 PID: 10956 Comm: syz.0.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.293329][T10956] Tainted: [L]=SOFTLOCKUP [ 370.293339][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.293366][T10956] Call Trace: [ 370.293375][T10956] [ 370.293385][T10956] dump_stack_lvl+0x100/0x190 [ 370.293435][T10956] should_fail_ex.cold+0x5/0xa [ 370.293466][T10956] _copy_to_user+0x32/0xd0 [ 370.293629][T10956] keyctl_capabilities+0x5a/0x160 [ 370.293729][T10956] __do_sys_keyctl+0x427/0x5a0 [ 370.293757][T10956] do_syscall_64+0x115/0x840 [ 370.293787][T10956] ? clear_bhb_loop+0x40/0x90 [ 370.293819][T10956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.293842][T10956] RIP: 0033:0x7f6f88f9df99 [ 370.293863][T10956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.293884][T10956] RSP: 002b:00007f6f89e3b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 370.293912][T10956] RAX: ffffffffffffffda RBX: 00007f6f89226360 RCX: 00007f6f88f9df99 [ 370.293928][T10956] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 370.293941][T10956] RBP: 00007f6f89e3b090 R08: 00000000000003ff R09: 0000000000000000 [ 370.293956][T10956] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 370.293968][T10956] R13: 00007f6f892263f8 R14: 00007f6f89226360 R15: 00007ffce17fce98 [ 370.293995][T10956] [ 371.841129][T10983] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 378.406533][ T5639] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 378.623619][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.634111][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.610372][T11116] FAULT_INJECTION: forcing a failure. [ 379.610372][T11116] name failslab, interval 1, probability 0, space 0, times 0 [ 379.634946][T11116] CPU: 0 UID: 0 PID: 11116 Comm: syz.2.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.634995][T11116] Tainted: [L]=SOFTLOCKUP [ 379.635004][T11116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.635021][T11116] Call Trace: [ 379.635032][T11116] [ 379.635045][T11116] dump_stack_lvl+0x100/0x190 [ 379.635090][T11116] should_fail_ex.cold+0x5/0xa [ 379.635124][T11116] should_failslab+0xc2/0x120 [ 379.635167][T11116] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 379.635204][T11116] ? find_held_lock+0x2b/0x80 [ 379.635243][T11116] ? alloc_inode+0x183/0x250 [ 379.635281][T11116] alloc_inode+0x183/0x250 [ 379.635325][T11116] path_from_stashed+0x25b/0x750 [ 379.635463][T11116] pidfs_alloc_file+0xf8/0x290 [ 379.635553][T11116] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 379.635594][T11116] pidfd_prepare+0x107/0x1b0 [ 379.635634][T11116] __x64_sys_pidfd_open+0x105/0x1a0 [ 379.635690][T11116] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 379.635743][T11116] do_syscall_64+0x115/0x840 [ 379.635782][T11116] ? clear_bhb_loop+0x40/0x90 [ 379.635819][T11116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.635851][T11116] RIP: 0033:0x7f3d4a59df99 [ 379.635883][T11116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.635915][T11116] RSP: 002b:00007f3d487d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 379.635947][T11116] RAX: ffffffffffffffda RBX: 00007f3d4a826090 RCX: 00007f3d4a59df99 [ 379.635967][T11116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000495 [ 379.635984][T11116] RBP: 00007f3d4a634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 379.636003][T11116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.636033][T11116] R13: 00007f3d4a826128 R14: 00007f3d4a826090 R15: 00007ffcba5b1808 [ 379.636074][T11116] [ 380.458946][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 382.538605][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 384.853090][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 386.584631][T11220] i2c i2c-0: delete_device: Can't find device in list [ 386.938622][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 389.018343][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 391.556175][ T5639] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 393.578619][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 395.658999][ T50] Bluetooth: hci1: command 0x2016 tx timeout [ 397.360228][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 397.619952][T11382] netlink: 350 bytes leftover after parsing attributes in process `syz.1.713'. [ 398.796107][T11396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.715'. [ 399.054567][T11396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.064672][T11396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.089871][T11396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.099492][T11396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.256763][T11416] netlink: 330 bytes leftover after parsing attributes in process `syz.3.717'. [ 400.352484][T11433] FAULT_INJECTION: forcing a failure. [ 400.352484][T11433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.365975][T11433] CPU: 1 UID: 0 PID: 11433 Comm: syz.2.720 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.366016][T11433] Tainted: [L]=SOFTLOCKUP [ 400.366023][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.366035][T11433] Call Trace: [ 400.366044][T11433] [ 400.366053][T11433] dump_stack_lvl+0x100/0x190 [ 400.366091][T11433] should_fail_ex.cold+0x5/0xa [ 400.366121][T11433] _copy_to_user+0x32/0xd0 [ 400.366163][T11433] simple_read_from_buffer+0xcb/0x170 [ 400.366276][T11433] proc_fail_nth_read+0x1af/0x230 [ 400.366388][T11433] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.366424][T11433] ? rw_verify_area+0xce/0x6d0 [ 400.366458][T11433] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.366491][T11433] vfs_read+0x1e4/0xb40 [ 400.366515][T11433] ? __pfx_vfs_read+0x10/0x10 [ 400.366548][T11433] ? __fget_files+0x215/0x3d0 [ 400.366581][T11433] ? __fget_files+0x21f/0x3d0 [ 400.366613][T11433] ksys_read+0x12a/0x250 [ 400.366637][T11433] ? __pfx_ksys_read+0x10/0x10 [ 400.366670][T11433] do_syscall_64+0x115/0x840 [ 400.366701][T11433] ? clear_bhb_loop+0x40/0x90 [ 400.366734][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.366760][T11433] RIP: 0033:0x7f3d4a55e7ce [ 400.366782][T11433] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.366806][T11433] RSP: 002b:00007f3d487f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.366831][T11433] RAX: ffffffffffffffda RBX: 00007f3d487f66c0 RCX: 00007f3d4a55e7ce [ 400.366849][T11433] RDX: 000000000000000f RSI: 00007f3d487f60a0 RDI: 0000000000000016 [ 400.366864][T11433] RBP: 00007f3d487f6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.366878][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.366893][T11433] R13: 00007f3d4a826038 R14: 00007f3d4a825fa0 R15: 00007ffcba5b1808 [ 400.366928][T11433] [ 404.525515][ T5639] Bluetooth: hci2: unexpected event 0x30 length: 10 > 3 [ 413.904235][T11675] syz.2.758 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 417.452405][ T5639] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3 [ 423.974322][T11829] netlink: 330 bytes leftover after parsing attributes in process `syz.0.777'. [ 440.060612][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.080915][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.260289][ T5639] Bluetooth: hci1: command 0x2016 tx timeout [ 448.461287][T12227] process 'syz.0.828' launched './file0' with NULL argv: empty string added [ 468.445464][T12573] FAULT_INJECTION: forcing a failure. [ 468.445464][T12573] name failslab, interval 1, probability 0, space 0, times 0 [ 468.481583][T12573] CPU: 1 UID: 0 PID: 12573 Comm: syz.2.874 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.481637][T12573] Tainted: [L]=SOFTLOCKUP [ 468.481647][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.481662][T12573] Call Trace: [ 468.481672][T12573] [ 468.481682][T12573] dump_stack_lvl+0x100/0x190 [ 468.481725][T12573] should_fail_ex.cold+0x5/0xa [ 468.481758][T12573] should_failslab+0xc2/0x120 [ 468.481797][T12573] __kmalloc_noprof+0xfc/0x820 [ 468.481832][T12573] ? tomoyo_encode2+0xfb/0x3c0 [ 468.481990][T12573] tomoyo_encode2+0xfb/0x3c0 [ 468.482032][T12573] tomoyo_encode+0x29/0x50 [ 468.482066][T12573] tomoyo_realpath_from_path+0x18c/0x690 [ 468.482111][T12573] tomoyo_path_number_perm+0x23c/0x580 [ 468.482145][T12573] ? tomoyo_path_number_perm+0x22e/0x580 [ 468.482179][T12573] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 468.482247][T12573] ? find_held_lock+0x2b/0x80 [ 468.482280][T12573] ? __fget_files+0x215/0x3d0 [ 468.482304][T12573] ? hook_file_ioctl_common+0x140/0x440 [ 468.482337][T12573] ? __fget_files+0x215/0x3d0 [ 468.482368][T12573] ? __fget_files+0x21f/0x3d0 [ 468.482398][T12573] security_file_ioctl+0xd3/0x230 [ 468.482459][T12573] __x64_sys_ioctl+0xb7/0x210 [ 468.482499][T12573] do_syscall_64+0x115/0x840 [ 468.482532][T12573] ? clear_bhb_loop+0x40/0x90 [ 468.482564][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.482600][T12573] RIP: 0033:0x7f3d4a59df99 [ 468.482624][T12573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.482649][T12573] RSP: 