last executing test programs: 11.116731953s ago: executing program 3 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000240)=""/140, 0x8c) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x8, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r2, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4d") mmap$auto(0xc8, 0xe2, 0x0, 0xeb1, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x7) 10.945109194s ago: executing program 1 (id=812): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x202002, 0x0) sendfile$auto(r0, r0, 0x0, 0x20000001003) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) (async) unshare$auto(0x40000080) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) unshare$auto(0x40000080) (async) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/netdevsim0/locktime\x00', 0x88c42, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) (async) mmap$auto(0x0, 0x5, 0x5, 0xeb1, 0x401, 0x8000) (async, rerun: 32) rseq$auto(&(0x7f0000000340)={0x8, 0x5, 0x10000, 0x8, 0xb, 0x5aa2, "778421ddcc86abd70f96da8746af4aef72dbe819dfeb859f7ae75c4424af5e65af1e81ded516faed90f7c2a1290d12973e61c80329c8794c4f6bf935e247cc0dee361f14780710fc987702503402380b66a575509e11cbdc299d19df201885e037baca33a3a1d87159e35990e186e2c044d7e77b2524f2f17ce5"}, 0x4, 0x4d, 0x2) (async, rerun: 32) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r3, 0x4008af83, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) userfaultfd$auto(0x1) (async) pselect6$auto(0x4, &(0x7f0000000400)={[0x8, 0x3, 0x1, 0x5, 0x8001, 0x6, 0xac, 0xa, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x8000001000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = setfsuid$auto(0xee00) ioprio_set$auto(0x2, r4, 0x4b34) io_submit$auto(0x1010001, 0x1, &(0x7f0000000080)=&(0x7f0000000100)={0x20000005480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x488, 0x6, 0x0, 0xe, 0xffffffffffffffff}) (async) r6 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) close_range$auto(r5, r6, 0xdf9b) unshare$auto(0x40000080) 9.584394442s ago: executing program 2 (id=814): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa802, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r1, 0x0, 0x4000001) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') write$auto(r1, 0x0, 0x1) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4") ioctl$auto_BCH_IOCTL_READ_SUPER(0xffffffffffffffff, 0x4020bc0c, &(0x7f0000000140)={0x7754, 0x0, 0x401, 0x6, 0xe2}) readv$auto(0x3, 0x0, 0x41e) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) read$auto(0x3, 0x0, 0x8080) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 9.318468728s ago: executing program 0 (id=815): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200c03, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) sendmmsg$auto(r5, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000040)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa5a405cea5a0", 0x6}, 0xfffffffffffffff7, 0x0, 0x6, 0x8001}, 0x800}, 0x8, 0x102) ioctl$auto(0x3, 0xae41, r3) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r2, 0xe, 0x0, 0x7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="2538a948b1ac59e46c81549f2cafa160c8b559d82e5e56d0f26cf8139c0dd454fbd27335a526e4eab0b485c0a15a6c4fb99a2220a94de1497e27c36dcbed2b7d3d6a47a907947a327e1de954498c94376cb82fb853", @ANYRES64=r1, @ANYRES32=r3, @ANYRESHEX=r5, @ANYBLOB="050b0e690b843374d299ae7bbeb411f4b5928dc4ba10cfd229c0c1ef0929536d3a26af4854bed13977db9b5cad4d96a252d8e395835f3236b2b4f83eda662642319fab4bda174915ab18ef563c", @ANYRES32=r0, @ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 9.017395916s ago: executing program 2 (id=816): socket(0xa, 0x2, 0x73) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x151401, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) pread64$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x81) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) mmap$auto(0x7b, 0x20009, 0x20004000000000de, 0x3ff, r1, 0x3) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000336bd7000fedbdf250200"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) fgetxattr$auto(r0, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', &(0x7f00000001c0)="5f2253e57ccfcf2dd0f679a8ca332696a292c207262a13d5344583d2dde0cbd5c71b7fd7a242d40bcbcae0e58847", 0x6) socket(0xa, 0x1, 0x84) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) socket(0x11, 0x80003, 0x300) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r2, 0x8004b709, &(0x7f0000000240)=0x1108) waitid$auto_P_PGID(0x2, r3, &(0x7f0000000680)={@_si_pad}, 0x7, &(0x7f00000003c0)={{0x0, 0xc}, {0xfffffffffffffff7, 0x80000001}, 0x9, 0x8000000000000000, 0x7, 0x800, 0x3, 0x6, 0x8000, 0xc, 0x6, 0xfe, 0x2, 0x1058000, 0x8, 0xfffffffffffffff5}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) 8.797722835s ago: executing program 1 (id=817): r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x2005, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x12941, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = setfsgid$auto(0xee01) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) msgctl$auto_IPC_STAT(0x82, 0x2, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) bpf$auto(0x9, 0x0, 0x9) unshare$auto(0x8000000) semget$auto(0x840, 0x6, 0x8000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x2}, 0x6) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x8000) 8.746554547s ago: executing program 3 (id=818): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit$auto(0x8, &(0x7f0000000280)={0x0, 0x2}) pwrite64$auto(0xc8, &(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\b2[\x05\xbdn\x1d\x00\xeb]B\xa0\x99\xb0B\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a0\xeb\xbf\xcfwU&[\xde?\x81\x9a@\xb8h\xc0\x88_\xa0u\xa2\xddH\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xe, 0x10000) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x101, &(0x7f0000000180)={0x6, 0x4, 0x3, @raw=0x253f}, 0x6) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x8) unshare$auto(0x40000080) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x3) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.031834888s ago: executing program 2 (id=819): r0 = socket(0x21, 0x2, 0x20004) getsockopt$auto(r0, 0x11b, 0x1, 0x0, 0x0) mmap$auto(0xfffffffffffffff8, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000000), r1) mmap$auto(0x1, 0x400008, 0x5f, 0x9b75, 0xffffffffffffffff, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x143080, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="08000880"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) ioctl$auto(0xffffffffffffffff, 0x84204514, r2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0xfd) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000015}, 0x80) madvise$auto(0x0, 0x2003f5, 0x14) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x84100, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file0\x00', 0x5) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x107040, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 6.906018108s ago: executing program 0 (id=820): r0 = socket(0x1d, 0x80000, 0x1) fcntl$auto_F_GETOWN(r0, 0x9, 0xffffffff) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='0c', 0xc694, 0xb, 0x80005, @stream_id, 0x960, 0xc, 0x0}) pselect6$auto(0x2005, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x3ffff9, 0xa, 0x11, 0xdd, 0x0) unshare$auto(0x5) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000040), r0) set_mempolicy$auto(0x8004, 0x0, 0x800) get_mempolicy$auto(0x0, 0x0, 0x3fd, 0x0, 0x1) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x10) r2 = socket(0x27, 0x1, 0x1) setsockopt$auto(r2, 0x18c2, 0x6, 0x0, 0x10) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x12) bpf$auto(0x10001, 0x0, 0xa22) semget$auto(0x3, 0x9, 0x7ffe) socket(0x2, 0x5, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0xffffffffffffffff) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x48000) socket(0x2, 0x800, 0x8c4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x86, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x40080, 0x0) 6.804325411s ago: executing program 3 (id=821): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigsuspend$auto(0x0, 0x8) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200c03, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/bus/hid/drivers/petalynx/new_id\x00', 0x22081, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x9, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) sendmmsg$auto(r5, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000040)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa5a405cea5a0", 0x6}, 0xfffffffffffffff7, 0x0, 0x6, 0x8001}, 0x800}, 0x8, 0x102) ioctl$auto(0x3, 0xae41, r3) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r2, 0xe, 0x0, 0x7) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="2538a948b1ac59e46c81549f2cafa160c8b559d82e5e56d0f26cf8139c0dd454fbd27335a526e4eab0b485c0a15a6c4fb99a2220a94de1497e27c36dcbed2b7d3d6a47a907947a327e1de954498c94376cb82fb8536d15beca2979526106be45e82b1b81fd1c4120a6610d667dfb5c2fd9542964bd1e43915d1b16108c5fcd", @ANYRES64=r1, @ANYRES32=r3, @ANYRESHEX=r5, @ANYBLOB="050b0e690b843374d299ae7bbeb411f4b5928dc4ba10cfd229c0c1ef0929536d3a26af4854bed13977db9b5cad4d96a252d8e395835f3236b2b4f83eda662642319fab4bda174915ab18ef563c", @ANYRES32=r0, @ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 6.780926566s ago: executing program 1 (id=822): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) select$auto(0xd6ff, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x44, 0x1000, 0x10a, 0x800000000775, 0x3, 0xffffffffffff2e3d, 0x3, 0x5, 0x80, 0x5, 0x3, 0xd499, 0x3, 0xf47, 0x40000000]}, &(0x7f00000004c0)={0x4e3, 0x5239}) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x100, 0x4080000000, 0x4, 0xab1, r0, 0x80000001) socket(0x10, 0x2, 0x4) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80003, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x50400400}, 0xffffffffffffff60, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYBLOB="0f0029bd7000fedbdf0000000400"], 0x14}, 0x1, 0x0, 0x0, 0x854}, 0x801) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8024}, 0x2400c090) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x3e, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto_proc_tid_children_operations_internal(0xffffffffffffffff, &(0x7f00000005c0)=""/34, 0x22) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setreuid$auto(0x0, 0x20000000004) syz_clone3(&(0x7f0000000300)={0x193104480, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x0], 0x1, {r4}}, 0x58) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 5.035462564s ago: executing program 2 (id=823): r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x2005, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x12941, 0x0) unshare$auto(0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = setfsgid$auto(0xee01) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) msgctl$auto_IPC_STAT(0x82, 0x2, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) bpf$auto(0x9, 0x0, 0x9) unshare$auto(0x8000000) semget$auto(0x840, 0x6, 0x8000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000800)='\x00', &(0x7f0000000840)=0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x2}, 0x6) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x8000) 4.608618729s ago: executing program 0 (id=824): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xffff, 0xfffffff7fffffe01, 0x8051, 0x3, 0x0) 4.543926168s ago: executing program 1 (id=825): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1015a0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/28, 0x1c) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x6, 0xa, 0x0, &(0x7f0000000240)=0x20009) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chown$auto(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) io_uring_enter$auto(0x3, 0x0, 0x82400001, 0xb, 0x0, 0x18) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote_size\x00', 0x103a42, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x40) utimensat$auto(r3, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)={0x23, 0x3ffffffe}, 0x1000) r4 = setfsuid$auto(0xffffffffffffffff) getpriority$auto_PRIO_USER(0x2, r4) shmctl$auto_IPC_RMID(0x8, 0x0, &(0x7f00000003c0)={{0x3, r4, 0x0, 0x0, 0xffc0000, 0xfffffffb, 0x8001}, 0x804, 0x1, 0x3, 0x800, @raw=0x3, @inferred, 0x7, 0x0, &(0x7f0000000340)="ee92c01ce114c0131bb8796c690aa377be5ac0789dc47fe0d6e6d414d17eb42c13ad65a46edfd4ff97550200c40505062715f5bf3bfbf0b84df6a572285415b35e91510233946e8a25591051f93c3f12f63b00"/93, &(0x7f0000000440)="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"}) 4.465686632s ago: executing program 3 (id=826): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x309801, 0x0) write$auto(r0, &(0x7f0000000100)='/sys/kernel/config/target/dbroot\x00', 0x8000003) bind$auto(0xffffffffffffffff, 0x0, 0x69) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00e06d7e9498df1477074645807d0000", @ANYRES16=r3, @ANYBLOB="0b172cbd7000fddbdf25150000000800060002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x880) mmap$auto(0x2, 0x40009, 0xdf, 0x9b72, r1, 0x28000) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x200084, 0x72, 0x0, &(0x7f0000000000)=0x90008) r5 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r5, &(0x7f0000000640)='/sys/devices/virtual/bdi/43:352/stric\x06_limit\x00', 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) bind$auto(0x3, &(0x7f0000000240)=@l2={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x9fee651b8ed19f54}, 0x6a) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r6, 0x110, 0x2, 0x0, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) 4.4000763s ago: executing program 0 (id=827): mmap$auto(0x0, 0x2020009, 0x8, 0xeb1, 0xfffffffffffffffa, 0x0) r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x7) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x9) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto(r1, 0x40084d02, 0xffffffffffffffff) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)={0xfd, 0x4, 0xfffffffd, 0x2, &(0x7f00000000c0)="d16b4e081fdef5ff30449d598a9410139aa50eddc327a2d54603365aff444f306c4df129a91bab8881767372479606ae0c9553687a9aefff79dc5385d6b85d", 0x10006, 0x1, 0xffffffff, @stream_id=0x7, 0x2084c, 0x400, 0x0, [{0x5, 0x2, 0x4000c}, {0x100, 0x7, 0x40f640}]}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000540)='\x10\xb4\xd8\x8b\x1d\xfc&t\xa5h\x84\x8a-\x82\xb9\xcdk\x1a\x86s\xc1\x98\xe0E\x8e]\xb3\x16T\xf0e\xdb\x8a\xb5[\x91&\x996\x9au>\xa4\x16Ml\x15Vl\xa9\x0f\xe3\x8a\xe7\t\xddw\xf1L\x92\x9a|\a\xd0\xea\x90~\xabtoq\xcc\a\xfc\x13\xaa\xe3@Ae\xa4^?\x03,=V\xad\x98\xaf$\xb6\x9e\xe9\xe5\xd7Mr\xef\xb3b|\x12\xa1\xbe\x92}\xc3D\x8c\"\xbd:\x1f\xf3\xee%\xbb\xa4x\x04!