last executing test programs: 4.60208118s ago: executing program 2 (id=383): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x12ba02, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000180), 0x640040, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/projid_map\x00', 0xa0000, 0x0) prctl$auto(0x23, 0xd, 0x8, 0x0, 0x0) 4.49884421s ago: executing program 2 (id=384): openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x89f2, r0) 3.983166712s ago: executing program 2 (id=389): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = socket(0x2, 0x80002, 0x73) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = fcntl$auto_F_GETOWN(r0, 0x9, 0x9) process_vm_readv$auto(r1, 0x0, 0x8f2, 0x0, 0xffffffffffffffff, 0x3ddc) 2.842488409s ago: executing program 2 (id=393): mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2.839661424s ago: executing program 1 (id=394): memfd_create$auto(0x0, 0xf) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x14) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) 2.236303436s ago: executing program 3 (id=396): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x8000, 0xf9c, 0x466, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x3, 0xb6, 0x4, 0x6, 0x9}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x140, 0x0) 2.188956675s ago: executing program 1 (id=397): socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x1ff, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|3\x1ck\x00'/24, 0x5) ioctl$auto_BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x28) 1.926869497s ago: executing program 3 (id=399): socket(0xa, 0x801, 0x84) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) 1.591145365s ago: executing program 1 (id=400): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000500)={0x40, 0x0, [{0x400000ff, 0x42, 0x6}]}) 1.427989586s ago: executing program 0 (id=401): pwritev$auto(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x3}, 0x4, 0x4, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80000, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf250100000031208be8a5b4f52d83483e5c2d79da46e337d98473588f99774c7eb4868b973c1cef8187525db7b5b4e78678eb59512dbc7b11f4e29c29e3273c870a9555cf469e67e8886341e84d38edd658cf267f92e1e785a50fe500fbc125a65f8a4e5aa458a90f3d87fc71eca6309fc0ee1724cea121a7c96dbba43270448ec20cd22915c1cfa658b316e773d1eff747e371aace10d66450a3666b7be9754bde44d1"], 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) 1.296604282s ago: executing program 0 (id=402): openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x4, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) writev$auto(r0, &(0x7f0000001100)={0x0, 0xe5e7}, 0x1) 1.2719153s ago: executing program 1 (id=403): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x7) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x40000, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=0x3) 1.077051311s ago: executing program 2 (id=404): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) lseek$auto(0x3, 0x2, 0x4) 1.046081455s ago: executing program 3 (id=405): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf7cbe1698a856296}, 0x40090) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r0, 0x0, 0x10001, 0x830) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 962.670349ms ago: executing program 1 (id=406): mmap$auto(0x0, 0x84dd, 0xdf, 0xeb1, 0x401, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177f", 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae79, r1) 855.851296ms ago: executing program 2 (id=407): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) r3 = epoll_create$auto(0x8800001) pipe2$auto(0x0, 0x0) epoll_ctl$auto(r3, 0x1, r1, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000240)=ANY=[@ANYBLOB="e7fdff8d44916c5dbbdd2310000056b103cfe0ed7b3b700442fbf598d28ed0553238b0023f51cd8a9d2df44ce666337d2e04000000000000b7a00ad9bc0046b3eb2f939f3d84dca30cd7b0b6b3ab0bff9bc793b415ef83f68700823d2d2e51b8e19744697dd98dff315a6a6b7794818c02ddb41abb348a4843fc4bccd111ac90afceb162fdee00c84be8872b0ff3f965180d736e81c95f7ea41ebf601f191cf3196494dba303676b4a98a0e446c89b2a566c72ec4b92681653ea44f41e8b7d67e949bff83502a37ade8248d052da08d44ee317c1f3a2ef0b1dfca63a5600561f251f1e06a6e136719549"]) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = pidfd_open$auto(0x1, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r4, &(0x7f0000000100)='/dev/raw-gadget\x00', 0xa) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) dup2$auto(0xffffffffffffffff, 0xffffffffffffffff) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/190, 0xbe) madvise$auto(0x2, 0x7fffffffffffffff, 0x4) 804.228916ms ago: executing program 0 (id=408): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000000100)="19304e3c", 0x4) writev$auto(0xffffffffffffffff, 0x0, 0x9) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) 765.621363ms ago: executing program 3 (id=409): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x28c83, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) ptrace$auto(0xf, r1, 0x1, 0x4053) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{@inferred, 0x0, 0x7, 0x9, "86362c746689ae16423d49e2a5fac50222481f59df3b96ecafc32c611fb62b6a5bf25912cc9eef3b7eecb84e", @inferred=r1}, 0xfffffff8, 0x0, 0x8, @inferred, @enumerated={0x0, 0xe, "063c3f8c31bd55e86cf2db8ad963f8acde068a5d66b9161c0c0e45a531cfd4466ec74dca749cb5dbee3aa6411af4226fea81fed17eb5c3fa4a3fdfef2115a1cc", 0x7, 0x3}, "64308865bdb8fe205493f2f3569408bb7d10494bf8fc846ceedb75db3060a310a150948a4f3363f2b46b45d914b5f8bb0ef5f2140011508bb0bc88e4d72c9001"}) 588.237161ms ago: executing program 0 (id=410): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = eventfd$auto(0x1004) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create$auto(0x1, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4004af07, r0) 385.324054ms ago: executing program 0 (id=411): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x1d, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x14d27e, 0x56) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xfff) copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000080)=0x8, 0x2, 0x0) 378.675138ms ago: executing program 1 (id=412): mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x54) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 353.295476ms ago: executing program 3 (id=413): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) syz_clone3(0x0, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) 109.359169ms ago: executing program 0 (id=414): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto(0x3, 0x80108907, 0xffffffffffffffff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 0s ago: executing program 3 (id=415): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) lseek$auto(0x3, 0x2, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 89.144611][ T5619] cgroup: Unknown subsys name 'net' [ 89.210155][ T5619] cgroup: Unknown subsys name 'cpuset' [ 89.219711][ T5619] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.011435][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.079313][ T9] cfg80211: failed to load regulatory.db [ 92.970344][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.978532][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.990665][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.005257][ T5646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.007029][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.013459][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.029134][ T5646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.032388][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.038121][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.043701][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.052314][ T5649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.059088][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.066442][ T5649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.071928][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.088589][ T4948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.090203][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.103190][ T4948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.105772][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.117848][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.126392][ T4948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.803151][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.810894][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.818356][ T5637] bridge_slave_0: entered allmulticast mode [ 94.825535][ T5637] bridge_slave_0: entered promiscuous mode [ 94.846434][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.853636][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.861234][ T5637] bridge_slave_1: entered allmulticast mode [ 94.868485][ T5637] bridge_slave_1: entered promiscuous mode [ 94.893969][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.901271][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.908837][ T5638] bridge_slave_0: entered allmulticast mode [ 94.915901][ T5638] bridge_slave_0: entered promiscuous mode [ 94.953158][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.960613][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.967936][ T5638] bridge_slave_1: entered allmulticast mode [ 94.975142][ T5638] bridge_slave_1: entered promiscuous mode [ 95.029346][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.038755][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.045977][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.053769][ T5639] bridge_slave_0: entered allmulticast mode [ 95.061173][ T5639] bridge_slave_0: entered promiscuous mode [ 95.089691][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.100137][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.107626][ T5641] Bluetooth: hci1: command tx timeout [ 95.108058][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.120388][ T5639] bridge_slave_1: entered allmulticast mode [ 95.127776][ T5639] bridge_slave_1: entered promiscuous mode [ 95.138115][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.181864][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.196497][ T5641] Bluetooth: hci0: command tx timeout [ 95.196537][ T50] Bluetooth: hci2: command tx timeout [ 95.208239][ T4948] Bluetooth: hci3: command tx timeout [ 95.244327][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.251704][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.259098][ T5636] bridge_slave_0: entered allmulticast mode [ 95.268468][ T5636] bridge_slave_0: entered promiscuous mode [ 95.278409][ T5637] team0: Port device team_slave_0 added [ 95.287269][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.310464][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.317766][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.324950][ T5636] bridge_slave_1: entered allmulticast mode [ 95.332591][ T5636] bridge_slave_1: entered promiscuous mode [ 95.341459][ T5637] team0: Port device team_slave_1 added [ 95.362935][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.374061][ T5638] team0: Port device team_slave_0 added [ 95.415872][ T5638] team0: Port device team_slave_1 added [ 95.433102][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.440238][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.466200][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.502275][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.512964][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.520166][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.546116][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.559148][ T5639] team0: Port device team_slave_0 added [ 95.577449][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.595450][ T5639] team0: Port device team_slave_1 added [ 95.602047][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.609150][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.635115][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.684545][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.691676][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.718086][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.732034][ T5636] team0: Port device team_slave_0 added [ 95.757452][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.764453][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.790446][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.814849][ T5636] team0: Port device team_slave_1 added [ 95.843344][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.850649][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.877060][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.899576][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.907049][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.933095][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.968486][ T5637] hsr_slave_0: entered promiscuous mode [ 95.975023][ T5637] hsr_slave_1: entered promiscuous mode [ 95.982459][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.989662][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.015905][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.047985][ T5638] hsr_slave_0: entered promiscuous mode [ 96.054524][ T5638] hsr_slave_1: entered promiscuous mode [ 96.061415][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 96.067608][ T5638] Cannot create hsr debugfs directory [ 96.157875][ T5636] hsr_slave_0: entered promiscuous mode [ 96.164185][ T5636] hsr_slave_1: entered promiscuous mode [ 96.170618][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 96.176413][ T5636] Cannot create hsr debugfs directory [ 96.188367][ T5639] hsr_slave_0: entered promiscuous mode [ 96.194665][ T5639] hsr_slave_1: entered promiscuous mode [ 96.201796][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 96.207722][ T5639] Cannot create hsr debugfs directory [ 96.656194][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.677215][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.685351][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.699136][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.709364][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.722570][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.731306][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.741469][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.820965][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.832174][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.840805][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.851617][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.865118][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.879259][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.887596][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.898871][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.998937][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.013225][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.030767][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.041241][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.049684][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.060297][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.069877][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.079710][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.188631][ T4948] Bluetooth: hci1: command tx timeout [ 97.202955][ T5639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.213045][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.222246][ T5639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.231621][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.240414][ T5639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.250095][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.261629][ T5639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.270435][ T4948] Bluetooth: hci3: command tx timeout [ 97.270475][ T50] Bluetooth: hci2: command tx timeout [ 97.281297][ T4948] Bluetooth: hci0: command tx timeout [ 97.292032][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.331187][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.401568][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.416013][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.455459][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.463212][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.482515][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.494171][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.501390][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.537626][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.544783][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.570871][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.578021][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.645273][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.722070][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.732384][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.768450][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.775693][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.822555][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.829832][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.866057][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.905778][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.913038][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.964316][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.971595][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.858432][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.948597][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.098133][ T5637] veth0_vlan: entered promiscuous mode [ 99.143185][ T5637] veth1_vlan: entered promiscuous mode [ 99.185783][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.206988][ T5638] veth0_vlan: entered promiscuous mode [ 99.249996][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.267092][ T50] Bluetooth: hci1: command tx timeout [ 99.274581][ T5638] veth1_vlan: entered promiscuous mode [ 99.309012][ T5637] veth0_macvtap: entered promiscuous mode [ 99.335951][ T5637] veth1_macvtap: entered promiscuous mode [ 99.346992][ T50] Bluetooth: hci0: command tx timeout [ 99.349822][ T4948] Bluetooth: hci3: command tx timeout [ 99.352459][ T5641] Bluetooth: hci2: command tx timeout [ 99.408793][ T5639] veth0_vlan: entered promiscuous mode [ 99.424763][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.456905][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.472621][ T5638] veth0_macvtap: entered promiscuous mode [ 99.481665][ T5636] veth0_vlan: entered promiscuous mode [ 99.499059][ T5639] veth1_vlan: entered promiscuous mode [ 99.509890][ T149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.523004][ T5638] veth1_macvtap: entered promiscuous mode [ 99.534945][ T149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.544092][ T149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.555695][ T5636] veth1_vlan: entered promiscuous mode [ 99.571319][ T149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.639192][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.654972][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.709273][ T5639] veth0_macvtap: entered promiscuous mode [ 99.721354][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.731025][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.761012][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.770551][ T5636] veth0_macvtap: entered promiscuous mode [ 99.793273][ T5639] veth1_macvtap: entered promiscuous mode [ 99.801167][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.814704][ T5636] veth1_macvtap: entered promiscuous mode [ 99.841683][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.863784][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.931599][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.942091][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.942805][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.970492][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.003968][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.039749][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.062577][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.082699][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.092563][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.113369][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.127544][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.135434][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.150092][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.159762][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.187184][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.217309][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.270350][ T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.331309][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.342093][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.485858][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.504888][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.572337][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.596349][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.652599][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.669037][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.745002][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.760835][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.197472][ T5800] vivid-007: ================= START STATUS ================= [ 101.219840][ T5800] vivid-007: Enable Output Cropping: true grabbed [ 101.239355][ T5800] vivid-007: Enable Output Composing: true grabbed [ 101.275834][ T5800] vivid-007: Enable Output Scaler: true grabbed [ 101.305228][ T5800] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 101.332250][ T5800] vivid-007: Transmit Mode: HDMI grabbed [ 101.347056][ T5641] Bluetooth: hci1: command tx timeout [ 101.367201][ T5800] vivid-007: Hotplug Present: 0x00000000 [ 101.428703][ T5641] Bluetooth: hci3: command tx timeout [ 101.428746][ T50] Bluetooth: hci2: command tx timeout [ 101.434195][ T4948] Bluetooth: hci0: command tx timeout [ 101.458613][ T5800] vivid-007: RxSense Present: 0x00000000 [ 101.501668][ T5800] vivid-007: EDID Present: 0x00000000 [ 101.526962][ T5792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'. [ 101.570919][ T5800] vivid-007: ================== END STATUS ================== [ 102.451796][ T5805] syz.2.3(5805): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 102.602795][ T29] audit: type=1800 audit(1781141812.548:2): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7" name="lu_gp_id" dev="configfs" ino=7837 res=0 errno=0 [ 103.834094][ T5832] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.882788][ T5851] kAFS: unparsable volume name [ 104.992020][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 107.011204][ T5870] syz.1.19 (5870) used greatest stack depth: 18472 bytes left [ 107.819989][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.009620][ T5916] netlink: 'syz.2.38': attribute type 3 has an invalid length. [ 108.017452][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 108.301084][ T5922] binder: 5921:5922 ioctl c0306201 0 returned -14 [ 108.814812][ T5938] openvswitch: netlink: IPv4 tunnel dst address is zero [ 109.128453][ T5946] netlink: 'syz.1.48': attribute type 3 has an invalid length. [ 109.128501][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 109.558262][ T5959] netlink: 342 bytes leftover after parsing attributes in process `syz.0.52'. [ 109.598038][ T5959] Zero length message leads to an empty skb [ 109.638224][ T5959] netlink: 342 bytes leftover after parsing attributes in process `syz.0.52'. [ 110.185141][ T5975] netlink: 342 bytes leftover after parsing attributes in process `syz.3.56'. [ 110.214279][ T5975] netlink: 342 bytes leftover after parsing attributes in process `syz.3.56'. [ 110.978839][ T5990] usb usb3: usbfs: process 5990 (syz.1.62) did not claim interface 0 before use [ 111.449636][ T6008] netlink: 342 bytes leftover after parsing attributes in process `syz.3.68'. [ 111.487116][ T6008] netlink: 342 bytes leftover after parsing attributes in process `syz.3.68'. [ 111.825861][ T29] audit: type=1800 audit(1781141821.768:3): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.73" name="lu_gp_id" dev="configfs" ino=9387 res=0 errno=0 [ 112.155789][ T6026] binder: 6025:6026 ioctl c0046209 3 returned -22 [ 113.032522][ T6048] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 113.346694][ T29] audit: type=1800 audit(1781141823.288:4): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.86" name="lu_gp_id" dev="configfs" ino=9528 res=0 errno=0 [ 113.521010][ T6057] netlink: 342 bytes leftover after parsing attributes in process `syz.1.87'. [ 113.555399][ T6057] netlink: 342 bytes leftover after parsing attributes in process `syz.1.87'. [ 113.770999][ T6070] netlink: 'syz.3.93': attribute type 3 has an invalid length. [ 113.788724][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 114.509562][ T6093] netlink: 342 bytes leftover after parsing attributes in process `syz.0.100'. [ 114.632277][ T6090] netlink: 342 bytes leftover after parsing attributes in process `syz.0.100'. [ 114.663627][ T6100] netlink: 'syz.2.105': attribute type 3 has an invalid length. [ 114.682545][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 115.231229][ T6111] netlink: 342 bytes leftover after parsing attributes in process `syz.3.107'. [ 115.243764][ T6111] netlink: 342 bytes leftover after parsing attributes in process `syz.3.107'. [ 115.523291][ T6121] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd23 [ 115.835941][ T6125] netlink: 342 bytes leftover after parsing attributes in process `syz.0.111'. [ 115.947223][ T6124] netlink: 342 bytes leftover after parsing attributes in process `syz.0.111'. [ 116.189167][ T6132] netlink: 'syz.1.115': attribute type 3 has an invalid length. [ 117.260498][ T6160] netlink: 'syz.2.125': attribute type 3 has an invalid length. [ 118.777559][ T6189] __nla_validate_parse: 10 callbacks suppressed [ 118.777585][ T6189] netlink: 342 bytes leftover after parsing attributes in process `syz.1.134'. [ 118.878939][ T29] audit: type=1800 audit(1781141828.828:5): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.132" name="lu_gp_id" dev="configfs" ino=9797 res=0 errno=0 [ 118.880856][ T6189] netlink: 342 bytes leftover after parsing attributes in process `syz.1.134'. [ 119.427122][ T6201] netlink: 342 bytes leftover after parsing attributes in process `syz.3.138'. [ 119.483614][ T6201] netlink: 342 bytes leftover after parsing attributes in process `syz.3.138'. [ 119.787731][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 120.473419][ T6222] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.145466][ T6231] netlink: 342 bytes leftover after parsing attributes in process `syz.2.146'. [ 121.161656][ T6231] netlink: 342 bytes leftover after parsing attributes in process `syz.2.146'. [ 121.515895][ T6244] capability: warning: `syz.3.152' uses 32-bit capabilities (legacy support in use) [ 122.142767][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 123.523511][ T6286] netlink: 342 bytes leftover after parsing attributes in process `syz.3.163'. [ 123.611706][ T6289] ======================================================= [ 123.611706][ T6289] WARNING: The mand mount option has been deprecated and [ 123.611706][ T6289] and is ignored by this kernel. Remove the mand [ 123.611706][ T6289] option from the mount to silence this warning. [ 123.611706][ T6289] ======================================================= [ 123.708654][ T6282] netlink: 342 bytes leftover after parsing attributes in process `syz.3.163'. [ 124.503095][ T6317] netlink: 'syz.1.178': attribute type 3 has an invalid length. [ 124.547870][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 124.695666][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 125.162519][ T6337] netlink: 342 bytes leftover after parsing attributes in process `syz.0.184'. [ 125.185183][ T6337] netlink: 342 bytes leftover after parsing attributes in process `syz.0.184'. [ 126.057096][ T6365] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 126.057155][ T6365] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 126.695842][ T6387] netlink: 342 bytes leftover after parsing attributes in process `syz.3.200'. [ 126.735244][ T6387] netlink: 342 bytes leftover after parsing attributes in process `syz.3.200'. [ 127.345203][ T6399] netlink: 342 bytes leftover after parsing attributes in process `syz.1.204'. [ 127.381792][ T6399] netlink: 342 bytes leftover after parsing attributes in process `syz.1.204'. [ 127.883608][ T29] audit: type=1800 audit(1781141837.828:6): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="lu_gp_id" dev="configfs" ino=11319 res=0 errno=0 [ 128.939299][ T6434] netlink: 342 bytes leftover after parsing attributes in process `syz.0.216'. [ 128.984274][ T6434] netlink: 342 bytes leftover after parsing attributes in process `syz.0.216'. [ 129.881749][ T6461] netlink: 'syz.0.228': attribute type 3 has an invalid length. [ 129.925389][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 129.958494][ T6463] netlink: 342 bytes leftover after parsing attributes in process `syz.1.227'. [ 130.005808][ T6463] netlink: 342 bytes leftover after parsing attributes in process `syz.1.227'. [ 130.424823][ T6474] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 130.634712][ T6482] netlink: 342 bytes leftover after parsing attributes in process `syz.2.234'. [ 130.725274][ T6479] netlink: 342 bytes leftover after parsing attributes in process `syz.2.234'. [ 130.810741][ T6486] netlink: 342 bytes leftover after parsing attributes in process `syz.3.236'. [ 130.869627][ T6486] netlink: 342 bytes leftover after parsing attributes in process `syz.3.236'. [ 130.888702][ T6490] Format for adding new port is "id [perm_addr]" (uint MAC). [ 131.000009][ T6484] could not allocate digest TFM handle [ 131.785943][ T5641] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 132.029727][ T29] audit: type=1800 audit(1781141841.978:7): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.247" name="lu_gp_id" dev="configfs" ino=11511 res=0 errno=0 [ 132.061969][ T6516] binder: 6514:6516 ioctl c00c620f 200000000d40 returned -22 [ 132.312934][ T6519] netlink: 342 bytes leftover after parsing attributes in process `syz.2.250'. [ 132.346565][ T6519] netlink: 342 bytes leftover after parsing attributes in process `syz.2.250'. [ 132.461733][ T6528] netlink: 342 bytes leftover after parsing attributes in process `syz.0.253'. [ 133.032927][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.043446][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.113571][ T6538] syz.3.257 uses obsolete (PF_INET,SOCK_PACKET) [ 133.928685][ T29] audit: type=1800 audit(1781141843.878:8): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.263" name="lu_gp_id" dev="configfs" ino=11610 res=0 errno=0 [ 135.209517][ T6596] netlink: 'syz.1.276': attribute type 64 has an invalid length. [ 135.235846][ T6596] __nla_validate_parse: 3 callbacks suppressed [ 135.235873][ T6596] netlink: 74 bytes leftover after parsing attributes in process `syz.1.276'. [ 135.463110][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 135.487545][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 135.498157][ T5641] Bluetooth: hci3: unexpected subevent 0x05 length: 123 > 12 [ 135.706938][ T6610] netlink: 342 bytes leftover after parsing attributes in process `syz.1.281'. [ 135.748823][ T6610] netlink: 342 bytes leftover after parsing attributes in process `syz.1.281'. [ 135.790409][ T6617] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 135.806341][ T29] audit: type=1800 audit(1781141845.748:9): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.282" name="lu_gp_id" dev="configfs" ino=11694 res=0 errno=0 [ 136.048710][ T6621] netlink: 334 bytes leftover after parsing attributes in process `syz.3.286'. [ 136.415204][ T6626] process 'syz.3.287' launched './file0' with NULL argv: empty string added [ 136.909548][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 137.175075][ T29] audit: type=1800 audit(1781141847.118:10): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.294" name="lu_gp_id" dev="configfs" ino=11744 res=0 errno=0 [ 137.251039][ T6652] netlink: 342 bytes leftover after parsing attributes in process `syz.2.293'. [ 137.311723][ T6652] netlink: 342 bytes leftover after parsing attributes in process `syz.2.293'. [ 137.507799][ T5641] Bluetooth: hci3: command tx timeout [ 138.260040][ T6669] netlink: 342 bytes leftover after parsing attributes in process `syz.0.298'. [ 138.547273][ T6678] HfR: entered promiscuous mode [ 139.001018][ T6688] sctp: [Deprecated]: syz.0.304 (pid 6688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.001018][ T6688] Use struct sctp_sack_info instead [ 139.170053][ T6693] FAULT_INJECTION: forcing a failure. [ 139.170053][ T6693] name failslab, interval 1, probability 0, space 0, times 0 [ 139.195151][ T6693] CPU: 1 UID: 0 PID: 6693 Comm: syz.2.305 Not tainted syzkaller #0 PREEMPT(full) [ 139.195194][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.195211][ T6693] Call Trace: [ 139.195222][ T6693] [ 139.195234][ T6693] dump_stack_lvl+0x100/0x190 [ 139.195293][ T6693] should_fail_ex.cold+0x5/0xa [ 139.195334][ T6693] should_failslab+0xc2/0x120 [ 139.195371][ T6693] __kmalloc_cache_noprof+0x7a/0x6f0 [ 139.195415][ T6693] ? snd_timer_user_open+0x6b/0x180 [ 139.195475][ T6693] ? __pfx_snd_timer_user_open+0x10/0x10 [ 139.195521][ T6693] snd_timer_user_open+0x6b/0x180 [ 139.195567][ T6693] snd_open+0x201/0x450 [ 139.195609][ T6693] ? __pfx_snd_open+0x10/0x10 [ 139.195650][ T6693] chrdev_open+0x234/0x6a0 [ 139.195689][ T6693] ? __pfx_apparmor_file_open+0x10/0x10 [ 139.195724][ T6693] ? __pfx_chrdev_open+0x10/0x10 [ 139.195765][ T6693] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 139.195815][ T6693] do_dentry_open+0x6ab/0x14d0 [ 139.195852][ T6693] ? __pfx_chrdev_open+0x10/0x10 [ 139.195900][ T6693] vfs_open+0x82/0x3f0 [ 139.195949][ T6693] path_openat+0x208c/0x31a0 [ 139.196002][ T6693] ? __pfx_path_openat+0x10/0x10 [ 139.196056][ T6693] do_file_open+0x20e/0x430 [ 139.196095][ T6693] ? __pfx_do_file_open+0x10/0x10 [ 139.196158][ T6693] ? alloc_fd+0x476/0x790 [ 139.196202][ T6693] ? do_getname+0x191/0x390 [ 139.196245][ T6693] do_sys_openat2+0x10d/0x1e0 [ 139.196290][ T6693] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.196336][ T6693] ? __fget_files+0x21f/0x3d0 [ 139.196377][ T6693] __x64_sys_openat+0x12d/0x210 [ 139.196424][ T6693] ? __pfx___x64_sys_openat+0x10/0x10 [ 139.196487][ T6693] ? rcu_is_watching+0x12/0xc0 [ 139.196527][ T6693] do_syscall_64+0x115/0x840 [ 139.196568][ T6693] ? clear_bhb_loop+0x40/0x90 [ 139.196606][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.196637][ T6693] RIP: 0033:0x7fdae179ce59 [ 139.196663][ T6693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.196692][ T6693] RSP: 002b:00007fdadf9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.196722][ T6693] RAX: ffffffffffffffda RBX: 00007fdae1a15fa0 RCX: 00007fdae179ce59 [ 139.196741][ T6693] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 139.196759][ T6693] RBP: 00007fdae1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 139.196777][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.196794][ T6693] R13: 00007fdae1a16038 R14: 00007fdae1a15fa0 R15: 00007ffd89c062c8 [ 139.196834][ T6693] [ 140.341057][ T29] audit: type=1800 audit(1781141850.288:11): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.311" name="lu_gp_id" dev="configfs" ino=12014 res=0 errno=0 [ 140.892334][ T29] audit: type=1800 audit(1781141850.838:12): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.314" name="lu_gp_id" dev="configfs" ino=11229 res=0 errno=0 [ 141.630680][ T6749] __nla_validate_parse: 2 callbacks suppressed [ 141.630706][ T6749] netlink: 342 bytes leftover after parsing attributes in process `syz.3.320'. [ 141.660327][ T29] audit: type=1800 audit(1781141851.598:13): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="lu_gp_id" dev="configfs" ino=12218 res=0 errno=0 [ 141.703509][ T6753] netlink: 342 bytes leftover after parsing attributes in process `syz.3.320'. [ 142.239023][ T6759] sctp: [Deprecated]: syz.1.324 (pid 6759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.239023][ T6759] Use struct sctp_sack_info instead [ 142.972532][ T6780] netlink: 342 bytes leftover after parsing attributes in process `syz.1.328'. [ 142.983888][ T6780] netlink: 342 bytes leftover after parsing attributes in process `syz.1.328'. [ 143.249133][ T6783] FAULT_INJECTION: forcing a failure. [ 143.249133][ T6783] name failslab, interval 1, probability 0, space 0, times 0 [ 143.263935][ T6783] CPU: 1 UID: 0 PID: 6783 Comm: syz.3.331 Not tainted syzkaller #0 PREEMPT(full) [ 143.263977][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.263994][ T6783] Call Trace: [ 143.264004][ T6783] [ 143.264015][ T6783] dump_stack_lvl+0x100/0x190 [ 143.264073][ T6783] should_fail_ex.cold+0x5/0xa [ 143.264112][ T6783] should_failslab+0xc2/0x120 [ 143.264147][ T6783] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 143.264194][ T6783] ? alloc_empty_file+0x5b/0x1c0 [ 143.264247][ T6783] alloc_empty_file+0x5b/0x1c0 [ 143.264293][ T6783] path_openat+0xe8/0x31a0 [ 143.264345][ T6783] ? __pfx_path_openat+0x10/0x10 [ 143.264397][ T6783] do_file_open+0x20e/0x430 [ 143.264436][ T6783] ? __pfx_do_file_open+0x10/0x10 [ 143.264511][ T6783] ? alloc_fd+0x476/0x790 [ 143.264555][ T6783] ? do_getname+0x191/0x390 [ 143.264603][ T6783] do_sys_openat2+0x10d/0x1e0 [ 143.264647][ T6783] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.264706][ T6783] __x64_sys_openat+0x12d/0x210 [ 143.264752][ T6783] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.264792][ T6783] ? find_held_lock+0x2b/0x80 [ 143.264833][ T6783] ? rcu_is_watching+0x12/0xc0 [ 143.264872][ T6783] do_syscall_64+0x115/0x840 [ 143.264912][ T6783] ? clear_bhb_loop+0x40/0x90 [ 143.264947][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.264975][ T6783] RIP: 0033:0x7f3d1a15d68e [ 143.265001][ T6783] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.265027][ T6783] RSP: 002b:00007f3d1b08fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.265057][ T6783] RAX: ffffffffffffffda RBX: 00007f3d1b0906c0 RCX: 00007f3d1a15d68e [ 143.265076][ T6783] RDX: 0000000000000002 RSI: 