002b:00007f3d487f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.482675][T12573] RAX: ffffffffffffffda RBX: 00007f3d4a825fa0 RCX: 00007f3d4a59df99 [ 468.482692][T12573] RDX: 0000000000000000 RSI: 0000000040047438 RDI: 0000000000000003 [ 468.482708][T12573] RBP: 00007f3d487f6090 R08: 0000000000000000 R09: 0000000000000000 [ 468.482724][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.482739][T12573] R13: 00007f3d4a826038 R14: 00007f3d4a825fa0 R15: 00007ffcba5b1808 [ 468.482776][T12573] [ 468.482831][T12573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 479.187242][T12774] vhci_hcd vhci_hcd.2: default hub control req: 0300 v0007 i0000 l7 [ 484.564671][T12863] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 489.208621][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 490.439925][T12960] vhci_hcd vhci_hcd.2: default hub control req: 0300 v0007 i0000 l7 [ 497.103016][T13081] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 497.135869][T13081] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 498.521231][T13102] FAULT_INJECTION: forcing a failure. [ 498.521231][T13102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.536793][T13102] CPU: 1 UID: 0 PID: 13102 Comm: syz.1.952 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.536834][T13102] Tainted: [L]=SOFTLOCKUP [ 498.536843][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.536857][T13102] Call Trace: [ 498.536866][T13102] [ 498.536876][T13102] dump_stack_lvl+0x100/0x190 [ 498.536915][T13102] should_fail_ex.cold+0x5/0xa [ 498.536945][T13102] _copy_to_user+0x32/0xd0 [ 498.536989][T13102] simple_read_from_buffer+0xcb/0x170 [ 498.537033][T13102] proc_fail_nth_read+0x1af/0x230 [ 498.537076][T13102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.537120][T13102] ? rw_verify_area+0xce/0x6d0 [ 498.537157][T13102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.537192][T13102] vfs_read+0x1e4/0xb40 [ 498.537221][T13102] ? __pfx_vfs_read+0x10/0x10 [ 498.537259][T13102] ? __fget_files+0x215/0x3d0 [ 498.537291][T13102] ? __fget_files+0x21f/0x3d0 [ 498.537325][T13102] ksys_read+0x12a/0x250 [ 498.537349][T13102] ? __pfx_ksys_read+0x10/0x10 [ 498.537383][T13102] do_syscall_64+0x115/0x840 [ 498.537415][T13102] ? clear_bhb_loop+0x40/0x90 [ 498.537446][T13102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.537473][T13102] RIP: 0033:0x7f12a955e7ce [ 498.537495][T13102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 498.537518][T13102] RSP: 002b:00007f12aa4cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 498.537543][T13102] RAX: ffffffffffffffda RBX: 00007f12aa4ce6c0 RCX: 00007f12a955e7ce [ 498.537561][T13102] RDX: 000000000000000f RSI: 00007f12aa4ce0a0 RDI: 0000000000000006 [ 498.537576][T13102] RBP: 00007f12aa4ce090 R08: 0000000000000000 R09: 0000000000000000 [ 498.537591][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.537606][T13102] R13: 00007f12a9826038 R14: 00007f12a9825fa0 R15: 00007ffe106a7b78 [ 498.537637][T13102] [ 501.500594][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.508880][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.178087][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 505.916044][T13235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 510.031396][T13320] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 532.007663][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'. [ 534.305080][T13683] zram: Removed device: zram0 [ 540.975909][T13761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 551.185117][T13913] syz.1.1072 uses obsolete (PF_INET,SOCK_PACKET) [ 562.941377][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.947926][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.513529][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1101'. [ 600.288361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 624.389483][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.397603][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.674031][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.056456][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.106525][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.121697][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.137122][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.146178][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.155377][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 629.435257][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.580298][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.033426][ T47] bridge_slave_1: left allmulticast mode [ 630.048995][ T47] bridge_slave_1: left promiscuous mode [ 630.055028][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.065437][ T47] bridge_slave_0: left allmulticast mode [ 630.072480][ T47] bridge_slave_0: left promiscuous mode [ 630.079221][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.236750][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.249146][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.266911][ T47] bond0 (unregistering): Released all slaves [ 630.832426][T15194] FAULT_INJECTION: forcing a failure. [ 630.832426][T15194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.864507][T15194] CPU: 1 UID: 0 PID: 15194 Comm: syz.2.1228 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.864547][T15194] Tainted: [L]=SOFTLOCKUP [ 630.864554][T15194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 630.864568][T15194] Call Trace: [ 630.864576][T15194] [ 630.864586][T15194] dump_stack_lvl+0x100/0x190 [ 630.864629][T15194] should_fail_ex.cold+0x5/0xa [ 630.864662][T15194] _copy_to_user+0x32/0xd0 [ 630.864706][T15194] keyctl_capabilities+0x5a/0x160 [ 630.864743][T15194] __do_sys_keyctl+0x427/0x5a0 [ 630.864774][T15194] do_syscall_64+0x115/0x840 [ 630.864807][T15194] ? clear_bhb_loop+0x40/0x90 [ 630.864840][T15194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.864867][T15194] RIP: 0033:0x7f3d4a59df99 [ 630.864898][T15194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.864921][T15194] RSP: 002b:00007f3d48772028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 630.864947][T15194] RAX: ffffffffffffffda RBX: 00007f3d4a826360 RCX: 00007f3d4a59df99 [ 630.864965][T15194] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 630.864981][T15194] RBP: 00007f3d48772090 R08: 00000000000003ff R09: 0000000000000000 [ 630.864996][T15194] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 630.865011][T15194] R13: 00007f3d4a8263f8 R14: 00007f3d4a826360 R15: 00007ffcba5b1808 [ 630.865044][T15194] [ 631.258788][ T50] Bluetooth: hci2: command tx timeout [ 631.476958][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 631.852722][ T47] hsr_slave_0: left promiscuous mode [ 631.862677][ T47] hsr_slave_1: left promiscuous mode [ 631.870260][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.877763][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.886458][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.894486][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.911294][ T47] veth1_macvtap: left promiscuous mode [ 631.916818][ T47] veth0_macvtap: left promiscuous mode [ 631.922558][ T47] veth1_vlan: left promiscuous mode [ 631.927848][ T47] veth0_vlan: left promiscuous mode [ 632.114246][ T47] team0 (unregistering): Port device team_slave_1 removed [ 632.130588][ T47] team0 (unregistering): Port device team_slave_0 removed [ 632.769607][T15168] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.813542][T15168] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.822057][T15168] bridge_slave_0: entered allmulticast mode [ 632.847063][T15168] bridge_slave_0: entered promiscuous mode [ 632.888981][T15168] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.900559][T15168] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.920641][T15168] bridge_slave_1: entered allmulticast mode [ 632.956396][T15168] bridge_slave_1: entered promiscuous mode [ 633.281707][T15168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.317134][T15168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.339152][ T50] Bluetooth: hci2: command tx timeout [ 633.634384][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 633.917291][T15168] team0: Port device team_slave_0 added [ 634.025386][T15168] team0: Port device team_slave_1 added [ 634.207971][T15168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.215103][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.242189][T15168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.257486][T15168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.265965][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.292594][T15168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.427897][T15168] hsr_slave_0: entered promiscuous mode [ 634.436332][T15168] hsr_slave_1: entered promiscuous mode [ 635.418301][ T50] Bluetooth: hci2: command tx timeout [ 636.561875][T15168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 