\xe4\xe8\x01\xa3\x1a\x15B\xc6g\xcaws\xd2\x83\xe2\x82\\y\xac\x85?&\x01\xe7\xab\xceblS\x02\x1a1\xde\x82\x7f\x97\vp\x12\xa4\xca\xd1(\xbe#A\x87\xad]]\x87py\xcfi\xaeD!\x17\x95L\xd5a\n2\xd0\xf7\xf6\xaa\xb6W\xd5+\xf5#\xcagB^\xf4\x92j\xebDt\xad\xa8Y\x929\xaa\x88\"\x03];\xf5\x8f\x17\xcdM\xd2\x90\xd3\xf4$\xdb\r\xcf\xfd\x003\xb3\a\xbb\n\xf41\xed\xa6{\xc8\x96\x13\xd4~\xef\xa9\x1a\a3\xc9\xb3E\xady\xe1\xab\x110NO\x85\x86:\xa9W\xcd\xcd\x96\x8f1\x9a\xac\xdf\x00\xdd\x86\xc2B\x99:\xbd\xa0\x82\xdfO\x9f`\xde\xe8\t\xb6\xff\x0f\xc1\xa1\xce\xb58\x9a\xd9\x96\x89\x1a\x19\x82\x9dxM<+', 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x3ffffe, 0x100000000000007, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x11) ioctl$auto_PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000140)=0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x1}, 0x6a) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) timer_create$auto(0x4, 0x0, &(0x7f0000000280)=0x5) msgctl$auto_IPC_INFO(0xd, 0x3, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x3f) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000001240)=""/4096, 0x1000) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/irq/9/smp_affinity_list\x00', 0x22a984, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000280)={0x20000000000029, 0x1, 0x9}, 0x9, 0x4) landlock_restrict_self$auto(r2, 0xb) 3.06526778s ago: executing program 2 (id=828): mmap$auto(0x0, 0x40009, 0x40000000df, 0x800000000009b72, 0xffffffffffffffff, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0x3, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x4, 0x58dc, 0x101}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2d, 0x2, 0x0) setns(0xc9, 0x0) socket(0x1f, 0x3, 0x4) ioctl$auto(0x3, 0x800442d3, 0x91) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, &(0x7f0000000400)={0x7fffffff, 0x3}) r0 = socket(0x2, 0x3, 0x2) setsockopt$auto(r0, 0x0, 0x8, 0xfffffffffffffffc, 0x0) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, 0x0, 0x0, 0x1, 0x80, 0x3, 0x8}, 0xfffffff8, 0x1ff, 0x800, 0x4, @raw=0x3, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x0}) r2 = socket(0x1, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x8) r3 = setfsgid$auto(r1) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @multicast2}, 0x6a) connect$auto(0x3, 0x0, 0x51) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x3ff) 2.663457509s ago: executing program 3 (id=829): sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) (async) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x40000000, 0xffffffff, 0xa385e196) (async) unshare$auto(0x40000080) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x321242, 0x0) write$auto(r1, 0x0, 0x1000000007e) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @inferred=0x0}, 0x2, 0x5, 0x4, @raw=0xfffffffe, @reserved="1ce057a0473c4cef889990bc177dd7b44a65d6649f2abf7998067144fce9a24729b7383e6ed437ebaf335a3e9e5c5d500260ad49930c07575fc2b790bde847455fd5d2aa99f5ebf84234eb9e80bb856872aa8909f61e80a431adb0ec24be912641db8b6d0fe6d32d559e242fd3c9142cfb9c33e5f69b33f88c963329d204d9d7", "7adec199a16a2311eacf2fc7ae6e9858eeb78db8d04fdd73340238d212b6debe0eda71bdd709254592b67f9ca1adb17884a16f7ce8cbce0bb32791702b8d7c38"}) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r3, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async) r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async, rerun: 32) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000001c0), r4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000cdc50a2b5407bae080199a5223087e318203429ba71941d9cefec43fa254a7f6b615d320a7cda1b6cb41", @ANYRES16=r6, @ANYBLOB="00042bbd7000ffdbdf250100000008001100400000000800190000800000"], 0x24}}, 0x64048141) (async) ioctl$auto(r5, 0x2282, r4) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001c80)={{0xffffffffffffffff, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0}, {[0xffffffff, 0xfffffffe, 0x1, 0xfffffff9]}, 0xffff8000, 0x7, 0x0}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000006) process_madvise$auto_MADV_NOHUGEPAGE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x9}, 0x8, 0xf, 0x8) rt_sigqueueinfo$auto(r2, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.557081447s ago: executing program 1 (id=830): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/device\x00', 0x800, 0x0) pread64$auto(r0, &(0x7f0000000100)='/sy\x00\x88\x00ce/\x00\x00\x00_\x98q\x05\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x100000000b, 0x1) unshare$auto(0x40000080) socket(0x28, 0x1, 0x2) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x83f4, 0x0, 0xfffffffffffffffd) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x40000011, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x415, 0xee01, 0xee01, 0xfff, 0x87, 0x42, 0x3}, 0x0, 0x0, 0xf, 0x20003ff, 0x2000005, 0xa, 0x40, 0x8, 0x3, 0x7, @raw=0x7fff}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r3 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x10}, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x2004c004) mmap$auto(0xc3, 0x4020019, 0x6, 0xeb1, r2, 0x8000) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) mmap$auto(0x546, 0xe000000000, 0x40, 0x54, 0xffffffffffffffff, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x400) 2.42884347s ago: executing program 0 (id=831): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x14481, 0x0) r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x4, 0x6, 0x2000004, 0x15, r0, 0x6) socket(0x1f, 0x80002, 0x73) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4004885) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x3c, 0x100000001, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x4, 0x400, 0x7ffffffb, 0x400005, 0xdd79, 0x5, 0x61, 0x104}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x8000) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) mseal$auto(0x0, 0x7dda, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) syncfs$auto(r2) ioctl$auto_FS_IOC_UNRESVSP(r2, 0x40305829, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) set_mempolicy$auto(0x7, &(0x7f0000000000)=0xfffffffffffffffd, 0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0xa, 0x8, 0x0) 219.547096ms ago: executing program 2 (id=832): r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe\x00', 0x82c80, 0x0) unshare$auto(0x40000080) quotactl$auto(0x100, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?\xf3\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x101000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r2, 0x0, 0x0, 0x8) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/block/nbd10/queue/wbt_lat_usec\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='-7', 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r4, 0x0, 0x62d4) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) sendfile$auto(0x1, r0, 0x0, 0x40000000c07) 58.376153ms ago: executing program 3 (id=833): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x14481, 0x0) r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x4, 0x6, 0x2000004, 0x15, r0, 0x6) socket(0x1f, 0x80002, 0x73) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4004885) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x3c, 0x100000001, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x4, 0x400, 0x7ffffffb, 0x400005, 0xdd79, 0x5, 0x61, 0x104}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x8000) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) mseal$auto(0x0, 0x7dda, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) syncfs$auto(r2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) set_mempolicy$auto(0x7, &(0x7f0000000000)=0xfffffffffffffffd, 0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0xa, 0x8, 0x0) 49.993512ms ago: executing program 1 (id=834): setns(0xc9, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = getpid() shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x4, 0xb}, 0x9, 0x4000000000001ff, 0x9, 0x2, @inferred=r1, @inferred=0xffffffffffffffff, 0xfffe, 0x0, &(0x7f00000001c0), 0x0}) r3 = setfsgid$auto(r2) connect$auto(0x3, 0x0, 0x51) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0xe, 0x0, 0xff, "50cfeeca8e00"}) shutdown$auto(0x200000003, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) rseq$auto(0x0, 0x6, 0x8, 0x10) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, &(0x7f0000000280)=""/127, 0x7f) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x8002) prctl$auto(0x18, 0x4000000000000001, 0x2009, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)=',(\xf5)\x00', 0x4) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r5 = socket(0x1f, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r6 = getpgrp(0xffffffffffffffff) migrate_pages$auto(r6, 0x2, 0x0, &(0x7f00000002c0)=0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x400448e3, 0x0) 0s ago: executing program 0 (id=835): setns(0xc9, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = getpid() shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x4, 0xb}, 0x9, 0x4000000000001ff, 0x9, 0x2, @inferred=r1, @inferred=0xffffffffffffffff, 0xfffe, 0x0, &(0x7f00000001c0), 0x0}) r3 = setfsgid$auto(r2) connect$auto(0x3, 0x0, 0x51) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0xe, 0x0, 0xff, "50cfeeca8e00"}) shutdown$auto(0x200000003, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) rseq$auto(0x0, 0x6, 0x8, 0x10) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, &(0x7f0000000280)=""/127, 0x7f) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x8002) prctl$auto(0x18, 0x4000000000000001, 0x2009, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)=',(\xf5)\x00', 0x4) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 1) r5 = socket(0x1f, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r6 = getpgrp(0xffffffffffffffff) migrate_pages$auto(r6, 0x2, 0x0, &(0x7f00000002c0)=0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x400448e3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 82.478330][ T5605] cgroup: Unknown subsys name 'net' [ 82.593209][ T5605] cgroup: Unknown subsys name 'cpuset' [ 82.596646][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.377799][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.622294][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.626350][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.628466][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.637189][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.651860][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.744527][ T4935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.746290][ T4935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.746783][ T4935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.747788][ T4935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.748710][ T4935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.817963][ T4935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.830153][ T4935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.830974][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.832398][ T4935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.833339][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.891661][ T4935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.896040][ T4935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.897528][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.924797][ T4935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.926725][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.718080][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.718176][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.718611][ T5614] bridge_slave_0: entered allmulticast mode [ 88.722822][ T5614] bridge_slave_0: entered promiscuous mode [ 88.749217][ T5615] Bluetooth: hci0: command tx timeout [ 88.769404][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.769558][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.769848][ T5614] bridge_slave_1: entered allmulticast mode [ 88.771220][ T5614] bridge_slave_1: entered promiscuous mode [ 88.811730][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.811883][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.812040][ T5620] bridge_slave_0: entered allmulticast mode [ 88.814150][ T5620] bridge_slave_0: entered promiscuous mode [ 88.839737][ T5615] Bluetooth: hci1: command tx timeout [ 88.870794][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.871017][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.871142][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.871283][ T5620] bridge_slave_1: entered allmulticast mode [ 88.873005][ T5620] bridge_slave_1: entered promiscuous mode [ 88.918911][ T5615] Bluetooth: hci2: command tx timeout [ 88.922876][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.923580][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.923834][ T5622] bridge_slave_0: entered allmulticast mode [ 88.925201][ T5622] bridge_slave_0: entered promiscuous mode [ 88.941042][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.973822][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.973913][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.974031][ T5626] bridge_slave_0: entered allmulticast mode [ 88.975547][ T5626] bridge_slave_0: entered promiscuous mode [ 88.979704][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.980070][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.980389][ T5622] bridge_slave_1: entered allmulticast mode [ 88.990562][ T5615] Bluetooth: hci3: command tx timeout [ 88.993781][ T5622] bridge_slave_1: entered promiscuous mode [ 89.046506][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.046683][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.046807][ T5626] bridge_slave_1: entered allmulticast mode [ 89.050001][ T5626] bridge_slave_1: entered promiscuous mode [ 89.093714][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.123607][ T5614] team0: Port device team_slave_0 added [ 89.126659][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.151330][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.153709][ T5614] team0: Port device team_slave_1 added [ 89.177576][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.185241][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.228923][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.252379][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.252400][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.252428][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.255824][ T5620] team0: Port device team_slave_0 added [ 89.314183][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.314198][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.314224][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.356043][ T5620] team0: Port device team_slave_1 added [ 89.363343][ T5622] team0: Port device team_slave_0 added [ 89.384849][ T5626] team0: Port device team_slave_0 added [ 89.387871][ T5626] team0: Port device team_slave_1 added [ 89.419960][ T5622] team0: Port device team_slave_1 added [ 89.437245][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.437259][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.437284][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.506590][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.506610][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.506645][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.507848][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.507868][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.507904][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.605929][ T5614] hsr_slave_0: entered promiscuous mode [ 89.606863][ T5614] hsr_slave_1: entered promiscuous mode [ 89.624338][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.624355][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.624384][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.626662][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.626674][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.626698][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.631084][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.631134][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.631201][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.837368][ T5620] hsr_slave_0: entered promiscuous mode [ 89.838162][ T5620] hsr_slave_1: entered promiscuous mode [ 89.840311][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 89.840551][ T5620] Cannot create hsr debugfs directory [ 89.860325][ T5626] hsr_slave_0: entered promiscuous mode [ 89.862983][ T5626] hsr_slave_1: entered promiscuous mode [ 89.864772][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 89.864842][ T5626] Cannot create hsr debugfs directory [ 89.912926][ T5622] hsr_slave_0: entered promiscuous mode [ 89.913762][ T5622] hsr_slave_1: entered promiscuous mode [ 89.914340][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 89.914359][ T5622] Cannot create hsr debugfs directory [ 90.367523][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.385695][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.387688][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.406454][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.407401][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.424338][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.425111][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.428386][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.517554][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.526773][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.527735][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.543486][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.557694][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.567976][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.577771][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.586525][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.694639][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.697662][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.700736][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.722917][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.728004][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.744214][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.747133][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.758237][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.829311][ T5615] Bluetooth: hci0: command tx timeout [ 90.892915][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.903958][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.910949][ T5615] Bluetooth: hci1: command tx timeout [ 90.917480][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.931628][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.935586][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.937258][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.946850][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.970851][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.974466][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.989021][ T5615] Bluetooth: hci2: command tx timeout [ 91.022187][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.043341][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.064978][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.065090][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.069620][ T5615] Bluetooth: hci3: command tx timeout [ 91.111728][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.111821][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.164354][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.207494][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.207574][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.253818][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.255671][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.255759][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.353817][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.388160][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.388267][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.430233][ T3286] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.430341][ T3286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.487461][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.583159][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.603502][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.603644][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.660395][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.660510][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.955978][ T10] cfg80211: failed to load regulatory.db [ 92.488125][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.635769][ T5614] veth0_vlan: entered promiscuous mode [ 92.666092][ T5614] veth1_vlan: entered promiscuous mode [ 92.718088][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.739835][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.845182][ T5614] veth0_macvtap: entered promiscuous mode [ 92.880952][ T5614] veth1_macvtap: entered promiscuous mode [ 92.901815][ T5622] veth0_vlan: entered promiscuous mode [ 92.909084][ T5615] Bluetooth: hci0: command tx timeout [ 92.935631][ T5626] veth0_vlan: entered promiscuous mode [ 92.957663][ T5622] veth1_vlan: entered promiscuous mode [ 92.966142][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.977158][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.988953][ T5615] Bluetooth: hci1: command tx timeout [ 92.996325][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.996897][ T5626] veth1_vlan: entered promiscuous mode [ 93.069230][ T5615] Bluetooth: hci2: command tx timeout [ 93.126797][ T5622] veth0_macvtap: entered promiscuous mode [ 93.149228][ T5615] Bluetooth: hci3: command tx timeout [ 93.152398][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.152847][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.153124][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.153167][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.157123][ T5622] veth1_macvtap: entered promiscuous mode [ 93.220957][ T5620] veth0_vlan: entered promiscuous mode [ 93.226100][ T5620] veth1_vlan: entered promiscuous mode [ 93.247656][ T5626] veth0_macvtap: entered promiscuous mode [ 93.281672][ T5626] veth1_macvtap: entered promiscuous mode [ 93.302194][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.308220][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.308253][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.349330][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.393301][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.393388][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.393465][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.393511][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.406039][ T5620] veth0_macvtap: entered promiscuous mode [ 93.445300][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.463746][ T5620] veth1_macvtap: entered promiscuous mode [ 93.466548][ T3286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.466574][ T3286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.496882][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.584317][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.613233][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.616691][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.731164][ T3349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.731190][ T3349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.772015][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.772211][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829374][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829442][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829490][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829539][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829601][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829649][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.841397][ T3349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.841466][ T3349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.013601][ T3349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.013624][ T3349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.071553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.071596][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.283046][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.283092][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.688438][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.688464][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.989149][ T5615] Bluetooth: hci0: command tx timeout [ 95.068733][ T5615] Bluetooth: hci1: command tx timeout [ 95.150464][ T5615] Bluetooth: hci2: command tx timeout [ 95.229471][ T5615] Bluetooth: hci3: command tx timeout [ 95.271981][ T5787] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 96.003013][ T5799] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.154507][ T5799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 96.601511][ T5810] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 97.475387][ T5820] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.475893][ T5820] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.500185][ T5820] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.515662][ T5820] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.515798][ T5820] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.532101][ T5820] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.551444][ T5820] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.551546][ T5820] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.555077][ T5820] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.558488][ T5820] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.569583][ T5820] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.594060][ T5820] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 98.832983][ T5852] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.228936][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.550378][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.629237][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.629303][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.314794][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.628640][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.709061][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.709110][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.389626][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.429555][ T5926] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 103.709661][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.789007][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.789047][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.406672][ T5942] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.117065][ T5946] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.117553][ T5946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.117741][ T5946] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.117907][ T5946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.992942][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.151232][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.151276][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.151338][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.212401][ T5989] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.212699][ T5989] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.212975][ T5989] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.213658][ T5989] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.025427][ T6016] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.025724][ T6016] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.026056][ T6016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.027881][ T6016] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.126120][ T6045] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.908849][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.068740][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.068785][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.068820][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.814669][ T6094] ovs_: entered promiscuous mode [ 113.895689][ T6095] HfR: entered promiscuous mode [ 120.684847][ T6217] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.685689][ T6217] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.685959][ T6217] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.686219][ T6217] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.236875][ T6236] random: crng reseeded on system resumption [ 122.670605][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.748861][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.748903][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.748964][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.563358][ T6329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 128.105068][ T6339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.114075][ T6339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.114276][ T6339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.114382][ T6339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.709478][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.120114][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.188607][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.188653][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.610737][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 132.911369][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911456][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.114722][ T6450] capability: warning: `syz.0.87' uses 32-bit capabilities (legacy support in use) [ 133.734062][ T6461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 138.110862][ T6521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 141.036978][ T6599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 142.273700][ T6614] bridge0: port 3(dummy0) entered blocking state [ 142.274076][ T6614] bridge0: port 3(dummy0) entered disabled state [ 142.274229][ T6614] dummy0: entered allmulticast mode [ 142.276894][ T6614] dummy0: entered promiscuous mode [ 142.286350][ T6614] bridge0: port 3(dummy0) entered blocking state [ 142.286651][ T6614] bridge0: port 3(dummy0) entered forwarding state [ 145.712877][ T6669] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.713102][ T6669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.713265][ T6669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.714858][ T6669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.559131][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.788668][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.788721][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.788756][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.339136][ T6758] Zero length message leads to an empty skb [ 152.846562][ T6809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.859341][ T6809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.859554][ T6809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.859730][ T6809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.102977][ T6820] hub 1-0:1.0: USB hub found [ 153.104096][ T6820] hub 1-0:1.0: 1 port detected [ 154.508956][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.909076][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.909131][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.909163][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.465147][ T6872] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 160.525052][ T6953] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 164.672416][ T7035] process 'syz.2.161' launched ':,' with NULL argv: empty string added [ 171.722603][ T7142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.722799][ T7142] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.722989][ T7142] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.723165][ T7142] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.869941][ T7147] hub 1-0:1.0: USB hub found [ 172.872366][ T7147] hub 1-0:1.0: 1 port detected [ 173.426142][ T7171] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 173.798633][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.798681][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.798715][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.798974][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.233902][ T7240] hub 1-0:1.0: USB hub found [ 177.236939][ T7240] hub 1-0:1.0: 1 port detected [ 181.141906][ T7314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.142710][ T7314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.143173][ T7314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.143371][ T7314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.068732][ T7174] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.148691][ T7174] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.148736][ T7174] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.148771][ T7174] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.336431][ T7411] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.337313][ T7411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.345532][ T7411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.347517][ T7411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.990302][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.388649][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.388674][ T7174] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.388691][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.949905][ T7514] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2189982546 (17519860368 ns) > initial count (17519859856 ns). Using initial count to start timer. [ 194.350707][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.350765][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.293176][ T7613] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 199.300487][ T4935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.304958][ T4935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.305920][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.308305][ T4935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.344825][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.485399][ T143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.816522][ T143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.916486][ T143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.013243][ T143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.267771][ T7661] hub 1-0:1.0: USB hub found [ 200.275320][ T7661] hub 1-0:1.0: 1 port detected [ 200.821145][ T143] bridge_slave_1: left allmulticast mode [ 200.821188][ T143] bridge_slave_1: left promiscuous mode [ 200.822135][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.852143][ T143] bridge_slave_0: left allmulticast mode [ 200.852184][ T143] bridge_slave_0: left promiscuous mode [ 200.852940][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.076447][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.091174][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.092767][ T143] bond0 (unregistering): Released all slaves [ 201.390757][ T4935] Bluetooth: hci2: command tx timeout [ 201.804657][ T143] hsr_slave_0: left promiscuous mode [ 201.805483][ T143] hsr_slave_1: left promiscuous mode [ 201.806511][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.806546][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.807770][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.807793][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.862103][ T143] veth1_macvtap: left promiscuous mode [ 201.862156][ T143] veth0_macvtap: left promiscuous mode [ 201.862245][ T143] veth1_vlan: left promiscuous mode [ 201.862358][ T143] veth0_vlan: left promiscuous mode [ 202.096300][ T143] team0 (unregistering): Port device team_slave_1 removed [ 202.117376][ T143] team0 (unregistering): Port device team_slave_0 removed [ 202.686923][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.687032][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.687157][ T7649] bridge_slave_0: entered allmulticast mode [ 202.689981][ T7649] bridge_slave_0: entered promiscuous mode [ 202.693289][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.693472][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.693626][ T7649] bridge_slave_1: entered allmulticast mode [ 202.695724][ T7649] bridge_slave_1: entered promiscuous mode [ 202.801449][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.808336][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.006910][ T7649] team0: Port device team_slave_0 added [ 203.121262][ T7649] team0: Port device team_slave_1 added [ 203.441743][ T7715] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 203.469791][ T5615] Bluetooth: hci2: command tx timeout [ 203.697957][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.697982][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.698007][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.904564][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.904586][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.904620][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.906481][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 204.186722][ T7649] hsr_slave_0: entered promiscuous mode [ 204.188030][ T7649] hsr_slave_1: entered promiscuous mode [ 204.193230][ T7649] debugfs: 'hsr0' already exists in 'hsr' [ 204.193298][ T7649] Cannot create hsr debugfs directory [ 204.645389][ T7727] random: crng reseeded on system resumption [ 205.549578][ T5615] Bluetooth: hci2: command tx timeout [ 206.505644][ T7649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.532192][ T7649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.533183][ T7649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.568977][ T7649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.569978][ T7649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.578416][ T7649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.594572][ T7649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.630846][ T7649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.032812][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.094281][ T7649] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.121584][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.121698][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.144916][ T7784] mmap: syz.0.256 (7784) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.183533][ T7778] hub 1-0:1.0: USB hub found [ 207.194350][ T7778] hub 1-0:1.0: 1 port detected [ 207.294097][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.294219][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.629122][ T5615] Bluetooth: hci2: command tx timeout [ 207.634225][ T7797] mac80211.ieee80211_default_rc_algo: string parameter too long [ 208.114630][ T7796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.725124][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.879750][ T7649] veth0_vlan: entered promiscuous mode [ 210.942480][ T7649] veth1_vlan: entered promiscuous mode [ 210.974428][ T7649] veth0_macvtap: entered promiscuous mode [ 210.977875][ T7649] veth1_macvtap: entered promiscuous mode [ 211.016706][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.074707][ T7649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.138964][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.169120][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.170471][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.170817][ T143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.347487][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.347514][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.426033][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.426058][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.334488][ T7892] hub 1-0:1.0: USB hub found [ 213.336463][ T7892] hub 1-0:1.0: 1 port detected [ 218.595376][ T7993] hub 1-0:1.0: USB hub found [ 218.604772][ T7993] hub 1-0:1.0: 1 port detected [ 218.688054][ T8002] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 222.587488][ T8064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 222.588326][ T8064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 222.603443][ T8064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.604305][ T8064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.604971][ T8064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 222.657287][ T8064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 223.952739][ T8078] hub 1-0:1.0: USB hub found [ 223.954801][ T8078] hub 1-0:1.0: 1 port detected [ 224.588628][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.588671][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 224.668933][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 224.668947][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.752791][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 227.164417][ T8133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.164616][ T8133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 227.164780][ T8133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 227.164946][ T8133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.037632][ T8169] hub 1-0:1.0: USB hub found [ 229.037977][ T8169] hub 1-0:1.0: 1 port detected [ 229.228733][ T7174] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.228772][ T7174] Bluetooth: hci1: command 0x0c1a tx timeout [ 229.228801][ T7174] Bluetooth: hci0: command 0x0c1a tx timeout [ 229.228829][ T7174] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.736794][ T8253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.737075][ T8253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.737245][ T8253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.737487][ T8253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.628592][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.789142][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.789191][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.789227][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.043714][ T8354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.043922][ T8354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.044122][ T8354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.044266][ T8354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.028932][ T7174] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.108703][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.108748][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.108806][ T7174] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.735668][ T8445] FAULT_INJECTION: forcing a failure. [ 245.735668][ T8445] name failslab, interval 1, probability 0, space 0, times 1 [ 245.735731][ T8445] CPU: 1 UID: 0 PID: 8445 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(full) [ 245.735768][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.735789][ T8445] Call Trace: [ 245.735799][ T8445] [ 245.735810][ T8445] dump_stack_lvl+0x100/0x190 [ 245.735870][ T8445] should_fail_ex.cold+0x5/0xa [ 245.735909][ T8445] should_failslab+0xc2/0x120 [ 245.735959][ T8445] __kmalloc_cache_noprof+0x91/0x6d0 [ 245.736033][ T8445] ? lockdep_init_map_type+0x5c/0x250 [ 245.736076][ T8445] ? kvm_create_lapic+0xa9/0x440 [ 245.736122][ T8445] kvm_create_lapic+0xa9/0x440 [ 245.736163][ T8445] kvm_arch_vcpu_create+0x273/0xab0 [ 245.736201][ T8445] kvm_vm_ioctl+0x7e3/0x42d0 [ 245.736243][ T8445] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 