last executing test programs: 2.827266089s ago: executing program 0 (id=157): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x4010ae42, r0) 2.736771455s ago: executing program 1 (id=158): mmap$auto(0x0, 0x7, 0x1000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) 2.316145193s ago: executing program 0 (id=159): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)='Jg', 0x49}, 0x5, &(0x7f0000000180), 0x5}, 0x1}, 0x2, 0x3) 2.201986325s ago: executing program 0 (id=161): socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29a02, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2040, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, 0x0, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_single_file_operations_base(r1, 0x0, 0x0) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8) mq_timedsend$auto(r3, 0x0, 0x2000, 0x2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000100)={{0x521, 0x9, 0x7, 0x9, 0xffffffff}, 0x6, 0x3, "c5a22f1570cdb0fe850e4cfaaf82a9c429d59c884998450cc5a6b0e78c6fd6e0"}) msync$auto(0x1ffff002, 0x180000000000000, 0x0) getsockopt$auto_SO_PASSCRED(r2, 0x40, 0x10, &(0x7f0000000000)='#!@\\$\x00', &(0x7f0000000040)=0x6) mremap$auto(0x8000, 0x7, 0x1, 0x3, 0x20000000) msgsnd$auto(0x5, &(0x7f00000000c0)={0xce12479, 0xb2}, 0x5, 0x6) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 1.900270316s ago: executing program 3 (id=163): mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) setfsuid$auto(0x0) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.736019314s ago: executing program 2 (id=164): setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 1.583691612s ago: executing program 2 (id=165): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps_rollup\x00', 0x1a3000, 0x0) pread64$auto(r1, 0x0, 0x12a, 0x8) ioctl$auto(r0, 0x5403, r0) 1.397139446s ago: executing program 3 (id=166): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) getrandom$auto(0x0, 0x6000000, 0x3) 1.383738692s ago: executing program 1 (id=167): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x2, 0x0, 0x8) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) 1.283975161s ago: executing program 2 (id=168): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x20200, 0x15) 1.155312307s ago: executing program 1 (id=169): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x400caed0, 0x38) 928.078278ms ago: executing program 3 (id=170): mmap$auto(0x0, 0x4020004, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm0p/sub7/xrun_injection\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)='\x00', 0x1) write$auto(0x3, 0x0, 0x3f00) 838.927215ms ago: executing program 2 (id=171): r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r0, &(0x7f00000000c0)=""/4096, 0x1000) mknod$auto(&(0x7f0000000000)='./file0\x00', 0x73, 0x2) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf250200"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) 691.949901ms ago: executing program 3 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r1, 0x99bc9625bdb7e757, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x23) 665.317773ms ago: executing program 1 (id=173): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video24\x00', 0xa240, 0x0) ioctl$auto(r1, 0xc0585611, r1) 558.947631ms ago: executing program 3 (id=174): socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x41555856, 0xc, 0x2008, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$auto(r0, 0x890c, 0x1) 494.012997ms ago: executing program 0 (id=175): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) read$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x6) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)="5d3d4b8c60c2f201bbdecdf45a36e14cf63e57caea0fdf108d") close_range$auto(0x2, 0x8, 0x0) 493.570338ms ago: executing program 2 (id=176): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/accept_ra_rt_info_min_plen\x00', 0x40100, 0x0) read$auto(r0, 0x0, 0x1ff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101200, 0x0) write$auto(0x3, 0x0, 0xfdef) 426.625934ms ago: executing program 1 (id=177): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0xb1, 0xff, 0x0, @raw=0xfffff00c}}) 306.333716ms ago: executing program 0 (id=178): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) open(0x0, 0xa22c0, 0x155) 263.992991ms ago: executing program 3 (id=179): r0 = socket(0x2b, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x2b, 0x1, 0x1) recvmmsg$auto(r1, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80000001}, 0x1}, 0x3, 0x6, 0x0) 192.439967ms ago: executing program 1 (id=180): mmap$auto(0x0, 0x2020009, 0xbe, 0xeb1, 0xfffffffffffffffa, 0x2000000000008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x1) madvise$auto(0x0, 0x200007, 0x19) mlock$auto(0x5, 0xffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 115.354868ms ago: executing program 0 (id=181): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd10/queue/zone_append_max_bytes\x00', 0x80, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/4/smp_affinity_list\x00', 0x48041, 0x0) write$auto(0x3, 0x0, 0x296) 0s ago: executing program 2 (id=182): r0 = socket(0x18, 0xa, 0x1) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x4c, 