636.573500][T15168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 636.583031][T15168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 636.600256][T15168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 636.612116][T15168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 636.653554][T15168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.670323][T15168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 636.703421][T15168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.498326][ T50] Bluetooth: hci2: command tx timeout [ 638.203763][T15168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.911275][T15168] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.212013][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.219703][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.296536][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.303939][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.996676][T15168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.963407][T15168] veth0_vlan: entered promiscuous mode [ 643.015118][T15168] veth1_vlan: entered promiscuous mode [ 643.202437][T15168] veth0_macvtap: entered promiscuous mode [ 643.248027][T15168] veth1_macvtap: entered promiscuous mode [ 643.357812][T15168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.445742][T15168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.545332][T15275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.626826][T15275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.639653][T15275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.746537][T15275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.107850][ T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.126706][ T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.291957][T15275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.317277][T15275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.936264][ T50] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 654.349606][T15650] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 654.816823][T15666] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2343935567 (2343935567 ns) > initial count (2343874654 ns). Using initial count to start timer. [ 655.131512][T15675] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 655.284753][ T29] audit: type=1804 audit(4294967293.340:35): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1277" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 655.364334][T15679] kvm: kvm [15678]: vcpu5, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001d) [ 656.786420][T15694] [U] ^R [ 660.208541][ T5639] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 660.634867][T15767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2343935567 (2343935567 ns) > initial count (2343874654 ns). Using initial count to start timer. [ 685.820119][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.827038][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.681971][ T1179] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.757257][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 726.770581][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 726.783090][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 726.806537][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 726.816053][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 726.820562][ T1179] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.194512][ T1179] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.416081][ T1179] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.861521][ T1179] bridge_slave_1: left allmulticast mode [ 727.869262][ T1179] bridge_slave_1: left promiscuous mode [ 727.880394][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.891710][ T1179] bridge_slave_0: left allmulticast mode [ 727.897461][ T1179] bridge_slave_0: left promiscuous mode [ 727.903931][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.209545][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.226253][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.239931][ T1179] bond0 (unregistering): Released all slaves [ 728.939247][ T50] Bluetooth: hci1: command tx timeout [ 729.567024][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 729.989419][ T1179] hsr_slave_0: left promiscuous mode [ 729.995888][ T1179] hsr_slave_1: left promiscuous mode [ 730.002322][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.011929][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.022877][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.039335][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.057464][ T1179] veth1_macvtap: left promiscuous mode [ 730.064191][ T1179] veth0_macvtap: left promiscuous mode [ 730.069889][ T1179] veth1_vlan: left promiscuous mode [ 730.075267][ T1179] veth0_vlan: left promiscuous mode [ 730.268414][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 730.283099][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 731.018978][ T50] Bluetooth: hci1: command tx timeout [ 731.316174][T16887] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.325473][T16887] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.333367][T16887] bridge_slave_0: entered allmulticast mode [ 731.342162][T16887] bridge_slave_0: entered promiscuous mode [ 731.510024][T16887] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.528329][T16887] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.540094][T16887] bridge_slave_1: entered allmulticast mode [ 731.548914][T16887] bridge_slave_1: entered promiscuous mode [ 731.670158][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 731.828065][T16887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.907920][T16887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.102481][T16887] team0: Port device team_slave_0 added [ 732.114631][T16887] team0: Port device team_slave_1 added [ 732.229563][T16887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.236690][T16887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.263530][T16887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.310147][T16887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.317200][T16887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.344843][T16887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.529116][T16887] hsr_slave_0: entered promiscuous mode [ 732.545452][T16887] hsr_slave_1: entered promiscuous mode [ 732.559544][T16887] debugfs: 'hsr0' already exists in 'hsr' [ 732.567374][T16887] Cannot create hsr debugfs directory [ 733.098421][ T50] Bluetooth: hci1: command tx timeout [ 733.515895][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 735.178547][ T50] Bluetooth: hci1: command tx timeout [ 736.167191][T16887] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 736.184124][T16887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.197405][T16887] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 736.209999][T16887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.226044][T16887] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 736.247928][T16887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.265077][T16887] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 736.282193][T16887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.640272][T16887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.712286][T16887] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.735295][ T697] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.742573][ T697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.776639][ T697] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.783904][ T697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.802225][T16887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.182186][T16887] veth0_vlan: entered promiscuous mode [ 740.204626][T16887] veth1_vlan: entered promiscuous mode [ 740.281251][T16887] veth0_macvtap: entered promiscuous mode [ 740.292710][T16887] veth1_macvtap: entered promiscuous mode [ 740.327284][T16887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.369557][T16887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.431478][ T697] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.451777][ T697] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.474327][ T697] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.497558][ T697] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.871152][ T697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.906795][ T697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.669735][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.678639][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.131468][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fd8e800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 745.060975][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b468400: rx timeout, send abort [ 745.072969][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b468000: rx timeout, send abort [ 745.081575][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b468400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 745.098431][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b468000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 747.020459][T17310] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 747.263490][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.271595][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.061203][T17378] FAULT_INJECTION: forcing a failure. [ 750.061203][T17378] name failslab, interval 1, probability 0, space 0, times 0 [ 750.085817][T17378] CPU: 1 UID: 0 PID: 17378 Comm: syz.3.