245.736295][ T8445] ? kasan_quarantine_put+0x104/0x240 [ 245.736328][ T8445] ? lockdep_hardirqs_on+0x7d/0x110 [ 245.736359][ T8445] ? find_held_lock+0x2b/0x80 [ 245.736390][ T8445] ? tomoyo_path_number_perm+0x28f/0x580 [ 245.736434][ T8445] ? tomoyo_path_number_perm+0x28f/0x580 [ 245.736484][ T8445] ? tomoyo_path_number_perm+0x188/0x580 [ 245.736534][ T8445] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.736591][ T8445] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.736633][ T8445] ? do_vfs_ioctl+0x226/0x13e0 [ 245.736661][ T8445] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 245.736695][ T8445] ? __fget_files+0x34/0x3d0 [ 245.736728][ T8445] ? find_held_lock+0x2b/0x80 [ 245.736758][ T8445] ? hook_file_ioctl_common+0x140/0x440 [ 245.736811][ T8445] ? __fget_files+0x21f/0x3d0 [ 245.736849][ T8445] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 245.736877][ T8445] __x64_sys_ioctl+0x18e/0x210 [ 245.736907][ T8445] do_syscall_64+0x121/0x770 [ 245.736938][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.736967][ T8445] RIP: 0033:0x7fa99319e159 [ 245.737001][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.737026][ T8445] RSP: 002b:00007fa9913f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.737053][ T8445] RAX: ffffffffffffffda RBX: 00007fa993425fa0 RCX: 00007fa99319e159 [ 245.737072][ T8445] RDX: 0000000000000004 RSI: 000000000000ae41 RDI: 0000000000000003 [ 245.737088][ T8445] RBP: 00007fa9913f6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.737105][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.737121][ T8445] R13: 00007fa993426038 R14: 00007fa993425fa0 R15: 00007fff9f19e528 [ 245.737156][ T8445] [ 246.339230][ T8447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.339644][ T8447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.339811][ T8447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.339972][ T8447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.686234][ T8428] Process accounting resumed [ 248.348632][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.348678][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.348714][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.348748][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.272202][ T8517] FAULT_INJECTION: forcing a failure. [ 250.272202][ T8517] name failslab, interval 1, probability 0, space 0, times 0 [ 250.272246][ T8517] CPU: 0 UID: 0 PID: 8517 Comm: syz.1.345 Not tainted syzkaller #0 PREEMPT(full) [ 250.272281][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.272298][ T8517] Call Trace: [ 250.272309][ T8517] [ 250.272321][ T8517] dump_stack_lvl+0x100/0x190 [ 250.272370][ T8517] should_fail_ex.cold+0x5/0xa [ 250.272414][ T8517] should_failslab+0xc2/0x120 [ 250.272462][ T8517] __kmalloc_cache_noprof+0x91/0x6d0 [ 250.272520][ T8517] ? sctp_add_bind_addr+0xae/0x3e0 [ 250.272561][ T8517] sctp_add_bind_addr+0xae/0x3e0 [ 250.272600][ T8517] sctp_copy_local_addr_list+0x349/0x550 [ 250.272646][ T8517] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 250.272692][ T8517] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 250.272736][ T8517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.272790][ T8517] sctp_bind_addr_copy+0xe0/0x530 [ 250.272833][ T8517] sctp_connect_new_asoc+0x1c9/0x770 [ 250.272887][ T8517] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 250.272955][ T8517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.273025][ T8517] sctp_sendmsg+0x1743/0x22e0 [ 250.273072][ T8517] ? __pfx_sctp_sendmsg+0x10/0x10 [ 250.273121][ T8517] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 250.273165][ T8517] ? aa_sock_msg_perm+0x11e/0x200 [ 250.273207][ T8517] ? __pfx_sctp_sendmsg+0x10/0x10 [ 250.273249][ T8517] inet_sendmsg+0x11c/0x140 [ 250.273282][ T8517] __sys_sendto+0x453/0x4e0 [ 250.273321][ T8517] ? __pfx_inet_sendmsg+0x10/0x10 [ 250.273353][ T8517] ? __pfx___sys_sendto+0x10/0x10 [ 250.273403][ T8517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.273449][ T8517] ? ksys_write+0x1ac/0x250 [ 250.273480][ T8517] ? __pfx_ksys_write+0x10/0x10 [ 250.273516][ T8517] __x64_sys_sendto+0xe0/0x1c0 [ 250.273555][ T8517] ? do_syscall_64+0xae/0x770 [ 250.273582][ T8517] ? lockdep_hardirqs_on+0x7d/0x110 [ 250.273609][ T8517] do_syscall_64+0x121/0x770 [ 250.273641][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.273688][ T8517] RIP: 0033:0x7f2b9379e159 [ 250.273712][ T8517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.273739][ T8517] RSP: 002b:00007f2b946c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 250.273767][ T8517] RAX: ffffffffffffffda RBX: 00007f2b93a26270 RCX: 00007f2b9379e159 [ 250.273786][ T8517] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000004 [ 250.273804][ T8517] RBP: 00007f2b946c2090 R08: 0000200000000000 R09: 000000000000001c [ 250.273822][ T8517] R10: 00000000006358c0 R11: 0000000000000246 R12: 0000000000000002 [ 250.273841][ T8517] R13: 00007f2b93a26308 R14: 00007f2b93a26270 R15: 00007ffd565b2f88 [ 250.273879][ T8517] [ 253.325747][ T8571] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.326000][ T8571] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.326219][ T8571] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.326383][ T8571] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.148816][ T7174] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.155335][ T8610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 255.388660][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.388703][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.388766][ T7174] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.793426][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.793498][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.040962][ T8671] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 260.279980][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 267.137038][ T8819] hub 1-0:1.0: USB hub found [ 267.139070][ T8819] hub 1-0:1.0: 1 port detected [ 275.367518][ T8919] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.367722][ T8919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.367903][ T8919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.368108][ T8919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.635798][ T8956] FAULT_INJECTION: forcing a failure. [ 276.635798][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 276.635841][ T8956] CPU: 0 UID: 0 PID: 8956 Comm: syz.0.405 Not tainted syzkaller #0 PREEMPT(full) [ 276.635877][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.635894][ T8956] Call Trace: [ 276.635904][ T8956] [ 276.635917][ T8956] dump_stack_lvl+0x100/0x190 [ 276.635967][ T8956] should_fail_ex.cold+0x5/0xa [ 276.636009][ T8956] should_failslab+0xc2/0x120 [ 276.636053][ T8956] __kmalloc_noprof+0xfc/0x840 [ 276.636093][ T8956] ? copy_splice_read+0x1a3/0xbb0 [ 276.636141][ T8956] copy_splice_read+0x1a3/0xbb0 [ 276.636192][ T8956] ? __pfx_copy_splice_read+0x10/0x10 [ 276.636237][ T8956] ? look_up_lock_class+0x55/0x120 [ 276.636267][ T8956] ? rcu_is_watching+0x13/0xc0 [ 276.636311][ T8956] ? lockdep_init_map_type+0x5c/0x250 [ 276.636368][ T8956] ? __pfx_filemap_splice_read+0x10/0x10 [ 276.636420][ T8956] do_splice_read+0x2bd/0x370 [ 276.636466][ T8956] splice_direct_to_actor+0x2a1/0xa30 [ 276.636512][ T8956] ? __pfx_direct_splice_actor+0x10/0x10 [ 276.636561][ T8956] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 276.636609][ T8956] ? lock_acquire+0x1d1/0x380 [ 276.636658][ T8956] do_splice_direct+0x174/0x240 [ 276.636700][ T8956] ? __pfx_do_splice_direct+0x10/0x10 [ 276.636744][ T8956] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 276.636792][ T8956] ? bpf_lsm_file_permission+0x9/0x10 [ 276.636838][ T8956] ? security_file_permission+0x76/0x210 [ 276.636873][ T8956] ? rw_verify_area+0xce/0x6d0 [ 276.636929][ T8956] do_sendfile+0xadc/0xe20 [ 276.636970][ T8956] ? __pfx_do_sendfile+0x10/0x10 [ 276.637000][ T8956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.637035][ T8956] ? __fget_files+0x21f/0x3d0 [ 276.637083][ T8956] __x64_sys_sendfile64+0x1d8/0x220 [ 276.637135][ T8956] ? ksys_write+0x1ac/0x250 [ 276.637166][ T8956] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 276.637217][ T8956] do_syscall_64+0x121/0x770 [ 276.637250][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.637280][ T8956] RIP: 0033:0x7fa99319e159 [ 276.637303][ T8956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.637331][ T8956] RSP: 002b:00007fa9913f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 276.637360][ T8956] RAX: ffffffffffffffda RBX: 00007fa993425fa0 RCX: 00007fa99319e159 [ 276.637378][ T8956] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 276.637396][ T8956] RBP: 00007fa9913f6090 R08: 0000000000000000 R09: 0000000000000000 [ 276.637413][ T8956] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 276.637431][ T8956] R13: 00007fa993426038 R14: 00007fa993425fa0 R15: 00007fff9f19e528 [ 276.637468][ T8956] [ 277.308536][ T7174] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.389734][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.389775][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.389857][ T7174] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.463490][ T8983] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 278.597750][ T8973] Process accounting paused [ 279.788564][ T9015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.790829][ T9015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.791119][ T9015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.791390][ T9015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.853758][ T9032] syz.3.414 uses obsolete (PF_INET,SOCK_PACKET) [ 281.712018][ T7174] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.868695][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.868741][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.868811][ T7174] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.873425][ T9143] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 286.873612][ T9143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 286.873771][ T9143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 286.873953][ T9143] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.589244][ T7174] Bluetooth: hci0: command 0x0c1a tx timeout [ 288.910642][ T7174] Bluetooth: hci2: command 0x0c1a tx timeout [ 288.910649][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 288.910687][ T7174] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.586879][ T9254] FAULT_INJECTION: forcing a failure. [ 292.586879][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 292.586920][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.3.445 Not tainted syzkaller #0 PREEMPT(full) [ 292.586953][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.586969][ T9254] Call Trace: [ 292.586979][ T9254] [ 292.586990][ T9254] dump_stack_lvl+0x100/0x190 [ 292.587034][ T9254] should_fail_ex.cold+0x5/0xa [ 292.587078][ T9254] should_failslab+0xc2/0x120 [ 292.587120][ T9254] __kmalloc_cache_noprof+0x91/0x6d0 [ 292.587171][ T9254] ? percpu_ref_init+0xec/0x3f0 [ 292.587205][ T9254] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 292.587250][ T9254] percpu_ref_init+0xec/0x3f0 [ 292.587284][ T9254] io_uring_setup.cold+0x2be/0x1c5e [ 292.587333][ T9254] ? ksys_write+0x190/0x250 [ 292.587364][ T9254] ? ksys_write+0x190/0x250 [ 292.587394][ T9254] ? __pfx_io_uring_setup+0x10/0x10 [ 292.587441][ T9254] ? __mutex_unlock_slowpath+0x35d/0x930 [ 292.587486][ T9254] ? fput+0x7c/0x100 [ 292.587523][ T9254] ? ksys_write+0x1ac/0x250 [ 292.587552][ T9254] ? __pfx_ksys_write+0x10/0x10 [ 292.587592][ T9254] __x64_sys_io_uring_setup+0xc2/0x170 [ 292.587638][ T9254] do_syscall_64+0x121/0x770 [ 292.587670][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.587701][ T9254] RIP: 0033:0x7fb1b819e159 [ 292.587742][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.587771][ T9254] RSP: 002b:00007fb1b8fc4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 292.587800][ T9254] RAX: ffffffffffffffda RBX: 00007fb1b8425fa0 RCX: 00007fb1b819e159 [ 292.587821][ T9254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 292.587838][ T9254] RBP: 00007fb1b8fc4090 R08: 0000000000000000 R09: 0000000000000000 [ 292.587857][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.587878][ T9254] R13: 00007fb1b8426038 R14: 00007fb1b8425fa0 R15: 00007ffc8f3cb7e8 [ 292.587918][ T9254] [ 295.078573][ T9310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 297.074860][ T9347] ecryptfs_parse_packet_length: Error parsing packet length [ 297.074886][ T9347] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 297.799504][ T9349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 297.799680][ T9349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 297.799852][ T9349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.800016][ T9349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.707709][ T9353] hub 1-0:1.0: USB hub found [ 298.710839][ T9353] hub 1-0:1.0: 1 port detected [ 299.868554][ T7174] Bluetooth: hci2: command 0x0c1a tx timeout [ 299.868595][ T7174] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.868625][ T7174] Bluetooth: hci1: command 0x0c1a tx timeout [ 299.868655][ T7174] Bluetooth: hci0: command 0x0c1a tx timeout [ 303.295048][ T9439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 304.374804][ T9452] hub 1-0:1.0: USB hub found [ 304.377199][ T9452] hub 1-0:1.0: 1 port detected [ 305.989425][ T9474] hub 1-0:1.0: USB hub found [ 305.991170][ T9474] hub 1-0:1.0: 1 port detected [ 306.586656][ T9477] vhci_hcd vhci_hcd.1: invalid port number 41 [ 306.586684][ T9477] vhci_hcd vhci_hcd.1: default hub control req: ec2a v6846 i0029 l41133 [ 308.266200][ T9524] bcache: register_bcache() error : failed to open device [ 309.559125][ T9518] Process accounting resumed [ 309.968214][ T9539] hub 1-0:1.0: USB hub found [ 309.974644][ T9539] hub 1-0:1.0: 1 port detected [ 311.480166][ T9572] futex_wake_op: syz.2.489 tries to shift op by -2048; fix this program [ 311.525547][ T9569] 0x000000000001-0x000000020000 : "" [ 311.561944][ T9569] ftl_cs: FTL header corrupt! [ 316.663855][ T9629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.664052][ T9629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.664253][ T9629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.664415][ T9629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.246567][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.246628][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.510041][ T7174] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.668760][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 