0x0, 0x5, 0x7, 0x7, 0x5, 0x0, 0x7, 0x9, 0x4, 0x9, 0x8000, 0xff, 0xd8, 0x8, 0x800]}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. [ 74.400279][ T5815] cgroup: Unknown subsys name 'net' [ 74.508987][ T5815] cgroup: Unknown subsys name 'cpuset' [ 74.517843][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.950956][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.859913][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.902533][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.910172][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.917931][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.926420][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.935314][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.943013][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.954319][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.962650][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.965000][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.970580][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.985510][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.993598][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.001574][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.003741][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.017069][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.025132][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.038580][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.048711][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.057746][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.547550][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 78.635507][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.669794][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 78.692426][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 78.871093][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.880097][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.888145][ T5824] bridge_slave_0: entered allmulticast mode [ 78.897031][ T5824] bridge_slave_0: entered promiscuous mode [ 78.921999][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.930392][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.938944][ T5833] bridge_slave_0: entered allmulticast mode [ 78.946934][ T5833] bridge_slave_0: entered promiscuous mode [ 78.954409][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.962005][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.969323][ T5824] bridge_slave_1: entered allmulticast mode [ 78.976354][ T5824] bridge_slave_1: entered promiscuous mode [ 78.993418][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.000706][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.008201][ T5828] bridge_slave_0: entered allmulticast mode [ 79.015683][ T5828] bridge_slave_0: entered promiscuous mode [ 79.022968][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.030209][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.037547][ T5833] bridge_slave_1: entered allmulticast mode [ 79.044414][ T5833] bridge_slave_1: entered promiscuous mode [ 79.084662][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.091808][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.100800][ T5828] bridge_slave_1: entered allmulticast mode [ 79.108453][ T5828] bridge_slave_1: entered promiscuous mode [ 79.141895][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.151736][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.159600][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.167070][ T5829] bridge_slave_0: entered allmulticast mode [ 79.173932][ T5829] bridge_slave_0: entered promiscuous mode [ 79.181740][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.189421][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.196694][ T5829] bridge_slave_1: entered allmulticast mode [ 79.204208][ T5829] bridge_slave_1: entered promiscuous mode [ 79.225799][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.248524][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.270825][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.284467][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.332487][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.357157][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.370526][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.404374][ T5824] team0: Port device team_slave_0 added [ 79.425171][ T5828] team0: Port device team_slave_0 added [ 79.445009][ T5824] team0: Port device team_slave_1 added [ 79.464312][ T5828] team0: Port device team_slave_1 added [ 79.475754][ T5833] team0: Port device team_slave_0 added [ 79.493628][ T5829] team0: Port device team_slave_0 added [ 79.522502][ T5833] team0: Port device team_slave_1 added [ 79.541968][ T5829] team0: Port device team_slave_1 added [ 