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.085870][T17378] Tainted: [L]=SOFTLOCKUP [ 750.085880][T17378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 750.085899][T17378] Call Trace: [ 750.085909][T17378] [ 750.085922][T17378] dump_stack_lvl+0x100/0x190 [ 750.085971][T17378] should_fail_ex.cold+0x5/0xa [ 750.086009][T17378] should_failslab+0xc2/0x120 [ 750.086056][T17378] kmem_cache_alloc_noprof+0x91/0x6a0 [ 750.086099][T17378] ? alloc_uid+0xe2/0x4c0 [ 750.086139][T17378] ? alloc_uid+0x13d/0x4c0 [ 750.086182][T17378] alloc_uid+0x13d/0x4c0 [ 750.086221][T17378] ? __pfx_alloc_uid+0x10/0x10 [ 750.086258][T17378] ? bpf_lsm_cred_prepare+0x9/0x10 [ 750.086289][T17378] ? security_prepare_creds+0xa8/0x290 [ 750.086424][T17378] __sys_setresuid+0x4f2/0x1280 [ 750.086464][T17378] do_syscall_64+0x115/0x840 [ 750.086526][T17378] ? clear_bhb_loop+0x40/0x90 [ 750.086567][T17378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.086597][T17378] RIP: 0033:0x7f169539df99 [ 750.086623][T17378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.086651][T17378] RSP: 002b:00007f1696220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 750.086680][T17378] RAX: ffffffffffffffda RBX: 00007f1695625fa0 RCX: 00007f169539df99 [ 750.086700][T17378] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 750.086718][T17378] RBP: 00007f1695434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 750.086737][T17378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.086755][T17378] R13: 00007f1695626038 R14: 00007f1695625fa0 R15: 00007ffdd04b6588 [ 750.086796][T17378] [ 752.927375][T17437] FAULT_INJECTION: forcing a failure. [ 752.927375][T17437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.951803][T17437] CPU: 1 UID: 0 PID: 17437 Comm: syz.2.1476 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.951844][T17437] Tainted: [L]=SOFTLOCKUP [ 752.951852][T17437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 752.951867][T17437] Call Trace: [ 752.951875][T17437] [ 752.951885][T17437] dump_stack_lvl+0x100/0x190 [ 752.951924][T17437] should_fail_ex.cold+0x5/0xa [ 752.951954][T17437] _copy_to_user+0x32/0xd0 [ 752.951999][T17437] keyctl_capabilities+0x5a/0x160 [ 752.952032][T17437] __do_sys_keyctl+0x427/0x5a0 [ 752.952064][T17437] do_syscall_64+0x115/0x840 [ 752.952095][T17437] ? clear_bhb_loop+0x40/0x90 [ 752.952127][T17437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.952153][T17437] RIP: 0033:0x7f3d4a59df99 [ 752.952176][T17437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.952200][T17437] RSP: 002b:00007f3d48772028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 752.952225][T17437] RAX: ffffffffffffffda RBX: 00007f3d4a826360 RCX: 00007f3d4a59df99 [ 752.952242][T17437] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 752.952257][T17437] RBP: 00007f3d48772090 R08: 00000000000003ff R09: 0000000000000000 [ 752.952272][T17437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.952286][T17437] R13: 00007f3d4a8263f8 R14: 00007f3d4a826360 R15: 00007ffcba5b1808 [ 752.952321][T17437] [ 754.460156][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 755.546129][T17469] usb usb2: usbfs: process 17469 (syz.1.1488) did not claim interface 0 before use [ 758.977317][T17535] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 762.550039][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1495'. [ 762.659051][T17590] bond0: (slave bond_slave_0): Releasing backup interface [ 764.635483][T17660] FAULT_INJECTION: forcing a failure. [ 764.635483][T17660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.666188][T17660] CPU: 1 UID: 0 PID: 17660 Comm: syz.0.1503 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.666231][T17660] Tainted: [L]=SOFTLOCKUP [ 764.666239][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 764.666253][T17660] Call Trace: [ 764.666262][T17660] [ 764.666272][T17660] dump_stack_lvl+0x100/0x190 [ 764.666309][T17660] should_fail_ex.cold+0x5/0xa [ 764.666339][T17660] _copy_to_user+0x32/0xd0 [ 764.666380][T17660] simple_read_from_buffer+0xcb/0x170 [ 764.666426][T17660] proc_fail_nth_read+0x1af/0x230 [ 764.666463][T17660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.666500][T17660] ? rw_verify_area+0xce/0x6d0 [ 764.666537][T17660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.666570][T17660] vfs_read+0x1e4/0xb40 [ 764.666600][T17660] ? __pfx_vfs_read+0x10/0x10 [ 764.666637][T17660] ? __fget_files+0x215/0x3d0 [ 764.666669][T17660] ? __fget_files+0x21f/0x3d0 [ 764.666711][T17660] ksys_read+0x12a/0x250 [ 764.666735][T17660] ? __pfx_ksys_read+0x10/0x10 [ 764.666770][T17660] do_syscall_64+0x115/0x840 [ 764.666800][T17660] ? clear_bhb_loop+0x40/0x90 [ 764.666833][T17660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.666860][T17660] RIP: 0033:0x7f6f88f5e7ce [ 764.666883][T17660] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 764.666908][T17660] RSP: 002b:00007f6f89e3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 764.666932][T17660] RAX: ffffffffffffffda RBX: 00007f6f89e3b6c0 RCX: 00007f6f88f5e7ce [ 764.666949][T17660] RDX: 000000000000000f RSI: 00007f6f89e3b0a0 RDI: 0000000000000007 [ 764.666964][T17660] RBP: 00007f6f89e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 764.666979][T17660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.666994][T17660] R13: 00007f6f892263f8 R14: 00007f6f89226360 R15: 00007ffce17fce98 [ 764.667031][T17660] [ 766.618467][ T29] audit: type=1804 audit(4294967314.090:36): pid=17682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1505" name="/newroot/385/file0" dev="tmpfs" ino=1971 res=1 errno=0 [ 768.396998][T17716] FAULT_INJECTION: forcing a failure. [ 768.396998][T17716] name failslab, interval 1, probability 0, space 0, times 0 [ 768.410113][T17716] CPU: 1 UID: 0 PID: 17716 Comm: syz.2.1512 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.410161][T17716] Tainted: [L]=SOFTLOCKUP [ 768.410171][T17716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 768.410189][T17716] Call Trace: [ 768.410199][T17716] [ 768.410207][T17716] dump_stack_lvl+0x100/0x190 [ 768.410247][T17716] should_fail_ex.cold+0x5/0xa [ 768.410279][T17716] should_failslab+0xc2/0x120 [ 768.410322][T17716] kmem_cache_alloc_noprof+0x91/0x6a0 [ 768.410356][T17716] ? alloc_uid+0xe2/0x4c0 [ 768.410393][T17716] ? alloc_uid+0x13d/0x4c0 [ 768.410436][T17716] alloc_uid+0x13d/0x4c0 [ 768.410473][T17716] ? __pfx_alloc_uid+0x10/0x10 [ 768.410507][T17716] ? bpf_lsm_cred_prepare+0x9/0x10 [ 768.410537][T17716] ? security_prepare_creds+0xa8/0x290 [ 768.410588][T17716] __sys_setresuid+0x4f2/0x1280 [ 768.410624][T17716] do_syscall_64+0x115/0x840 [ 768.410658][T17716] ? clear_bhb_loop+0x40/0x90 [ 768.410695][T17716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.410727][T17716] RIP: 0033:0x7f3d4a59df99 [ 768.410752][T17716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.410778][T17716] RSP: 002b:00007f3d487f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 768.410806][T17716] RAX: ffffffffffffffda RBX: 00007f3d4a825fa0 RCX: 00007f3d4a59df99 [ 768.410834][T17716] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 768.410851][T17716] RBP: 00007f3d4a634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 768.410868][T17716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.410886][T17716] R13: 00007f3d4a826038 R14: 00007f3d4a825fa0 R15: 00007ffcba5b1808 [ 768.410926][T17716] [ 771.973969][T17784] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 776.977928][T17885] usb usb2: usbfs: process 17885 (syz.2.1530) did not claim interface 0 before use [ 777.545997][T17896] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 777.586131][T17894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1540'. [ 777.751407][T17894] bond0: (slave bond_slave_0): Releasing backup interface [ 782.125421][T17976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 782.257248][T17976] bond0: (slave bond_slave_0): Releasing backup interface [ 783.234410][ T29] audit: type=1804 audit(4294967294.040:37): pid=18011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1546" name="/newroot/74/file0" dev="tmpfs" ino=395 res=1 errno=0 [ 784.112047][T18025] FAULT_INJECTION: forcing a failure. [ 784.112047][T18025] name