318.668800][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.670547][ T7174] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.293625][ T9714] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 320.298801][ T9714] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.299121][ T9714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 320.299521][ T9714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.907507][ T9751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 322.108525][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 322.350097][ T9692] Bluetooth: hci1: command 0x0c1a tx timeout [ 322.350158][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 322.350228][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 322.381934][ T9737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 322.383685][ T9737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.383954][ T9737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.384223][ T9737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.135120][ T9800] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 324.189128][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 324.438747][ T9692] Bluetooth: hci3: command 0x0c1a tx timeout [ 324.438768][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 324.438803][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 325.335512][ T9809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.335725][ T9809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.335915][ T9809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.336122][ T9809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.839685][ T9832] FAULT_INJECTION: forcing a failure. [ 325.839685][ T9832] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 325.839727][ T9832] CPU: 0 UID: 0 PID: 9832 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT(full) [ 325.839759][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.839775][ T9832] Call Trace: [ 325.839784][ T9832] [ 325.839795][ T9832] dump_stack_lvl+0x100/0x190 [ 325.839873][ T9832] should_fail_ex.cold+0x5/0xa [ 325.839915][ T9832] _copy_to_user+0x32/0xd0 [ 325.839963][ T9832] keyctl_capabilities+0x5a/0x160 [ 325.840017][ T9832] __do_sys_keyctl+0x427/0x5a0 [ 325.840066][ T9832] do_syscall_64+0x121/0x770 [ 325.840104][ T9832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.840145][ T9832] RIP: 0033:0x7f4c3d19e159 [ 325.840171][ T9832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.840202][ T9832] RSP: 002b:00007f4c3e07e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 325.840233][ T9832] RAX: ffffffffffffffda RBX: 00007f4c3d426450 RCX: 00007f4c3d19e159 [ 325.840254][ T9832] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 325.840273][ T9832] RBP: 00007f4c3e07e090 R08: 00000000000003ff R09: 0000000000000000 [ 325.840293][ T9832] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 325.840311][ T9832] R13: 00007f4c3d4264e8 R14: 00007f4c3d426450 R15: 00007ffcaf035da8 [ 325.840353][ T9832] [ 327.068750][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.388530][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.388570][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 327.388601][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 328.185004][ T9872] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345430799 (2345430799 ns) > initial count (2345369854 ns). Using initial count to start timer. [ 329.562204][ T9879] hub 1-0:1.0: USB hub found [ 329.562609][ T9879] hub 1-0:1.0: 1 port detected [ 335.419874][ T9978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.538'. [ 337.879295][T10030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.879522][T10030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.879703][T10030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.879895][T10030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.628516][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.949020][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.949063][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.949095][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.057392][T10068] Process accounting paused [ 344.247144][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.607261][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.617954][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.626957][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.636020][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.637387][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.776619][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.071770][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.412018][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.154286][ T59] bridge_slave_1: left allmulticast mode [ 346.154317][ T59] bridge_slave_1: left promiscuous mode [ 346.154577][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.157963][ T59] bridge_slave_0: left allmulticast mode [ 346.157991][ T59] bridge_slave_0: left promiscuous mode [ 346.158211][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.355369][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.368918][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.380048][ T59] bond0 (unregistering): Released all slaves [ 346.749213][ T4935] Bluetooth: hci1: command tx timeout [ 346.975254][ T59] hsr_slave_0: left promiscuous mode [ 346.976023][ T59] hsr_slave_1: left promiscuous mode [ 346.976852][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.976876][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.977949][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.977975][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.033751][ T59] veth1_macvtap: left promiscuous mode [ 347.033790][ T59] veth0_macvtap: left promiscuous mode [ 347.033899][ T59] veth1_vlan: left promiscuous mode [ 347.033966][ T59] veth0_vlan: left promiscuous mode [ 347.355927][ T59] team0 (unregistering): Port device team_slave_1 removed [ 347.375677][ T59] team0 (unregistering): Port device team_slave_0 removed [ 347.733475][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 348.828565][ T4935] Bluetooth: hci1: command tx timeout [ 349.122023][T10227] bridge0: port 3(veth1_macvtap) entered blocking state [ 349.122226][T10227] bridge0: port 3(veth1_macvtap) entered disabled state [ 349.122374][T10227] veth1_macvtap: entered allmulticast mode [ 349.169153][T10227] veth1_macvtap: left allmulticast mode [ 349.327432][T10141] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.327557][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.327699][T10141] bridge_slave_0: entered allmulticast mode [ 349.341336][T10141] bridge_slave_0: entered promiscuous mode [ 349.359667][T10141] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.359775][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.359908][T10141] bridge_slave_1: entered allmulticast mode [ 349.361961][T10141] bridge_slave_1: entered promiscuous mode [ 349.396947][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 349.637066][T10141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.723460][T10141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.855523][T10141] team0: Port device team_slave_0 added [ 349.891437][T10141] team0: Port device team_slave_1 added [ 349.977750][T10141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.977775][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.977814][T10141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.016549][T10141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.016596][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.016675][T10141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.170065][T10141] hsr_slave_0: entered promiscuous mode [ 350.177218][T10141] hsr_slave_1: entered promiscuous mode [ 350.204787][T10141] debugfs: 'hsr0' already exists in 'hsr' [ 350.204813][T10141] Cannot create hsr debugfs directory [ 350.908731][ T4935] Bluetooth: hci1: command tx timeout [ 351.027489][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 352.228356][T10282] hub 1-0:1.0: USB hub found [ 352.237545][T10282] hub 1-0:1.0: 1 port detected [ 352.780470][T10141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.797572][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.867294][T10141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.878757][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.879658][T10141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.883405][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.988795][ T4935] Bluetooth: hci1: command tx timeout [ 353.058841][T10141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.072103][T10141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.856671][T10141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.900444][T10141] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.924180][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.924361][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.955540][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.955675][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.232045][T10337] hub 1-0:1.0: USB hub found [ 354.233630][T10337] hub 1-0:1.0: 1 port detected [ 356.755484][T10409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'. [ 357.476222][T10141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.644623][T10141] veth0_vlan: entered promiscuous mode [ 357.656852][T10141] veth1_vlan: entered promiscuous mode [ 357.704070][T10141] veth0_macvtap: entered promiscuous mode [ 357.715460][T10141] veth1_macvtap: entered promiscuous mode [ 357.741422][T10141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.763053][T10141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.818619][ T3286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.818874][ T3286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.818919][ T3286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.818961][ T3286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.967633][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.967673][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.252348][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.252390][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.408273][T10499] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.408563][T10499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.425028][T10499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.425370][T10499] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.425482][T10499] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 363.465425][T10499] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 364.345972][T10523] FAULT_INJECTION: forcing a failure. [ 364.345972][T10523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.346026][T10523] CPU: 1 UID: 0 PID: 10523 Comm: syz.2.593 Not tainted syzkaller #0 PREEMPT(full) [ 364.346064][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.346084][T10523] Call Trace: [ 364.346094][T10523] [ 364.346104][T10523] dump_stack_lvl+0x100/0x190 [ 364.346148][T10523] should_fail_ex.cold+0x5/0xa [ 364.346185][T10523] _copy_to_user+0x32/0xd0 [ 364.346226][T10523] rng_dev_read+0x223/0x910 [ 364.346257][T10523] ? __pfx_virtio_read+0x10/0x10 [ 364.346292][T10523] ? __pfx_rng_dev_read+0x10/0x10 [ 364.346328][T10523] ? bpf_lsm_file_permission+0x9/0x10 [ 364.346369][T10523] ? security_file_permission+0x76/0x210 [ 364.346399][T10523] ? rw_verify_area+0xce/0x6d0 [ 364.346446][T10523] ? __pfx_rng_dev_read+0x10/0x10 [ 364.346475][T10523] vfs_readv+0x5d8/0x8d0 [ 364.346511][T10523] ? __pfx_vfs_readv+0x10/0x10 [ 364.346546][T10523] ? lock_acquire+0x1d1/0x380 [ 364.346585][T10523] ? __fget_files+0x34/0x3d0 [ 364.346650][T10523] ? __fget_files+0x21f/0x3d0 [ 364.346695][T10523] ? do_readv+0x13e/0x340 [ 364.346721][T10523] do_readv+0x13e/0x340 [ 364.346750][T10523] ? __pfx_do_readv+0x10/0x10 [ 364.346790][T10523] do_syscall_64+0x121/0x770 [ 364.346824][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.346856][T10523] RIP: 0033:0x7f4c3d19e159 [ 364.346883][T10523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.346909][T10523] RSP: 002b:00007f4c3e123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 364.346943][T10523] RAX: ffffffffffffffda RBX: 00007f4c3d425fa0 RCX: 00007f4c3d19e159 [ 364.346963][T10523] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 364.346980][T10523] RBP: 00007f4c3e123090 R08: 0000000000000000 R09: 0000000000000000 [ 364.346997][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.347015][T10523] R13: 00007f4c3d426038 R14: 00007f4c3d425fa0 R15: 00007ffcaf035da8 [ 364.347062][T10523] [ 364.988693][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 365.469192][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 365.469246][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.469279][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.548992][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.198864][T10615] FAULT_INJECTION: forcing a failure. [ 369.198864][T10615] name failslab, interval 1, probability 0, space 0, times 0 [ 369.198907][T10615] CPU: 0 UID: 0 PID: 10615 Comm: syz.3.605 Not tainted syzkaller #0 PREEMPT(full) [ 369.198940][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.198957][T10615] Call Trace: [ 369.198966][T10615] [ 369.198977][T10615] dump_stack_lvl+0x100/0x190 [ 369.199023][T10615] should_fail_ex.cold+0x5/0xa [ 369.199061][T10615] should_failslab+0xc2/0x120 [ 369.199107][T10615] __kvmalloc_node_noprof+0x113/0x9b0 [ 369.199144][T10615] ? __pfx_net_ctl_permissions+0x10/0x10 [ 369.199181][T10615] ? proc_sys_call_handler+0x2c7/0x5a0 [ 369.199230][T10615] proc_sys_call_handler+0x2c7/0x5a0 [ 369.199272][T10615] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 369.199325][T10615] vfs_write+0x6af/0x1050 [ 369.199356][T10615] ? __pfx_proc_sys_write+0x10/0x10 [ 369.199398][T10615] ? __pfx_vfs_write+0x10/0x10 [ 369.199426][T10615] ? find_held_lock+0x2b/0x80 [ 369.199481][T10615] __x64_sys_pwrite64+0x1eb/0x250 [ 369.199515][T10615] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 369.199550][T10615] ? trace_hardirqs_off+0x70/0x170 [ 369.199604][T10615] do_syscall_64+0x121/0x770 [ 369.199637][T10615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.199667][T10615] RIP: 0033:0x7fb1b819e159 [ 369.199690][T10615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.199717][T10615] RSP: 002b:00007fb1b8f82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 369.199745][T10615] RAX: ffffffffffffffda RBX: 00007fb1b8426180 RCX: 00007fb1b819e159 [ 369.199764][T10615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 