00007f3d1b08ff90 RDI: ffffffffffffff9c [ 143.265096][ T6783] RBP: 00007f3d1a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 143.265113][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.265131][ T6783] R13: 00007f3d1a416038 R14: 00007f3d1a415fa0 R15: 00007ffd066d0288 [ 143.265169][ T6783] [ 144.101375][ T6798] netlink: 342 bytes leftover after parsing attributes in process `syz.1.335'. [ 144.133302][ T6798] netlink: 342 bytes leftover after parsing attributes in process `syz.1.335'. [ 144.330337][ T6804] FAULT_INJECTION: forcing a failure. [ 144.330337][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 144.365046][ T6807] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 144.372845][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(full) [ 144.372883][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.372897][ T6804] Call Trace: [ 144.372914][ T6804] [ 144.372925][ T6804] dump_stack_lvl+0x100/0x190 [ 144.372975][ T6804] should_fail_ex.cold+0x5/0xa [ 144.373014][ T6804] should_failslab+0xc2/0x120 [ 144.373046][ T6804] __kmalloc_node_noprof+0xe6/0x850 [ 144.373086][ T6804] ? alloc_slab_obj_exts+0xae/0x270 [ 144.373128][ T6804] alloc_slab_obj_exts+0xae/0x270 [ 144.373168][ T6804] __memcg_slab_post_alloc_hook+0x3c2/0xff0 [ 144.373216][ T6804] ? kasan_save_track+0x14/0x30 [ 144.373246][ T6804] kmem_cache_alloc_noprof+0x58a/0x6e0 [ 144.373285][ T6804] ? prepare_creds+0x2c/0x950 [ 144.373318][ T6804] prepare_creds+0x2c/0x950 [ 144.373347][ T6804] __sys_setuid+0x9c/0x440 [ 144.373379][ T6804] do_syscall_64+0x115/0x840 [ 144.373413][ T6804] ? clear_bhb_loop+0x40/0x90 [ 144.373445][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.373472][ T6804] RIP: 0033:0x7fbc4c39ce59 [ 144.373494][ T6804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.373519][ T6804] RSP: 002b:00007fbc4d1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 144.373547][ T6804] RAX: ffffffffffffffda RBX: 00007fbc4c615fa0 RCX: 00007fbc4c39ce59 [ 144.373565][ T6804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 144.373580][ T6804] RBP: 00007fbc4c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 144.373595][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.373610][ T6804] R13: 00007fbc4c616038 R14: 00007fbc4c615fa0 R15: 00007ffde5c72cb8 [ 144.373645][ T6804] [ 145.059848][ T6819] KVM: debugfs: duplicate directory 6819-3 [ 145.157487][ T6820] netlink: 342 bytes leftover after parsing attributes in process `syz.2.342'. [ 145.215081][ T6820] netlink: 342 bytes leftover after parsing attributes in process `syz.2.342'. [ 145.233934][ T6821] netlink: 342 bytes leftover after parsing attributes in process `syz.0.343'. [ 145.248039][ T6821] netlink: 342 bytes leftover after parsing attributes in process `syz.0.343'. [ 145.386452][ T6827] netlink: 'syz.1.345': attribute type 3 has an invalid length. [ 146.829587][ T29] audit: type=1800 audit(1781141856.778:14): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.352" name="lu_gp_id" dev="configfs" ino=12483 res=0 errno=0 [ 147.027069][ T6857] __nla_validate_parse: 1 callbacks suppressed [ 147.027191][ T6857] netlink: 342 bytes leftover after parsing attributes in process `syz.0.355'. [ 147.095229][ T6857] netlink: 342 bytes leftover after parsing attributes in process `syz.0.355'. [ 147.369832][ T6867] netlink: 342 bytes leftover after parsing attributes in process `syz.2.357'. [ 147.492873][ T6866] netlink: 342 bytes leftover after parsing attributes in process `syz.2.357'. [ 147.993122][ T6879] netlink: 342 bytes leftover after parsing attributes in process `syz.0.360'. [ 148.012200][ T6879] netlink: 342 bytes leftover after parsing attributes in process `syz.0.360'. [ 148.665736][ T6887] FAULT_INJECTION: forcing a failure. [ 148.665736][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 148.711668][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.2.364 Not tainted syzkaller #0 PREEMPT(full) [ 148.711710][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.711726][ T6887] Call Trace: [ 148.711737][ T6887] [ 148.711749][ T6887] dump_stack_lvl+0x100/0x190 [ 148.711803][ T6887] should_fail_ex.cold+0x5/0xa [ 148.711849][ T6887] ? constrain_params_by_rules+0x175/0xcc0 [ 148.711895][ T6887] should_failslab+0xc2/0x120 [ 148.711930][ T6887] __kmalloc_noprof+0xe0/0x850 [ 148.711976][ T6887] ? kasan_quarantine_put+0x104/0x240 [ 148.712011][ T6887] constrain_params_by_rules+0x175/0xcc0 [ 148.712055][ T6887] ? kfree+0x223/0x6c0 [ 148.712101][ T6887] ? constrain_params_by_rules+0xa22/0xcc0 [ 148.712151][ T6887] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 148.712206][ T6887] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 148.712262][ T6887] ? snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 148.712304][ T6887] ? snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 148.712348][ T6887] ? snd_interval_refine+0x2d0/0x580 [ 148.712384][ T6887] snd_pcm_hw_refine+0x7e7/0xad0 [ 148.712436][ T6887] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 148.712489][ T6887] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 148.712549][ T6887] snd_pcm_hw_param_first+0x2b0/0x680 [ 148.712599][ T6887] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 148.712646][ T6887] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 148.712690][ T6887] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 148.712736][ T6887] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 148.712789][ T6887] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 148.712861][ T6887] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 148.712901][ T6887] ? __pfx___mutex_lock+0x10/0x10 [ 148.712942][ T6887] ? find_held_lock+0x2b/0x80 [ 148.712978][ T6887] ? tomoyo_path_number_perm+0x28f/0x580 [ 148.713030][ T6887] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 148.713066][ T6887] ? futex_wait+0x11e/0x370 [ 148.713110][ T6887] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 148.713160][ T6887] snd_pcm_oss_get_formats+0x7d/0x350 [ 148.713203][ T6887] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 148.713253][ T6887] snd_pcm_oss_ioctl+0x1853/0x37c0 [ 148.713294][ T6887] ? find_held_lock+0x2b/0x80 [ 148.713328][ T6887] ? __fget_files+0x215/0x3d0 [ 148.713357][ T6887] ? hook_file_ioctl_common+0x149/0x410 [ 148.713396][ T6887] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 148.713444][ T6887] ? __fget_files+0x21f/0x3d0 [ 148.713480][ T6887] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 148.713524][ T6887] __x64_sys_ioctl+0x18e/0x210 [ 148.713557][ T6887] do_syscall_64+0x115/0x840 [ 148.713595][ T6887] ? clear_bhb_loop+0x40/0x90 [ 148.713631][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.713658][ T6887] RIP: 0033:0x7fdae179ce59 [ 148.713683][ T6887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.713711][ T6887] RSP: 002b:00007fdadf9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.713741][ T6887] RAX: ffffffffffffffda RBX: 00007fdae1a15fa0 RCX: 00007fdae179ce59 [ 148.713761][ T6887] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 148.713777][ T6887] RBP: 00007fdae1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 148.713795][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.713811][ T6887] R13: 00007fdae1a16038 R14: 00007fdae1a15fa0 R15: 00007ffd89c062c8 [ 148.713859][ T6887] [ 148.803019][ T6890] netlink: 342 bytes leftover after parsing attributes in process `syz.1.365'. [ 149.065145][ T6891] netlink: 342 bytes leftover after parsing attributes in process `syz.1.365'. [ 149.553691][ T6903] netlink: 342 bytes leftover after parsing attributes in process `syz.3.369'. [ 149.758503][ T6902] netlink: 342 bytes leftover after parsing attributes in process `syz.3.369'. [ 150.693610][ T6926] FAULT_INJECTION: forcing a failure. [ 150.693610][ T6926] name failslab, interval 1, probability 0, space 0, times 0 [ 150.754663][ T6926] CPU: 1 UID: 0 PID: 6926 Comm: syz.2.377 Not tainted syzkaller #0 PREEMPT(full) [ 150.754705][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.754722][ T6926] Call Trace: [ 150.754733][ T6926] [ 150.754744][ T6926] dump_stack_lvl+0x100/0x190 [ 150.754803][ T6926] should_fail_ex.cold+0x5/0xa [ 150.754841][ T6926] should_failslab+0xc2/0x120 [ 150.754884][ T6926] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 150.754931][ T6926] ? sk_prot_alloc+0x60/0x2a0 [ 150.754976][ T6926] sk_prot_alloc+0x60/0x2a0 [ 150.755017][ T6926] sk_alloc+0x36/0xe80 [ 150.755045][ T6926] rds_create+0x9e/0x5f0 [ 150.755087][ T6926] __sock_create+0x339/0x860 [ 150.755134][ T6926] __sys_socket+0x14d/0x260 [ 150.755175][ T6926] ? __pfx___sys_socket+0x10/0x10 [ 150.755215][ T6926] ? exit_to_user_mode_loop+0xf3/0x670 [ 150.755273][ T6926] __x64_sys_socket+0x72/0xb0 [ 150.755313][ T6926] ? lockdep_hardirqs_on+0x78/0x100 [ 150.755355][ T6926] do_syscall_64+0x115/0x840 [ 150.755392][ T6926] ? clear_bhb_loop+0x40/0x90 [ 150.755429][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.755460][ T6926] RIP: 0033:0x7fdae179ce59 [ 150.755484][ T6926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.755510][ T6926] RSP: 002b:00007fdadf9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 150.755544][ T6926] RAX: ffffffffffffffda RBX: 00007fdae1a15fa0 RCX: 00007fdae179ce59 [ 150.755563][ T6926] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 150.755580][ T6926] RBP: 00007fdae1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 150.755596][ T6926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.755613][ T6926] R13: 00007fdae1a16038 R14: 00007fdae1a15fa0 R15: 00007ffd89c062c8 [ 150.755649][ T6926] [ 150.828092][ T6919] hub 1-0:1.0: USB hub found [ 151.126157][ T6919] hub 1-0:1.0: 1 port detected [ 151.243542][ T29] audit: type=1800 audit(1781141861.188:15): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.379" name="lu_gp_id" dev="configfs" ino=13859 res=0 errno=0 [ 152.142652][ T29] audit: type=1800 audit(1781141862.088:16): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.387" name="lu_gp_id" dev="configfs" ino=13985 res=0 errno=0 [ 152.693980][ T6970] FAULT_INJECTION: forcing a failure. [ 152.693980][ T6970] name failslab, interval 1, probability 0, space 0, times 0 [ 152.719536][ T6970] CPU: 1 UID: 0 PID: 6970 Comm: syz.3.390 Not tainted syzkaller #0 PREEMPT(full) [ 152.719580][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.719598][ T6970] Call Trace: [ 152.719608][ T6970] [ 152.719620][ T6970] dump_stack_lvl+0x100/0x190 [ 152.719678][ T6970] should_fail_ex.cold+0x5/0xa [ 152.719718][ T6970] should_failslab+0xc2/0x120 [ 152.719752][ T6970] __kmalloc_cache_noprof+0x7a/0x6f0 [ 152.719794][ T6970] ? subdev_open+0x7f/0x510 [ 152.719834][ T6970] subdev_open+0x7f/0x510 [ 152.719868][ T6970] v4l2_open+0x1d2/0x490 [ 152.719911][ T6970] ? __pfx_v4l2_open+0x10/0x10 [ 152.719953][ T6970] chrdev_open+0x234/0x6a0 [ 152.719990][ T6970] ? __pfx_apparmor_file_open+0x10/0x10 [ 152.720024][ T6970] ? __pfx_chrdev_open+0x10/0x10 [ 152.720064][ T6970] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 152.720113][ T6970] do_dentry_open+0x6ab/0x14d0 [ 152.720150][ T6970] ? __pfx_chrdev_open+0x10/0x10 [ 152.720194][ T6970] vfs_open+0x82/0x3f0 [ 152.720241][ T6970] path_openat+0x208c/0x31a0 [ 152.720293][ T6970] ? futex_unqueue+0x13d/0x2c0 [ 152.720322][ T6970] ? stack_depot_save_flags+0x27/0x9d0 [ 152.720367][ T6970] ? __pfx_path_openat+0x10/0x10 [ 152.720406][ T6970] ? kasan_save_stack+0x3f/0x50 [ 152.720434][ T6970] ? kasan_save_stack+0x30/0x50 [ 152.720462][ T6970] ? kasan_save_track+0x14/0x30 [ 152.720488][ T6970] ? __kasan_slab_alloc+0x89/0x90 [ 152.720519][ T6970] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 152.720561][ T6970] ? do_getname+0x35/0x390 [ 152.720608][ T6970] do_file_open+0x20e/0x430 [ 152.720651][ T6970] ? __pfx_do_file_open+0x10/0x10 [ 152.720723][ T6970] ? find_held_lock+0x2b/0x80 [ 152.720759][ T6970] ? __might_fault+0xc5/0x140 [ 152.720804][ T6970] ? __might_fault+0xc5/0x140 [ 152.720855][ T6970] file_open_name+0x198/0x3b0 [ 152.720903][ T6970] ? __pfx_file_open_name+0x10/0x10 [ 152.720959][ T6970] ? do_getname+0x191/0x390 [ 152.721002][ T6970] acct_on+0xa4/0x9e0 [ 152.721035][ T6970] ? __pfx_acct_on+0x10/0x10 [ 152.721070][ T6970] ? bpf_lsm_capable+0x9/0x10 [ 152.721099][ T6970] ? security_capable+0x80/0x260 [ 152.721133][ T6970] __x64_sys_acct+0x81/0x1e0 [ 152.721162][ T6970] ? lockdep_hardirqs_on+0x78/0x100 [ 152.721201][ T6970] do_syscall_64+0x115/0x840 [ 152.721243][ T6970] ? clear_bhb_loop+0x40/0x90 [ 152.721288][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.721320][ T6970] RIP: 0033:0x7f3d1a19ce59 [ 152.721345][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.721372][ T6970] RSP: 002b:00007f3d1b090028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 152.721401][ T6970] RAX: ffffffffffffffda RBX: 00007f3d1a415fa0 RCX: 00007f3d1a19ce59 [ 152.721419][ T6970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 152.721435][ T6970] RBP: 00007f3d1a232d6f R08: 0000000000000000 R09: 0000000000000000 [ 152.721453][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.721471][ T6970] R13: 00007f3d1a416038 R14: 00007f3d1a415fa0 R15: 00007ffd066d0288 [ 152.721512][ T6970] [ 153.572897][ T6985] FAULT_INJECTION: forcing a failure. [ 153.572897][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 153.626335][ T6985] CPU: 1 UID: 0 PID: 6985 Comm: syz.1.394 Not tainted syzkaller #0 PREEMPT(full) [ 153.626378][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.626396][ T6985] Call Trace: [ 153.626406][ T6985] [ 153.626418][ T6985] dump_stack_lvl+0x100/0x190 [ 153.626480][ T6985] should_fail_ex.cold+0x5/0xa [ 153.626519][ T6985] should_failslab+0xc2/0x120 [ 153.626554][ T6985] __kmalloc_cache_noprof+0x7a/0x6f0 [ 153.626598][ T6985] ? do_kimage_alloc_init+0x40/0x320 [ 153.626648][ T6985] do_kimage_alloc_init+0x40/0x320 [ 153.626690][ T6985] do_kexec_load+0x11b/0x810 [ 153.626738][ T6985] ? __pfx_do_kexec_load+0x10/0x10 [ 153.626786][ T6985] ? _copy_from_user+0x59/0xd0 [ 153.626833][ T6985] __x64_sys_kexec_load+0x1bf/0x230 [ 153.626880][ T6985] do_syscall_64+0x115/0x840 [ 153.626921][ T6985] ? clear_bhb_loop+0x40/0x90 [ 153.626955][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.626984][ T6985] RIP: 0033:0x7fe3d959ce59 [ 153.627011][ T6985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.627041][ T6985] RSP: 002b:00007fe3da440028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 153.627070][ T6985] RAX: ffffffffffffffda RBX: 00007fe3d9815fa0 RCX: 00007fe3d959ce59 [ 153.627090][ T6985] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 153.627108][ T6985] RBP: 00007fe3d9632d6f R08: 0000000000000000 R09: 0000000000000000 [ 153.627124][ T6985] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 153.627141][ T6985] R13: 00007fe3d9816038 R14: 00007fe3d9815fa0 R15: 00007fffa06b6958 [ 153.627180][ T6985] [ 154.177590][ T5641] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 154.195885][ T5641] Bluetooth: hci1: unexpected event 0x08 length: 6 > 4 [ 154.286879][ T6998] FAULT_INJECTION: forcing a failure. [ 154.286879][ T6998] name failslab, interval 1, probability 0, space 0, times 0 [ 154.318509][ T6998] CPU: 1 UID: 0 PID: 6998 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(full) [ 154.318559][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.318577][ T6998] Call Trace: [ 154.318587][ T6998] [ 154.318598][ T6998] dump_stack_lvl+0x100/0x190 [ 154.318658][ T6998] should_fail_ex.cold+0x5/0xa [ 154.318697][ T6998] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 154.318730][ T6998] should_failslab+0xc2/0x120 [ 154.318767][ T6998] __kmalloc_noprof+0xe0/0x850 [ 154.318825][ T6998] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 154.318861][ T6998] vb2_core_reqbufs+0x382/0xf30 [ 154.318902][ T6998] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 154.318954][ T6998] __vb2_init_fileio+0x32d/0x1000 [ 154.318989][ T6998] ? aa_file_perm+0x7f3/0x14d0 [ 154.319044][ T6998] __vb2_perform_fileio+0x91e/0x1380 [ 154.319089][ T6998] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 154.319125][ T6998] ? __pfx___might_resched+0x10/0x10 [ 154.319170][ T6998] vb2_fop_read+0x211/0x520 [ 154.319209][ T6998] v4l2_read+0x229/0x2c0 [ 154.319255][ T6998] ? __pfx_v4l2_read+0x10/0x10 [ 154.319302][ T6998] vfs_read+0x1e4/0xb30 [ 154.319343][ T6998] ? __pfx_vfs_read+0x10/0x10 [ 154.319374][ T6998] ? find_held_lock+0x2b/0x80 [ 154.319411][ T6998] ? __fget_files+0x215/0x3d0 [ 154.319456][ T6998] ? __fget_files+0x215/0x3d0 [ 154.319497][ T6998] ? __fget_files+0x21f/0x3d0 [ 154.319544][ T6998] ksys_read+0x12a/0x250 [ 154.319579][ T6998] ? __pfx_ksys_read+0x10/0x10 [ 154.319618][ T6998] ? rcu_is_watching+0x12/0xc0 [ 154.319658][ T6998] do_syscall_64+0x115/0x840 [ 154.319700][ T6998] ? clear_bhb_loop+0x40/0x90 [ 154.319738][ T6998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.319768][ T6998] RIP: 0033:0x7fe3d959ce59 [ 154.319794][ T6998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.319822][ T6998] RSP: 002b:00007fe3da440028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.319851][ T6998] RAX: ffffffffffffffda RBX: 00007fe3d9815fa0 RCX: 00007fe3d959ce59 [ 154.319871][ T6998] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000005 [ 154.319888][ T6998] RBP: 00007fe3d9632d6f R08: 0000000000000000 R09: 0000000000000000 [ 154.319905][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.319921][ T6998] R13: 00007fe3d9816038 R14: 00007fe3d9815fa0 R15: 00007fffa06b6958 [ 154.319962][ T6998] [ 155.669638][ T29] audit: type=1800 audit(1781141865.618:17): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.407" name="lu_gp_id" dev="configfs" ino=14136 res=0 errno=0 [ 156.228662][ T4948] Bluetooth: hci1: command 0x2016 tx timeout [ 156.245639][ T4948] ------------[ cut here ]------------ [ 156.251407][ T4948] refcnt < 0 [ 156.251425][ T4948] WARNING: net/bluetooth/hci_conn.c:634 at hci_conn_timeout+0x16a/0x230, CPU#0: kworker/u9:1/4948 [ 156.266290][ T4948] Modules linked in: [ 156.271281][ T4948] CPU: 0 UID: 0 PID: 4948 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 156.281447][ T4948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.292720][ T4948] Workqueue: hci1 hci_conn_timeout [ 156.298063][ T4948] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 156.303769][ T4948] Code: 44 0f b6 2d 4b 11 53 06 31 ff 41 83 e5 40 44 89 ee e8 ba 1b 88 f7 45 84 ed 0f 84 02 ff ff ff e9 e6 55 f1 f6 e8 57 21 88 f7 90 <0f> 0b 90 e8 4e 21 88 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 156.323644][ T4948] RSP: 0018:ffffc90010807c10 EFLAGS: 00010293 [ 156.329842][ T4948] RAX: 0000000000000000 RBX: ffff88805e72ca40 RCX: ffffffff8a7fdb0f [ 156.338579][ T4948] RDX: ffff888037560000 RSI: ffffffff8a7fdc09 RDI: ffff888037560000 [ 156.347166][ T4948] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 156.355220][ T4948] R10: 00000000ffffffff R11: 000000000000754b R12: ffff88805e72c000 [ 156.363340][ T4948] R13: 0000000000000000 R14: ffff8880375604c4 R15: ffff888033043400 [ 156.371403][ T4948] FS: 0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 156.380443][ T4948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.387208][ T4948] CR2: 0000000000003000 CR3: 000000007ef38000 CR4: 00000000003526f0 [ 156.395240][ T4948] Call Trace: [ 156.398618][ T4948] [ 156.401594][ T4948] process_one_work+0xa0e/0x1980 [ 156.406665][ T4948] ? __pfx_process_one_work+0x10/0x10 [ 156.412103][ T4948] ? __pfx_hci_conn_timeout+0x10/0x10 [ 156.417606][ T4948] worker_thread+0x5ef/0xe50 [ 156.422259][ T4948] ? __pfx_worker_thread+0x10/0x10 [ 156.427495][ T4948] ? kthread+0x13a/0x450 [ 156.431798][ T4948] ? __pfx_worker_thread+0x10/0x10 [ 156.437662][ T4948] kthread+0x370/0x450 [ 156.441888][ T4948] ? __pfx_kthread+0x10/0x10 [ 156.446971][ T4948] ret_from_fork+0x72b/0xd50 [ 156.451620][ T4948] ? __pfx_ret_from_fork+0x10/0x10 [ 156.456846][ T4948] ? __switch_to+0x800/0x1100 [ 156.461594][ T4948] ? __switch_to_asm+0x39/0x70 [ 156.466475][ T4948] ? __pfx_kthread+0x10/0x10 [ 156.471139][ T4948] ret_from_fork_asm+0x1a/0x30 [ 156.475992][ T4948] [ 156.479128][ T4948] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 156.486452][ T4948] CPU: 0 UID: 0 PID: 4948 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 156.495956][ T4948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.506142][ T4948] Workqueue: hci1 hci_conn_timeout [ 156.511343][ T4948] Call Trace: [ 156.514683][ T4948] [ 156.517649][ T4948] dump_stack_lvl+0x100/0x190 [ 156.522397][ T4948] vpanic+0x552/0x970 [ 156.526426][ T4948] ? __pfx_vpanic+0x10/0x10 [ 156.530992][ T4948] panic+0xd1/0xe0 [ 156.534765][ T4948] ? __pfx_panic+0x10/0x10 [ 156.539243][ T4948] ? check_panic_on_warn+0x1f/0x90 [ 156.544423][ T4948] check_panic_on_warn.cold+0x19/0x34 [ 156.549852][ T4948] ? hci_conn_timeout+0x16a/0x230 [ 156.554951][ T4948] __warn.cold+0x191/0x328 [ 156.559423][ T4948] __report_bug+0x296/0x3d0 [ 156.563984][ T4948] ? hci_conn_timeout+0x16a/0x230 [ 156.569069][ T4948] ? __pfx___report_bug+0x10/0x10 [ 156.574144][ T4948] ? __pfx___schedule+0x10/0x10 [ 156.579062][ T4948] ? irqentry_exit+0x24d/0x970 [ 156.583877][ T4948] ? lockdep_hardirqs_on+0x78/0x100 [ 156.589140][ T4948] ? hci_conn_timeout+0x16a/0x230 [ 156.594208][ T4948] report_bug+0xb2/0x220 [ 156.598476][ T4948] ? hci_conn_timeout+0x16a/0x230 [ 156.603529][ T4948] handle_bug+0x16a/0x2a0 [ 156.607877][ T4948] exc_invalid_op+0x17/0x50 [ 156.612396][ T4948] asm_exc_invalid_op+0x1a/0x20 [ 156.617261][ T4948] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 156.622945][ T4948] Code: 44 0f b6 2d 4b 11 53 06 31 ff 41 83 e5 40 44 89 ee e8 ba 1b 88 f7 45 84 ed 0f 84 02 ff ff ff e9 e6 55 f1 f6 e8 57 21 88 f7 90 <0f> 0b 90 e8 4e 21 88 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 156.642616][ T4948] RSP: 0018:ffffc90010807c10 EFLAGS: 00010293 [ 156.648780][ T4948] RAX: 0000000000000000 RBX: ffff88805e72ca40 RCX: ffffffff8a7fdb0f [ 156.656764][ T4948] RDX: ffff888037560000 RSI: ffffffff8a7fdc09 RDI: ffff888037560000 [ 156.664748][ T4948] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 156.672728][ T4948] R10: 00000000ffffffff R11: 000000000000754b R12: ffff88805e72c000 [ 156.680709][ T4948] R13: 0000000000000000 R14: ffff8880375604c4 R15: ffff888033043400 [ 156.688701][ T4948] ? hci_conn_timeout+0x6f/0x230 [ 156.693691][ T4948] ? hci_conn_timeout+0x169/0x230 [ 156.698789][ T4948] process_one_work+0xa0e/0x1980 [ 156.703785][ T4948] ? __pfx_process_one_work+0x10/0x10 [ 156.709197][ T4948] ? __pfx_hci_conn_timeout+0x10/0x10 [ 156.714621][ T4948] worker_thread+0x5ef/0xe50 [ 156.719238][ T4948] ? __pfx_worker_thread+0x10/0x10 [ 156.724364][ T4948] ? kthread+0x13a/0x450 [ 156.728628][ T4948] ? __pfx_worker_thread+0x10/0x10 [ 156.733755][ T4948] kthread+0x370/0x450 [ 156.737848][ T4948] ? __pfx_kthread+0x10/0x10 [ 156.742469][ T4948] ret_from_fork+0x72b/0xd50 [ 156.747081][ T4948] ? __pfx_ret_from_fork+0x10/0x10 [ 156.752215][ T4948] ? __switch_to+0x800/0x1100 [ 156.756923][ T4948] ? __switch_to_asm+0x39/0x70 [ 156.761714][ T4948] ? __pfx_kthread+0x10/0x10 [ 156.766348][ T4948] ret_from_fork_asm+0x1a/0x30 [ 156.771150][ T4948] [ 156.774323][ T4948] Kernel Offset: disabled [ 156.778667][ T4948] Rebooting in 86400 seconds..