failslab, interval 1, probability 0, space 0, times 0 [ 784.145651][T18025] CPU: 0 UID: 0 PID: 18025 Comm: syz.1.1549 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.145696][T18025] Tainted: [L]=SOFTLOCKUP [ 784.145705][T18025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.145721][T18025] Call Trace: [ 784.145729][T18025] [ 784.145740][T18025] dump_stack_lvl+0x100/0x190 [ 784.145788][T18025] should_fail_ex.cold+0x5/0xa [ 784.145819][T18025] should_failslab+0xc2/0x120 [ 784.145856][T18025] __kmalloc_noprof+0xfc/0x820 [ 784.145887][T18025] ? rcu_is_watching+0x12/0xc0 [ 784.145952][T18025] ? tomoyo_realpath_from_path+0xb6/0x690 [ 784.146000][T18025] tomoyo_realpath_from_path+0xb6/0x690 [ 784.146047][T18025] tomoyo_check_open_permission+0x2af/0x3c0 [ 784.146086][T18025] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 784.146132][T18025] ? hook_file_open+0x24f/0x8f0 [ 784.146182][T18025] ? lock_acquire+0x1b9/0x370 [ 784.146229][T18025] tomoyo_file_open+0x6b/0x90 [ 784.146255][T18025] security_file_open+0xb5/0x1e0 [ 784.146289][T18025] do_dentry_open+0x588/0x14d0 [ 784.146323][T18025] vfs_open+0x82/0x3f0 [ 784.146360][T18025] path_openat+0x2873/0x4280 [ 784.146404][T18025] ? __pfx_path_openat+0x10/0x10 [ 784.146442][T18025] do_file_open+0x20e/0x430 [ 784.146472][T18025] ? __pfx_do_file_open+0x10/0x10 [ 784.146513][T18025] ? __pfx_kfree_link+0x10/0x10 [ 784.146562][T18025] ? alloc_fd+0x471/0x7a0 [ 784.146592][T18025] ? do_getname+0x191/0x390 [ 784.146627][T18025] do_sys_openat2+0x10f/0x1e0 [ 784.146662][T18025] ? __pfx_do_sys_openat2+0x10/0x10 [ 784.146697][T18025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 784.146815][T18025] __x64_sys_openat+0x12d/0x210 [ 784.146851][T18025] ? __pfx___x64_sys_openat+0x10/0x10 [ 784.146901][T18025] do_syscall_64+0x115/0x840 [ 784.146931][T18025] ? clear_bhb_loop+0x40/0x90 [ 784.146964][T18025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.146991][T18025] RIP: 0033:0x7f7955d5e7ce [ 784.147014][T18025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 784.147037][T18025] RSP: 002b:00007f7953ff5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 784.147063][T18025] RAX: ffffffffffffffda RBX: 00007f7953ff66c0 RCX: 00007f7955d5e7ce [ 784.147081][T18025] RDX: 0000000000000002 RSI: 00007f7955e347cb RDI: ffffffffffffff9c [ 784.147097][T18025] RBP: 00007f7955e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 784.147113][T18025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.147127][T18025] R13: 00007f7956026038 R14: 00007f7956025fa0 R15: 00007ffecb005fd8 [ 784.147164][T18025] [ 784.406904][T18025] ERROR: Out of memory at tomoyo_realpath_from_path. [ 784.414349][T18025] FAULT_INJECTION: forcing a failure. [ 784.414349][T18025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 784.428056][T18025] CPU: 0 UID: 0 PID: 18025 Comm: syz.1.1549 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.428094][T18025] Tainted: [L]=SOFTLOCKUP [ 784.428102][T18025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.428116][T18025] Call Trace: [ 784.428126][T18025] [ 784.428138][T18025] dump_stack_lvl+0x100/0x190 [ 784.428173][T18025] should_fail_ex.cold+0x5/0xa [ 784.428195][T18025] ? prepare_alloc_pages+0x16d/0x5f0 [ 784.428244][T18025] should_fail_alloc_page+0xeb/0x140 [ 784.428281][T18025] prepare_alloc_pages+0x1f0/0x5f0 [ 784.428310][T18025] ? up_write+0x2e5/0x5c0 [ 784.428342][T18025] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 784.428380][T18025] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 784.428423][T18025] ? __lock_acquire+0x49f/0x1a40 [ 784.428458][T18025] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 784.428489][T18025] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 784.428528][T18025] ? __lock_acquire+0x49f/0x1a40 [ 784.428581][T18025] ? find_held_lock+0x2b/0x80 [ 784.428611][T18025] ? is_bpf_text_address+0x8a/0x1a0 [ 784.428647][T18025] ? is_bpf_text_address+0x8a/0x1a0 [ 784.428682][T18025] ? bpf_ksym_find+0x124/0x1c0 [ 784.428709][T18025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 784.428750][T18025] ? policy_nodemask+0xed/0x4f0 [ 784.428789][T18025] alloc_pages_mpol+0x1fb/0x540 [ 784.428827][T18025] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 784.428862][T18025] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 784.428911][T18025] alloc_pages_noprof+0x1a/0x160 [ 784.428938][T18025] pte_alloc_one+0x1c/0x3d0 [ 784.428976][T18025] do_fault+0x86c/0x1750 [ 784.429018][T18025] __handle_mm_fault+0x187d/0x2a00 [ 784.429052][T18025] ? mt_find+0x45e/0x8e0 [ 784.429089][T18025] ? __pfx___handle_mm_fault+0x10/0x10 [ 784.429113][T18025] ? __pfx_mt_find+0x10/0x10 [ 784.429167][T18025] ? find_vma+0xbf/0x140 [ 784.429198][T18025] ? __pfx_find_vma+0x10/0x10 [ 784.429236][T18025] handle_mm_fault+0x37b/0xa30 [ 784.429265][T18025] do_user_addr_fault+0x74c/0x12f0 [ 784.429305][T18025] exc_page_fault+0x6f/0xd0 [ 784.429333][T18025] asm_exc_page_fault+0x26/0x30 [ 784.429356][T18025] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 784.429459][T18025] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 9e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 784.429481][T18025] RSP: 0018:ffffc90006b4fe38 EFLAGS: 00050202 [ 784.429501][T18025] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c [ 784.429515][T18025] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90006b4fe90 [ 784.429529][T18025] RBP: 000000000000000c R08: 0000000000000001 R09: fffff52000d69fd3 [ 784.429543][T18025] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 784.429556][T18025] R13: ffffc90006b4fe90 R14: 0000000000000001 R15: 0000000000000006 [ 784.429587][T18025] _copy_from_user+0x98/0xd0 [ 784.429624][T18025] __x64_sys_epoll_ctl+0x131/0x1e0 [ 784.429690][T18025] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 784.429727][T18025] do_syscall_64+0x115/0x840 [ 784.429753][T18025] ? clear_bhb_loop+0x40/0x90 [ 784.429781][T18025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.429804][T18025] RIP: 0033:0x7f7955d9df99 [ 784.429823][T18025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.429844][T18025] RSP: 002b:00007f7953ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 784.429864][T18025] RAX: ffffffffffffffda RBX: 00007f7956025fa0 RCX: 00007f7955d9df99 [ 784.429879][T18025] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 784.429892][T18025] RBP: 00007f7953ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 784.429905][T18025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.429918][T18025] R13: 00007f7956026038 R14: 00007f7956025fa0 R15: 00007ffecb005fd8 [ 784.429949][T18025] [ 790.197761][ T50] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 790.210131][ T697] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.871422][T18178] FAULT_INJECTION: forcing a failure. [ 794.871422][T18178] name failslab, interval 1, probability 0, space 0, times 0 [ 794.901469][T18178] CPU: 1 UID: 0 PID: 18178 Comm: syz.2.1569 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.901522][T18178] Tainted: [L]=SOFTLOCKUP [ 794.901541][T18178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.901559][T18178] Call Trace: [ 794.901568][T18178] [ 794.901579][T18178] dump_stack_lvl+0x100/0x190 [ 794.901628][T18178] should_fail_ex.cold+0x5/0xa [ 794.901687][T18178] should_failslab+0xc2/0x120 [ 794.901731][T18178] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 794.901771][T18178] ? __d_alloc+0x35/0xa50 [ 794.901810][T18178] __d_alloc+0x35/0xa50 [ 794.901839][T18178] ? __lock_acquire+0x49f/0x1a40 [ 794.901886][T18178] d_alloc_parallel+0x105/0x14b0 [ 794.901939][T18178] ? __pfx_d_alloc_parallel+0x10/0x10 [ 794.901977][T18178] ? __d_lookup+0x25c/0x4a0 [ 794.902021][T18178] ? __d_lookup+0x266/0x4a0 [ 794.902068][T18178] path_openat+0x271c/0x4280 [ 794.902116][T18178] ? __pfx_path_openat+0x10/0x10 [ 794.902155][T18178] do_file_open+0x20e/0x430 [ 794.902187][T18178] ? __pfx_do_file_open+0x10/0x10 [ 794.902243][T18178] ? alloc_fd+0x471/0x7a0 [ 794.902274][T18178] ? do_getname+0x191/0x390 [ 794.902310][T18178] do_sys_openat2+0x10f/0x1e0 [ 794.902345][T18178] ? __pfx_do_sys_openat2+0x10/0x10 [ 794.902385][T18178] ? fdget+0x17a/0x210 [ 794.902415][T18178] __x64_sys_openat+0x12d/0x210 [ 794.902451][T18178] ? __pfx___x64_sys_openat+0x10/0x10 [ 794.902502][T18178] do_syscall_64+0x115/0x840 [ 794.902549][T18178] ? clear_bhb_loop+0x40/0x90 [ 794.902587][T18178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.902617][T18178] RIP: 0033:0x7f3d4a59df99 [ 794.902639][T18178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.902666][T18178] RSP: 002b:00007f3d487f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 794.902694][T18178] RAX: ffffffffffffffda RBX: 00007f3d4a825fa0 RCX: 00007f3d4a59df99 [ 794.902710][T18178] RDX: 00000000001a3b02 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 794.902728][T18178] RBP: 00007f3d4a634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 794.902746][T18178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.902762][T18178] R13: 00007f3d4a826038 R14: 00007f3d4a825fa0 R15: 00007ffcba5b1808 [ 794.902800][T18178] [ 803.643755][T18352] FAULT_INJECTION: forcing a failure. [ 803.643755][T18352] name failslab, interval 1, probability 0, space 0, times 0 [ 803.660834][T18352] CPU: 0 UID: 0 PID: 18352 Comm: syz.3.