79.571306][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.578390][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.604380][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.642899][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.649922][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.676322][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.700114][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.707682][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.734218][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.748062][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.755120][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.781698][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.793956][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.801555][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.827954][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.839489][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.847462][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.873522][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.892103][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.899240][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.925346][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.951710][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.958799][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.985246][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.025417][ T5832] Bluetooth: hci0: command tx timeout [ 80.075309][ T5828] hsr_slave_0: entered promiscuous mode [ 80.081584][ T5828] hsr_slave_1: entered promiscuous mode [ 80.104910][ T5832] Bluetooth: hci3: command tx timeout [ 80.110568][ T5832] Bluetooth: hci1: command tx timeout [ 80.116870][ T5827] Bluetooth: hci2: command tx timeout [ 80.143964][ T5829] hsr_slave_0: entered promiscuous mode [ 80.150541][ T5829] hsr_slave_1: entered promiscuous mode [ 80.157479][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.165444][ T5829] Cannot create hsr debugfs directory [ 80.176895][ T5833] hsr_slave_0: entered promiscuous mode [ 80.183071][ T5833] hsr_slave_1: entered promiscuous mode [ 80.189564][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.197260][ T5833] Cannot create hsr debugfs directory [ 80.208005][ T5824] hsr_slave_0: entered promiscuous mode [ 80.214446][ T5824] hsr_slave_1: entered promiscuous mode [ 80.221071][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.228739][ T5824] Cannot create hsr debugfs directory [ 80.683257][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.697734][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.717775][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.744389][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.783555][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.809550][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.820475][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.840677][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.900049][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.925440][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.936488][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.951650][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.052938][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.066581][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.096191][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.105652][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.116946][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.159421][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.198551][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.205753][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.237072][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.268492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.275684][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.311259][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.349042][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.356236][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.400125][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.416916][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.424087][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.531719][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.610545][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.636806][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.643989][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.663512][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.702042][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.709261][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.754283][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.793399][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.800559][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.849071][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.856350][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.908425][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.047142][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.104753][ T5832] Bluetooth: hci0: command tx timeout [ 82.123858][ T5828] veth0_vlan: entered promiscuous mode [ 82.185715][ T5832] Bluetooth: hci1: command tx timeout [ 82.191186][ T5832] Bluetooth: hci2: command tx timeout [ 82.193801][ T5828] veth1_vlan: entered promiscuous mode [ 