369.199780][T10615] RBP: 00007fb1b823506b R08: 0000000000000000 R09: 0000000000000000 [ 369.199797][T10615] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 369.199813][T10615] R13: 00007fb1b8426218 R14: 00007fb1b8426180 R15: 00007ffc8f3cb7e8 [ 369.199853][T10615] [ 369.629178][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 370.861633][T10644] hub 1-0:1.0: USB hub found [ 370.863508][T10644] hub 1-0:1.0: 1 port detected [ 371.394562][T10645] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 371.394806][T10645] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.394980][T10645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.395188][T10645] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.047251][T10633] Process accounting resumed [ 373.308731][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 373.468920][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.468966][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 373.469003][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 374.325125][T10701] FAULT_INJECTION: forcing a failure. [ 374.325125][T10701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.325161][T10701] CPU: 1 UID: 0 PID: 10701 Comm: syz.2.616 Not tainted syzkaller #0 PREEMPT(full) [ 374.325190][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.325207][T10701] Call Trace: [ 374.325215][T10701] [ 374.325226][T10701] dump_stack_lvl+0x100/0x190 [ 374.325271][T10701] should_fail_ex.cold+0x5/0xa [ 374.325311][T10701] _copy_to_user+0x32/0xd0 [ 374.325354][T10701] keyctl_capabilities+0x5a/0x160 [ 374.325402][T10701] __do_sys_keyctl+0x427/0x5a0 [ 374.325447][T10701] do_syscall_64+0x121/0x770 [ 374.325484][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.325510][T10701] RIP: 0033:0x7f4c3d19e159 [ 374.325530][T10701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.325554][T10701] RSP: 002b:00007f4c3e07e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 374.325577][T10701] RAX: ffffffffffffffda RBX: 00007f4c3d426450 RCX: 00007f4c3d19e159 [ 374.325593][T10701] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 000000000000001f [ 374.325608][T10701] RBP: 00007f4c3e07e090 R08: 00000000000003ff R09: 0000000000000000 [ 374.325623][T10701] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 374.325637][T10701] R13: 00007f4c3d4264e8 R14: 00007f4c3d426450 R15: 00007ffcaf035da8 [ 374.325668][T10701] [ 375.173632][T10714] FAULT_INJECTION: forcing a failure. [ 375.173632][T10714] name failslab, interval 1, probability 0, space 0, times 0 [ 375.173674][T10714] CPU: 0 UID: 0 PID: 10714 Comm: syz.0.619 Not tainted syzkaller #0 PREEMPT(full) [ 375.173726][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.173745][T10714] Call Trace: [ 375.173758][T10714] [ 375.173770][T10714] dump_stack_lvl+0x100/0x190 [ 375.173820][T10714] should_fail_ex.cold+0x5/0xa [ 375.173862][T10714] should_failslab+0xc2/0x120 [ 375.173908][T10714] kmem_cache_alloc_noprof+0x92/0x6a0 [ 375.173946][T10714] ? ksys_write+0x190/0x250 [ 375.173981][T10714] ? create_new_namespaces+0x30/0xac0 [ 375.174039][T10714] create_new_namespaces+0x30/0xac0 [ 375.174088][T10714] ? bpf_lsm_capable+0x9/0x10 [ 375.174137][T10714] ? security_capable+0x80/0x260 [ 375.174185][T10714] unshare_nsproxy_namespaces+0xf2/0x220 [ 375.174240][T10714] ksys_unshare+0x4a2/0xa70 [ 375.174274][T10714] ? __pfx_ksys_unshare+0x10/0x10 [ 375.174307][T10714] ? ksys_write+0x1ac/0x250 [ 375.174353][T10714] __x64_sys_unshare+0x31/0x40 [ 375.174387][T10714] do_syscall_64+0x121/0x770 [ 375.174431][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.174466][T10714] RIP: 0033:0x7fa99319e159 [ 375.174491][T10714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.174520][T10714] RSP: 002b:00007fa991351028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 375.174550][T10714] RAX: ffffffffffffffda RBX: 00007fa993426450 RCX: 00007fa99319e159 [ 375.174571][T10714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 375.174591][T10714] RBP: 00007fa991351090 R08: 0000000000000000 R09: 0000000000000000 [ 375.174611][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.174630][T10714] R13: 00007fa9934264e8 R14: 00007fa993426450 R15: 00007fff9f19e528 [ 375.174706][T10714] [ 375.875950][T10722] hub 1-0:1.0: USB hub found [ 375.878045][T10722] hub 1-0:1.0: 1 port detected [ 376.497717][T10719] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 376.498605][T10719] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.498819][T10719] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.498982][T10719] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.429447][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 378.508654][ T9692] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.508703][ T9692] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.508785][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 378.672837][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.672908][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.179461][T10856] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 395.868572][T11036] smpboot: CPU 1 is now offline [ 399.672276][T11097] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.672447][T11097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.672572][T11097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.672693][T11097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.628799][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 401.708564][ T9692] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.708598][ T9692] Bluetooth: hci2: command 0x0c1a tx timeout [ 401.708647][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 402.770553][T11135] Process accounting paused [ 402.998662][T11144] can: request_module (can-proto-0) failed. [ 405.895053][T11193] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.895190][T11193] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 405.895292][T11193] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.895391][T11193] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.708437][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 407.948633][ T9692] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.948667][ T9692] Bluetooth: hci2: command 0x0c1a tx timeout [ 407.948721][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.080525][T11236] FAULT_INJECTION: forcing a failure. [ 409.080525][T11236] name failslab, interval 1, probability 0, space 0, times 0 [ 409.080555][T11236] CPU: 0 UID: 0 PID: 11236 Comm: syz.0.690 Not tainted syzkaller #0 PREEMPT(full) [ 409.080577][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.080590][T11236] Call Trace: [ 409.080596][T11236] [ 409.080604][T11236] dump_stack_lvl+0x100/0x190 [ 409.080635][T11236] should_fail_ex.cold+0x5/0xa [ 409.080661][T11236] should_failslab+0xc2/0x120 [ 409.080689][T11236] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 409.080714][T11236] ? __alloc_skb+0x5b7/0x710 [ 409.080745][T11236] ? __alloc_skb+0x140/0x710 [ 409.080776][T11236] __alloc_skb+0x140/0x710 [ 409.080804][T11236] ? __alloc_skb+0x5b7/0x710 [ 409.080831][T11236] ? __pfx___alloc_skb+0x10/0x10 [ 409.080861][T11236] ? __pfx_aa_file_perm+0x10/0x10 [ 409.080888][T11236] new_skb+0x21/0x230 [ 409.080912][T11236] aoecmd_cfg+0x210/0x7a0 [ 409.080941][T11236] ? __pfx_aoecmd_cfg+0x10/0x10 [ 409.080967][T11236] ? get_pid_task+0xfc/0x250 [ 409.081001][T11236] ? aoechr_write+0x10a/0x120 [ 409.081023][T11236] aoechr_write+0x10a/0x120 [ 409.081047][T11236] vfs_write+0x2aa/0x1050 [ 409.081069][T11236] ? __pfx_aoechr_write+0x10/0x10 [ 409.081093][T11236] ? lock_acquire+0x1d1/0x380 [ 409.081120][T11236] ? __fget_files+0x34/0x3d0 [ 409.081143][T11236] ? __pfx_vfs_write+0x10/0x10 [ 409.081162][T11236] ? find_held_lock+0x2b/0x80 [ 409.081183][T11236] ? __fget_files+0x215/0x3d0 [ 409.081205][T11236] ? __fget_files+0x215/0x3d0 [ 409.081231][T11236] ? __fget_files+0x21f/0x3d0 [ 409.081260][T11236] ksys_write+0x12a/0x250 [ 409.081281][T11236] ? __pfx_ksys_write+0x10/0x10 [ 409.081309][T11236] do_syscall_64+0x121/0x770 [ 409.081332][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.081356][T11236] RIP: 0033:0x7fa99319e159 [ 409.081372][T11236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.081391][T11236] RSP: 002b:00007fa9913f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.081428][T11236] RAX: ffffffffffffffda RBX: 00007fa993425fa0 RCX: 00007fa99319e159 [ 409.081442][T11236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 409.081454][T11236] RBP: 00007fa9913f6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.081466][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.081479][T11236] R13: 00007fa993426038 R14: 00007fa993425fa0 R15: 00007fff9f19e528 [ 409.081505][T11236] [ 409.083851][T11236] aoe: skb alloc failure [ 409.084689][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.084750][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.966615][T11406] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 420.966760][T11406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 420.966869][T11406] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 420.966999][T11406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.829176][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 422.913830][T11420] bridge0: port 4(veth1_macvtap) entered blocking state [ 422.913904][T11420] bridge0: port 4(veth1_macvtap) entered disabled state [ 422.914033][T11420] veth1_macvtap: entered allmulticast mode [ 422.915873][T11420] veth1_macvtap: left allmulticast mode [ 422.989367][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 422.989398][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 422.989420][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 423.577638][T11416] syz.0.713 (11416) used greatest stack depth: 19128 bytes left [ 428.014869][T11504] Device name cannot be null; rc = [-22] [ 428.086249][T11499] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.086390][T11499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 428.086510][T11499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 428.086609][T11499] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 428.324504][ T31] audit: type=1804 audit(1789892504.915:2): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.722" name="/newroot/186/file0" dev="tmpfs" ino=969 res=1 errno=0 [ 430.028559][ T9692] Bluetooth: hci0: command 0x0c1a tx timeout [ 430.108557][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 430.108589][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 430.108722][ T9692] Bluetooth: hci3: command 0x0c1a tx timeout [ 434.404714][T11566] Process accounting resumed [ 435.412314][T11606] bridge0: port 4(veth1_macvtap) entered blocking state [ 435.412390][T11606] bridge0: port 4(veth1_macvtap) entered disabled state [ 435.412492][T11606] veth1_macvtap: entered allmulticast mode [ 435.416470][T11606] veth1_macvtap: left allmulticast mode [ 440.110677][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.110727][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.491328][T11669] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.491468][T11669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.491599][T11669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.491710][T11669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.886702][T11673] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51 [ 442.428784][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.508715][ T9692] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.508751][ T9692] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.508811][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 444.255140][T11714] bridge0: port 3(veth1_macvtap) entered blocking state [ 444.255217][T11714] bridge0: port 3(veth1_macvtap) entered disabled state [ 444.255345][T11714] veth1_macvtap: entered allmulticast mode [ 444.285908][T11714] veth1_macvtap: left allmulticast mode [ 444.429709][T11722] bridge0: port 4(veth1_macvtap) entered blocking state [ 444.429779][T11722] bridge0: port 4(veth1_macvtap) entered disabled state [ 444.429887][T11722] veth1_macvtap: entered allmulticast mode [ 444.434043][T11722] veth1_macvtap: left allmulticast mode [ 451.047458][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.237102][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.614009][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.831255][ T4935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.849108][ T4935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.850013][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.851930][ T4935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.853623][ T4935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.032469][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.974199][ T50] bridge_slave_1: left allmulticast mode [ 452.974224][ T50] bridge_slave_1: left promiscuous mode [ 452.974390][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.002915][ T50] bridge_slave_0: left allmulticast mode [ 453.002940][ T50] bridge_slave_0: left promiscuous mode [ 453.003111][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.561636][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.582477][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.587027][ T50] bond0 (unregistering): Released all slaves [ 453.948692][ T52] Bluetooth: hci2: command tx timeout [ 454.703562][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 454.741686][ T50] hsr_slave_0: left promiscuous mode [ 454.742222][ T50] hsr_slave_1: left promiscuous mode [ 454.743291][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.743309][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.743932][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.743947][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.793656][ T50] veth1_macvtap: left promiscuous mode [ 454.793690][ T50] veth0_macvtap: left promiscuous mode [ 454.793769][ T50] veth1_vlan: left promiscuous mode [ 454.793825][ T50] veth0_vlan: left promiscuous mode [ 455.036697][ T50] team0 (unregistering): Port device team_slave_1 removed [ 455.059048][ T50] team0 (unregistering): Port device team_slave_0 removed [ 456.028487][ T52] Bluetooth: hci2: command tx timeout [ 457.695752][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 458.034323][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.034445][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.034531][T11825] bridge_slave_0: entered allmulticast mode [ 458.036860][T11825] bridge_slave_0: entered promiscuous mode [ 458.108745][ T52] Bluetooth: hci2: command tx timeout [ 