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.660882][T18352] Tainted: [L]=SOFTLOCKUP [ 803.660892][T18352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.660909][T18352] Call Trace: [ 803.660918][T18352] [ 803.660929][T18352] dump_stack_lvl+0x100/0x190 [ 803.660970][T18352] should_fail_ex.cold+0x5/0xa [ 803.661006][T18352] should_failslab+0xc2/0x120 [ 803.661046][T18352] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 803.661085][T18352] ? __d_alloc+0x35/0xa50 [ 803.661121][T18352] __d_alloc+0x35/0xa50 [ 803.661148][T18352] ? __lock_acquire+0x49f/0x1a40 [ 803.661195][T18352] d_alloc_parallel+0x105/0x14b0 [ 803.661244][T18352] ? __pfx_d_alloc_parallel+0x10/0x10 [ 803.661283][T18352] ? __d_lookup+0x25c/0x4a0 [ 803.661326][T18352] ? __d_lookup+0x266/0x4a0 [ 803.661374][T18352] path_openat+0x271c/0x4280 [ 803.661420][T18352] ? __pfx_path_openat+0x10/0x10 [ 803.661460][T18352] do_file_open+0x20e/0x430 [ 803.661491][T18352] ? __pfx_do_file_open+0x10/0x10 [ 803.661548][T18352] ? alloc_fd+0x471/0x7a0 [ 803.661580][T18352] ? do_getname+0x191/0x390 [ 803.661619][T18352] do_sys_openat2+0x10f/0x1e0 [ 803.661657][T18352] ? __pfx_do_sys_openat2+0x10/0x10 [ 803.661698][T18352] ? fdget+0x17a/0x210 [ 803.661731][T18352] __x64_sys_openat+0x12d/0x210 [ 803.661769][T18352] ? __pfx___x64_sys_openat+0x10/0x10 [ 803.661831][T18352] do_syscall_64+0x115/0x840 [ 803.661869][T18352] ? clear_bhb_loop+0x40/0x90 [ 803.661907][T18352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.661939][T18352] RIP: 0033:0x7f169539df99 [ 803.661962][T18352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.661988][T18352] RSP: 002b:00007f1696220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 803.662015][T18352] RAX: ffffffffffffffda RBX: 00007f1695625fa0 RCX: 00007f169539df99 [ 803.662033][T18352] RDX: 00000000001a3b02 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 803.662051][T18352] RBP: 00007f1695434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 803.662068][T18352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.662084][T18352] R13: 00007f1695626038 R14: 00007f1695625fa0 R15: 00007ffdd04b6588 [ 803.662123][T18352] [ 808.710871][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.718675][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.815766][T18598] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1626'. [ 816.893909][T18615] FAULT_INJECTION: forcing a failure. [ 816.893909][T18615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.919132][T18615] CPU: 1 UID: 0 PID: 18615 Comm: syz.2.1620 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.919173][T18615] Tainted: [L]=SOFTLOCKUP [ 816.919181][T18615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.919196][T18615] Call Trace: [ 816.919205][T18615] [ 816.919215][T18615] dump_stack_lvl+0x100/0x190 [ 816.919252][T18615] should_fail_ex.cold+0x5/0xa [ 816.919283][T18615] _copy_to_user+0x32/0xd0 [ 816.919327][T18615] simple_read_from_buffer+0xcb/0x170 [ 816.919372][T18615] proc_fail_nth_read+0x1af/0x230 [ 816.919410][T18615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.919443][T18615] ? rw_verify_area+0xce/0x6d0 [ 816.919478][T18615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.919513][T18615] vfs_read+0x1e4/0xb40 [ 816.919542][T18615] ? __pfx_vfs_read+0x10/0x10 [ 816.919578][T18615] ? __fget_files+0x215/0x3d0 [ 816.919607][T18615] ? __fget_files+0x21f/0x3d0 [ 816.919638][T18615] ksys_read+0x12a/0x250 [ 816.919661][T18615] ? __pfx_ksys_read+0x10/0x10 [ 816.919694][T18615] do_syscall_64+0x115/0x840 [ 816.919725][T18615] ? clear_bhb_loop+0x40/0x90 [ 816.919757][T18615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.919783][T18615] RIP: 0033:0x7f3d4a55e7ce [ 816.919805][T18615] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 816.919829][T18615] RSP: 002b:00007f3d48771fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 816.919853][T18615] RAX: ffffffffffffffda RBX: 00007f3d487726c0 RCX: 00007f3d4a55e7ce [ 816.919871][T18615] RDX: 000000000000000f RSI: 00007f3d487720a0 RDI: 0000000000000004 [ 816.919886][T18615] RBP: 00007f3d48772090 R08: 0000000000000000 R09: 0000000000000000 [ 816.919902][T18615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.919916][T18615] R13: 00007f3d4a8263f8 R14: 00007f3d4a826360 R15: 00007ffcba5b1808 [ 816.919952][T18615] [ 834.772097][T18923] FAULT_INJECTION: forcing a failure. [ 834.772097][T18923] name failslab, interval 1, probability 0, space 0, times 0 [ 834.787235][T18923] CPU: 1 UID: 0 PID: 18923 Comm: syz.3.1657 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.787276][T18923] Tainted: [L]=SOFTLOCKUP [ 834.787284][T18923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 834.787297][T18923] Call Trace: [ 834.787305][T18923] [ 834.787314][T18923] dump_stack_lvl+0x100/0x190 [ 834.787351][T18923] should_fail_ex.cold+0x5/0xa [ 834.787380][T18923] should_failslab+0xc2/0x120 [ 834.787411][T18923] __kmalloc_cache_noprof+0x91/0x6c0 [ 834.787436][T18923] ? rcu_is_watching+0x12/0xc0 [ 834.787465][T18923] ? __request_module+0x2b7/0x6a0 [ 834.787496][T18923] __request_module+0x2b7/0x6a0 [ 834.787526][T18923] ? __pfx___request_module+0x10/0x10 [ 834.787565][T18923] ? find_held_lock+0x2b/0x80 [ 834.787593][T18923] ? inet_create+0xa72/0x1060 [ 834.787732][T18923] inet_create+0xab1/0x1060 [ 834.787763][T18923] ? inet_create+0x94/0x1060 [ 834.787796][T18923] __sock_create+0x339/0x860 [ 834.787874][T18923] __sys_socket+0x14d/0x260 [ 834.787926][T18923] ? fput+0x79/0x100 [ 834.787953][T18923] ? __pfx___sys_socket+0x10/0x10 [ 834.787974][T18923] ? ksys_write+0x1ac/0x250 [ 834.787995][T18923] ? __pfx_ksys_write+0x10/0x10 [ 834.788022][T18923] __x64_sys_socket+0x72/0xb0 [ 834.788046][T18923] ? lockdep_hardirqs_on+0x78/0x100 [ 834.788075][T18923] do_syscall_64+0x115/0x840 [ 834.788103][T18923] ? clear_bhb_loop+0x40/0x90 [ 834.788132][T18923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.788154][T18923] RIP: 0033:0x7f169539df99 [ 834.788175][T18923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.788197][T18923] RSP: 002b:00007f169619c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 834.788221][T18923] RAX: ffffffffffffffda RBX: 00007f1695626360 RCX: 00007f169539df99 [ 834.788238][T18923] RDX: 00000000000000fe RSI: 0000000000000001 RDI: 0000000000000002 [ 834.788253][T18923] RBP: 00007f169619c090 R08: 0000000000000000 R09: 0000000000000000 [ 834.788269][T18923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.788283][T18923] R13: 00007f16956263f8 R14: 00007f1695626360 R15: 00007ffdd04b6588 [ 834.788318][T18923] [ 840.065116][T19014] can: request_module (can-proto-3) failed. [ 851.758620][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 862.445515][T19357] FAULT_INJECTION: forcing a failure. [ 862.445515][T19357] name failslab, interval 1, probability 0, space 0, times 0 [ 862.465298][T19357] CPU: 1 UID: 0 PID: 19357 Comm: syz.1.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.465347][T19357] Tainted: [L]=SOFTLOCKUP [ 862.465357][T19357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.465375][T19357] Call Trace: [ 862.465385][T19357] [ 862.465396][T19357] dump_stack_lvl+0x100/0x190 [ 862.465440][T19357] should_fail_ex.cold+0x5/0xa [ 862.465476][T19357] should_failslab+0xc2/0x120 [ 862.465519][T19357] __kmalloc_cache_noprof+0x91/0x6c0 [ 862.465548][T19357] ? kasan_save_track+0x14/0x30 [ 862.465582][T19357] ? wakeup_source_device_create+0x46/0x2e0 [ 862.465720][T19357] wakeup_source_device_create+0x46/0x2e0 [ 862.465753][T19357] wakeup_source_sysfs_add+0x1c/0x90 [ 862.465781][T19357] wakeup_source_register+0x154/0x3e0 [ 862.465852][T19357] ep_create_wakeup_source+0x1df/0x2e0 [ 862.465892][T19357] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 862.465931][T19357] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 862.465973][T19357] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 862.466016][T19357] do_epoll_ctl_file+0x1e26/0x36e0 [ 862.466063][T19357] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 862.466103][T19357] ? __fget_files+0x215/0x3d0 [ 862.466137][T19357] ? __fget_files+0x21f/0x3d0 [ 862.466171][T19357] ? do_epoll_ctl+0xfd/0x1a0 [ 862.466201][T19357] do_epoll_ctl+0xfd/0x1a0 [ 862.466236][T19357] ? __pfx_do_epoll_ctl+0x10/0x10 [ 862.466278][T19357] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 862.466311][T19357] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 862.466355][T19357] do_syscall_64+0x115/0x840 [ 862.466389][T19357] ? clear_bhb_loop+0x40/0x90 [ 862.466424][T19357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.466453][T19357] RIP: 