82.196967][ T5827] Bluetooth: hci3: command tx timeout [ 82.319954][ T5829] veth0_vlan: entered promiscuous mode [ 82.397659][ T5828] veth0_macvtap: entered promiscuous mode [ 82.411322][ T5829] veth1_vlan: entered promiscuous mode [ 82.423860][ T5828] veth1_macvtap: entered promiscuous mode [ 82.452379][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.510953][ T5829] veth0_macvtap: entered promiscuous mode [ 82.521581][ T5829] veth1_macvtap: entered promiscuous mode [ 82.533921][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.548519][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.582231][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.608980][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.618548][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.627893][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.637197][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.647859][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.659442][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.671471][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.704467][ T5824] veth0_vlan: entered promiscuous mode [ 82.710980][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.722488][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.733533][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.747182][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.756884][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.765707][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.774407][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.802614][ T5824] veth1_vlan: entered promiscuous mode [ 82.887952][ T5833] veth0_vlan: entered promiscuous mode [ 82.933156][ T5824] veth0_macvtap: entered promiscuous mode [ 82.960249][ T5824] veth1_macvtap: entered promiscuous mode [ 82.972074][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.981183][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.015529][ T5833] veth1_vlan: entered promiscuous mode [ 83.023624][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.023977][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.032000][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.042352][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.042367][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.070143][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.081129][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.119392][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.130244][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.140469][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.151867][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.166426][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.201317][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.211156][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.220385][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.229755][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.249165][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.256250][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.265047][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.275372][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.343380][ T5833] veth0_macvtap: entered promiscuous mode [ 83.370893][ T5833] veth1_macvtap: entered promiscuous mode [ 83.373688][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.425036][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.450745][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.551312][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.567022][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.577507][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.593643][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.604306][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.635408][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.648562][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.674419][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.686092][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.703960][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.740031][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.752816][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.768014][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.779527][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.794343][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.813121][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.839480][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.863460][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875067][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.884850][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.163354][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.185518][ T5827] Bluetooth: hci0: command tx timeout [ 84.197070][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.265075][ T5827] Bluetooth: hci3: command tx timeout [ 84.267502][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.277263][ T5832] Bluetooth: hci1: command tx timeout [ 84.278393][ T5838] Bluetooth: hci2: command tx timeout [ 84.302384][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.517457][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11'. [ 84.626073][ T5911] Zero length message leads to an empty skb [ 85.132578][ T5933] netlink: 'syz.1.20': attribute type 11 has an invalid length. [ 86.091361][ T5966] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.268656][ T5838] Bluetooth: hci0: command tx timeout [ 86.347082][ T5838] Bluetooth: hci3: command tx timeout [ 86.347099][ T5827] Bluetooth: hci2: command tx timeout [ 86.347133][ T5838] Bluetooth: hci1: command tx timeout [ 86.445284][ T5979] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.827486][ T9] cfg80211: failed to load regulatory.db [ 88.370903][ T6038] ovs_: entered promiscuous mode [ 89.493762][ T6077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'. [ 89.619269][ T6083] block2mtd: illegal erase size [ 90.392751][ T5838] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 90.392787][ T5838] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 90.407791][ T5838] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 90.407847][ T5838] Bluetooth: hci3: adv larger than maximum supported [ 90.415121][ T5838] Bluetooth: hci3: Malformed LE Event: 0x0d [ 91.100276][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.109701][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 91.506307][ T6150] syz.1.114 uses obsolete (PF_INET,SOCK_PACKET) [ 92.243715][ T6177] netlink: 198 bytes leftover after parsing attributes in process `syz.3.127'. [ 92.520886][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 94.339412][ T6247] FAULT_INJECTION: forcing a failure. [ 94.339412][ T6247] name failslab, interval 1, probability 0, space 0, times 1 [ 94.391816][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: syz.3.155 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 94.391853][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 94.391871][ T6247] Call Trace: [ 94.391879][ T6247] [ 94.391892][ T6247] dump_stack_lvl+0x16c/0x1f0 [ 94.391937][ T6247] should_fail_ex+0x512/0x640 [ 94.391968][ T6247] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 94.392011][ T6247] should_failslab+0xc2/0x120 [ 94.392040][ T6247] __kmalloc_cache_noprof+0x6a/0x3e0 [ 94.392077][ T6247] ? lockdep_init_map_type+0x5c/0x280 [ 94.392107][ T6247] ? rfkill_fop_open+0x1b6/0x750 [ 94.392137][ T6247] ? __pfx_rfkill_fop_open+0x10/0x10 [ 94.392161][ T6247] rfkill_fop_open+0x1b6/0x750 [ 94.392192][ T6247] ? __pfx_rfkill_fop_open+0x10/0x10 [ 94.392219][ T6247] misc_open+0x35a/0x420 [ 94.392255][ T6247] ? __pfx_misc_open+0x10/0x10 [ 94.392288][ T6247] chrdev_open+0x231/0x6a0 [ 94.392312][ T6247] ? __pfx_apparmor_file_open+0x10/0x10 [ 94.392340][ T6247] ? __pfx_chrdev_open+0x10/0x10 [ 94.392368][ T6247] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 94.392408][ T6247] do_dentry_open+0x741/0x1c10 [ 94.392435][ T6247] ? __pfx_chrdev_open+0x10/0x10 [ 94.392467][ T6247] vfs_open+0x82/0x3f0 [ 94.392502][ T6247] path_openat+0x1e5e/0x2d40 [ 94.392540][ T6247] ? __pfx_path_openat+0x10/0x10 [ 94.392578][ T6247] do_filp_open+0x20b/0x470 [ 94.392602][ T6247] ? __pfx_do_filp_open+0x10/0x10 [ 94.392650][ T6247] ? alloc_fd+0x471/0x7d0 [ 94.392695][ T6247] do_sys_openat2+0x11b/0x1d0 [ 94.392725][ T6247] ? __pfx_do_sys_openat2+0x10/0x10 [ 94.392771][ T6247] __x64_sys_openat+0x174/0x210 [ 94.392802][ T6247] ? __pfx___x64_sys_openat+0x10/0x10 [ 94.392839][ T6247] ? rcu_is_watching+0x12/0xc0 [ 94.392872][ T6247] do_syscall_64+0xcd/0x230 [ 94.392906][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.392931][ T6247] RIP: 0033:0x7efe4438e969 [ 94.392951][ T6247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.392974][ T6247] RSP: 002b:00007efe4523f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 94.392997][ T6247] RAX: ffffffffffffffda RBX: 00007efe445b5fa0 RCX: 00007efe4438e969 [ 94.393014][ T6247] RDX: 0000000000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 94.393030][ T6247] RBP: 00007efe44410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 94.393044][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.393059][ T6247] R13: 0000000000000000 R14: 00007efe445b5fa0 R15: 00007ffe3a1a3258 [ 94.393094][ T6247] [ 94.888867][ T6249] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.897841][ T6249] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.995185][ T6249] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.047047][ T6249] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.053055][ T6249] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.095004][ T6249] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.236345][ T6249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.242357][ T6249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.348751][ T6249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.388022][ T6249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.400764][ T6249] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.423145][ T6249] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.832521][ T6275] FAULT_INJECTION: forcing a failure. [ 95.832521][ T6275] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.851539][ T6275] CPU: 0 UID: 0 PID: 6275 Comm: syz.3.166 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 95.851572][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 95.851586][ T6275] Call Trace: [ 95.851594][ T6275] [ 95.851603][ T6275] dump_stack_lvl+0x16c/0x1f0 [ 95.851642][ T6275] should_fail_ex+0x512/0x640 [ 95.851680][ T6275] _copy_to_iter+0x2a4/0x15a0 [ 95.851719][ T6275] ? chacha_block_generic+0x189/0x260 [ 95.851752][ T6275] ? __pfx__copy_to_iter+0x10/0x10 [ 95.851791][ T6275] ? __pfx___might_resched+0x10/0x10 [ 95.851815][ T6275] ? crng_make_state+0x48e/0x6d0 [ 95.851850][ T6275] get_random_bytes_user+0x17f/0x3c0 [ 95.851887][ T6275] ? __pfx_get_random_bytes_user+0x10/0x10 [ 95.851916][ T6275] ? do_writev+0x218/0x330 [ 95.851958][ T6275] ? do_futex+0x122/0x350 [ 95.851991][ T6275] ? import_ubuf+0x1b6/0x220 [ 95.852026][ T6275] __x64_sys_getrandom+0x183/0x290 [ 95.852060][ T6275] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 95.852094][ T6275] ? xfd_validate_state+0x5d/0x180 [ 95.852132][ T6275] ? rcu_is_watching+0x12/0xc0 [ 95.852174][ T6275] do_syscall_64+0xcd/0x230 [ 95.852212][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.852236][ T6275] RIP: 0033:0x7efe4438e969 [ 95.852256][ T6275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.852278][ T6275] RSP: 002b:00007efe4523f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 95.852302][ T6275] RAX: ffffffffffffffda RBX: 00007efe445b5fa0 RCX: 00007efe4438e969 [ 95.852318][ T6275] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 95.852332][ T6275] RBP: 00007efe44410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 95.852347][ T6275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.852361][ T6275] R13: 0000000000000000 R14: 00007efe445b5fa0 R15: 00007ffe3a1a3258 [ 95.852394][ T6275] [ 96.596208][ T6291] binder: 6289:6291 ioctl 4030582b 6 returned -22 [ 96.904707][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.969915][ T5824] ------------[ cut here ]------------ [ 96.975481][ T5824] ODEBUG: free active (active state 0) object: ffff888066331248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 97.008861][ T5824] WARNING: CPU: 0 PID: 5824 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 97.018468][ T5824] Modules linked in: [ 97.022606][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 97.034018][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 97.044920][ T5824] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 97.050786][ T5824] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 00 7d f4 8b 4c 89 e6 48 c7 c7 80 71 f4 8b e8 6f 87 a7 fc 90 <0f> 0b 90 90 58 83 05 26 4c b2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 97.077860][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.087536][ T5824] RSP: 0018:ffffc9000407f988 EFLAGS: 00010286 [ 97.093644][ T5824] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a8f78 [ 97.101716][ T5824] RDX: ffff88807a7fda00 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 97.109817][ T5824] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 97.117914][ T5824] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf47820 [ 97.125994][ T5824] R13: ffffffff8b8fc5c0 R14: ffffffff8a75ec10 R15: ffffc9000407fa88 [ 97.134844][ T5824] FS: 0000000000000000(0000) GS:ffff8881249ec000(0000) knlGS:0000000000000000 [ 97.144608][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.151232][ T5824] CR2: 00007f993f4c63b0 CR3: 000000000e180000 CR4: 00000000003526f0 [ 97.159417][ T5824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.167494][ T5824] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.175590][ T5824] Call Trace: [ 97.178895][ T5824] [ 97.181844][ T5824] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 97.187392][ T5824] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 97.193241][ T5824] debug_check_no_obj_freed+0x4b7/0x600 [ 97.198931][ T5824] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 97.205101][ T5824] ? rcu_is_watching+0x12/0xc0 [ 97.209903][ T5824] ? kmem_cache_free+0x2d4/0x4d0 [ 97.214953][ T5824] kfree+0x291/0x4d0 [ 97.218875][ T5824] ? hci_release_dev+0x4d8/0x600 [ 97.223851][ T5824] hci_release_dev+0x4d8/0x600 [ 97.228760][ T5824] ? __pfx_hci_release_dev+0x10/0x10 [ 97.234962][ T5824] ? rcu_is_watching+0x12/0xc0 [ 97.239767][ T5824] ? kfree+0x252/0x4d0 [ 97.243858][ T5824] bt_host_release+0x6a/0xb0 [ 97.249250][ T5824] ? __pfx_bt_host_release+0x10/0x10 [ 97.254640][ T5824] device_release+0xa1/0x240 [ 97.259270][ T5824] kobject_put+0x1e4/0x5a0 [ 97.263714][ T5824] ? __pfx_vhci_release+0x10/0x10 [ 97.268841][ T5824] put_device+0x1f/0x30 [ 97.273034][ T5824] vhci_release+0x81/0xf0 [ 97.277982][ T5824] __fput+0x3ff/0xb70 [ 97.282009][ T5824] task_work_run+0x14d/0x240 [ 97.288750][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 97.293912][ T5824] ? switch_task_namespaces+0xeb/0x100 [ 97.300003][ T5824] do_exit+0xafb/0x2c30 [ 97.304771][ T5824] ? do_raw_spin_lock+0x12c/0x2b0 [ 97.309894][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.316953][ T5824] ? __pfx_do_exit+0x10/0x10 [ 97.321591][ T5824] ? rcu_is_watching+0x12/0xc0 [ 97.326729][ T5824] do_group_exit+0xd3/0x2a0 [ 97.332379][ T5824] __x64_sys_exit_group+0x3e/0x50 [ 97.338505][ T5824] x64_sys_call+0x1530/0x1730 [ 97.343232][ T5824] do_syscall_64+0xcd/0x230 [ 97.348151][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.354081][ T5824] RIP: 0033:0x7f5a7ed8e969 [ 97.358867][ T5824] Code: Unable to access opcode bytes at 0x7f5a7ed8e93f. [ 97.366265][ T5824] RSP: 002b:00007ffef78796e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 97.375258][ T5824] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5a7ed8e969 [ 97.383264][ T5824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 97.391787][ T5824] RBP: 00007f5a7ee12287 R08: 00007ffef7877486 R09: 00000000000927c0 [ 97.400170][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 97.408520][ T5824] R13: 00000000000927c0 R14: 0000000000017a3c R15: 00007ffef78798a0 [ 97.416870][ T5824] [ 97.419912][ T5824] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.427209][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 97.437638][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 97.447711][ T5824] Call Trace: [ 97.451017][ T5824] [ 97.453951][ T5824] dump_stack_lvl+0x3d/0x1f0 [ 97.458576][ T5824] panic+0x71c/0x800 [ 97.462490][ T5824] ? __pfx_panic+0x10/0x10 [ 97.466917][ T5824] ? show_trace_log_lvl+0x29b/0x3e0 [ 97.472156][ T5824] ? check_panic_on_warn+0x1f/0xb0 [ 97.477317][ T5824] ? debug_print_object+0x1a2/0x2b0 [ 97.482539][ T5824] check_panic_on_warn+0xab/0xb0 [ 97.487520][ T5824] __warn+0xf6/0x3c0 [ 97.491445][ T5824] ? debug_print_object+0x1a2/0x2b0 [ 97.496676][ T5824] report_bug+0x3c3/0x580 [ 97.501042][ T5824] ? debug_print_object+0x1a2/0x2b0 [ 97.506281][ T5824] handle_bug+0x184/0x210 [ 97.510640][ T5824] exc_invalid_op+0x17/0x50 [ 97.515171][ T5824] asm_exc_invalid_op+0x1a/0x20 [ 97.520036][ T5824] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 97.525860][ T5824] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 00 7d f4 8b 4c 89 e6 48 c7 c7 80 71 f4 8b e8 6f 87 a7 fc 90 <0f> 0b 90 90 58 83 05 26 4c b2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 97.545487][ T5824] RSP: 0018:ffffc9000407f988 EFLAGS: 00010286 [ 97.551606][ T5824] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a8f78 [ 97.559582][ T5824] RDX: ffff88807a7fda00 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 97.567564][ T5824] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 97.575537][ T5824] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf47820 [ 97.583526][ T5824] R13: ffffffff8b8fc5c0 R14: ffffffff8a75ec10 R15: ffffc9000407fa88 [ 97.591525][ T5824] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 97.597006][ T5824] ? __warn_printk+0x198/0x350 [ 97.601780][ T5824] ? __warn_printk+0x1a5/0x350 [ 97.606554][ T5824] ? debug_print_object+0x1a1/0x2b0 [ 97.611761][ T5824] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 97.617224][ T5824] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 97.623063][ T5824] debug_check_no_obj_freed+0x4b7/0x600 [ 97.628644][ T5824] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 97.634721][ T5824] ? rcu_is_watching+0x12/0xc0 [ 97.639495][ T5824] ? kmem_cache_free+0x2d4/0x4d0 [ 97.644444][ T5824] kfree+0x291/0x4d0 [ 97.648344][ T5824] ? hci_release_dev+0x4d8/0x600 [ 97.653290][ T5824] hci_release_dev+0x4d8/0x600 [ 97.658060][ T5824] ? __pfx_hci_release_dev+0x10/0x10 [ 97.663349][ T5824] ? rcu_is_watching+0x12/0xc0 [ 97.668111][ T5824] ? kfree+0x252/0x4d0 [ 97.672179][ T5824] bt_host_release+0x6a/0xb0 [ 97.676769][ T5824] ? __pfx_bt_host_release+0x10/0x10 [ 97.682055][ T5824] device_release+0xa1/0x240 [ 97.686655][ T5824] kobject_put+0x1e4/0x5a0 [ 97.691107][ T5824] ? __pfx_vhci_release+0x10/0x10 [ 97.696149][ T5824] put_device+0x1f/0x30 [ 97.700336][ T5824] vhci_release+0x81/0xf0 [ 97.704747][ T5824] __fput+0x3ff/0xb70 [ 97.708756][ T5824] task_work_run+0x14d/0x240 [ 97.713441][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 97.718610][ T5824] ? switch_task_namespaces+0xeb/0x100 [ 97.724105][ T5824] do_exit+0xafb/0x2c30 [ 97.728284][ T5824] ? do_raw_spin_lock+0x12c/0x2b0 [ 97.733329][ T5824] ? __pfx_do_exit+0x10/0x10 [ 97.737930][ T5824] ? rcu_is_watching+0x12/0xc0 [ 97.742849][ T5824] do_group_exit+0xd3/0x2a0 [ 97.747380][ T5824] __x64_sys_exit_group+0x3e/0x50 [ 97.752422][ T5824] x64_sys_call+0x1530/0x1730 [ 97.757110][ T5824] do_syscall_64+0xcd/0x230 [ 97.761640][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.767550][ T5824] RIP: 0033:0x7f5a7ed8e969 [ 97.771971][ T5824] Code: Unable to access opcode bytes at 0x7f5a7ed8e93f. [ 97.778985][ T5824] RSP: 002b:00007ffef78796e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 97.787408][ T5824] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5a7ed8e969 [ 97.795390][ T5824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 97.803369][ T5824] RBP: 00007f5a7ee12287 R08: 00007ffef7877486 R09: 00000000000927c0 [ 97.811346][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 97.819319][ T5824] R13: 00000000000927c0 R14: 0000000000017a3c R15: 00007ffef78798a0 [ 97.827313][ T5824] [ 97.830575][ T5824] Kernel Offset: disabled [ 97.834913][ T5824] Rebooting in 86400 seconds..