458.176782][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.176904][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.177067][T11825] bridge_slave_1: entered allmulticast mode [ 458.178323][T11825] bridge_slave_1: entered promiscuous mode [ 458.336557][T11825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.376255][T11825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.475765][T11825] team0: Port device team_slave_0 added [ 458.495620][T11825] team0: Port device team_slave_1 added [ 458.624474][T11825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.624492][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.624520][T11825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.695475][T11825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.695491][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.695536][T11825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.960129][T11825] hsr_slave_0: entered promiscuous mode [ 458.966556][T11825] hsr_slave_1: entered promiscuous mode [ 458.967105][T11825] debugfs: 'hsr0' already exists in 'hsr' [ 458.967122][T11825] Cannot create hsr debugfs directory [ 460.002010][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 460.188501][ T52] Bluetooth: hci2: command tx timeout [ 463.013391][T11825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 463.035568][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.036221][T11825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 463.054766][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.265438][T11825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 463.281015][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.281682][T11825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 463.287302][T11825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.810936][T11825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.895593][T11825] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.922547][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.922640][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.961100][ T3286] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.961178][ T3286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.083049][T12015] HfR: entered promiscuous mode [ 464.450397][T12031] FAULT_INJECTION: forcing a failure. [ 464.450397][T12031] name failslab, interval 1, probability 0, space 0, times 0 [ 464.450428][T12031] CPU: 0 UID: 0 PID: 12031 Comm: syz.1.784 Not tainted syzkaller #0 PREEMPT(full) [ 464.450451][T12031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.450463][T12031] Call Trace: [ 464.450469][T12031] [ 464.450476][T12031] dump_stack_lvl+0x100/0x190 [ 464.450508][T12031] should_fail_ex.cold+0x5/0xa [ 464.450533][T12031] should_failslab+0xc2/0x120 [ 464.450568][T12031] __kvmalloc_node_noprof+0x113/0x9b0 [ 464.450596][T12031] ? do_raw_spin_lock+0x128/0x260 [ 464.450615][T12031] ? alloc_fdtable+0x17f/0x2d0 [ 464.450640][T12031] alloc_fdtable+0x17f/0x2d0 [ 464.450663][T12031] dup_fd+0x995/0xd10 [ 464.450689][T12031] ? apparmor_task_alloc+0x26d/0x3e0 [ 464.450720][T12031] copy_process+0x2d11/0x8370 [ 464.450751][T12031] ? __pfx_copy_process+0x10/0x10 [ 464.450771][T12031] ? find_held_lock+0x2b/0x80 [ 464.450801][T12031] kernel_clone+0x176/0x9d0 [ 464.450818][T12031] ? find_held_lock+0x2b/0x80 [ 464.450841][T12031] ? __pfx_kernel_clone+0x10/0x10 [ 464.450865][T12031] ? ksys_write+0x190/0x250 [ 464.450886][T12031] ? lock_acquire+0x1d1/0x380 [ 464.450917][T12031] __do_sys_clone+0xd9/0x120 [ 464.450954][T12031] ? __pfx___do_sys_clone+0x10/0x10 [ 464.450973][T12031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 464.451006][T12031] ? ksys_write+0x1ac/0x250 [ 464.451027][T12031] ? __pfx_ksys_write+0x10/0x10 [ 464.451057][T12031] do_syscall_64+0x121/0x770 [ 464.451079][T12031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.451101][T12031] RIP: 0033:0x7f757119e159 [ 464.451118][T12031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.451138][T12031] RSP: 002b:00007f756f3b3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 464.451159][T12031] RAX: ffffffffffffffda RBX: 00007f7571426270 RCX: 00007f757119e159 [ 464.451173][T12031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020a08200 [ 464.451185][T12031] RBP: 00007f756f3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 464.451198][T12031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 464.451210][T12031] R13: 00007f7571426308 R14: 00007f7571426270 R15: 00007fffc9cc29e8 [ 464.451236][T12031] [ 466.410438][T12061] FAULT_INJECTION: forcing a failure. [ 466.410438][T12061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.410468][T12061] CPU: 0 UID: 0 PID: 12061 Comm: syz.0.787 Not tainted syzkaller #0 PREEMPT(full) [ 466.410492][T12061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.410504][T12061] Call Trace: [ 466.410514][T12061] [ 466.410521][T12061] dump_stack_lvl+0x100/0x190 [ 466.410552][T12061] should_fail_ex.cold+0x5/0xa [ 466.410578][T12061] _copy_from_user+0x2e/0xd0 [ 466.410606][T12061] packet_setsockopt+0x1d41/0x2380 [ 466.410653][T12061] ? __lock_acquire+0x5c0/0x1f40 [ 466.410687][T12061] ? __pfx_packet_setsockopt+0x10/0x10 [ 466.410717][T12061] ? aa_sk_perm+0x389/0xab0 [ 466.410751][T12061] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.410771][T12061] ? find_held_lock+0x2b/0x80 [ 466.410795][T12061] ? aa_sock_opt_perm+0x114/0x1e0 [ 466.410822][T12061] ? __pfx_packet_setsockopt+0x10/0x10 [ 466.410853][T12061] do_sock_setsockopt+0xf3/0x1d0 [ 466.410876][T12061] __sys_setsockopt+0x119/0x190 [ 466.410910][T12061] __x64_sys_setsockopt+0xbd/0x160 [ 466.410938][T12061] ? do_syscall_64+0xae/0x770 [ 466.410957][T12061] ? lockdep_hardirqs_on+0x7d/0x110 [ 466.410975][T12061] do_syscall_64+0x121/0x770 [ 466.410996][T12061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.411017][T12061] RIP: 0033:0x7fa99319e159 [ 466.411033][T12061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.411052][T12061] RSP: 002b:00007fa9913f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 466.411072][T12061] RAX: ffffffffffffffda RBX: 00007fa993425fa0 RCX: 00007fa99319e159 [ 466.411085][T12061] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 466.411096][T12061] RBP: 00007fa9913f6090 R08: 0000000000008004 R09: 0000000000000000 [ 466.411108][T12061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.411120][T12061] R13: 00007fa993426038 R14: 00007fa993425fa0 R15: 00007fff9f19e528 [ 466.411145][T12061] [ 466.887182][T11825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.577221][T11825] veth0_vlan: entered promiscuous mode [ 468.617758][T11825] veth1_vlan: entered promiscuous mode [ 468.717557][T11825] veth0_macvtap: entered promiscuous mode [ 468.735878][T11825] veth1_macvtap: entered promiscuous mode [ 468.839852][T11825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.893657][T11825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.939254][ T143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.951440][ T143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.968703][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.970568][ T3286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.375772][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.375792][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.254708][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.254729][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.623877][T12150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 471.624094][T12150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 471.624203][T12150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 471.624309][T12150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 471.624355][T12150] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 471.759395][T12150] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 473.308848][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 473.313159][T12181] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191042774), cmd(3) [ 473.628922][ T9692] Bluetooth: hci2: command 0x0c1a tx timeout [ 473.628967][ T9692] Bluetooth: hci1: command 0x0c1a tx timeout [ 473.629045][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 475.709771][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 477.789235][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 477.816100][T12242] bridge0: port 3(veth1_macvtap) entered blocking state [ 477.816186][T12242] bridge0: port 3(veth1_macvtap) entered disabled state [ 477.816302][T12242] veth1_macvtap: entered allmulticast mode [ 477.818174][T12242] veth1_macvtap: left allmulticast mode [ 483.487231][T12285] HfR: entered promiscuous mode [ 487.907081][T12358] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 491.117037][T12402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.117175][T12402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.117294][T12402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.117401][T12402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.989804][T12424] bridge0: port 3(veth1_macvtap) entered blocking state [ 491.993061][T12424] bridge0: port 3(veth1_macvtap) entered disabled state [ 491.993198][T12424] veth1_macvtap: entered allmulticast mode [ 492.023644][T12424] veth1_macvtap: left allmulticast mode [ 492.988988][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 493.149746][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 493.149780][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 493.149805][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 494.459794][T12446] bridge0: port 4(veth1_macvtap) entered blocking state [ 494.459878][T12446] bridge0: port 4(veth1_macvtap) entered disabled state [ 494.459977][T12446] veth1_macvtap: entered allmulticast mode [ 494.466335][T12446] veth1_macvtap: left allmulticast mode [ 494.791679][T12465] FAULT_INJECTION: forcing a failure. [ 494.791679][T12465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.791779][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz.0.835 Not tainted syzkaller #0 PREEMPT(full) [ 494.791806][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.791822][T12465] Call Trace: [ 494.791853][T12465] [ 494.791860][T12465] dump_stack_lvl+0x100/0x190 [ 494.791994][T12465] should_fail_ex.cold+0x5/0xa [ 494.792062][T12465] _copy_to_user+0x32/0xd0 [ 494.792140][T12465] keyctl_capabilities+0x5a/0x160 [ 494.792224][T12465] __do_sys_keyctl+0x427/0x5a0 [ 494.792259][T12465] do_syscall_64+0x121/0x770 [ 494.792340][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.792371][T12465] RIP: 0033:0x7fa99319e159 [ 494.792390][T12465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.792413][T12465] RSP: 002b:00007fa991351028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 494.792481][T12465] RAX: ffffffffffffffda RBX: 00007fa993426450 RCX: 00007fa99319e159 [ 494.792496][T12465] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 494.792510][T12465] RBP: 00007fa991351090 R08: 00000000000003ff R09: 0000000000000000 [ 494.792524][T12465] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 494.792538][T12465] R13: 00007fa9934264e8 R14: 00007fa993426450 R15: 00007fff9f19e528 [ 494.792567][T12465] [ 495.010040][T12467] BUG: unable to handle page fault for address: ffffc9001421bfe8 [ 495.017795][T12467] #PF: supervisor write access in kernel mode [ 495.023866][T12467] #PF: error_code(0x0002) - not-present page [ 495.029859][T12467] PGD 13fe10067 P4D 13fe10067 PUD 1d2b5067 PMD 63058067 PTE 0 [ 495.037358][T12467] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 495.042736][T12467] CPU: 0 UID: 0 PID: 12467 Comm: syz.1.834 Not tainted syzkaller #0 PREEMPT(full) [ 495.052034][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.062103][T12467] RIP: 0010:write_comp_data+0x7c/0xa0 [ 495.067544][T12467] Code: 00 8b bf 14 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 1b [ 495.087167][T12467] RSP: 0018:ffffc90004b77e80 EFLAGS: 00050257 [ 495.093269][T12467] RAX: ffffc9001421c000 RBX: 0000000000000000 RCX: ffffffff824931d5 [ 495.101253][T12467] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 495.109249][T12467] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 495.117241][T12467] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 495.125214][T12467] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 495.133188][T12467] FS: 00007f756e76c6c0(0000) GS:ffff888123b5a000(0000) knlGS:0000000000000000 [ 495.142136][T12467] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.148727][T12467] CR2: ffffc9001421bfe8 CR3: 000000002ae18000 CR4: 00000000003526f0 [ 495.156703][T12467] Call Trace: [ 495.159978][T12467] [ 495.162908][T12467] rseq_register+0x115/0x350 [ 495.167634][T12467] __x64_sys_rseq+0x1b8/0x2e0 [ 495.172348][T12467] do_syscall_64+0x121/0x770 [ 495.176966][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.182866][T12467] RIP: 0033:0x7f757119e159 [ 495.187301][T12467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.206937][T12467] RSP: 002b:00007f756e76c028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 495.215355][T12467] RAX: ffffffffffffffda RBX: 00007f7571426450 RCX: 00007f757119e159 [ 495.223384][T12467] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 495.231397][T12467] RBP: 00007f757123506b R08: 0000000000000000 R09: 0000000000000000 [ 495.239380][T12467] R10: 0000000008000006 R11: 0000000000000246 R12: 0000000000000000 [ 495.247366][T12467] R13: 00007f75714264e8 R14: 00007f7571426450 R15: 00007fffc9cc29e8 [ 495.255371][T12467] [ 495.258498][T12467] Modules linked in: [ 495.262420][T12467] CR2: ffffc9001421bfe8 [ 495.266590][T12467] ---[ end trace 0000000000000000 ]--- [ 495.272055][T12467] RIP: 0010:write_comp_data+0x7c/0xa0 [ 495.272095][T12467] Code: 00 8b bf 14 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 1b [ 495.272118][T12467] RSP: 0018:ffffc90004b77e80 EFLAGS: 00050257 [ 495.272137][T12467] RAX: ffffc9001421c000 RBX: 0000000000000000 RCX: ffffffff824931d5 [ 495.272153][T12467] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 495.272167][T12467] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 495.272181][T12467] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 495.272195][T12467] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 495.272210][T12467] FS: 00007f756e76c6c0(0000) GS:ffff888123b5a000(0000) knlGS:0000000000000000 [ 495.272232][T12467] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.272248][T12467] CR2: ffffc9001421bfe8 CR3: 000000002ae18000 CR4: 00000000003526f0 [ 495.272265][T12467] Kernel panic - not syncing: Fatal exception [ 495.372728][T12467] Kernel Offset: disabled [ 495.377061][T12467] Rebooting in 86400 seconds..