0033:0x7f7955d9df99 [ 862.466477][T19357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.466503][T19357] RSP: 002b:00007f7953ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 862.466531][T19357] RAX: ffffffffffffffda RBX: 00007f7956025fa0 RCX: 00007f7955d9df99 [ 862.466551][T19357] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 862.466566][T19357] RBP: 00007f7955e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 862.466582][T19357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.466598][T19357] R13: 00007f7956026038 R14: 00007f7956025fa0 R15: 00007ffecb005fd8 [ 862.466632][T19357] [ 862.734785][T19366] FAULT_INJECTION: forcing a failure. [ 862.734785][T19366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.734852][T19366] CPU: 0 UID: 0 PID: 19366 Comm: syz.0.1713 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.734889][T19366] Tainted: [L]=SOFTLOCKUP [ 862.734898][T19366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.734912][T19366] Call Trace: [ 862.734921][T19366] [ 862.734931][T19366] dump_stack_lvl+0x100/0x190 [ 862.734976][T19366] should_fail_ex.cold+0x5/0xa [ 862.735005][T19366] _copy_to_user+0x32/0xd0 [ 862.735048][T19366] simple_read_from_buffer+0xcb/0x170 [ 862.735096][T19366] proc_fail_nth_read+0x1af/0x230 [ 862.735132][T19366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.735168][T19366] ? rw_verify_area+0xce/0x6d0 [ 862.735204][T19366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.735238][T19366] vfs_read+0x1e4/0xb40 [ 862.735268][T19366] ? __pfx_vfs_read+0x10/0x10 [ 862.735306][T19366] ? __fget_files+0x215/0x3d0 [ 862.735336][T19366] ? __fget_files+0x21f/0x3d0 [ 862.735371][T19366] ksys_read+0x12a/0x250 [ 862.735394][T19366] ? __pfx_ksys_read+0x10/0x10 [ 862.735427][T19366] do_syscall_64+0x115/0x840 [ 862.735458][T19366] ? clear_bhb_loop+0x40/0x90 [ 862.735489][T19366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.735516][T19366] RIP: 0033:0x7f6f88f5e7ce [ 862.735537][T19366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 862.735560][T19366] RSP: 002b:00007f6f89e3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.735585][T19366] RAX: ffffffffffffffda RBX: 00007f6f89e3b6c0 RCX: 00007f6f88f5e7ce [ 862.735602][T19366] RDX: 000000000000000f RSI: 00007f6f89e3b0a0 RDI: 0000000000000006 [ 862.735617][T19366] RBP: 00007f6f89e3b090 R08: 0000000000000000 R09: 0000000000000000 [ 862.735632][T19366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.735647][T19366] R13: 00007f6f892263f8 R14: 00007f6f89226360 R15: 00007ffce17fce98 [ 862.735683][T19366] [ 870.144361][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.151531][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.461498][T19514] FAULT_INJECTION: forcing a failure. [ 872.461498][T19514] name failslab, interval 1, probability 0, space 0, times 0 [ 872.498831][T19514] CPU: 0 UID: 0 PID: 19514 Comm: syz.3.1737 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.498879][T19514] Tainted: [L]=SOFTLOCKUP [ 872.498889][T19514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.498906][T19514] Call Trace: [ 872.498915][T19514] [ 872.498926][T19514] dump_stack_lvl+0x100/0x190 [ 872.498972][T19514] should_fail_ex.cold+0x5/0xa [ 872.499005][T19514] should_failslab+0xc2/0x120 [ 872.499043][T19514] kmem_cache_alloc_noprof+0x91/0x6a0 [ 872.499078][T19514] ? do_getname+0x35/0x390 [ 872.499115][T19514] do_getname+0x35/0x390 [ 872.499146][T19514] do_sys_openat2+0xc7/0x1e0 [ 872.499176][T19514] ? __pfx_do_sys_openat2+0x10/0x10 [ 872.499204][T19514] ? __pfx_get_nodes+0x10/0x10 [ 872.499242][T19514] __x64_sys_openat+0x12d/0x210 [ 872.499271][T19514] ? __pfx___x64_sys_openat+0x10/0x10 [ 872.499311][T19514] do_syscall_64+0x115/0x840 [ 872.499340][T19514] ? clear_bhb_loop+0x40/0x90 [ 872.499371][T19514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.499396][T19514] RIP: 0033:0x7f169539df99 [ 872.499419][T19514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.499444][T19514] RSP: 002b:00007f1696220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 872.499473][T19514] RAX: ffffffffffffffda RBX: 00007f1695625fa0 RCX: 00007f169539df99 [ 872.499497][T19514] RDX: 0000000000022000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 872.499514][T19514] RBP: 00007f1695434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 872.499532][T19514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.499548][T19514] R13: 00007f1695626038 R14: 00007f1695625fa0 R15: 00007ffdd04b6588 [ 872.499584][T19514] [ 873.084014][T19514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 873.102379][T19514] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 873.237694][T19514] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 873.298250][T19514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 873.319726][T19514] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 873.353634][T19514] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 873.413066][T19514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 873.439795][T19514] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 873.481922][T19514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 873.491800][T19514] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 875.098335][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 875.338453][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 875.418569][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 875.500041][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 877.179105][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 877.418332][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 877.498294][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 877.578350][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 879.258362][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 879.498718][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 886.664798][T19735] FAULT_INJECTION: forcing a failure. [ 886.664798][T19735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.727823][T19735] CPU: 0 UID: 0 PID: 19735 Comm: syz.2.1764 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.727854][T19735] Tainted: [L]=SOFTLOCKUP [ 886.727860][T19735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 886.727870][T19735] Call Trace: [ 886.727877][T19735] [ 886.727884][T19735] dump_stack_lvl+0x100/0x190 [ 886.727912][T19735] should_fail_ex.cold+0x5/0xa [ 886.727932][T19735] strncpy_from_user+0x3b/0x2d0 [ 886.728059][T19735] do_getname+0x78/0x390 [ 886.728082][T19735] do_sys_openat2+0xc7/0x1e0 [ 886.728110][T19735] ? __pfx_do_sys_openat2+0x10/0x10 [ 886.728142][T19735] ? __pfx_get_nodes+0x10/0x10 [ 886.728183][T19735] __x64_sys_openat+0x12d/0x210 [ 886.728217][T19735] ? __pfx___x64_sys_openat+0x10/0x10 [ 886.728258][T19735] do_syscall_64+0x115/0x840 [ 886.728291][T19735] ? clear_bhb_loop+0x40/0x90 [ 886.728326][T19735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.728353][T19735] RIP: 0033:0x7f3d4a59df99 [ 886.728375][T19735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.728403][T19735] RSP: 002b:00007f3d487f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.728429][T19735] RAX: ffffffffffffffda RBX: 00007f3d4a825fa0 RCX: 00007f3d4a59df99 [ 886.728447][T19735] RDX: 0000000000022000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 886.728463][T19735] RBP: 00007f3d4a634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 886.728476][T19735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.728491][T19735] R13: 00007f3d4a826038 R14: 00007f3d4a825fa0 R15: 00007ffcba5b1808 [ 886.728523][T19735] [ 887.366280][T19735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 887.385676][T19735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 887.393237][T19735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 887.399872][T19735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 889.418379][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 889.418928][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 889.426502][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 889.436698][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 901.301357][ T175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.486146][T15170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 901.495769][T15170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 901.507500][T15170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 901.521395][T15170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 901.538000][T15170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 901.740116][ T175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.045795][ T175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.220430][ T175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.581729][ T175] bridge_slave_1: left allmulticast mode [ 902.594637][ T175] bridge_slave_1: left promiscuous mode [ 902.594929][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.602102][ T175] bridge_slave_0: left allmulticast mode [ 902.602133][ T175] bridge_slave_0: left promiscuous mode [ 902.606599][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.948410][T20044] input: f as /devices/virtual/input/input5 [ 903.115424][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.129047][ T175] bond0 (unregistering): Released all slaves [ 903.578419][T19802] Bluetooth: hci0: command tx timeout [ 903.600780][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 903.883141][ T175] hsr_slave_0: left promiscuous mode [ 903.905743][ T175] hsr_slave_1: left promiscuous mode [ 903.924334][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.933591][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.946470][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.963354][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.011590][ T175] veth1_macvtap: left promiscuous mode [ 904.028313][ T175] veth0_macvtap: left promiscuous mode [ 904.056375][ T175] veth1_vlan: left promiscuous mode [ 904.074094][ T175] veth0_vlan: left promiscuous mode [ 904.423052][ T175] team0 (unregistering): Port device team_slave_1 removed [ 904.446438][ T175] team0 (unregistering): Port device team_slave_0 removed [ 904.663962][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 905.628676][T20025] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.636149][T20025] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.646519][T20025] bridge_slave_0: entered allmulticast mode [ 905.657814][T20025] bridge_slave_0: entered promiscuous mode [ 905.663947][T19802] Bluetooth: hci0: command tx timeout [ 905.684249][T20025] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.704470][T20025] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.712502][T20025] bridge_slave_1: entered allmulticast mode [ 905.720628][T20025] bridge_slave_1: entered promiscuous mode [ 905.785878][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 905.954767][T20025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.065491][T20025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.129278][T20025] team0: Port device team_slave_0 added [ 906.137141][T20025] team0: Port device team_slave_1 added [ 906.197373][T20025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.225808][T20025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.284269][T20025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.309791][T20025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.324699][T20025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.355728][T20025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.443314][T20025] hsr_slave_0: entered promiscuous mode [ 906.467513][T20025] hsr_slave_1: entered promiscuous mode [ 906.488904][T20025] debugfs: 'hsr0' already exists in 'hsr' [ 906.512325][T20025] Cannot create hsr debugfs directory [ 907.500101][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 907.738313][T19802] Bluetooth: hci0: command tx timeout [ 909.818841][T19802] Bluetooth: hci0: command tx timeout [ 910.214786][T20025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 910.247178][T20025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.269784][T20025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 910.285090][T20025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 910.304742][T20025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 910.339822][T20025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 910.352132][T20025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 910.374605][T20025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 910.863135][T20261] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 912.286572][T20025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.353564][T20025] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.414349][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.421628][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.498027][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.505415][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.673120][T20025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.814576][T20025] veth0_vlan: entered promiscuous mode [ 915.835799][T20025] veth1_vlan: entered promiscuous mode [ 917.246196][T20025] veth0_macvtap: entered promiscuous mode [ 917.384666][T20025] veth1_macvtap: entered promiscuous mode [ 917.524478][T20025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.555693][T20025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.604394][ T363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.632854][ T363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.664881][ T363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.679504][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.014521][ T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.032367][ T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.117353][ T363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.138691][ T363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.336467][T20433] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 927.939575][T20596] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 927.948640][T20596] pci 0000:00:01.3: PCI INT A: no GSI [ 931.583495][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.592324][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 966.276606][T21321] BUG: unable to handle page fault for address: ffffc900188fffe8 [ 966.284398][T21321] #PF: supervisor write access in kernel mode [ 966.290512][T21321] #PF: error_code(0x0002) - not-present page [ 966.296512][T21321] PGD 13fe60067 P4D 13fe60067 PUD 1cafa067 PMD 5a250067 PTE 0 [ 966.304082][T21321] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 966.309501][T21321] CPU: 0 UID: 0 PID: 21321 Comm: syz.0.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.320479][T21321] Tainted: [L]=SOFTLOCKUP [ 966.324818][T21321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 966.334896][T21321] RIP: 0010:write_comp_data+0x75/0x90 [ 966.340329][T21321] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 42 [ 966.359998][T21321] RSP: 0018:ffffc9000766fe78 EFLAGS: 00050257 [ 966.366184][T21321] RAX: ffffc90018900000 RBX: 0000000000000000 RCX: ffffffff82458885 [ 966.374186][T21321] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 966.382256][T21321] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 966.390255][T21321] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 966.398254][T21321] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 966.406264][T21321] FS: 00007f13e86956c0(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 966.415231][T21321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.421863][T21321] CR2: ffffc900188fffe8 CR3: 0000000079a28000 CR4: 00000000003526f0 [ 966.429862][T21321] Call Trace: [ 966.433153][T21321] [ 966.436091][T21321] rseq_register+0x115/0x350 [ 966.440898][T21321] __x64_sys_rseq+0x1b8/0x2e0 [ 966.445641][T21321] do_syscall_64+0x115/0x840 [ 966.450312][T21321] ? clear_bhb_loop+0x40/0x90 [ 966.455118][T21321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.461054][T21321] RIP: 0033:0x7f13e779df99 [ 966.465579][T21321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.485347][T21321] RSP: 002b:00007f13e8695028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 966.493906][T21321] RAX: ffffffffffffffda RBX: 00007f13e7a26450 RCX: 00007f13e779df99 [ 966.501940][T21321] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 966.509934][T21321] RBP: 00007f13e7834ec4 R08: 0000000000000000 R09: 0000000000000000 [ 966.518018][T21321] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 966.526106][T21321] R13: 00007f13e7a264e8 R14: 00007f13e7a26450 R15: 00007fff505d6b78 [ 966.534119][T21321] [ 966.537187][T21321] Modules linked in: [ 966.541116][T21321] CR2: ffffc900188fffe8 [ 966.545297][T21321] ---[ end trace 0000000000000000 ]--- [ 966.550788][T21321] RIP: 0010:write_comp_data+0x75/0x90 [ 966.556204][T21321] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 42 [ 966.575846][T21321] RSP: 0018:ffffc9000766fe78 EFLAGS: 00050257 [ 966.581940][T21321] RAX: ffffc90018900000 RBX: 0000000000000000 RCX: ffffffff82458885 [ 966.590020][T21321] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 966.598019][T21321] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 966.606013][T21321] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 966.614014][T21321] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 966.622042][T21321] FS: 00007f13e86956c0(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 966.631123][T21321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.638121][T21321] CR2: ffffc900188fffe8 CR3: 0000000079a28000 CR4: 00000000003526f0 [ 966.646156][T21321] Kernel panic - not syncing: Fatal exception [ 966.652537][T21321] Kernel Offset: disabled [ 966.656960][T21321] Rebooting in 86400 seconds..